]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1529.331656][T25785] usb 4-1: USB disconnect, device number 119 05:34:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1529.828632][T25785] usb 4-1: new high-speed USB device number 120 using dummy_hcd 05:34:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1530.128676][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 1530.468787][T25785] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1530.477866][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.486336][T25785] usb 4-1: Product: syz [ 1530.490874][T25785] usb 4-1: Manufacturer: syz [ 1530.495483][T25785] usb 4-1: SerialNumber: syz [ 1530.501695][T25785] usb 4-1: config 0 descriptor?? [ 1530.540084][T25785] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1531.198533][T25785] gspca_vc032x: reg_r err -32 [ 1531.203255][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.208681][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.214161][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.220937][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.226248][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.231982][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.237273][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.243144][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.248789][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.254083][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.259793][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.265080][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.270771][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.276056][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.281739][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.287028][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.292656][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.297936][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.303576][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1531.309165][T25785] gspca_vc032x: Unknown sensor... [ 1531.314218][T25785] vc032x: probe of 4-1:0.0 failed with error -22 05:34:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0xc4, {0xc4, 0x4, "3a9672c447131a366f9a1220547e5f75f485669371f2f266029862516a683170c84a94d38af7bb48912238957954f41459ba27ab67ca273b877831c7759506ef71b2d44bb11b7206333e1dae89bc954552a1b6287ad5085ca9303733c76b9397e1aa498fab6cdf080af8d65d7fbd813488e4a053c8e70c86e4eb5e355ff7629930815f649c1f75e76a0b7ca587364cac31cd72044b31c120165fab75066a59c33de5e452a6af8aff4abfc0078f4fa55c36d195ad0b0dfb39bbe278749b7690757c4d"}}, &(0x7f0000000140)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "9e2209d5e14eec3ffe7401e2d3b05c9f42690c785b334b2e733f16942ffa1f16352306a28736a9a518f75f28cc73f4afbd748a19c84d80dca1119b576f0457be3410e54cb63fa0bd0051"}}, &(0x7f00000001c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x6, 0xc000}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x6, 0x2, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0xfe, 0x5, 0xbe5, 0xf00, 0x8, [0xf0, 0xf, 0xc027, 0x0, 0xc000]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x88, 0x9, "7aee74d4", "5a8f51a4"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x80, 0xc, 0x7c, 0x7, 0x9, 0x6}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x20, 0xe, 0xff, "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"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x800, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0xb, 0x2, "1dcd"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xca19}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="e5c4a009c98f"}, &(0x7f0000000740)={0x40, 0x19, 0x2, '>f'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xd7}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xc0}}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:34:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:34:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1531.885459][ T3337] UDC core: couldn't find an available UDC or it's busy: -16 [ 1531.894888][ T3337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1531.910218][T25785] usb 4-1: USB disconnect, device number 120 05:34:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:34:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1532.378606][T25785] usb 4-1: new high-speed USB device number 121 using dummy_hcd 05:34:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1532.628392][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 1532.958613][T25785] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1532.968178][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.976742][T25785] usb 4-1: Product: syz [ 1532.981164][T25785] usb 4-1: Manufacturer: syz [ 1532.985779][T25785] usb 4-1: SerialNumber: syz [ 1532.992571][T25785] usb 4-1: config 0 descriptor?? [ 1533.033768][T25785] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1533.498438][T25785] gspca_vc032x: reg_r err -32 [ 1533.503161][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.508642][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.513929][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.520286][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.525587][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.531159][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.536446][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.541941][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.547225][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.552816][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.558101][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.563755][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.569395][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.575358][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.581065][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.586358][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.591845][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.597130][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.602738][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1533.608026][T25785] gspca_vc032x: Unknown sensor... [ 1533.613555][T25785] vc032x: probe of 4-1:0.0 failed with error -22 05:34:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0xe, 0xb8, {0xb8, 0x21, "9ce608b6b082f4ebbe69d30d3737ec905b2d18433b0453010836cd70e4d0ab959a0ec946201ec4f8b14c531f23bfe912939bc5cf9df9065eace91ed1e74fbd9b529a94a0ef8c27208f859dd571b90cf761f6c2dfee21f03498fdc4834eefc47a4892986ca83d77e337239fd4fb63b021049658c79974bdd31a6d915392ee7a1b56d18a94932a1e324aa6931c01ed4ed7d5db5e423567afe43e85d464121346aa1a2ac8bf6cdf1e69550228ea93f2f0022d28dc96eb31"}}, &(0x7f0000000100)={0x0, 0x3, 0x65, @string={0x65, 0x3, "6fc87349267d7e6d674dab2d8545df04c278864e1200f127240d1075c7aa3c40ee58def529da7de3fb94228cc2fa559140a3067cbc94241ee7c9746459e0efccc1b680913e10ef63f68cdf42083bebe43a56ac040d7d1e191d74cca5c2ec4e3ed1183a"}}, &(0x7f0000000180)={0x0, 0x22, 0x1d, {[@main=@item_012={0x1, 0x0, 0x8, "8e"}, @global=@item_4={0x3, 0x1, 0x3, "79db20ed"}, @main=@item_4={0x3, 0x0, 0x8, "7c273485"}, @main=@item_012={0x2, 0x0, 0x8, "2114"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x2, 0x2, 0x9, '`$'}, @global=@item_4={0x3, 0x1, 0x8, "cca2dc87"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_012={0x2, 0x1, 0x3, "f090"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xe7d}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x20, 0x17, 0xd7, "6d508fd40a5a4c401c922bc661435d5fb93128b76fa7a12aa96571a94155b770dd67972dcacd059a45804b9427d57c2057dda509fa5989689f45757af3edb032f70a046f0e7c621bedc1d38f7afeedfe39129cb7915a744f8cdbf1e8fced541b34ef7c7f300ca42f60c313ad7d5cbcea7e22807a60091ca0b04543ac6237133200a9b47cbce48767591b6e06d890801986427338c741987e841f2a18b7394a5c954caf65e9621affd401a4942c37e1b0444d4b49210de49df9c378ea62514e1e77baa35f5aa8a95cf7a18215b17737769645254cf2523c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1a}, &(0x7f00000004c0)={0x20, 0x1, 0xdd, "f4cc11af24404e315981ca5085d0f01f26c2e2174834a2dbb68f371c9518283e1190cd7a11a39127ad1805bc3811813e8463bb672729126462f611f8c22c2c7abb973bb90498bb700d4268fc2a57e9005040d89d4d8176ad51fbb520da71a93ec8ed73a9888e3a98ca5cc0c9714e2ce6b71d15ab67826b011b2716a987e9b3f13dba834ab95c4614d19aa157ca2a5d91ea0f65868b34cc6ebcdba5468e8bd5d0c6dcf1349b8a5760eeafe3a5489e48a681bdeb5c120d554d153da52a3dac2c9a786e50e0e19849785b4bf8433b452c6a55eab93bfa4130455fce5e6abf"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) 05:34:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1534.971548][T25782] usb 4-1: USB disconnect, device number 121 05:34:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1535.428711][T25782] usb 4-1: new high-speed USB device number 122 using dummy_hcd 05:34:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1535.678621][T25782] usb 4-1: Using ep0 maxpacket: 16 05:34:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1535.988684][T25782] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1535.997768][T25782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.006633][T25782] usb 4-1: Product: syz [ 1536.011705][T25782] usb 4-1: Manufacturer: syz [ 1536.016323][T25782] usb 4-1: SerialNumber: syz [ 1536.023810][T25782] usb 4-1: config 0 descriptor?? [ 1536.081943][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1537.152579][ T3412] UDC core: couldn't find an available UDC or it's busy: -16 [ 1537.161317][ T3412] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1537.181567][T25782] gspca_vc032x: reg_w err -71 [ 1537.186282][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.192136][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.197449][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.203296][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.208916][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.214212][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.220064][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.225362][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.230929][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.236235][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.242082][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.247373][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.252940][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.258213][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.264604][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.270097][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.275377][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.281255][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.286548][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1537.292235][T25782] gspca_vc032x: Unknown sensor... [ 1537.297288][T25782] vc032x: probe of 4-1:0.0 failed with error -22 [ 1537.309821][T25782] usb 4-1: USB disconnect, device number 122 05:34:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0xe, 0xb8, {0xb8, 0x21, "9ce608b6b082f4ebbe69d30d3737ec905b2d18433b0453010836cd70e4d0ab959a0ec946201ec4f8b14c531f23bfe912939bc5cf9df9065eace91ed1e74fbd9b529a94a0ef8c27208f859dd571b90cf761f6c2dfee21f03498fdc4834eefc47a4892986ca83d77e337239fd4fb63b021049658c79974bdd31a6d915392ee7a1b56d18a94932a1e324aa6931c01ed4ed7d5db5e423567afe43e85d464121346aa1a2ac8bf6cdf1e69550228ea93f2f0022d28dc96eb31"}}, &(0x7f0000000100)={0x0, 0x3, 0x65, @string={0x65, 0x3, "6fc87349267d7e6d674dab2d8545df04c278864e1200f127240d1075c7aa3c40ee58def529da7de3fb94228cc2fa559140a3067cbc94241ee7c9746459e0efccc1b680913e10ef63f68cdf42083bebe43a56ac040d7d1e191d74cca5c2ec4e3ed1183a"}}, &(0x7f0000000180)={0x0, 0x22, 0x1d, {[@main=@item_012={0x1, 0x0, 0x8, "8e"}, @global=@item_4={0x3, 0x1, 0x3, "79db20ed"}, @main=@item_4={0x3, 0x0, 0x8, "7c273485"}, @main=@item_012={0x2, 0x0, 0x8, "2114"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x2, 0x2, 0x9, '`$'}, @global=@item_4={0x3, 0x1, 0x8, "cca2dc87"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_012={0x2, 0x1, 0x3, "f090"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xe7d}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x20, 0x17, 0xd7, "6d508fd40a5a4c401c922bc661435d5fb93128b76fa7a12aa96571a94155b770dd67972dcacd059a45804b9427d57c2057dda509fa5989689f45757af3edb032f70a046f0e7c621bedc1d38f7afeedfe39129cb7915a744f8cdbf1e8fced541b34ef7c7f300ca42f60c313ad7d5cbcea7e22807a60091ca0b04543ac6237133200a9b47cbce48767591b6e06d890801986427338c741987e841f2a18b7394a5c954caf65e9621affd401a4942c37e1b0444d4b49210de49df9c378ea62514e1e77baa35f5aa8a95cf7a18215b17737769645254cf2523c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1a}, &(0x7f00000004c0)={0x20, 0x1, 0xdd, "f4cc11af24404e315981ca5085d0f01f26c2e2174834a2dbb68f371c9518283e1190cd7a11a39127ad1805bc3811813e8463bb672729126462f611f8c22c2c7abb973bb90498bb700d4268fc2a57e9005040d89d4d8176ad51fbb520da71a93ec8ed73a9888e3a98ca5cc0c9714e2ce6b71d15ab67826b011b2716a987e9b3f13dba834ab95c4614d19aa157ca2a5d91ea0f65868b34cc6ebcdba5468e8bd5d0c6dcf1349b8a5760eeafe3a5489e48a681bdeb5c120d554d153da52a3dac2c9a786e50e0e19849785b4bf8433b452c6a55eab93bfa4130455fce5e6abf"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) 05:34:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:34:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1538.012256][T25782] usb 3-1: new high-speed USB device number 126 using dummy_hcd 05:34:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1538.058575][T25786] usb 4-1: new high-speed USB device number 123 using dummy_hcd 05:34:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1538.268766][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1538.358717][T25786] usb 4-1: Using ep0 maxpacket: 16 [ 1538.588815][T25782] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1538.603862][T25782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.622554][T25782] usb 3-1: Product: syz [ 1538.632547][T25782] usb 3-1: Manufacturer: syz [ 1538.646676][T25782] usb 3-1: SerialNumber: syz [ 1538.665438][T25782] usb 3-1: config 0 descriptor?? [ 1538.692900][T25786] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1538.708914][T25786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.721335][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1538.735665][T25786] usb 4-1: Product: syz [ 1538.744612][T25786] usb 4-1: Manufacturer: syz [ 1538.755115][T25786] usb 4-1: SerialNumber: syz [ 1538.771154][T25786] usb 4-1: config 0 descriptor?? [ 1538.820777][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1538.938747][T25782] gspca_vc032x: reg_w err -71 [ 1538.943563][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1538.957524][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1538.971252][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1538.984581][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1538.996860][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.013304][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.026998][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.037071][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.048500][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.058938][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.067796][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.076878][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.086026][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.094960][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.114012][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.128589][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.158566][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.163888][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.169882][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.175186][T25782] gspca_vc032x: Unknown sensor... [ 1539.189794][T25782] vc032x: probe of 3-1:0.0 failed with error -22 [ 1539.209923][T25782] usb 3-1: USB disconnect, device number 126 [ 1539.320711][ T3504] UDC core: couldn't find an available UDC or it's busy: -16 [ 1539.328178][ T3504] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1539.548557][T25786] gspca_vc032x: reg_w err -71 [ 1539.553277][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.559208][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.564509][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.572625][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.578023][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.583723][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.589788][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.595090][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.600863][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.606155][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.611915][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.617790][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.623415][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.629155][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.634470][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.640280][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.645578][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.651302][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.656608][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1539.662389][T25786] gspca_vc032x: Unknown sensor... [ 1539.667562][T25786] vc032x: probe of 4-1:0.0 failed with error -22 [ 1539.691694][T25786] usb 4-1: USB disconnect, device number 123 05:34:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0xe, 0xb8, {0xb8, 0x21, "9ce608b6b082f4ebbe69d30d3737ec905b2d18433b0453010836cd70e4d0ab959a0ec946201ec4f8b14c531f23bfe912939bc5cf9df9065eace91ed1e74fbd9b529a94a0ef8c27208f859dd571b90cf761f6c2dfee21f03498fdc4834eefc47a4892986ca83d77e337239fd4fb63b021049658c79974bdd31a6d915392ee7a1b56d18a94932a1e324aa6931c01ed4ed7d5db5e423567afe43e85d464121346aa1a2ac8bf6cdf1e69550228ea93f2f0022d28dc96eb31"}}, &(0x7f0000000100)={0x0, 0x3, 0x65, @string={0x65, 0x3, "6fc87349267d7e6d674dab2d8545df04c278864e1200f127240d1075c7aa3c40ee58def529da7de3fb94228cc2fa559140a3067cbc94241ee7c9746459e0efccc1b680913e10ef63f68cdf42083bebe43a56ac040d7d1e191d74cca5c2ec4e3ed1183a"}}, &(0x7f0000000180)={0x0, 0x22, 0x1d, {[@main=@item_012={0x1, 0x0, 0x8, "8e"}, @global=@item_4={0x3, 0x1, 0x3, "79db20ed"}, @main=@item_4={0x3, 0x0, 0x8, "7c273485"}, @main=@item_012={0x2, 0x0, 0x8, "2114"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x2, 0x2, 0x9, '`$'}, @global=@item_4={0x3, 0x1, 0x8, "cca2dc87"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_012={0x2, 0x1, 0x3, "f090"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xe7d}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x20, 0x17, 0xd7, "6d508fd40a5a4c401c922bc661435d5fb93128b76fa7a12aa96571a94155b770dd67972dcacd059a45804b9427d57c2057dda509fa5989689f45757af3edb032f70a046f0e7c621bedc1d38f7afeedfe39129cb7915a744f8cdbf1e8fced541b34ef7c7f300ca42f60c313ad7d5cbcea7e22807a60091ca0b04543ac6237133200a9b47cbce48767591b6e06d890801986427338c741987e841f2a18b7394a5c954caf65e9621affd401a4942c37e1b0444d4b49210de49df9c378ea62514e1e77baa35f5aa8a95cf7a18215b17737769645254cf2523c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1a}, &(0x7f00000004c0)={0x20, 0x1, 0xdd, "f4cc11af24404e315981ca5085d0f01f26c2e2174834a2dbb68f371c9518283e1190cd7a11a39127ad1805bc3811813e8463bb672729126462f611f8c22c2c7abb973bb90498bb700d4268fc2a57e9005040d89d4d8176ad51fbb520da71a93ec8ed73a9888e3a98ca5cc0c9714e2ce6b71d15ab67826b011b2716a987e9b3f13dba834ab95c4614d19aa157ca2a5d91ea0f65868b34cc6ebcdba5468e8bd5d0c6dcf1349b8a5760eeafe3a5489e48a681bdeb5c120d554d153da52a3dac2c9a786e50e0e19849785b4bf8433b452c6a55eab93bfa4130455fce5e6abf"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) 05:34:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:34:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1540.368559][T25786] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1540.390788][T25785] usb 4-1: new high-speed USB device number 124 using dummy_hcd 05:34:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1540.618510][T25786] usb 3-1: Using ep0 maxpacket: 16 [ 1540.658552][T25785] usb 4-1: Using ep0 maxpacket: 16 05:34:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1540.928610][T25786] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1540.938016][T25786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.956759][T25786] usb 3-1: Product: syz [ 1540.961598][T25786] usb 3-1: Manufacturer: syz [ 1540.966370][T25786] usb 3-1: SerialNumber: syz [ 1540.978646][T25785] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1540.990128][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.011528][T25786] usb 3-1: config 0 descriptor?? [ 1541.019765][T25785] usb 4-1: Product: syz [ 1541.024257][T25785] usb 4-1: Manufacturer: syz [ 1541.029570][T25785] usb 4-1: SerialNumber: syz [ 1541.043857][T25785] usb 4-1: config 0 descriptor?? [ 1541.070799][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1541.090919][T25785] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1541.290737][T25786] gspca_vc032x: reg_w err -71 [ 1541.295466][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.301148][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.306445][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.312658][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.317960][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.323661][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.329310][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.334609][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.340381][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.345662][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.355195][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.362624][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.367915][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.377220][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.383471][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.392591][T25785] gspca_vc032x: reg_r err -32 [ 1541.397268][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.402914][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.408207][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.413945][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.419473][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.424760][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.430338][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.435755][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.441318][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.446606][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.452136][T25786] gspca_vc032x: Unknown sensor... [ 1541.457190][T25786] vc032x: probe of 3-1:0.0 failed with error -22 [ 1541.464480][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.479444][T25786] usb 3-1: USB disconnect, device number 127 [ 1541.486952][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.492597][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.497899][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.509155][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.514532][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.520220][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.525514][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.530882][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.536268][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.541614][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.546896][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.552270][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1541.557553][T25785] gspca_vc032x: Unknown sensor... [ 1541.563680][T25785] vc032x: probe of 4-1:0.0 failed with error -22 [ 1541.642867][ T3521] UDC core: couldn't find an available UDC or it's busy: -16 [ 1541.650497][ T3521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:34:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:34:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 3: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:34:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1543.104658][ T140] usb 4-1: USB disconnect, device number 124 05:34:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1543.419185][ T3706] usb 3-1: new high-speed USB device number 2 using dummy_hcd 05:34:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:34:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1543.583227][ T140] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 1543.699963][ T3706] usb 3-1: Using ep0 maxpacket: 16 05:34:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1543.788796][ T140] usb 4-1: device descriptor read/64, error 18 [ 1544.008941][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1544.018123][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.027790][ T3706] usb 3-1: Product: syz [ 1544.033024][ T3706] usb 3-1: Manufacturer: syz [ 1544.037735][ T3706] usb 3-1: SerialNumber: syz [ 1544.051158][ T3706] usb 3-1: config 0 descriptor?? [ 1544.088570][ T140] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1544.097702][ T3706] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1544.298529][ T140] usb 4-1: device descriptor read/64, error 18 [ 1544.304787][ T3706] gspca_vc032x: reg_w err -71 [ 1544.309986][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.315287][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.320894][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.326186][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.332630][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.337925][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.343552][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.349111][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.354406][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.360964][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.366262][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.371942][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.377228][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.382615][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.387901][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.393317][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.398660][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.403955][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.409304][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.414593][ T3706] gspca_vc032x: Unknown sensor... [ 1544.419954][ T140] usb usb4-port1: attempt power cycle [ 1544.425456][ T3706] vc032x: probe of 3-1:0.0 failed with error -22 [ 1544.439701][ T3706] usb 3-1: USB disconnect, device number 2 [ 1544.838702][ T140] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1545.010222][ T140] usb 4-1: device descriptor read/8, error -61 [ 1545.278489][ T140] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 1545.448922][ T140] usb 4-1: device descriptor read/8, error -61 [ 1545.569207][ T140] usb usb4-port1: unable to enumerate USB device [ 1545.639602][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.645933][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 05:35:00 executing program 3: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 05:35:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) 05:35:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1546.422257][T25785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1546.598476][T25786] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 1546.668590][T25785] usb 3-1: Using ep0 maxpacket: 16 05:35:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1546.798415][T25786] usb 4-1: device descriptor read/64, error 18 [ 1546.949033][T25785] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1546.964132][T25785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.980546][T25785] usb 3-1: Product: syz [ 1546.989645][T25785] usb 3-1: Manufacturer: syz [ 1547.000827][T25785] usb 3-1: SerialNumber: syz [ 1547.013872][T25785] usb 3-1: config 0 descriptor?? [ 1547.060964][T25785] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1547.068722][T25786] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 1547.268391][T25786] usb 4-1: device descriptor read/64, error 18 [ 1547.278809][T25785] gspca_vc032x: reg_w err -71 [ 1547.283795][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.289459][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.294839][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.301208][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.306512][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.312011][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.317301][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.322837][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.328128][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.333479][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.338869][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.344163][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.349541][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.354830][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.360321][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.365733][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.371134][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.376433][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.381872][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1547.387168][T25785] gspca_vc032x: Unknown sensor... [ 1547.392520][T25786] usb usb4-port1: attempt power cycle [ 1547.398173][T25785] vc032x: probe of 3-1:0.0 failed with error -22 [ 1547.407215][T25785] usb 3-1: USB disconnect, device number 3 [ 1547.798602][T25786] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 1547.968644][T25786] usb 4-1: device descriptor read/8, error -61 [ 1548.238392][T25786] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1548.413246][T25786] usb 4-1: device descriptor read/8, error -61 [ 1548.540272][T25786] usb usb4-port1: unable to enumerate USB device 05:35:03 executing program 3: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 05:35:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1549.488974][ T140] usb 3-1: new high-speed USB device number 4 using dummy_hcd 05:35:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1549.715004][T27370] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 1549.778669][ T140] usb 3-1: Using ep0 maxpacket: 16 05:35:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1549.928723][T27370] usb 4-1: device descriptor read/64, error 18 [ 1550.068762][ T140] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1550.078597][ T140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.088809][ T140] usb 3-1: Product: syz [ 1550.093009][ T140] usb 3-1: Manufacturer: syz [ 1550.097635][ T140] usb 3-1: SerialNumber: syz [ 1550.111479][ T140] usb 3-1: config 0 descriptor?? [ 1550.154313][ T140] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1550.199092][T27370] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 1550.368707][ T140] gspca_vc032x: reg_w err -71 [ 1550.373428][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.378869][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.384163][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.389777][T27370] usb 4-1: device descriptor read/64, error 18 [ 1550.396106][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.401485][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.406771][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.412128][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.417412][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.422861][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.428152][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.433514][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.438928][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.444223][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.449848][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.455142][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.460864][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.466160][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.472782][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.478077][ T140] gspca_vc032x: I2c Bus Busy Wait 00 [ 1550.483575][ T140] gspca_vc032x: Unknown sensor... [ 1550.488879][ T140] vc032x: probe of 3-1:0.0 failed with error -22 [ 1550.504367][ T140] usb 3-1: USB disconnect, device number 4 [ 1550.510745][T27370] usb usb4-port1: attempt power cycle [ 1550.928446][T27370] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1551.118709][T27370] usb 4-1: device descriptor read/8, error -61 [ 1551.398523][T27370] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1551.618549][T27370] usb 4-1: device descriptor read/8, error -61 [ 1551.738659][T27370] usb usb4-port1: unable to enumerate USB device 05:35:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2030c9000000c902acc2656077f38642045e34a45f34266680c08a07d2628408d5166c346ae455aa7a7ba1dd21b334fc2704f0c23a658a76624d7ad2095f6ece54166237ba12e71ae7c8e0b4a7d660beebf6afe8b191cc9db98e7afc506b7884ebbc0a6c86f6b377296adb7e48f86c99cbf925700f5d7db64914e927a96088d50d8c9f59aa36c58123fbcd153ac1ca075d9fd90bd824a6560a1fd0bfb170051f0f41c1cd4512fa44aa4575d55c31c6477f21f95a355b260b988039af08a97a250e02e77cba5c20eb26dce3b6dbfa"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x2d, "ab9d199522e3befe4ea393a1d2d9d46b30a0899b85c6baf668c8dd64a099f944714bcb6f4e292746ecc72b4a25"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x400, 0x3, 0xfff, 0xfffc, 0x6, 0x81, 0x19daa00e, 0x2, 0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x50521f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, 0x0) 05:35:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1552.558513][ T3706] usb 3-1: new high-speed USB device number 5 using dummy_hcd 05:35:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1552.768340][T27370] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1552.841562][ T3706] usb 3-1: Using ep0 maxpacket: 16 [ 1553.028759][T27370] usb 4-1: Using ep0 maxpacket: 16 [ 1553.159846][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1553.169261][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.177444][ T3706] usb 3-1: Product: syz [ 1553.182092][ T3706] usb 3-1: Manufacturer: syz [ 1553.186785][ T3706] usb 3-1: SerialNumber: syz [ 1553.194165][ T3706] usb 3-1: config 0 descriptor?? [ 1553.242137][ T3706] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1553.348651][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1553.357729][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.370494][T27370] usb 4-1: Product: syz [ 1553.374693][T27370] usb 4-1: Manufacturer: syz [ 1553.381706][T27370] usb 4-1: SerialNumber: syz [ 1553.389694][T27370] usb 4-1: config 0 descriptor?? [ 1553.447729][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1553.458514][ T3706] gspca_vc032x: reg_w err -71 [ 1553.463237][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.468720][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.474014][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.479610][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.484908][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.490341][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.495631][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.501108][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.506399][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.511777][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.517174][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.522797][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.528097][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.533462][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.538821][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.544662][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.550083][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.555379][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.560806][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1553.566092][ T3706] gspca_vc032x: Unknown sensor... [ 1553.571236][ T3706] vc032x: probe of 3-1:0.0 failed with error -22 [ 1553.581145][ T3706] usb 3-1: USB disconnect, device number 5 [ 1554.068474][T27370] gspca_vc032x: reg_r err -32 [ 1554.073179][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.078596][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.083921][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.089476][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.094768][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.100522][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.105847][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.111451][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.116743][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.122813][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.128144][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.133840][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.139442][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.144737][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.150485][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.155787][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.167403][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.174161][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.179969][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1554.185267][T27370] gspca_vc032x: Unknown sensor... [ 1554.190861][T27370] vc032x: probe of 4-1:0.0 failed with error -22 05:35:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2030c9000000c902acc2656077f38642045e34a45f34266680c08a07d2628408d5166c346ae455aa7a7ba1dd21b334fc2704f0c23a658a76624d7ad2095f6ece54166237ba12e71ae7c8e0b4a7d660beebf6afe8b191cc9db98e7afc506b7884ebbc0a6c86f6b377296adb7e48f86c99cbf925700f5d7db64914e927a96088d50d8c9f59aa36c58123fbcd153ac1ca075d9fd90bd824a6560a1fd0bfb170051f0f41c1cd4512fa44aa4575d55c31c6477f21f95a355b260b988039af08a97a250e02e77cba5c20eb26dce3b6dbfa"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x2d, "ab9d199522e3befe4ea393a1d2d9d46b30a0899b85c6baf668c8dd64a099f944714bcb6f4e292746ecc72b4a25"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x400, 0x3, 0xfff, 0xfffc, 0x6, 0x81, 0x19daa00e, 0x2, 0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x50521f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2030c9000000c902acc2656077f38642045e34a45f34266680c08a07d2628408d5166c346ae455aa7a7ba1dd21b334fc2704f0c23a658a76624d7ad2095f6ece54166237ba12e71ae7c8e0b4a7d660beebf6afe8b191cc9db98e7afc506b7884ebbc0a6c86f6b377296adb7e48f86c99cbf925700f5d7db64914e927a96088d50d8c9f59aa36c58123fbcd153ac1ca075d9fd90bd824a6560a1fd0bfb170051f0f41c1cd4512fa44aa4575d55c31c6477f21f95a355b260b988039af08a97a250e02e77cba5c20eb26dce3b6dbfa"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x2d, "ab9d199522e3befe4ea393a1d2d9d46b30a0899b85c6baf668c8dd64a099f944714bcb6f4e292746ecc72b4a25"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x400, 0x3, 0xfff, 0xfffc, 0x6, 0x81, 0x19daa00e, 0x2, 0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x50521f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 05:35:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) [ 1555.304575][T25786] usb 4-1: USB disconnect, device number 11 05:35:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1555.598473][T25782] usb 3-1: new high-speed USB device number 6 using dummy_hcd 05:35:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x20, [{{0x9, 0x4, 0x0, 0x3f, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7f, 0xff, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1f, 0x7, 0xc0}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4, 0x6, 0x1, 0x0, 0x1}, 0x4c, &(0x7f0000000100)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0xf000, 0x7, [0x7, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1e, 0x0, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "47054857120ad35c50c0e3d6317cd593"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x68, 0x3, 0x1}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x82c}}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "e43e67d07a342404242e4ee7322d917cd664f615b59e41f5aee94679e4fbac265d6c0f4ef8433d0dd849b8ab5e9e719c51b3726962c6c4ca6f903df0402bc7990b7e171ba6138b4c2fa54b70e25964b7a023db1f6ae7f2b98a4f44da6c0b84"}}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1555.758536][T25786] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1555.838524][T25782] usb 3-1: Using ep0 maxpacket: 16 05:35:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1556.008461][T27370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1556.008625][T25786] usb 4-1: Using ep0 maxpacket: 16 [ 1556.118888][T25782] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1556.127963][T25782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.143928][T25782] usb 3-1: Product: syz [ 1556.148120][T25782] usb 3-1: Manufacturer: syz [ 1556.153485][T25782] usb 3-1: SerialNumber: syz [ 1556.164298][T25782] usb 3-1: config 0 descriptor?? [ 1556.212237][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1556.268570][T27370] usb 1-1: Using ep0 maxpacket: 16 [ 1556.308730][T25786] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1556.321819][T25786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.330008][T25786] usb 4-1: Product: syz [ 1556.334273][T25786] usb 4-1: Manufacturer: syz [ 1556.343239][T25786] usb 4-1: SerialNumber: syz [ 1556.352675][T25786] usb 4-1: config 0 descriptor?? [ 1556.390150][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1556.418531][T25782] gspca_vc032x: reg_w err -71 [ 1556.423456][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.429124][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.434544][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.440120][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.445564][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.451076][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.456515][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.462084][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.467469][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.472940][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.478393][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.483774][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.489231][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.494554][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.499922][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.505201][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.510574][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.517243][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.522750][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1556.528037][T25782] gspca_vc032x: Unknown sensor... [ 1556.533212][T25782] vc032x: probe of 3-1:0.0 failed with error -22 [ 1556.541414][T25782] usb 3-1: USB disconnect, device number 6 [ 1556.590121][T27370] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1556.599877][T27370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.607882][T27370] usb 1-1: Product: syz [ 1556.618193][T27370] usb 1-1: Manufacturer: syz [ 1556.623975][T27370] usb 1-1: SerialNumber: syz [ 1556.637832][T27370] usb 1-1: config 0 descriptor?? [ 1556.680430][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1557.048646][T25786] gspca_vc032x: reg_r err -32 [ 1557.053342][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.063241][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.068792][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.074181][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.079890][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.085285][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.090868][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.096358][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.101847][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.107165][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.109652][ T3807] UDC core: couldn't find an available UDC or it's busy: -16 [ 1557.112581][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.125179][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.131582][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.136894][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.141316][ T3807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1557.144509][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.158574][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.163903][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.174903][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.180542][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.185829][T25786] gspca_vc032x: Unknown sensor... [ 1557.191457][T25786] vc032x: probe of 4-1:0.0 failed with error -22 [ 1557.408533][T27370] gspca_vc032x: reg_r err -71 [ 1557.413321][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.418831][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.424300][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.429980][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.435776][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.441283][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.446674][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.452130][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.457520][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.462996][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.468477][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.473824][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.479437][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.484821][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.490430][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.495809][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.501221][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.506601][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.512038][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1557.517513][T27370] gspca_vc032x: Unknown sensor... [ 1557.522696][T27370] vc032x: probe of 1-1:0.0 failed with error -22 [ 1557.531059][T27370] usb 1-1: USB disconnect, device number 7 05:35:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2030c9000000c902acc2656077f38642045e34a45f34266680c08a07d2628408d5166c346ae455aa7a7ba1dd21b334fc2704f0c23a658a76624d7ad2095f6ece54166237ba12e71ae7c8e0b4a7d660beebf6afe8b191cc9db98e7afc506b7884ebbc0a6c86f6b377296adb7e48f86c99cbf925700f5d7db64914e927a96088d50d8c9f59aa36c58123fbcd153ac1ca075d9fd90bd824a6560a1fd0bfb170051f0f41c1cd4512fa44aa4575d55c31c6477f21f95a355b260b988039af08a97a250e02e77cba5c20eb26dce3b6dbfa"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x2d, "ab9d199522e3befe4ea393a1d2d9d46b30a0899b85c6baf668c8dd64a099f944714bcb6f4e292746ecc72b4a25"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x400, 0x3, 0xfff, 0xfffc, 0x6, 0x81, 0x19daa00e, 0x2, 0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x50521f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:11 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) 05:35:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1557.734611][ T3820] UDC core: couldn't find an available UDC or it's busy: -16 [ 1557.744268][ T3820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1557.763051][T27370] usb 4-1: USB disconnect, device number 12 05:35:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = eventfd(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = eventfd(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1558.084811][ T3706] usb 3-1: new high-speed USB device number 7 using dummy_hcd 05:35:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1558.228485][T27370] usb 4-1: new high-speed USB device number 13 using dummy_hcd 05:35:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1558.370219][ T3706] usb 3-1: Using ep0 maxpacket: 16 [ 1558.508883][T27370] usb 4-1: Using ep0 maxpacket: 16 [ 1558.698720][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1558.708125][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.716649][ T3706] usb 3-1: Product: syz [ 1558.721296][ T3706] usb 3-1: Manufacturer: syz [ 1558.725912][ T3706] usb 3-1: SerialNumber: syz [ 1558.734413][ T3706] usb 3-1: config 0 descriptor?? [ 1558.782581][ T3706] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1558.828557][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1558.837767][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.847105][T27370] usb 4-1: Product: syz [ 1558.851948][T27370] usb 4-1: Manufacturer: syz [ 1558.856740][T27370] usb 4-1: SerialNumber: syz [ 1558.872573][T27370] usb 4-1: config 0 descriptor?? [ 1558.911330][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1559.008582][ T3706] gspca_vc032x: reg_w err -71 [ 1559.013308][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.019256][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.024551][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.030311][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.035608][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.041147][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.046435][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.052029][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.057316][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.062790][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.068083][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.074361][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.080017][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.085309][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.091312][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.096605][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.102166][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.107455][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.113792][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.121057][ T3706] gspca_vc032x: Unknown sensor... [ 1559.126119][ T3706] vc032x: probe of 3-1:0.0 failed with error -22 [ 1559.136256][ T3706] usb 3-1: USB disconnect, device number 7 [ 1559.388507][T27370] gspca_vc032x: reg_r err -32 [ 1559.393250][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.399578][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.404886][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.410627][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.415925][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.421637][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.426926][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.432547][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.437828][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.443659][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.449266][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.454552][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.460211][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.465499][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.471389][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.476678][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.483261][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.488887][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.494190][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1559.499915][T27370] gspca_vc032x: Unknown sensor... [ 1559.505004][T27370] vc032x: probe of 4-1:0.0 failed with error -22 05:35:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="eb01000000002b541ee523a19eae0101000000000000"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) r2 = eventfd(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) r2 = eventfd(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:14 executing program 2: 05:35:15 executing program 2: [ 1560.837077][T27370] usb 4-1: USB disconnect, device number 13 05:35:15 executing program 2: 05:35:15 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 05:35:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:15 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1561.339468][T27370] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1561.588501][T27370] usb 4-1: Using ep0 maxpacket: 16 [ 1561.888610][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1561.897685][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.906525][T27370] usb 4-1: Product: syz [ 1561.911077][T27370] usb 4-1: Manufacturer: syz [ 1561.915688][T27370] usb 4-1: SerialNumber: syz [ 1561.923280][T27370] usb 4-1: config 0 descriptor?? [ 1561.970756][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1563.028524][T27370] gspca_vc032x: reg_w err -71 [ 1563.033245][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.039054][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.044357][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.049990][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.055283][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.060846][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.066775][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.072394][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.077686][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.083253][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.088898][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.094185][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.099735][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.105020][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.110610][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.115988][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.121472][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.126825][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.132388][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1563.137675][T27370] gspca_vc032x: Unknown sensor... [ 1563.142913][T27370] vc032x: probe of 4-1:0.0 failed with error -22 [ 1563.167506][T27370] usb 4-1: USB disconnect, device number 14 05:35:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="eb01000000002b541ee523a19eae0101000000000000"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:17 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 05:35:17 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1563.858491][T25782] usb 4-1: new high-speed USB device number 15 using dummy_hcd 05:35:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:18 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 1564.108589][T25782] usb 4-1: Using ep0 maxpacket: 16 [ 1564.389013][T25782] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1564.401591][T25782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.413288][T25782] usb 4-1: Product: syz [ 1564.420978][T25782] usb 4-1: Manufacturer: syz [ 1564.427954][T25782] usb 4-1: SerialNumber: syz [ 1564.438613][T25782] usb 4-1: config 0 descriptor?? [ 1564.480682][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1565.218435][T25782] gspca_vc032x: reg_w err -71 [ 1565.223200][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.228728][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.234100][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.239611][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.244984][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.250435][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.255821][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.261388][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.266765][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.272195][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.277574][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.283062][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.288482][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.293838][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.299384][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.304737][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.310151][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.315510][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.321648][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.327006][T25782] gspca_vc032x: Unknown sensor... [ 1565.332276][T25782] vc032x: probe of 4-1:0.0 failed with error -22 [ 1565.340647][T25782] usb 4-1: USB disconnect, device number 15 05:35:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="eb01000000002b541ee523a19eae0101000000000000"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:19 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 05:35:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1565.998436][T25782] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1566.048965][ T3675] usb 4-1: new high-speed USB device number 16 using dummy_hcd 05:35:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1566.198423][T25782] usb 3-1: device descriptor read/64, error 18 [ 1566.308630][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 1566.478402][T25782] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1566.588773][ T3675] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1566.597884][ T3675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.606649][ T3675] usb 4-1: Product: syz [ 1566.610936][ T3675] usb 4-1: Manufacturer: syz [ 1566.615540][ T3675] usb 4-1: SerialNumber: syz [ 1566.621896][ T3675] usb 4-1: config 0 descriptor?? [ 1566.668478][T25782] usb 3-1: device descriptor read/64, error 18 [ 1566.676420][ T3675] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1566.788647][T25782] usb usb3-port1: attempt power cycle [ 1567.198530][T25782] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1567.368521][T25782] usb 3-1: device descriptor read/8, error -61 [ 1567.398546][ T3675] gspca_vc032x: reg_w err -71 [ 1567.403454][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.409076][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.414469][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.419960][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.425393][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.430856][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.436212][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.441670][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.447051][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.452647][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.458024][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.463496][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.469675][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.475133][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.480762][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.486205][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.492063][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.497444][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.502924][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1567.508377][ T3675] gspca_vc032x: Unknown sensor... [ 1567.513598][ T3675] vc032x: probe of 4-1:0.0 failed with error -22 [ 1567.526026][ T3675] usb 4-1: USB disconnect, device number 16 [ 1567.641601][T25782] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1567.818500][T25782] usb 3-1: device descriptor read/8, error -61 05:35:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0xcd, {0xcd, 0x23, "7354aad88220fa3f7bf04b898cd183337e7d745fd6e9d967474cc12f04d02cbdc482e8312d7d2adceded14dee0e963c2d273f38005072228f8c3aeb9c64b68975d62be68e0f0273d3377a5eb5b610db4471cafcc0369735d2ff4020a82a808284d28cb48c708e06e2f79d0abe6e407aeba0a65c5360323a565f03e79b22caebfa3f4bb9623c25d65ce365bfa4beac86425406040cfe9ddafb2c15b2c28fa4b11f237dbeaeb02555fe6f202d9309627436e3f975f1096ef2f84b1cf291c05bcb18c12e8ddd48b3bbfee9463"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000300)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@generic={0x44, 0x10, 0x3, "1bb21dcf9ba9de642e3b15c3f95e949f71a7cad4302c8b43d1c452045e4970a475f94e59080ed338f4ec5608ecbc72d7d576b1bf9be220e05b9c040a36bf7b30c0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x20}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x53, 0x7, 0xdef, 0x1}, @generic={0x1e, 0x10, 0xb, "a9fcaa2c818698b18f9f1142fd23a3204ceb9885311e21b73672b2"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x5, 0x5, "693b3991", "0ffc62ee"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x50, 0x0, 0x2a, 0x3f, 0x7, 0x5, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x16, "1020546eb81b181e9af39bf956c5e7672abafb48ec38"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x1, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5f98"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x97}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c606"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1567.938797][T25782] usb usb3-port1: unable to enumerate USB device [ 1568.198740][ T3706] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1568.478453][ T3706] usb 4-1: Using ep0 maxpacket: 16 05:35:22 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 05:35:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r4}, 0x2, 0x2006, 0x633}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) [ 1568.758987][ T3706] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1568.771665][ T3706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.798796][ T3706] usb 4-1: Product: syz [ 1568.819806][ T3706] usb 4-1: Manufacturer: syz [ 1568.832535][ T3706] usb 4-1: SerialNumber: syz [ 1568.861571][ T3706] usb 4-1: config 0 descriptor?? [ 1568.910867][ T3706] gspca_main: vc032x-2.14.0 probing 0ac8:c301 05:35:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r4}, 0x2, 0x2006, 0x633}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x2000}) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r4}, 0x2, 0x2006, 0x633}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) (async) 05:35:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1569.258467][T25782] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1569.458412][T25782] usb 3-1: device descriptor read/64, error 18 [ 1569.748510][T25782] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1569.948606][T25782] usb 3-1: device descriptor read/64, error 18 [ 1570.079438][T25782] usb usb3-port1: attempt power cycle [ 1570.228644][ T3706] gspca_vc032x: reg_w err -71 [ 1570.233360][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.239491][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.244918][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.250571][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.255947][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.261471][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.266868][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.272429][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.277819][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.283609][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.289150][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.294546][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.300064][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.305462][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.310974][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.316434][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.321950][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.327403][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.332905][ T3706] gspca_vc032x: I2c Bus Busy Wait 10 [ 1570.339035][ T3706] gspca_vc032x: Unknown sensor... [ 1570.344272][ T3706] vc032x: probe of 4-1:0.0 failed with error -22 [ 1570.357454][ T3706] usb 4-1: USB disconnect, device number 17 [ 1570.498430][T25782] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1570.670654][T25782] usb 3-1: device descriptor read/8, error -61 05:35:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0xcd, {0xcd, 0x23, "7354aad88220fa3f7bf04b898cd183337e7d745fd6e9d967474cc12f04d02cbdc482e8312d7d2adceded14dee0e963c2d273f38005072228f8c3aeb9c64b68975d62be68e0f0273d3377a5eb5b610db4471cafcc0369735d2ff4020a82a808284d28cb48c708e06e2f79d0abe6e407aeba0a65c5360323a565f03e79b22caebfa3f4bb9623c25d65ce365bfa4beac86425406040cfe9ddafb2c15b2c28fa4b11f237dbeaeb02555fe6f202d9309627436e3f975f1096ef2f84b1cf291c05bcb18c12e8ddd48b3bbfee9463"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000300)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@generic={0x44, 0x10, 0x3, "1bb21dcf9ba9de642e3b15c3f95e949f71a7cad4302c8b43d1c452045e4970a475f94e59080ed338f4ec5608ecbc72d7d576b1bf9be220e05b9c040a36bf7b30c0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x20}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x53, 0x7, 0xdef, 0x1}, @generic={0x1e, 0x10, 0xb, "a9fcaa2c818698b18f9f1142fd23a3204ceb9885311e21b73672b2"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x5, 0x5, "693b3991", "0ffc62ee"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x50, 0x0, 0x2a, 0x3f, 0x7, 0x5, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x16, "1020546eb81b181e9af39bf956c5e7672abafb48ec38"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x1, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5f98"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x97}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c606"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:24 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:24 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r4}, 0x2, 0x2006, 0x633}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x2000}) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r4}, 0x2, 0x2006, 0x633}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) (async) [ 1570.938496][T25782] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1571.038433][T25786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1571.110493][T25782] usb 3-1: device descriptor read/8, error -61 [ 1571.229537][T25782] usb usb3-port1: unable to enumerate USB device [ 1571.278394][T25786] usb 4-1: Using ep0 maxpacket: 16 [ 1571.558619][T25786] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1571.568782][T25786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.576934][T25786] usb 4-1: Product: syz [ 1571.581470][T25786] usb 4-1: Manufacturer: syz [ 1571.586164][T25786] usb 4-1: SerialNumber: syz [ 1571.592924][T25786] usb 4-1: config 0 descriptor?? [ 1571.630494][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 05:35:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 05:35:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x0, 0x9c, &(0x7f0000000780)=""/156}, {0x6000, 0x15, &(0x7f0000000840)=""/21}, {0x1000, 0xb8, &(0x7f0000000880)=""/184}, {0x1, 0x36, &(0x7f0000000940)=""/54}]}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000740)={0x3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) sendto$inet6(r2, &(0x7f0000000200)="e3c31e7b4275209c690a135c7351de0720ee97255b8924e51662", 0x1a, 0x4010, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x5, 0x0, [{0x6000, 0xe8, &(0x7f0000000500)=""/232}, {0x0, 0x2b, &(0x7f0000000300)=""/43}, {0x1000, 0x21, &(0x7f0000000340)=""/33}, {0x5000, 0x1d, &(0x7f0000000600)=""/29}, {0x1, 0x35, &(0x7f0000000640)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0xcd, {0xcd, 0x23, "7354aad88220fa3f7bf04b898cd183337e7d745fd6e9d967474cc12f04d02cbdc482e8312d7d2adceded14dee0e963c2d273f38005072228f8c3aeb9c64b68975d62be68e0f0273d3377a5eb5b610db4471cafcc0369735d2ff4020a82a808284d28cb48c708e06e2f79d0abe6e407aeba0a65c5360323a565f03e79b22caebfa3f4bb9623c25d65ce365bfa4beac86425406040cfe9ddafb2c15b2c28fa4b11f237dbeaeb02555fe6f202d9309627436e3f975f1096ef2f84b1cf291c05bcb18c12e8ddd48b3bbfee9463"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000300)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@generic={0x44, 0x10, 0x3, "1bb21dcf9ba9de642e3b15c3f95e949f71a7cad4302c8b43d1c452045e4970a475f94e59080ed338f4ec5608ecbc72d7d576b1bf9be220e05b9c040a36bf7b30c0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x20}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x53, 0x7, 0xdef, 0x1}, @generic={0x1e, 0x10, 0xb, "a9fcaa2c818698b18f9f1142fd23a3204ceb9885311e21b73672b2"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x5, 0x5, "693b3991", "0ffc62ee"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x50, 0x0, 0x2a, 0x3f, 0x7, 0x5, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x16, "1020546eb81b181e9af39bf956c5e7672abafb48ec38"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x1, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5f98"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x97}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c606"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:26 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x0, 0x9c, &(0x7f0000000780)=""/156}, {0x6000, 0x15, &(0x7f0000000840)=""/21}, {0x1000, 0xb8, &(0x7f0000000880)=""/184}, {0x1, 0x36, &(0x7f0000000940)=""/54}]}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000740)={0x3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) sendto$inet6(r2, &(0x7f0000000200)="e3c31e7b4275209c690a135c7351de0720ee97255b8924e51662", 0x1a, 0x4010, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x5, 0x0, [{0x6000, 0xe8, &(0x7f0000000500)=""/232}, {0x0, 0x2b, &(0x7f0000000300)=""/43}, {0x1000, 0x21, &(0x7f0000000340)=""/33}, {0x5000, 0x1d, &(0x7f0000000600)=""/29}, {0x1, 0x35, &(0x7f0000000640)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x0, 0x9c, &(0x7f0000000780)=""/156}, {0x6000, 0x15, &(0x7f0000000840)=""/21}, {0x1000, 0xb8, &(0x7f0000000880)=""/184}, {0x1, 0x36, &(0x7f0000000940)=""/54}]}) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000740)={0x3}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) sendto$inet6(r2, &(0x7f0000000200)="e3c31e7b4275209c690a135c7351de0720ee97255b8924e51662", 0x1a, 0x4010, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x5, 0x0, [{0x6000, 0xe8, &(0x7f0000000500)=""/232}, {0x0, 0x2b, &(0x7f0000000300)=""/43}, {0x1000, 0x21, &(0x7f0000000340)=""/33}, {0x5000, 0x1d, &(0x7f0000000600)=""/29}, {0x1, 0x35, &(0x7f0000000640)=""/53}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1572.098503][T27370] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1572.258548][T25782] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1572.368566][T25786] gspca_vc032x: reg_w err -71 [ 1572.368756][T27370] usb 1-1: Using ep0 maxpacket: 16 [ 1572.373573][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.388793][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.394112][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.399945][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.405244][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.411259][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.416554][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.422571][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.427869][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.433746][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.439505][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.444799][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.450760][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.456067][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.461646][T25782] usb 3-1: device descriptor read/64, error 18 [ 1572.467973][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.473612][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.479206][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.484504][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.491043][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.496341][T25786] gspca_vc032x: Unknown sensor... [ 1572.501733][T25786] vc032x: probe of 4-1:0.0 failed with error -22 [ 1572.509720][T25786] usb 4-1: USB disconnect, device number 18 [ 1572.678741][T27370] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1572.687930][T27370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.696529][T27370] usb 1-1: Product: syz [ 1572.700818][T27370] usb 1-1: Manufacturer: syz [ 1572.705440][T27370] usb 1-1: SerialNumber: syz [ 1572.712239][T27370] usb 1-1: config 0 descriptor?? [ 1572.728509][T25782] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1572.752237][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 05:35:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0xcd, {0xcd, 0x23, "7354aad88220fa3f7bf04b898cd183337e7d745fd6e9d967474cc12f04d02cbdc482e8312d7d2adceded14dee0e963c2d273f38005072228f8c3aeb9c64b68975d62be68e0f0273d3377a5eb5b610db4471cafcc0369735d2ff4020a82a808284d28cb48c708e06e2f79d0abe6e407aeba0a65c5360323a565f03e79b22caebfa3f4bb9623c25d65ce365bfa4beac86425406040cfe9ddafb2c15b2c28fa4b11f237dbeaeb02555fe6f202d9309627436e3f975f1096ef2f84b1cf291c05bcb18c12e8ddd48b3bbfee9463"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000300)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@generic={0x44, 0x10, 0x3, "1bb21dcf9ba9de642e3b15c3f95e949f71a7cad4302c8b43d1c452045e4970a475f94e59080ed338f4ec5608ecbc72d7d576b1bf9be220e05b9c040a36bf7b30c0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x20}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x53, 0x7, 0xdef, 0x1}, @generic={0x1e, 0x10, 0xb, "a9fcaa2c818698b18f9f1142fd23a3204ceb9885311e21b73672b2"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x5, 0x5, "693b3991", "0ffc62ee"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x50, 0x0, 0x2a, 0x3f, 0x7, 0x5, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x16, "1020546eb81b181e9af39bf956c5e7672abafb48ec38"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x1, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5f98"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x97}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c606"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:26 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x0, 0x9c, &(0x7f0000000780)=""/156}, {0x6000, 0x15, &(0x7f0000000840)=""/21}, {0x1000, 0xb8, &(0x7f0000000880)=""/184}, {0x1, 0x36, &(0x7f0000000940)=""/54}]}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000740)={0x3}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) sendto$inet6(r2, &(0x7f0000000200)="e3c31e7b4275209c690a135c7351de0720ee97255b8924e51662", 0x1a, 0x4010, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x5, 0x0, [{0x6000, 0xe8, &(0x7f0000000500)=""/232}, {0x0, 0x2b, &(0x7f0000000300)=""/43}, {0x1000, 0x21, &(0x7f0000000340)=""/33}, {0x5000, 0x1d, &(0x7f0000000600)=""/29}, {0x1, 0x35, &(0x7f0000000640)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1572.918664][T25782] usb 3-1: device descriptor read/64, error 18 [ 1573.038936][T25782] usb usb3-port1: attempt power cycle [ 1573.178633][T30029] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1573.418522][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1573.448463][T25782] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1573.618518][T25782] usb 3-1: device descriptor read/8, error -61 [ 1573.708541][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1573.718145][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.728576][T30029] usb 4-1: Product: syz [ 1573.732773][T30029] usb 4-1: Manufacturer: syz [ 1573.737384][T30029] usb 4-1: SerialNumber: syz [ 1573.752013][T30029] usb 4-1: config 0 descriptor?? [ 1573.792166][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1573.888504][T25782] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1574.048543][T27370] gspca_vc032x: reg_w err -71 [ 1574.053260][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.058558][T25782] usb 3-1: device descriptor read/8, error -61 [ 1574.064864][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.070447][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.075745][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.081494][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.086793][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.092373][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.097670][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.103164][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.108743][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.114034][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.119688][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.126149][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.131879][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.137173][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.142793][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.148067][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.153764][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.159352][T27370] gspca_vc032x: I2c Bus Busy Wait 10 [ 1574.164638][T27370] gspca_vc032x: Unknown sensor... [ 1574.170193][T27370] vc032x: probe of 1-1:0.0 failed with error -22 [ 1574.180414][T27370] usb 1-1: USB disconnect, device number 8 [ 1574.187386][T25782] usb usb3-port1: unable to enumerate USB device 05:35:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:35:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '--*(^:\xae'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "6cddf759025c3f8c58d588"}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000500)=""/212, &(0x7f00000002c0)=""/181, &(0x7f0000000600)=""/150, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1574.958804][T30029] gspca_vc032x: I2c Bus Busy Wait 10 05:35:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '--*(^:\xae'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "6cddf759025c3f8c58d588"}, 0x30) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000500)=""/212, &(0x7f00000002c0)=""/181, &(0x7f0000000600)=""/150, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1575.318533][T25782] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1575.518444][T25782] usb 3-1: device descriptor read/64, error 18 [ 1575.788663][T25782] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1575.810337][T30029] gspca_vc032x: I2c Bus Busy Wait 10 05:35:30 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '--*(^:\xae'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "6cddf759025c3f8c58d588"}, 0x30) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000500)=""/212, &(0x7f00000002c0)=""/181, &(0x7f0000000600)=""/150, 0x1000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1575.930080][T30029] gspca_vc032x: reg_r err -71 [ 1575.934811][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1575.952102][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1575.957432][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1575.978555][T25782] usb 3-1: device descriptor read/64, error 18 [ 1575.981952][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1575.998380][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.016085][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.030791][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.042374][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.052803][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.058239][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.063817][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.069285][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.077254][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.082764][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.088159][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.093663][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.099207][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1576.100819][T25782] usb usb3-port1: attempt power cycle [ 1576.104595][T30029] gspca_vc032x: Unknown sensor... [ 1576.125086][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1576.133975][T30029] usb 4-1: USB disconnect, device number 19 [ 1576.518547][T25782] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1576.688517][T25782] usb 3-1: device descriptor read/8, error -61 [ 1576.958470][T25782] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1577.128489][T25782] usb 3-1: device descriptor read/8, error -61 [ 1577.249164][T25782] usb usb3-port1: unable to enumerate USB device 05:35:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:35:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0x9, 0x5a, {0x5a, 0xa, "3f93b568738e521cd08e53617d5b71e7a57b601851edfa1036e11a2966b1080f4978665f6368796f0ef1ddf7d9aaca16ee401173b886e76a1addf845af2667f136b9c60de061adc068e746a6b99e1dc045dd33d9b15af3ba"}}, &(0x7f00000007c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f2800b41f86e4d3c7a9f2086306053bede81676ce9bde4f72f32c4905f39d7ee9f"}}, &(0x7f0000000800)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "0645"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9256, 0x48, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x15, 0x76, "95ef17a5e25a692a587b9af91036425dbc87c93da892184e8e09e5904643e02c3ecdb6929e676caf0dd556f05bad2971cf4f1b7078963d90cff2576f1c204b601ffed427cd2e1dfd5f2b589bbc24284facad525e8ecdf8994fa2d6172db997d03ac1d0d8387c0f07aefaa309acc661ee8d5be8618278"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a80)={0x20, 0x1, 0xc0, "7446b02bda43371fa0cea2929189fb72289954a1db6e3b125dcf8ee88f002d54ca71672c35b2a4d136f1d0c84fcef93e93b92d6c70b5f99318eeae56031aa25903fe2c1bf0d29c8e1a4e215fccdcd979835242d03affffa8afa40ab0628539513b2bb1c8e5d0616070eadd3506a2cff1f50b525e8159da7c41f343d3a37407fea81f9e568ced3eba68595b8314f8b365c770a03b7e73b1c7fc1f3a01db517e514c8ff15502c9e63c042b673fa13dcfbf18cea059837107965b682e36717c37a4"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0x39a15cc60da7fdf7, 0x2a, {0x2a, 0xd, "fb807012c77a1048bce4e9fb3f606316ff86c883e15264a0feb88183b04465f393a2bdc87a15c58a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xfe, "3672d31d5bc1f9ed0ade1f787319e9ca00a2070f49e993b1177fb1e1689ba769efa8b016c55c9a07edfb2bc0d105e48858d00d99ddc65bdabdaccd7654c21cfce6ea3b4ee70966b5adcea8c440b90c6080b990b9707315b10a2b3bdaf39e53ea316e14c55c15a556a227c466a63a8ce4527d9fa4a0da19206a538822d66cc6b9921618dc1dea046a1a739117f0057f0c4b3958d99587ce2126d1ddbea92f6fb67f21953018273b9c8c63b5af0d22cf36082ba1349f595265451adc313405c0b3de0ed4be854e01b450d286bc996aa26ede564c74d2efeef239fb693607eb41d54e23bc8f8457e8845d63edcc18d187db6f373e47adf783fa64c2f6378748"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe7}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400409000200090abd1afcf0ab02de"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d3af96c0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c8, 0x1c, 0x1, {0x22, 0xe5f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x6e, "9c557c3bdcd6d3a2f636dc8d408e8e1a4b83efe86d987160235795cbcbe0f520c4f4a1d6d99e06a5e64a4197b416baaeb2e91c516a45f7656c6299d5bcd9e08120a72106ee9734d27eb51ba21fb6784911deca7fcc1df050f5d1ce8b9e670d79c7b9bc1047d6cf2a9df9988443d2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000300)={0x20, 0x1, 0x93, "b7aea38fd47281df4ed0f922ce11c3bfcfb25d7e526906ecdeff6244aae9caed8fe0d7ed31c4dc7847872e8cb716df23f24adf7785c049183ba3b37c539a93862e3a96d98113626327d04417c0c4bb3cc23f766e34534e039c37e88d7a32557aa769d74e34dd3675156b87c7f0c8d794a35530419834253a2c3dcf188739c87cbc2d25d25febec7df88dd38c410c89178d8fbb"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x56}}) 05:35:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x6, 0x0, [{0x4000, 0x87, &(0x7f00000002c0)=""/135}, {0x1000, 0x38, &(0x7f0000000200)=""/56}, {0x10000, 0xf3, &(0x7f0000000500)=""/243}, {0x0, 0x47, &(0x7f0000000600)=""/71}, {0x4, 0xe4, &(0x7f0000000680)=""/228}, {0x1, 0x8e, &(0x7f0000000780)=""/142}]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000940)={0x3, r4}) 05:35:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000500)=""/261, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000500)=""/261, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x6, 0x0, [{0x4000, 0x87, &(0x7f00000002c0)=""/135}, {0x1000, 0x38, &(0x7f0000000200)=""/56}, {0x10000, 0xf3, &(0x7f0000000500)=""/243}, {0x0, 0x47, &(0x7f0000000600)=""/71}, {0x4, 0xe4, &(0x7f0000000680)=""/228}, {0x1, 0x8e, &(0x7f0000000780)=""/142}]}) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000940)={0x3, r4}) 05:35:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1578.228559][T25782] usb 4-1: new high-speed USB device number 20 using dummy_hcd 05:35:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000500)=""/261, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x6, 0x0, [{0x4000, 0x87, &(0x7f00000002c0)=""/135}, {0x1000, 0x38, &(0x7f0000000200)=""/56}, {0x10000, 0xf3, &(0x7f0000000500)=""/243}, {0x0, 0x47, &(0x7f0000000600)=""/71}, {0x4, 0xe4, &(0x7f0000000680)=""/228}, {0x1, 0x8e, &(0x7f0000000780)=""/142}]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000940)={0x3, r4}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x6, 0x0, [{0x4000, 0x87, &(0x7f00000002c0)=""/135}, {0x1000, 0x38, &(0x7f0000000200)=""/56}, {0x10000, 0xf3, &(0x7f0000000500)=""/243}, {0x0, 0x47, &(0x7f0000000600)=""/71}, {0x4, 0xe4, &(0x7f0000000680)=""/228}, {0x1, 0x8e, &(0x7f0000000780)=""/142}]}) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000940)={0x3, r4}) (async) [ 1578.398452][T25786] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1578.548545][T25782] usb 4-1: Using ep0 maxpacket: 16 [ 1578.618427][T25786] usb 3-1: device descriptor read/64, error 18 [ 1578.848587][T25782] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1578.857790][T25782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.865947][T25782] usb 4-1: Product: syz [ 1578.870270][T25782] usb 4-1: Manufacturer: syz [ 1578.874958][T25782] usb 4-1: SerialNumber: syz [ 1578.886249][T25782] usb 4-1: config 0 descriptor?? [ 1578.898491][T25786] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1578.929889][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1579.098535][T25786] usb 3-1: device descriptor read/64, error 18 [ 1579.220910][T25786] usb usb3-port1: attempt power cycle [ 1579.350360][ T4179] UDC core: couldn't find an available UDC or it's busy: -16 [ 1579.357772][ T4179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1579.678493][T25786] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1579.802423][ T4179] UDC core: couldn't find an available UDC or it's busy: -16 [ 1579.815496][ T4179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1579.878575][T25786] usb 3-1: device descriptor read/8, error -61 [ 1580.158521][T25786] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1580.248572][T25782] gspca_vc032x: reg_w err -71 [ 1580.253292][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.259137][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.264444][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.271625][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.276926][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.282856][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.288419][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.293840][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.299234][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.304770][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.310408][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.315953][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.321617][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.326911][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.332709][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.337989][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.343728][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.349521][T25786] usb 3-1: device descriptor read/8, error -61 [ 1580.355711][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.361337][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1580.366624][T25782] gspca_vc032x: Unknown sensor... [ 1580.372702][T25782] vc032x: probe of 4-1:0.0 failed with error -22 [ 1580.381574][T25782] usb 4-1: USB disconnect, device number 20 [ 1580.468541][T25786] usb usb3-port1: unable to enumerate USB device 05:35:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:35:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000a00)=""/155, &(0x7f0000000ac0)=""/227, &(0x7f0000000bc0)=""/197, 0x6000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0xfffffffd, &(0x7f0000000500)=""/244, &(0x7f0000000480)=""/80, &(0x7f00000002c0)=""/79}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x8, 0x0, [{0x1000, 0xeb, &(0x7f0000000340)=""/235}, {0x10000, 0xc4, &(0x7f0000000600)=""/196}, {0x3000, 0xc, &(0x7f00000000c0)=""/12}, {0xbcf6ad50b34a977b, 0x0, &(0x7f0000000100)}, {0x4000, 0xd0, &(0x7f0000000700)=""/208}, {0xd000, 0xb4, &(0x7f0000000800)=""/180}, {0x2000, 0xd, &(0x7f0000000200)=""/13}, {0x6000, 0x1000, &(0x7f0000001600)=""/4096}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/36, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0x9, 0x5a, {0x5a, 0xa, "3f93b568738e521cd08e53617d5b71e7a57b601851edfa1036e11a2966b1080f4978665f6368796f0ef1ddf7d9aaca16ee401173b886e76a1addf845af2667f136b9c60de061adc068e746a6b99e1dc045dd33d9b15af3ba"}}, &(0x7f00000007c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f2800b41f86e4d3c7a9f2086306053bede81676ce9bde4f72f32c4905f39d7ee9f"}}, &(0x7f0000000800)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "0645"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9256, 0x48, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x15, 0x76, "95ef17a5e25a692a587b9af91036425dbc87c93da892184e8e09e5904643e02c3ecdb6929e676caf0dd556f05bad2971cf4f1b7078963d90cff2576f1c204b601ffed427cd2e1dfd5f2b589bbc24284facad525e8ecdf8994fa2d6172db997d03ac1d0d8387c0f07aefaa309acc661ee8d5be8618278"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a80)={0x20, 0x1, 0xc0, "7446b02bda43371fa0cea2929189fb72289954a1db6e3b125dcf8ee88f002d54ca71672c35b2a4d136f1d0c84fcef93e93b92d6c70b5f99318eeae56031aa25903fe2c1bf0d29c8e1a4e215fccdcd979835242d03affffa8afa40ab0628539513b2bb1c8e5d0616070eadd3506a2cff1f50b525e8159da7c41f343d3a37407fea81f9e568ced3eba68595b8314f8b365c770a03b7e73b1c7fc1f3a01db517e514c8ff15502c9e63c042b673fa13dcfbf18cea059837107965b682e36717c37a4"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0x39a15cc60da7fdf7, 0x2a, {0x2a, 0xd, "fb807012c77a1048bce4e9fb3f606316ff86c883e15264a0feb88183b04465f393a2bdc87a15c58a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xfe, "3672d31d5bc1f9ed0ade1f787319e9ca00a2070f49e993b1177fb1e1689ba769efa8b016c55c9a07edfb2bc0d105e48858d00d99ddc65bdabdaccd7654c21cfce6ea3b4ee70966b5adcea8c440b90c6080b990b9707315b10a2b3bdaf39e53ea316e14c55c15a556a227c466a63a8ce4527d9fa4a0da19206a538822d66cc6b9921618dc1dea046a1a739117f0057f0c4b3958d99587ce2126d1ddbea92f6fb67f21953018273b9c8c63b5af0d22cf36082ba1349f595265451adc313405c0b3de0ed4be854e01b450d286bc996aa26ede564c74d2efeef239fb693607eb41d54e23bc8f8457e8845d63edcc18d187db6f373e47adf783fa64c2f6378748"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe7}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400409000200090abd1afcf0ab02de"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d3af96c0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c8, 0x1c, 0x1, {0x22, 0xe5f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x6e, "9c557c3bdcd6d3a2f636dc8d408e8e1a4b83efe86d987160235795cbcbe0f520c4f4a1d6d99e06a5e64a4197b416baaeb2e91c516a45f7656c6299d5bcd9e08120a72106ee9734d27eb51ba21fb6784911deca7fcc1df050f5d1ce8b9e670d79c7b9bc1047d6cf2a9df9988443d2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000300)={0x20, 0x1, 0x93, "b7aea38fd47281df4ed0f922ce11c3bfcfb25d7e526906ecdeff6244aae9caed8fe0d7ed31c4dc7847872e8cb716df23f24adf7785c049183ba3b37c539a93862e3a96d98113626327d04417c0c4bb3cc23f766e34534e039c37e88d7a32557aa769d74e34dd3675156b87c7f0c8d794a35530419834253a2c3dcf188739c87cbc2d25d25febec7df88dd38c410c89178d8fbb"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x56}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0x9, 0x5a, {0x5a, 0xa, "3f93b568738e521cd08e53617d5b71e7a57b601851edfa1036e11a2966b1080f4978665f6368796f0ef1ddf7d9aaca16ee401173b886e76a1addf845af2667f136b9c60de061adc068e746a6b99e1dc045dd33d9b15af3ba"}}, &(0x7f00000007c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f2800b41f86e4d3c7a9f2086306053bede81676ce9bde4f72f32c4905f39d7ee9f"}}, &(0x7f0000000800)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "0645"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9256, 0x48, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x15, 0x76, "95ef17a5e25a692a587b9af91036425dbc87c93da892184e8e09e5904643e02c3ecdb6929e676caf0dd556f05bad2971cf4f1b7078963d90cff2576f1c204b601ffed427cd2e1dfd5f2b589bbc24284facad525e8ecdf8994fa2d6172db997d03ac1d0d8387c0f07aefaa309acc661ee8d5be8618278"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a80)={0x20, 0x1, 0xc0, "7446b02bda43371fa0cea2929189fb72289954a1db6e3b125dcf8ee88f002d54ca71672c35b2a4d136f1d0c84fcef93e93b92d6c70b5f99318eeae56031aa25903fe2c1bf0d29c8e1a4e215fccdcd979835242d03affffa8afa40ab0628539513b2bb1c8e5d0616070eadd3506a2cff1f50b525e8159da7c41f343d3a37407fea81f9e568ced3eba68595b8314f8b365c770a03b7e73b1c7fc1f3a01db517e514c8ff15502c9e63c042b673fa13dcfbf18cea059837107965b682e36717c37a4"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0x39a15cc60da7fdf7, 0x2a, {0x2a, 0xd, "fb807012c77a1048bce4e9fb3f606316ff86c883e15264a0feb88183b04465f393a2bdc87a15c58a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xfe, "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"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe7}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400409000200090abd1afcf0ab02de"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d3af96c0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c8, 0x1c, 0x1, {0x22, 0xe5f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x6e, "9c557c3bdcd6d3a2f636dc8d408e8e1a4b83efe86d987160235795cbcbe0f520c4f4a1d6d99e06a5e64a4197b416baaeb2e91c516a45f7656c6299d5bcd9e08120a72106ee9734d27eb51ba21fb6784911deca7fcc1df050f5d1ce8b9e670d79c7b9bc1047d6cf2a9df9988443d2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000300)={0x20, 0x1, 0x93, "b7aea38fd47281df4ed0f922ce11c3bfcfb25d7e526906ecdeff6244aae9caed8fe0d7ed31c4dc7847872e8cb716df23f24adf7785c049183ba3b37c539a93862e3a96d98113626327d04417c0c4bb3cc23f766e34534e039c37e88d7a32557aa769d74e34dd3675156b87c7f0c8d794a35530419834253a2c3dcf188739c87cbc2d25d25febec7df88dd38c410c89178d8fbb"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x56}}) (async) 05:35:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:35:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async, rerun: 64) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000a00)=""/155, &(0x7f0000000ac0)=""/227, &(0x7f0000000bc0)=""/197, 0x6000}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0xfffffffd, &(0x7f0000000500)=""/244, &(0x7f0000000480)=""/80, &(0x7f00000002c0)=""/79}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x8, 0x0, [{0x1000, 0xeb, &(0x7f0000000340)=""/235}, {0x10000, 0xc4, &(0x7f0000000600)=""/196}, {0x3000, 0xc, &(0x7f00000000c0)=""/12}, {0xbcf6ad50b34a977b, 0x0, &(0x7f0000000100)}, {0x4000, 0xd0, &(0x7f0000000700)=""/208}, {0xd000, 0xb4, &(0x7f0000000800)=""/180}, {0x2000, 0xd, &(0x7f0000000200)=""/13}, {0x6000, 0x1000, &(0x7f0000001600)=""/4096}]}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/36, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1581.278825][T30029] usb 4-1: new high-speed USB device number 21 using dummy_hcd 05:35:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/36, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1581.468524][T27370] usb 3-1: new high-speed USB device number 28 using dummy_hcd 05:35:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1581.548557][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1581.678460][T27370] usb 3-1: device descriptor read/64, error 18 [ 1581.885700][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1581.895145][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.903638][T30029] usb 4-1: Product: syz [ 1581.908450][T30029] usb 4-1: Manufacturer: syz [ 1581.913069][T30029] usb 4-1: SerialNumber: syz [ 1581.919373][T30029] usb 4-1: config 0 descriptor?? [ 1581.968635][T27370] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1581.979086][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1582.198529][T27370] usb 3-1: device descriptor read/64, error 18 [ 1582.319375][T27370] usb usb3-port1: attempt power cycle [ 1582.380444][ T4254] UDC core: couldn't find an available UDC or it's busy: -16 [ 1582.387858][ T4254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1582.728387][T27370] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1582.829182][ T4254] UDC core: couldn't find an available UDC or it's busy: -16 [ 1582.837728][ T4254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1582.900150][T27370] usb 3-1: device descriptor read/8, error -61 [ 1583.168445][T27370] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1583.275028][ T4254] UDC core: couldn't find an available UDC or it's busy: -16 [ 1583.278546][ T4297] UDC core: couldn't find an available UDC or it's busy: -16 [ 1583.283336][ T4296] UDC core: couldn't find an available UDC or it's busy: -16 [ 1583.299355][ T4254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1583.299916][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1583.307007][ T4296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1583.340354][T27370] usb 3-1: device descriptor read/8, error -61 [ 1583.347073][T30029] gspca_vc032x: reg_w err -71 [ 1583.352185][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.357487][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.362915][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.368206][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.373542][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.378951][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.384241][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.389635][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.394933][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.400297][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.405584][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.411032][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.416319][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.421660][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.426931][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.432250][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.437557][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.442923][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.449047][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1583.454350][T30029] gspca_vc032x: Unknown sensor... [ 1583.459719][T27370] usb usb3-port1: unable to enumerate USB device [ 1583.466229][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1583.474867][T30029] usb 4-1: USB disconnect, device number 21 05:35:38 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001"], 0x0) 05:35:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000a00)=""/155, &(0x7f0000000ac0)=""/227, &(0x7f0000000bc0)=""/197, 0x6000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0xfffffffd, &(0x7f0000000500)=""/244, &(0x7f0000000480)=""/80, &(0x7f00000002c0)=""/79}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x8, 0x0, [{0x1000, 0xeb, &(0x7f0000000340)=""/235}, {0x10000, 0xc4, &(0x7f0000000600)=""/196}, {0x3000, 0xc, &(0x7f00000000c0)=""/12}, {0xbcf6ad50b34a977b, 0x0, &(0x7f0000000100)}, {0x4000, 0xd0, &(0x7f0000000700)=""/208}, {0xd000, 0xb4, &(0x7f0000000800)=""/180}, {0x2000, 0xd, &(0x7f0000000200)=""/13}, {0x6000, 0x1000, &(0x7f0000001600)=""/4096}]}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f0000000480)=""/68}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt(r2, 0x5, 0x400, &(0x7f0000000500)=""/4096, &(0x7f0000000300)=0x1000) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 05:35:38 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r0, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x81000) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="71dae263665a7a270d020faa078e8411f987093d13792e20fdf553253d2c06725413799751aff962d06b1ab8ad0882f040934ea41a0ad69ba8085bb556fe09cfc175b1fc2266fbb87a1ef655c93dae8cc6b866c86cdee0b71332252e04a562366ba758fd6251985dc63681ae65420284b56144a92ce4f86ca27a81d7f90256a8d24fe633ea23cd60251dd596e01bf9ca0e5bffa8d7a15bceee17"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 05:35:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0x9, 0x5a, {0x5a, 0xa, "3f93b568738e521cd08e53617d5b71e7a57b601851edfa1036e11a2966b1080f4978665f6368796f0ef1ddf7d9aaca16ee401173b886e76a1addf845af2667f136b9c60de061adc068e746a6b99e1dc045dd33d9b15af3ba"}}, &(0x7f00000007c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f2800b41f86e4d3c7a9f2086306053bede81676ce9bde4f72f32c4905f39d7ee9f"}}, &(0x7f0000000800)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "0645"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9256, 0x48, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x15, 0x76, "95ef17a5e25a692a587b9af91036425dbc87c93da892184e8e09e5904643e02c3ecdb6929e676caf0dd556f05bad2971cf4f1b7078963d90cff2576f1c204b601ffed427cd2e1dfd5f2b589bbc24284facad525e8ecdf8994fa2d6172db997d03ac1d0d8387c0f07aefaa309acc661ee8d5be8618278"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a80)={0x20, 0x1, 0xc0, "7446b02bda43371fa0cea2929189fb72289954a1db6e3b125dcf8ee88f002d54ca71672c35b2a4d136f1d0c84fcef93e93b92d6c70b5f99318eeae56031aa25903fe2c1bf0d29c8e1a4e215fccdcd979835242d03affffa8afa40ab0628539513b2bb1c8e5d0616070eadd3506a2cff1f50b525e8159da7c41f343d3a37407fea81f9e568ced3eba68595b8314f8b365c770a03b7e73b1c7fc1f3a01db517e514c8ff15502c9e63c042b673fa13dcfbf18cea059837107965b682e36717c37a4"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0x39a15cc60da7fdf7, 0x2a, {0x2a, 0xd, "fb807012c77a1048bce4e9fb3f606316ff86c883e15264a0feb88183b04465f393a2bdc87a15c58a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xfe, "3672d31d5bc1f9ed0ade1f787319e9ca00a2070f49e993b1177fb1e1689ba769efa8b016c55c9a07edfb2bc0d105e48858d00d99ddc65bdabdaccd7654c21cfce6ea3b4ee70966b5adcea8c440b90c6080b990b9707315b10a2b3bdaf39e53ea316e14c55c15a556a227c466a63a8ce4527d9fa4a0da19206a538822d66cc6b9921618dc1dea046a1a739117f0057f0c4b3958d99587ce2126d1ddbea92f6fb67f21953018273b9c8c63b5af0d22cf36082ba1349f595265451adc313405c0b3de0ed4be854e01b450d286bc996aa26ede564c74d2efeef239fb693607eb41d54e23bc8f8457e8845d63edcc18d187db6f373e47adf783fa64c2f6378748"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe7}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400409000200090abd1afcf0ab02de"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d3af96c0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c8, 0x1c, 0x1, {0x22, 0xe5f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x6e, "9c557c3bdcd6d3a2f636dc8d408e8e1a4b83efe86d987160235795cbcbe0f520c4f4a1d6d99e06a5e64a4197b416baaeb2e91c516a45f7656c6299d5bcd9e08120a72106ee9734d27eb51ba21fb6784911deca7fcc1df050f5d1ce8b9e670d79c7b9bc1047d6cf2a9df9988443d2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000300)={0x20, 0x1, 0x93, "b7aea38fd47281df4ed0f922ce11c3bfcfb25d7e526906ecdeff6244aae9caed8fe0d7ed31c4dc7847872e8cb716df23f24adf7785c049183ba3b37c539a93862e3a96d98113626327d04417c0c4bb3cc23f766e34534e039c37e88d7a32557aa769d74e34dd3675156b87c7f0c8d794a35530419834253a2c3dcf188739c87cbc2d25d25febec7df88dd38c410c89178d8fbb"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x56}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0x9, 0x5a, {0x5a, 0xa, "3f93b568738e521cd08e53617d5b71e7a57b601851edfa1036e11a2966b1080f4978665f6368796f0ef1ddf7d9aaca16ee401173b886e76a1addf845af2667f136b9c60de061adc068e746a6b99e1dc045dd33d9b15af3ba"}}, &(0x7f00000007c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f2800b41f86e4d3c7a9f2086306053bede81676ce9bde4f72f32c4905f39d7ee9f"}}, &(0x7f0000000800)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "0645"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9256, 0x48, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x15, 0x76, "95ef17a5e25a692a587b9af91036425dbc87c93da892184e8e09e5904643e02c3ecdb6929e676caf0dd556f05bad2971cf4f1b7078963d90cff2576f1c204b601ffed427cd2e1dfd5f2b589bbc24284facad525e8ecdf8994fa2d6172db997d03ac1d0d8387c0f07aefaa309acc661ee8d5be8618278"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a80)={0x20, 0x1, 0xc0, "7446b02bda43371fa0cea2929189fb72289954a1db6e3b125dcf8ee88f002d54ca71672c35b2a4d136f1d0c84fcef93e93b92d6c70b5f99318eeae56031aa25903fe2c1bf0d29c8e1a4e215fccdcd979835242d03affffa8afa40ab0628539513b2bb1c8e5d0616070eadd3506a2cff1f50b525e8159da7c41f343d3a37407fea81f9e568ced3eba68595b8314f8b365c770a03b7e73b1c7fc1f3a01db517e514c8ff15502c9e63c042b673fa13dcfbf18cea059837107965b682e36717c37a4"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0x39a15cc60da7fdf7, 0x2a, {0x2a, 0xd, "fb807012c77a1048bce4e9fb3f606316ff86c883e15264a0feb88183b04465f393a2bdc87a15c58a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xfe, "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"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe7}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400409000200090abd1afcf0ab02de"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d3af96c0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c8, 0x1c, 0x1, {0x22, 0xe5f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x6e, "9c557c3bdcd6d3a2f636dc8d408e8e1a4b83efe86d987160235795cbcbe0f520c4f4a1d6d99e06a5e64a4197b416baaeb2e91c516a45f7656c6299d5bcd9e08120a72106ee9734d27eb51ba21fb6784911deca7fcc1df050f5d1ce8b9e670d79c7b9bc1047d6cf2a9df9988443d2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000300)={0x20, 0x1, 0x93, "b7aea38fd47281df4ed0f922ce11c3bfcfb25d7e526906ecdeff6244aae9caed8fe0d7ed31c4dc7847872e8cb716df23f24adf7785c049183ba3b37c539a93862e3a96d98113626327d04417c0c4bb3cc23f766e34534e039c37e88d7a32557aa769d74e34dd3675156b87c7f0c8d794a35530419834253a2c3dcf188739c87cbc2d25d25febec7df88dd38c410c89178d8fbb"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x56}}) (async) 05:35:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f0000000480)=""/68}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) getsockopt(r2, 0x5, 0x400, &(0x7f0000000500)=""/4096, &(0x7f0000000300)=0x1000) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 05:35:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1584.308503][T25782] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1584.328629][ T3706] usb 6-1: new high-speed USB device number 78 using dummy_hcd 05:35:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f0000000480)=""/68}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) getsockopt(r2, 0x5, 0x400, &(0x7f0000000500)=""/4096, &(0x7f0000000300)=0x1000) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 05:35:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1584.538600][ T3706] usb 6-1: device descriptor read/64, error 18 [ 1584.558467][T25782] usb 4-1: Using ep0 maxpacket: 16 [ 1584.558631][T30029] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1584.838869][ T3706] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1584.846769][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1584.848775][T25782] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1584.861130][T25782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.869259][T25782] usb 4-1: Product: syz [ 1584.873442][T25782] usb 4-1: Manufacturer: syz [ 1584.878735][T25782] usb 4-1: SerialNumber: syz [ 1584.889359][T25782] usb 4-1: config 0 descriptor?? [ 1584.908835][T30029] usb 3-1: no configurations [ 1584.913467][T30029] usb 3-1: can't read configurations, error -22 [ 1584.931441][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1585.068454][ T3706] usb 6-1: device descriptor read/64, error 18 [ 1585.079283][T30029] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1585.188729][ T3706] usb usb6-port1: attempt power cycle [ 1585.338534][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1585.349160][ T4310] UDC core: couldn't find an available UDC or it's busy: -16 [ 1585.356677][ T4310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1585.378614][T30029] usb 3-1: no configurations [ 1585.383249][T30029] usb 3-1: can't read configurations, error -22 [ 1585.390677][T30029] usb usb3-port1: attempt power cycle [ 1585.618479][ T3706] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1585.788956][ T4310] UDC core: couldn't find an available UDC or it's busy: -16 [ 1585.796359][ T4310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1585.808658][ T3706] usb 6-1: device descriptor read/8, error -61 [ 1585.818359][T30029] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1585.938543][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1585.980756][T30029] usb 3-1: no configurations [ 1585.985400][T30029] usb 3-1: can't read configurations, error -22 [ 1586.108507][ T3706] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1586.158540][T30029] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1586.234395][ T4310] UDC core: couldn't find an available UDC or it's busy: -16 [ 1586.242196][ T4310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1586.246176][ T4368] UDC core: couldn't find an available UDC or it's busy: -16 [ 1586.257870][ T4368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1586.268884][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1586.288596][T25782] gspca_vc032x: reg_w err -71 [ 1586.293421][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.299813][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.305335][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.312294][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.317678][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.320180][ T3706] usb 6-1: device descriptor read/8, error -61 [ 1586.323717][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.329476][T30029] usb 3-1: no configurations [ 1586.334776][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.344641][T30029] usb 3-1: can't read configurations, error -22 [ 1586.351072][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.356460][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.361996][T30029] usb usb3-port1: unable to enumerate USB device [ 1586.368939][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.374236][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.379973][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.385338][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.390799][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.396163][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.401621][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.406951][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.412636][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.418615][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1586.423915][T25782] gspca_vc032x: Unknown sensor... [ 1586.429107][T25782] vc032x: probe of 4-1:0.0 failed with error -22 [ 1586.449764][T25782] usb 4-1: USB disconnect, device number 22 [ 1586.459079][ T3706] usb usb6-port1: unable to enumerate USB device 05:35:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001"], 0x0) 05:35:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:41 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000002c0)=""/132, &(0x7f0000000500)=""/216, &(0x7f0000000600)=""/210}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bdc14e73684802d2e033e595a36f2ad4f20a6d07516a30c8bd0110ef4edcf2857529", @ANYRES32, @ANYBLOB="88a9acb939be82e16acbdd8315d3e27c3dba356368f0e8ef0d0466d419f08cfeb3f58da45c6768b7ec8e1f3248c9732cc02c1f7605f0c3910f683909ce24dc72858536c69251c67d175b2a418d030be9c54df2e13f764c2a64811a963d046d19643c522d27004f9be56f6c3e25e6feb4d52232cd4b646a1f0aac7c2236193b4c0fe8cd488c06b7df034e20dda86d222ed28450cc21d551e327d054560e7fea1ac2fa75001dc2094c8d64c1ca45c16191b856e8d2c79d18a4b94129863b0d816c92ed64eebed33af51680a306f60ee8576b3bf71703a020eb1aa1653be8634737", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0xfe2ba000) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c80)={0x2, 0x0, [{0x2000, 0x92, &(0x7f0000000ac0)=""/146}, {0x0, 0xf6, &(0x7f0000000b80)=""/246}]}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) write$tun(0xffffffffffffffff, &(0x7f0000000e80)={@val={0x0, 0x4}, @void, @llc={@snap={0x1, 0xaa, "f2", "d94755", 0x8809, "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"}}}, 0x100c) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)={0x4, 0x0, [{0x5000, 0x83, &(0x7f0000000700)=""/131}, {0x6000, 0xfd, &(0x7f00000007c0)=""/253}, {0x266e56c399dc2855, 0xa5, &(0x7f00000008c0)=""/165}, {0x3000, 0x36, &(0x7f0000000980)=""/54}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d00)={0x3, r2}) 05:35:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x57fed000) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x81000) fgetxattr(r3, &(0x7f0000000300)=@random={'system.', '/dev/vhost-vsock\x00'}, &(0x7f0000000500)=""/131, 0x83) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x9890, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/98, &(0x7f0000000480)=""/74, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102825f7a92bc180b7ca100000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:41 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r0, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x81000) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="71dae263665a7a270d020faa078e8411f987093d13792e20fdf553253d2c06725413799751aff962d06b1ab8ad0882f040934ea41a0ad69ba8085bb556fe09cfc175b1fc2266fbb87a1ef655c93dae8cc6b866c86cdee0b71332252e04a562366ba758fd6251985dc63681ae65420284b56144a92ce4f86ca27a81d7f90256a8d24fe633ea23cd60251dd596e01bf9ca0e5bffa8d7a15bceee17"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 05:35:41 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000002c0)=""/132, &(0x7f0000000500)=""/216, &(0x7f0000000600)=""/210}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bdc14e73684802d2e033e595a36f2ad4f20a6d07516a30c8bd0110ef4edcf2857529", @ANYRES32, @ANYBLOB="88a9acb939be82e16acbdd8315d3e27c3dba356368f0e8ef0d0466d419f08cfeb3f58da45c6768b7ec8e1f3248c9732cc02c1f7605f0c3910f683909ce24dc72858536c69251c67d175b2a418d030be9c54df2e13f764c2a64811a963d046d19643c522d27004f9be56f6c3e25e6feb4d52232cd4b646a1f0aac7c2236193b4c0fe8cd488c06b7df034e20dda86d222ed28450cc21d551e327d054560e7fea1ac2fa75001dc2094c8d64c1ca45c16191b856e8d2c79d18a4b94129863b0d816c92ed64eebed33af51680a306f60ee8576b3bf71703a020eb1aa1653be8634737", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0xfe2ba000) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c80)={0x2, 0x0, [{0x2000, 0x92, &(0x7f0000000ac0)=""/146}, {0x0, 0xf6, &(0x7f0000000b80)=""/246}]}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) write$tun(0xffffffffffffffff, &(0x7f0000000e80)={@val={0x0, 0x4}, @void, @llc={@snap={0x1, 0xaa, "f2", "d94755", 0x8809, "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"}}}, 0x100c) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)={0x4, 0x0, [{0x5000, 0x83, &(0x7f0000000700)=""/131}, {0x6000, 0xfd, &(0x7f00000007c0)=""/253}, {0x266e56c399dc2855, 0xa5, &(0x7f00000008c0)=""/165}, {0x3000, 0x36, &(0x7f0000000980)=""/54}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d00)={0x3, r2}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000002c0)=""/132, &(0x7f0000000500)=""/216, &(0x7f0000000600)=""/210}) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bdc14e73684802d2e033e595a36f2ad4f20a6d07516a30c8bd0110ef4edcf2857529", @ANYRES32, @ANYBLOB="88a9acb939be82e16acbdd8315d3e27c3dba356368f0e8ef0d0466d419f08cfeb3f58da45c6768b7ec8e1f3248c9732cc02c1f7605f0c3910f683909ce24dc72858536c69251c67d175b2a418d030be9c54df2e13f764c2a64811a963d046d19643c522d27004f9be56f6c3e25e6feb4d52232cd4b646a1f0aac7c2236193b4c0fe8cd488c06b7df034e20dda86d222ed28450cc21d551e327d054560e7fea1ac2fa75001dc2094c8d64c1ca45c16191b856e8d2c79d18a4b94129863b0d816c92ed64eebed33af51680a306f60ee8576b3bf71703a020eb1aa1653be8634737", @ANYRES32], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0xfe2ba000) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c80)={0x2, 0x0, [{0x2000, 0x92, &(0x7f0000000ac0)=""/146}, {0x0, 0xf6, &(0x7f0000000b80)=""/246}]}) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) (async) write$tun(0xffffffffffffffff, &(0x7f0000000e80)={@val={0x0, 0x4}, @void, @llc={@snap={0x1, 0xaa, "f2", "d94755", 0x8809, "349d9628e668b0b0434eec451caab18e8c39cf5d24a4911164b6434145db08769ea8a71d4f1cb8bcd92fcffccd7b4766eb35e6c2e576bb70d56ea35f4c30a283904560719acaadf83e50a162bea1ac2794832c31650a8754ca8fe9bda4ba1e43593cdabbee5c777f1b03495665c42b84b5ae50d00287e3115502513d9cbceedc7d26bdd9cb7ec3258dd7bf420222461d6f5ce276168920f41f18183301b31d7ede8df85ac3658e7c48000d6f87c3d6eef020204d38d7f1df0a07d2fbda5a7371276f9ec17ba2ee1938daa00462a3d745b2a450216073866dc6b9fec3054b79e4c00a8a28f97833f529b0bc362ce78a466d1fbfe0ff30128c88f943e6ea0d865bb4d37a9b925bc2e49ced27cffff6ff1521b13b6e5ce088b1671b60d6f2638214d87480e9c0db50c1d6e6107fe4a3f7a19387668270f85522f9eeeb6e5702dabe3e0c53d3e6841f091093438907be660388278074998336603dad2ffc0f1f54dd931392ac96c9c299d79fdaf11d5b2a55a7da05a60bf072e1b1b2c83583c062f596876601a9d6869999d27e3ad7a7f381705a0c7da1d9790259a11e7b8e7d1479d925fa443c0befb496c23e8f61f902be3a0e5074217bd2814b3b7b3381a7273d9c118b2d5f8d6eaea58c7655305ed34d7062665daecb1aacb1510d517e5db3f59bbb0192f98e879c4e31eaa8c52de5a8aee3bce0867b77105fcfb66474839cdaab24243dbe956ecc03e774f3ccab4c65c89455d599867d6a4ec0b0615407330a534c2bbfd2ca1bd3cac202d7e6c5369e919fb7f599d96077edbd8d420fd1408f30bfedebe91529c63a22dcd60b3ee59644a8fec54f1d5e675e891af069f20a9ba01f5066dd493479af2af34ca6c0ade1166371b75128db274f1be11fcc26d1c8fe4ff754c3c3ac4b1180af96b0ca274d2b7d4a4b7865465b073d31cb6b792b84c6d0cca7484ed2b752fb03dc1c3aa5a8fd0657604fc360b9447f7fe249803c5cfb14c93fd099faee859492e0f8ac2bdcebede18eb4429ec4b1f7c913121f3b50732e3c32db72f1a78470941074c57a23527d31171b1a83a7b56765eb5be3acc436a63e804515f7c0116d3f3e284b728cfacb725c15b07478d4d5e24f4d401c74d46755d07788a0b545eec412052c4ce5aea36e8c325937e28cc88507235fa9f7a81cc8b06dcccf8928aaf4ba299917aeafefa0ec1bfba1b1bf7d09c6e492999969bf4490211201fb5586581ae669072b4ddc8dac4765fb9c950f00e6b029d58656974c3193a2e9b20d609ac5c3c4c7654f65d1684d19e6a639fdee06988b89665a7e5030cf976e57ef4ac7388ad17cb3ac4645652a7eaf0f6582f712fb711839bc90b2ed2a115c38591f709c3d74d5e43600bad52f437aaca04dca16a15aa1c26451ef8b653adc38963031a0ba05a0abab80abdd0b54744b48a2ec238e883f54484dc26d230bce1969f3f6c6e45ea2e7d2861b60fb189642fb8ca1c0e54f880f9e86f8d1ea835e1a054b2b13ae208d8dd73bc4039c9134510753404370b921e8a0b036671bb9f5851476704b35080858da65fc4e2be5dd2f59de0e683dc574c2d2d32d5e8289c8a4983370d67131f7612dbf94de179e7d50bb05e8ad211a745b77789c60766338c55e98e6e6abe6c866250d8ce60bf319d7709aa2a9960454f8243d50ba7d76df20c816d4fa447d21ce0f5844a04d2dffcde00a3b302a946d1dd3fcad22af5ff85e3958cf9ed3a9522e9c2d4804150538ab533a3e3dc20f3cd4332d547d99dc8e8c2c50e37be1c8a8cd40ae9c67f0ac96e376c7fb9c19e58a667c7727f32bdd0cc7464b7f085d34313c5a9fad113183c51399e8d6404620ba9dfb9cc5ebf9f6061bd78d6d996c112c73fc8015ad1488470f12ce5e3d32e97101bc136d9f758d39b8c29c63b408ebdc7465d2c751819e60abec7962cc2ee2cc3eff19e5426322a5ef9c981d36b3b0526f8d4530430ff6029c7a7a83be168ea5ccc8828f0c66b753c23f8018edd96eff22fee505cfb9ad46c58ee49f094655de7082edbdfab3db7d41816454cb43aeb203e8c4296bb61f279e9dd2dcb88cdd178a8d54e965b34f2854533924229a32c0bafa61a8f588abfb8e6d3a3e7fc8a82fa8c6e95fdba6ffb7460bed0002018a758c390595a1977f83c8891b567c066a2e024b90df6cfe5f03862e3d00856e969936adc1dc5272daed714a3e5e7b79756dedcd0d8dd7228dbb1e32098514b41c04f19eb671f52e74a2a769a1a30ef40ed490c5eb0b7ae8f0c1dd3f446f1843d3941c8267f078f4ead8815baebff23d473f25c12840ea5c50b8ca9ee240472bd1c99fc41a79e15afa65a17b3d5903863cbff1f686161ac66d1107e7a68e31dfa41c7d078d862b9e9b085b157fc389a6fb56a0d2354d2088af335b3cff2fd4124eaeb9d67f3ce9df900ad62090cd9291b77085d71623acf57ec4c0d20ea84eea843f454922320103309fe45a3ce6463c0e8d383396c11f58c07059265421ea66900f54b552d06acebfd627e1ae979706558399c989bf1318769f4cde5d159bfa27383e5b8f312c99fe2de4906a6e2a1adcb46c325be38cb26a3926ca19dd3225cba40a1b1511a2dc5b390f5970464824f1f0381ef3340ad2bd00cef74d1c85d69ddb143f6252fc267ed437a53be089fdce3a1194a95b1c5600b21fcddbb61c266f849ac46e39716e216351b375238668e66fc53b8a0673d761163c2fe8d7c514b2b0bb710b332ba30e7d23d645e3c01a50a6d890742cfcb9d754cbf77934cb74836fbc739a86cfbfe95a1fd59fcb5eb7de8caed2bcc1a00c847fa76f3dc78142e327feca075932a3f71a3f3a55ccbfdc8f5008c8d92f99b857f3de647229bfb43c318c1d38657acd9f86ff3dc55e673f44019142734c83454b00588b3579da45b8586c5ef3f4753340143d1ebb16a27911b2c69245f5e47cc252811db58c085dda96aecddb516b37adf8a7610999a5db54736af47af0b7a294a145fc5a7348d3997d293db495cb8955868aea4ec923ef05a026a51fcf515b2a050375a5c14f209604e8d270fccdf74372fc5d2b563092945c51a751465cff2940965b388ad8a26cd70d7bac7f35e779087fded3f6cbd3e94376a77c851c1c65ecbd67465d2793af6d284081ed21e69158af7ab66c7213b4a830e4b384e31f77b4f90215e6f72f807d51c84c9d1c9a7126fbe4c8404dbd02d51d84e12220a0b4ff01e5c987ab63f90d58954e05cd34c1b2095e27fbd0ba0bdd04c16b59ee2a00fac3fe6d9a71b6eefdd7117e5c2c13502220e859c80a92b63d3082819fe9f4f700e74cc6090027b856fce8c446f8151ca6acbd04fbc817ea12ca448efbaa2ca7071ffb82f3ff35eaa929bdc4e5bf7779bb82f393f1799d563346b2fdc8ad4129a165e8ffe9c34a2743fbb6d64c694f880f956de3d0db2cd4033744b5fcae37306a3c153b5e7bfb379e7866b9f423b838399a06a181aec992a5f600afb652f3e848ffccfb58cd68affd83d8f978ac9bf09c91f848d05bf5cec001d29b9e432298b0268a31d393e1974e6d9f1e25f30483c9676f259b4edd9f45b8dbcfbf747db0ae55e4bc8d55006dbe4628b80cc62f1ed8d647c889a1fc0ad19ecdc24abea5888caa8393f2705429c7509e473a18d8851fcf62c9cc524f439cd093d21e69b193f7915eb0da0beeb9b40837dcb442e10e363b3d1986e69077c11fd5185eff5008fa0a1fe6c3b00548773002a909c849b2a644e45aea3344367ceb9c0a472b0b77d147b86d6e3632f6c2913aa773fbed5667c020ffa262d5fcedd541abbbc82ba2092c4af9ec2db6c282d0139521335c30d8cb46afe039d06fa292f3577097b75a7d35f47ae9544846bce2aa957a40a77a73324d951e47d208d6a2a2a74bd4d7a0f31237ba98f0f2fab69371ce68968695950e51e16166273ee8f6bfe57a241c451924a0f9fd3ebbb5acc1655b05a6ee862f8c28db88613e44e365c2aed4282b1bdc3f1da5f01d516932111fbae33150fe380760ef050524fc5aac04232b5a908c7e22e448c1fcd2cd94651c30efb9dad78fdc5a9ffe970dc3d639e95afc55f7e1101b04c4c5eadf9dd0566ddae692c0031159321ab77ebbe24d399b5b9833c94476a4b27fcba022420e8d6af9365b7c2d98baa0817800ec70264513d99067f2ed3db3872900c91b2cf8d69a88a4d0e4d14fc63046c20418c88dc75f0e3f4ddb634fd44e3aaf162379995f56d916e81072dc71c9e5f487aa7b8d6ee07343bc6949df5b323759686f16048c79ee109b5ce63561f50795c4c5f531fa486e7da0c7f1d1ab49b05d5d9dc5b64fafb308335c56df20c621a8c7d160abac701badf88f3686fc8780a8f1113cc7bc5e3b5a7019c8add588ed00e5eb126a04adbefe06ca0024c3383482e69d7269f9ca29162fdd59f3ed4780969e9b18867034dca56d69892c7399e7f5fe05cb0afff1f5202b74cfb857e48e66c1f4b13b9d18b8998b1b4dad94ec258b0ba88332eb80d67470b8e913d86e7ed11be4be13a15f8862e7ef73bff76a7a8c66baa1785e21c81c727529297acd0d0f9141dc4bceeff887f4d8dfdc6eadf4f6c74c90f98f7168d7890082a8342e396df44d9f65366a9e04215fe1ba95de381c267e6d0cc716536e3012d109ff5bd49a2f655dec463834b73c3d6612805ae2354c8748c6458f6aa2dad19fbc185a2ae92dcd4058aaa6204ac08dda8bd49aaf75f00e8d435642eb5b55730269d492a5c87bfae7de6a64aa0f31100ddae58f21def3dfa1a5dcd31554859b5f0e76a5999aa924856928df454e3375f67e93e745be525347d9ebcb398393f39915544f21493342e930cdadc61e4c47500fd5fcd4abb72a26c25b57fbe9e98953540e84f12baf08022f370fab3005fc370bf8202f7aa4e978232fd24e423dbe7e50199668129a2a91da61b91e1d135486452d3f92f7ef2e1132b8a8d58b48f8ea380e896472b1a99ac995eb099ca0cd76275ab4fada8f365b2ccf2fa0f9804ef89c5a1656390996a4b21fa1a7ba611e508490295b9db65b5d3386cedc049c0e8c2c43c71ce64e14140f2553cfb77e3d20730b5209400ca766a0af83bc085b326a4c55ba8e37206b9cfc23c985a7c59e525e9b0beb0e3792fe74575975456c17466ed0ec25e5a3e9119bee4b50b61b766d0a582602f6386fdbd418dce878ab89541744b58f0d8fb2fff44907783212ca7a969dd5f7125b700aa58f0807363814f52597c2fdba97ca952a6f1a5501b3eaad178c4206d8c82271fcfa6125db0d5ef0255378b7ce15bd6fe8580b78bcacc6ebf2e9018b6717653590cc57d94a91e20cdd2abba553eba06aae4b714260a695a57f243314701a34dc854a6b60795589e14e96d88615be4e4afd8c589287e9f40eef06d5a3bdf3aa0f03d4e7bd19308b47cb529d39ecde92a62b237f56d1dd7bebfbda38bde433de0ea4818d2a58b800e555a144c0fd8dac0c9c0a4d87de683cedff2a8ed6b5b58d7863127738b5b996a752b96fa61a73947e45ac8c10b182d22ac7c9b222716decaf562b58ed2a87ba338564830f2fc378c7867b3927a805861529b1f42a801b1cf656363563cea514334e28439d730c424f740a3a18394745eedab4b8a1f19a396f72fd856eda9d13f924bc26dcb0fc4d8b9adc3faf595004dc840c993709225c965bb4928e0caf45dc40410a4abfaa0096023e93762691e2f1e1daff675d7e1162c606465a2ceafaeab303165fc3781d641494f69c65768c95da6fc6522afe36717ad0db9ad046674427866fe73de8848571bc"}}}, 0x100c) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)={0x4, 0x0, [{0x5000, 0x83, &(0x7f0000000700)=""/131}, {0x6000, 0xfd, &(0x7f00000007c0)=""/253}, {0x266e56c399dc2855, 0xa5, &(0x7f00000008c0)=""/165}, {0x3000, 0x36, &(0x7f0000000980)=""/54}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d00)={0x3, r2}) (async) 05:35:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x57fed000) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x81000) (async) fgetxattr(r3, &(0x7f0000000300)=@random={'system.', '/dev/vhost-vsock\x00'}, &(0x7f0000000500)=""/131, 0x83) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 64) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x9890, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/98, &(0x7f0000000480)=""/74, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:41 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r0 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000002c0)=""/132, &(0x7f0000000500)=""/216, &(0x7f0000000600)=""/210}) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bdc14e73684802d2e033e595a36f2ad4f20a6d07516a30c8bd0110ef4edcf2857529", @ANYRES32, @ANYBLOB="88a9acb939be82e16acbdd8315d3e27c3dba356368f0e8ef0d0466d419f08cfeb3f58da45c6768b7ec8e1f3248c9732cc02c1f7605f0c3910f683909ce24dc72858536c69251c67d175b2a418d030be9c54df2e13f764c2a64811a963d046d19643c522d27004f9be56f6c3e25e6feb4d52232cd4b646a1f0aac7c2236193b4c0fe8cd488c06b7df034e20dda86d222ed28450cc21d551e327d054560e7fea1ac2fa75001dc2094c8d64c1ca45c16191b856e8d2c79d18a4b94129863b0d816c92ed64eebed33af51680a306f60ee8576b3bf71703a020eb1aa1653be8634737", @ANYRES32], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0xfe2ba000) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c80)={0x2, 0x0, [{0x2000, 0x92, &(0x7f0000000ac0)=""/146}, {0x0, 0xf6, &(0x7f0000000b80)=""/246}]}) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) write$tun(0xffffffffffffffff, &(0x7f0000000e80)={@val={0x0, 0x4}, @void, @llc={@snap={0x1, 0xaa, "f2", "d94755", 0x8809, "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"}}}, 0x100c) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)={0x4, 0x0, [{0x5000, 0x83, &(0x7f0000000700)=""/131}, {0x6000, 0xfd, &(0x7f00000007c0)=""/253}, {0x266e56c399dc2855, 0xa5, &(0x7f00000008c0)=""/165}, {0x3000, 0x36, &(0x7f0000000980)=""/54}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d00)={0x3, r2}) 05:35:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x3000) r3 = socket$rds(0x15, 0x5, 0x0) fdatasync(r3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x2, 0x10000000, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f00000000c0)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1587.407370][T30029] usb 4-1: new high-speed USB device number 23 using dummy_hcd 05:35:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x57fed000) (async, rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) (async) sendfile(r3, 0xffffffffffffffff, 0x0, 0x81000) fgetxattr(r3, &(0x7f0000000300)=@random={'system.', '/dev/vhost-vsock\x00'}, &(0x7f0000000500)=""/131, 0x83) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x9890, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/98, &(0x7f0000000480)=""/74, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1587.508590][T25785] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1587.538763][T25782] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1587.688577][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1587.708687][T25785] usb 6-1: device descriptor read/64, error 18 [ 1587.738694][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1587.778497][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1587.818659][T25782] usb 3-1: no configurations [ 1587.823295][T25782] usb 3-1: can't read configurations, error -22 [ 1587.888812][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1587.896422][T30029] usb 4-1: can't read configurations, error -61 [ 1587.978429][T25785] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1587.986139][T25782] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1588.048521][T30029] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1588.178706][T25785] usb 6-1: device descriptor read/64, error 18 [ 1588.228463][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1588.268821][T25782] usb 3-1: no configurations [ 1588.273617][T25782] usb 3-1: can't read configurations, error -22 [ 1588.280549][T25782] usb usb3-port1: attempt power cycle [ 1588.298557][T25785] usb usb6-port1: attempt power cycle [ 1588.308750][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1588.359519][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1588.500438][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1588.508153][T30029] usb 4-1: can't read configurations, error -61 [ 1588.514885][T30029] usb usb4-port1: attempt power cycle [ 1588.688504][T25782] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1588.708494][T25785] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1588.778574][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1588.818720][T25782] usb 3-1: no configurations [ 1588.823459][T25782] usb 3-1: can't read configurations, error -22 [ 1588.878653][T25785] usb 6-1: device descriptor read/8, error -61 [ 1588.958471][T30029] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1588.978485][T25782] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1589.068528][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1589.068822][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1589.109546][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1589.118709][T25782] usb 3-1: no configurations [ 1589.123576][T25782] usb 3-1: can't read configurations, error -22 [ 1589.130602][T25782] usb usb3-port1: unable to enumerate USB device [ 1589.148526][T25785] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1589.268632][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1589.276250][T30029] usb 4-1: can't read configurations, error -61 [ 1589.318971][T25785] usb 6-1: device descriptor read/8, error -61 [ 1589.438471][T30029] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1589.438742][T25785] usb usb6-port1: unable to enumerate USB device [ 1589.538631][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1589.578577][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1589.698431][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1589.706073][T30029] usb 4-1: can't read configurations, error -61 [ 1589.713010][T30029] usb usb4-port1: unable to enumerate USB device 05:35:44 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001"], 0x0) 05:35:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (rerun: 64) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x3000) (async, rerun: 32) r3 = socket$rds(0x15, 0x5, 0x0) fdatasync(r3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x2, 0x10000000, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f00000000c0)=""/74}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000940)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000980)={0x3, r4}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x440001, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/187, 0xbb}], 0x7, 0x1, 0x7) 05:35:44 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r0, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x81000) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="71dae263665a7a270d020faa078e8411f987093d13792e20fdf553253d2c06725413799751aff962d06b1ab8ad0882f040934ea41a0ad69ba8085bb556fe09cfc175b1fc2266fbb87a1ef655c93dae8cc6b866c86cdee0b71332252e04a562366ba758fd6251985dc63681ae65420284b56144a92ce4f86ca27a81d7f90256a8d24fe633ea23cd60251dd596e01bf9ca0e5bffa8d7a15bceee17"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) recvfrom(r0, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x81000) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="71dae263665a7a270d020faa078e8411f987093d13792e20fdf553253d2c06725413799751aff962d06b1ab8ad0882f040934ea41a0ad69ba8085bb556fe09cfc175b1fc2266fbb87a1ef655c93dae8cc6b866c86cdee0b71332252e04a562366ba758fd6251985dc63681ae65420284b56144a92ce4f86ca27a81d7f90256a8d24fe633ea23cd60251dd596e01bf9ca0e5bffa8d7a15bceee17"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) 05:35:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102825f7a92bc180b7ca100000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102825f7a92bc180b7ca100000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 05:35:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x3000) (async, rerun: 64) r3 = socket$rds(0x15, 0x5, 0x0) fdatasync(r3) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x2, 0x10000000, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f00000000c0)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000940)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000980)={0x3, r4}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x440001, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/187, 0xbb}], 0x7, 0x1, 0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000940)={0x0, r3}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000980)={0x3, r4}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x440001, 0x0) (async) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/187, 0xbb}], 0x7, 0x1, 0x7) (async) 05:35:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1590.568412][ T3706] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1590.576207][T30029] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1590.588695][ T140] usb 3-1: new high-speed USB device number 40 using dummy_hcd 05:35:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) (async) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000940)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000980)={0x3, r4}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x440001, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/187, 0xbb}], 0x7, 0x1, 0x7) [ 1590.768527][ T3706] usb 6-1: device descriptor read/64, error 18 [ 1590.818455][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1590.828470][ T140] usb 3-1: Using ep0 maxpacket: 16 [ 1590.858827][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1590.868923][ T140] usb 3-1: no configurations [ 1590.873555][ T140] usb 3-1: can't read configurations, error -22 [ 1590.978531][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1590.986276][T30029] usb 4-1: can't read configurations, error -61 [ 1591.028402][ T140] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1591.038584][ T3706] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1591.138440][T30029] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1591.228610][ T3706] usb 6-1: device descriptor read/64, error 18 [ 1591.268446][ T140] usb 3-1: Using ep0 maxpacket: 16 [ 1591.308654][ T140] usb 3-1: no configurations [ 1591.313350][ T140] usb 3-1: can't read configurations, error -22 [ 1591.324560][ T140] usb usb3-port1: attempt power cycle [ 1591.348932][ T3706] usb usb6-port1: attempt power cycle [ 1591.378534][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1591.418550][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1591.538466][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1591.546307][T30029] usb 4-1: can't read configurations, error -61 [ 1591.553215][T30029] usb usb4-port1: attempt power cycle [ 1591.738810][ T140] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1591.758456][ T3706] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1591.828537][ T140] usb 3-1: Using ep0 maxpacket: 16 [ 1591.868880][ T140] usb 3-1: no configurations [ 1591.873772][ T140] usb 3-1: can't read configurations, error -22 [ 1591.928705][ T3706] usb 6-1: device descriptor read/8, error -61 [ 1591.968502][T30029] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1592.028448][ T140] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1592.058566][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1592.098753][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1592.118815][ T140] usb 3-1: Using ep0 maxpacket: 16 [ 1592.160024][ T140] usb 3-1: no configurations [ 1592.164641][ T140] usb 3-1: can't read configurations, error -22 [ 1592.171891][ T140] usb usb3-port1: unable to enumerate USB device [ 1592.208540][ T3706] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1592.218540][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1592.226129][T30029] usb 4-1: can't read configurations, error -61 [ 1592.378689][ T3706] usb 6-1: device descriptor read/8, error -61 [ 1592.384992][T30029] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1592.478805][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1592.508768][ T3706] usb usb6-port1: unable to enumerate USB device [ 1592.518801][T30029] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1592.638442][T30029] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1592.646160][T30029] usb 4-1: can't read configurations, error -61 [ 1592.653207][T30029] usb usb4-port1: unable to enumerate USB device 05:35:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200"], 0x0) 05:35:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x52ad4000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x3, 0xfffffffb, 0x0, &(0x7f00000002c0)=""/50, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102825f7a92bc180b7ca100000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102825f7a92bc180b7ca100000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 05:35:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x52ad4000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x3, 0xfffffffb, 0x0, &(0x7f00000002c0)=""/50, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x52ad4000) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x3, 0xfffffffb, 0x0, &(0x7f00000002c0)=""/50, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:47 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000280)=0xfffffc2b) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x1, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x81, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/79, &(0x7f0000000480)=""/59}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1593.618392][ T3706] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1593.638688][T30029] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1593.651912][T25782] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1593.682536][ T4542] warn_alloc: 1 callbacks suppressed [ 1593.685092][ T4542] syz-executor.1: vmalloc error: size 16384, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1593.732074][ T4542] CPU: 0 PID: 4542 Comm: syz-executor.1 Not tainted 5.17.0-rc3-syzkaller-00020-g555f3d7be91a #0 [ 1593.742531][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.752698][ T4542] Call Trace: [ 1593.756000][ T4542] [ 1593.758946][ T4542] dump_stack_lvl+0xcd/0x134 [ 1593.763564][ T4542] warn_alloc.cold+0x9b/0x189 [ 1593.768273][ T4542] ? zone_watermark_ok_safe+0x290/0x290 [ 1593.773848][ T4542] ? __kmalloc_node+0x62/0x390 [ 1593.778659][ T4542] ? __vmalloc_node_range+0x7bf/0x1060 [ 1593.784145][ T4542] __vmalloc_node_range+0xe1e/0x1060 [ 1593.789480][ T4542] ? vfree_atomic+0xe0/0xe0 [ 1593.794010][ T4542] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1593.799588][ T4542] ? kernel_clone+0xe7/0xab0 [ 1593.804202][ T4542] copy_process+0x926/0x7300 [ 1593.808817][ T4542] ? kernel_clone+0xe7/0xab0 [ 1593.813436][ T4542] ? lock_chain_count+0x20/0x20 [ 1593.818307][ T4542] ? lock_chain_count+0x20/0x20 [ 1593.823184][ T4542] ? find_held_lock+0x2d/0x110 [ 1593.827974][ T4542] ? __cleanup_sighand+0xb0/0xb0 [ 1593.832929][ T4542] ? lock_downgrade+0x6e0/0x6e0 [ 1593.837822][ T4542] ? __lock_acquire+0x1655/0x5470 [ 1593.842878][ T4542] ? kernel_clone+0x314/0xab0 [ 1593.847578][ T4542] kernel_clone+0xe7/0xab0 [ 1593.852022][ T4542] ? create_io_thread+0xf0/0xf0 [ 1593.856895][ T4542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1593.862898][ T4542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1593.868493][ T3706] usb 4-1: Using ep0 maxpacket: 16 [ 1593.868914][ T4542] ? find_held_lock+0x2d/0x110 [ 1593.878767][ T4542] __do_sys_clone+0xc8/0x110 [ 1593.883384][ T4542] ? kernel_clone+0xab0/0xab0 [ 1593.888079][ T4542] ? lock_downgrade+0x6e0/0x6e0 [ 1593.889333][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1593.892965][ T4542] ? syscall_enter_from_user_mode+0x21/0x70 [ 1593.903950][ T4542] do_syscall_64+0x35/0xb0 [ 1593.908392][ T4542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1593.914314][ T4542] RIP: 0033:0x7fdcbc28c481 [ 1593.918680][ T3706] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1593.918743][ T4542] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1593.946048][ T4542] RSP: 002b:00007fdcbc8d1a68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:35:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x52ad4000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x3, 0xfffffffb, 0x0, &(0x7f00000002c0)=""/50, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1593.954486][ T4542] RAX: ffffffffffffffda RBX: 00007fdcbaad7700 RCX: 00007fdcbc28c481 [ 1593.962479][ T4542] RDX: 00007fdcbaad79d0 RSI: 00007fdcbaad72f0 RDI: 00000000003d0f00 [ 1593.970476][ T4542] RBP: 00007fdcbc8d1cb0 R08: 00007fdcbaad7700 R09: 00007fdcbaad7700 [ 1593.978469][ T4542] R10: 00007fdcbaad79d0 R11: 0000000000000206 R12: 00007fdcbc8d1b1e [ 1593.986462][ T4542] R13: 00007fdcbc8d1b1f R14: 00007fdcbaad7300 R15: 0000000000022000 [ 1593.994473][ T4542] [ 1594.007447][ T4542] Mem-Info: [ 1594.009029][T30029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.011624][ T4542] active_anon:654 inactive_anon:140791 isolated_anon:0 [ 1594.011624][ T4542] active_file:4049 inactive_file:7059 isolated_file:0 [ 1594.011624][ T4542] unevictable:768 dirty:0 writeback:0 [ 1594.011624][ T4542] slab_reclaimable:18810 slab_unreclaimable:107866 [ 1594.011624][ T4542] mapped:28159 shmem:6059 pagetables:2321 bounce:0 [ 1594.011624][ T4542] kernel_misc_reclaimable:0 [ 1594.011624][ T4542] free:1321253 free_pcp:4267 free_cma:0 [ 1594.037752][T30029] usb 3-1: config 0 has no interfaces? [ 1594.078773][ T3706] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1594.078777][ T4542] Node 0 active_anon:2608kB inactive_anon:561532kB active_file:16124kB inactive_file:28236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112636kB dirty:0kB writeback:0kB shmem:21160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 208896kB writeback_tmp:0kB kernel_stack:13156kB pagetables:9280kB all_unreclaimable? no [ 1594.089079][ T3706] usb 4-1: can't read configurations, error -61 [ 1594.166416][T25782] usb 6-1: Using ep0 maxpacket: 16 05:35:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x70bd27, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x5, 0xff, 0x4, 0xfe, 0x0, 0x1200}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f0000000500)=""/75, &(0x7f0000000580)=""/103, &(0x7f0000000600)=""/152, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1594.187701][ T4542] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1594.236388][ T4542] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.267518][ T4542] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1594.274381][ T4542] Node 0 DMA32 free:1328400kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2508kB inactive_anon:547104kB active_file:16124kB inactive_file:28236kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716632kB mlocked:0kB bounce:0kB free_pcp:29060kB local_pcp:7016kB free_cma:0kB [ 1594.298799][T30029] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1594.314233][ T3706] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1594.323840][ T4542] lowmem_reserve[]: 0 0 0 0 0 [ 1594.328982][T30029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.349731][T30029] usb 3-1: Product: syz [ 1594.357226][ T4542] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.359963][T30029] usb 3-1: Manufacturer: syz [ 1594.395450][ T4542] lowmem_reserve[]: 0 0 0 0 0 [ 1594.404000][ T4542] Node 1 Normal free:3944112kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:480kB free_cma:0kB [ 1594.415634][T30029] usb 3-1: SerialNumber: syz [ 1594.442155][ T4542] lowmem_reserve[]: 0 0 0 0 0 [ 1594.443271][T30029] usb 3-1: config 0 descriptor?? [ 1594.452638][ T4542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1594.469363][ T4542] Node 0 DMA32: 1133*4kB (UME) 1817*8kB (UME) 964*16kB (UME) 476*32kB (UME) 155*64kB (UME) 63*128kB (UME) 14*256kB (UME) 2*512kB (ME) 1*1024kB (M) 7*2048kB (UM) 304*4096kB (UM) = 1332860kB [ 1594.488810][ T4542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1594.507251][ T4542] Node 1 Normal: 194*4kB (UE) 43*8kB (UME) 37*16kB (UE) 158*32kB (UE) 75*64kB (UME) 21*128kB (UME) 11*256kB (UE) 8*512kB (U) 1*1024kB (U) 3*2048kB (ME) 956*4096kB (M) = 3944112kB [ 1594.525744][ T4542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1594.535936][ T4542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1594.545414][ T4542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1594.556017][ T4542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1594.565406][ T4542] 13365 total pagecache pages [ 1594.568589][ T3706] usb 4-1: Using ep0 maxpacket: 16 [ 1594.572052][ T4542] 0 pages in swap cache [ 1594.579714][ T4542] Swap cache stats: add 0, delete 0, find 0/0 [ 1594.586295][ T4542] Free swap = 0kB [ 1594.590937][ T4542] Total swap = 0kB [ 1594.594832][ T4542] 2097051 pages RAM [ 1594.598703][T25782] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1594.598738][T25782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.598764][T25782] usb 6-1: Product: syz [ 1594.598783][T25782] usb 6-1: Manufacturer: syz [ 1594.598801][T25782] usb 6-1: SerialNumber: syz [ 1594.606152][T25782] usb 6-1: config 0 descriptor?? [ 1594.609819][ T3706] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1594.634885][ T4542] 0 pages HighMem/MovableOnly [ 1594.647098][ T4542] 384548 pages reserved [ 1594.655038][ T4542] 0 pages cma reserved [ 1594.687478][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1594.698060][T27370] usb 3-1: USB disconnect, device number 44 [ 1594.758598][ T3706] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1594.766505][ T3706] usb 4-1: can't read configurations, error -61 [ 1594.773510][ T3706] usb usb4-port1: attempt power cycle 05:35:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200"], 0x0) 05:35:49 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000280)=0xfffffc2b) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (rerun: 32) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 32) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async, rerun: 32) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x1, r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x81, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/79, &(0x7f0000000480)=""/59}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) 05:35:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x70bd27, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x5, 0xff, 0x4, 0xfe, 0x0, 0x1200}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f0000000500)=""/75, &(0x7f0000000580)=""/103, &(0x7f0000000600)=""/152, 0x1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1595.188536][ T3706] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1595.308569][ T3706] usb 4-1: Using ep0 maxpacket: 16 [ 1595.360880][ T3706] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1595.498713][ T3706] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1595.506712][ T3706] usb 4-1: can't read configurations, error -61 [ 1595.568427][T30029] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1595.658605][ T3706] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1595.758654][ T3706] usb 4-1: Using ep0 maxpacket: 16 [ 1595.758878][T25782] gspca_vc032x: reg_w err -71 [ 1595.768689][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.774041][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.779843][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.785186][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.791114][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.796621][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.802622][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.807982][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.808596][ T3706] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 1595.814128][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.821217][T30029] usb 3-1: Using ep0 maxpacket: 16 [ 1595.826768][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.838605][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.844140][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.849576][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.854866][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.860458][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.865733][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.871713][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.877009][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.882567][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1595.887855][T25782] gspca_vc032x: Unknown sensor... [ 1595.893050][T25782] vc032x: probe of 6-1:0.0 failed with error -22 [ 1595.913988][T25782] usb 6-1: USB disconnect, device number 90 [ 1595.968577][T30029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.978827][ T3706] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1595.986478][ T3706] usb 4-1: can't read configurations, error -61 [ 1595.992902][T30029] usb 3-1: config 0 has no interfaces? [ 1595.998647][ T3706] usb usb4-port1: unable to enumerate USB device [ 1596.170118][T30029] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1596.179353][T30029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.187367][T30029] usb 3-1: Product: syz [ 1596.191916][T30029] usb 3-1: Manufacturer: syz [ 1596.196525][T30029] usb 3-1: SerialNumber: syz [ 1596.215154][T30029] usb 3-1: config 0 descriptor?? 05:35:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) 05:35:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x70bd27, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x5, 0xff, 0x4, 0xfe, 0x0, 0x1200}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f0000000500)=""/75, &(0x7f0000000580)=""/103, &(0x7f0000000600)=""/152, 0x1}) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:50 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000280)=0xfffffc2b) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x1, r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x81, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/79, &(0x7f0000000480)=""/59}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000008f6f62d"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x7d}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1596.473392][T30029] usb 3-1: USB disconnect, device number 45 [ 1596.590920][T25782] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1596.718519][T27370] usb 4-1: new high-speed USB device number 35 using dummy_hcd 05:35:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x2220}, {r2, 0x1002}, {r3, 0x7037}, {r4, 0x600}], 0x4, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1596.848523][T25782] usb 6-1: Using ep0 maxpacket: 16 05:35:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x7d}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x2220}, {r2, 0x1002}, {r3, 0x7037}, {r4, 0x600}], 0x4, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) poll(&(0x7f00000002c0)=[{r0, 0x2220}, {r2, 0x1002}, {r3, 0x7037}, {r4, 0x600}], 0x4, 0x2) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:51 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200"], 0x0) [ 1596.995827][T27370] usb 4-1: Using ep0 maxpacket: 16 [ 1597.128761][T25782] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1597.144058][T25782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.156611][T25782] usb 6-1: Product: syz [ 1597.167096][T25782] usb 6-1: Manufacturer: syz [ 1597.183755][T25782] usb 6-1: SerialNumber: syz [ 1597.207466][T25782] usb 6-1: config 0 descriptor?? [ 1597.260693][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1597.318991][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1597.328192][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.336855][T27370] usb 4-1: Product: syz [ 1597.341533][T27370] usb 4-1: Manufacturer: syz [ 1597.346211][T27370] usb 4-1: SerialNumber: syz [ 1597.354225][T27370] usb 4-1: config 0 descriptor?? [ 1597.368438][T25785] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1597.401778][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1597.608479][T25785] usb 3-1: Using ep0 maxpacket: 16 [ 1597.728808][T25785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.739218][T25785] usb 3-1: config 0 has no interfaces? [ 1597.898656][T25785] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1597.907738][T25785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.916373][T25785] usb 3-1: Product: syz [ 1597.920796][T25785] usb 3-1: Manufacturer: syz [ 1597.925386][T25785] usb 3-1: SerialNumber: syz [ 1597.934845][T25785] usb 3-1: config 0 descriptor?? [ 1598.183404][T25785] usb 3-1: USB disconnect, device number 46 [ 1598.428586][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.468527][T27370] gspca_vc032x: reg_w err -71 [ 1598.473459][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.479123][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.484595][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.490985][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.497218][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.502951][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.508535][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.513958][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.519521][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.524946][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.530497][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.535921][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.541466][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.546939][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.552547][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.558039][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.563518][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.569043][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.574510][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1598.579978][T27370] gspca_vc032x: Unknown sensor... [ 1598.585134][T27370] vc032x: probe of 4-1:0.0 failed with error -22 [ 1598.593495][T27370] usb 4-1: USB disconnect, device number 35 05:35:53 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x7d}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x7d}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) (async, rerun: 64) r4 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x2220}, {r2, 0x1002}, {r3, 0x7037}, {r4, 0x600}], 0x4, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:53 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000"], 0x0) 05:35:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000008f6f62d"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1599.311096][T25782] gspca_vc032x: reg_r err -71 [ 1599.316548][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.350775][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.356505][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.362527][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.368038][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.373821][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.379652][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.385093][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.391543][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.397242][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.406807][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.412883][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.419863][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.425360][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.431023][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.436416][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.442291][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.447693][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1599.453377][T25782] gspca_vc032x: Unknown sensor... [ 1599.458923][T25782] vc032x: probe of 6-1:0.0 failed with error -22 [ 1599.474795][T25782] usb 6-1: USB disconnect, device number 91 05:35:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000300)=""/78, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1599.608523][T30029] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1599.628806][ T3706] usb 3-1: new high-speed USB device number 47 using dummy_hcd 05:35:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) write(r3, &(0x7f0000000200)="310d256bf1d6cedc8593be1821ca29ec331b6a647b8c275c40760f1cd66d695d5ac94624a7849480205ca7337b17c386da63ef41b3b57938", 0x38) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000300)=""/78, 0x3000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) [ 1599.888554][T25782] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1599.888569][ T3706] usb 3-1: Using ep0 maxpacket: 16 [ 1599.888682][T30029] usb 4-1: Using ep0 maxpacket: 16 05:35:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0xc, 0x0, [{0x3000, 0x1004, &(0x7f0000004880)=""/4100}, {0x1, 0xbc, &(0x7f00000002c0)=""/188}, {0xd000, 0x1000, &(0x7f0000001600)=""/4096}, {0x2, 0xc8, &(0x7f0000002600)=""/200}, {0x1000, 0x36, &(0x7f0000000200)=""/54}, {0x5000, 0x0, &(0x7f0000001500)}, {0x4, 0x85, &(0x7f0000001500)=""/133}, {0x6000, 0xff5, &(0x7f0000002700)=""/4085}, {0x100000, 0x15, &(0x7f0000003700)=""/21}, {0x3000, 0xa0, &(0x7f0000000500)=""/160}, {0x10000, 0xc2, &(0x7f00000005c0)=""/194}, {0x2, 0xc4, &(0x7f00000006c0)=""/196}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000300)=""/78, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1600.038707][ T3706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.067205][ T3706] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1600.144827][T25782] usb 6-1: Using ep0 maxpacket: 16 [ 1600.222658][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1600.232059][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.241126][T30029] usb 4-1: Product: syz [ 1600.245307][T30029] usb 4-1: Manufacturer: syz [ 1600.250509][T30029] usb 4-1: SerialNumber: syz [ 1600.256675][T30029] usb 4-1: config 0 descriptor?? [ 1600.278701][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1600.287975][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.296944][ T3706] usb 3-1: Product: syz [ 1600.303930][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1600.310112][ T3706] usb 3-1: Manufacturer: syz [ 1600.314725][ T3706] usb 3-1: SerialNumber: syz [ 1600.324471][ T3706] usb 3-1: config 0 descriptor?? [ 1600.428646][T25782] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1600.437727][T25782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.446639][T25782] usb 6-1: Product: syz [ 1600.450918][T25782] usb 6-1: Manufacturer: syz [ 1600.455527][T25782] usb 6-1: SerialNumber: syz [ 1600.467759][T25782] usb 6-1: config 0 descriptor?? [ 1600.513880][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1600.589935][ T3706] usb 3-1: USB disconnect, device number 47 [ 1601.238590][T25782] gspca_vc032x: reg_w err -71 [ 1601.243610][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.249311][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.254745][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.262095][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.267503][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.273046][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.278856][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.284382][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.289887][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.295323][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.300944][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.306405][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.311876][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.317317][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.322997][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.328497][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.333939][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.339364][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.344747][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.350156][T25782] gspca_vc032x: Unknown sensor... [ 1601.355290][T25782] vc032x: probe of 6-1:0.0 failed with error -22 [ 1601.372595][T25782] usb 6-1: USB disconnect, device number 92 [ 1601.378621][T30029] gspca_vc032x: reg_w err -71 [ 1601.383366][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.394952][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.400642][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.405944][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.411946][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.417245][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.422905][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.428184][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.433922][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.439429][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.444711][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.450590][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.455886][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.461532][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.467420][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.473177][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.479187][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.484492][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.489912][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1601.495432][T30029] gspca_vc032x: Unknown sensor... [ 1601.500621][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1601.517498][T30029] usb 4-1: USB disconnect, device number 36 05:35:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x23, {0x23, 0x3, "b9f9fa06d8d005a6efcbf0746fc928ad5e33cdff40a4c25d75f90c58552b08218d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="4007d0000000b9ec7fa6359c7147b34149b730a4e9c3a5a08b843063d120a68e9b5573901f3d2171d50a2b19a6eadcd20dc167f1e0c304d9ab62070cd2f807557e82ec165cae49c7da39c34f600dff12ee7b21e3bb6555cc0687e15b4d1443c7b5af724be66ed35166be75f4a8a940343a7867c76cdc6721ca5f2e4809dc83b66ca555f91b27d6428a6a43874fcc86b35da009772b793ee844d70ada69511ae05a7a8b4cac505e6deae9f2a7939c11a18d136f93ae1cc3fa18ef7f33c77c495b00000000000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x9, 0x5, 0x0, 0x1, 0x8, 0xc704, 0x4ac, 0xda, 0xfff, 0xffff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) write(r3, &(0x7f0000000200)="310d256bf1d6cedc8593be1821ca29ec331b6a647b8c275c40760f1cd66d695d5ac94624a7849480205ca7337b17c386da63ef41b3b57938", 0x38) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0xc, 0x0, [{0x3000, 0x1004, &(0x7f0000004880)=""/4100}, {0x1, 0xbc, &(0x7f00000002c0)=""/188}, {0xd000, 0x1000, &(0x7f0000001600)=""/4096}, {0x2, 0xc8, &(0x7f0000002600)=""/200}, {0x1000, 0x36, &(0x7f0000000200)=""/54}, {0x5000, 0x0, &(0x7f0000001500)}, {0x4, 0x85, &(0x7f0000001500)=""/133}, {0x6000, 0xff5, &(0x7f0000002700)=""/4085}, {0x100000, 0x15, &(0x7f0000003700)=""/21}, {0x3000, 0xa0, &(0x7f0000000500)=""/160}, {0x10000, 0xc2, &(0x7f00000005c0)=""/194}, {0x2, 0xc4, &(0x7f00000006c0)=""/196}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r3 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x66c2, 0x6}) 05:35:55 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000"], 0x0) 05:35:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000008f6f62d"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:35:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0xc, 0x0, [{0x3000, 0x1004, &(0x7f0000004880)=""/4100}, {0x1, 0xbc, &(0x7f00000002c0)=""/188}, {0xd000, 0x1000, &(0x7f0000001600)=""/4096}, {0x2, 0xc8, &(0x7f0000002600)=""/200}, {0x1000, 0x36, &(0x7f0000000200)=""/54}, {0x5000, 0x0, &(0x7f0000001500)}, {0x4, 0x85, &(0x7f0000001500)=""/133}, {0x6000, 0xff5, &(0x7f0000002700)=""/4085}, {0x100000, 0x15, &(0x7f0000003700)=""/21}, {0x3000, 0xa0, &(0x7f0000000500)=""/160}, {0x10000, 0xc2, &(0x7f00000005c0)=""/194}, {0x2, 0xc4, &(0x7f00000006c0)=""/196}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) write(r3, &(0x7f0000000200)="310d256bf1d6cedc8593be1821ca29ec331b6a647b8c275c40760f1cd66d695d5ac94624a7849480205ca7337b17c386da63ef41b3b57938", 0x38) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x3, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async, rerun: 32) utime(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x66c2, 0x6}) (rerun: 32) 05:35:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/56, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000002c0)=r4) [ 1602.038563][T27370] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1602.068633][T25782] usb 6-1: new high-speed USB device number 93 using dummy_hcd 05:35:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async, rerun: 32) utime(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x66c2, 0x6}) [ 1602.238488][T25786] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1602.288420][T27370] usb 3-1: Using ep0 maxpacket: 16 [ 1602.318479][T25782] usb 6-1: Using ep0 maxpacket: 16 [ 1602.440132][T27370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.458430][T27370] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.483829][T25786] usb 4-1: Using ep0 maxpacket: 16 [ 1602.608920][T25782] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1602.620424][T25782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.634623][T25782] usb 6-1: Product: syz [ 1602.639886][T27370] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1602.641523][T25782] usb 6-1: Manufacturer: syz [ 1602.657596][T27370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.658512][T25782] usb 6-1: SerialNumber: syz [ 1602.672626][T27370] usb 3-1: Product: syz [ 1602.687576][T27370] usb 3-1: Manufacturer: syz [ 1602.689355][T25782] usb 6-1: config 0 descriptor?? [ 1602.697138][T27370] usb 3-1: SerialNumber: syz [ 1602.708114][T27370] usb 3-1: config 0 descriptor?? [ 1602.750983][T25782] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1602.768787][T25786] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1602.792102][T25786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.810189][T25786] usb 4-1: Product: syz [ 1602.816930][T25786] usb 4-1: Manufacturer: syz [ 1602.825205][T25786] usb 4-1: SerialNumber: syz [ 1602.843956][T25786] usb 4-1: config 0 descriptor?? [ 1602.890852][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1602.968975][T25785] usb 3-1: USB disconnect, device number 48 [ 1603.408508][T25782] gspca_vc032x: reg_r err -32 [ 1603.414082][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.420578][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.426000][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.431612][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.437226][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.442814][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.448166][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.453832][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.459511][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.464911][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.470749][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.482128][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.487522][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.493039][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.498686][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.504067][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.509751][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.515565][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.520987][T25782] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.526282][T25782] gspca_vc032x: Unknown sensor... [ 1603.531668][T25782] vc032x: probe of 6-1:0.0 failed with error -22 [ 1603.968589][T25786] gspca_vc032x: reg_r err -32 [ 1603.973419][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.979228][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.984532][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.990083][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1603.995378][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.000984][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.006286][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.011800][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.017095][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.022634][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.028681][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.033985][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.039499][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.045102][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.050673][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.055965][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.061625][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.066920][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.072503][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1604.077799][T25786] gspca_vc032x: Unknown sensor... [ 1604.083096][T25786] vc032x: probe of 4-1:0.0 failed with error -22 05:35:58 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x23, {0x23, 0x3, "b9f9fa06d8d005a6efcbf0746fc928ad5e33cdff40a4c25d75f90c58552b08218d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="4007d0000000b9ec7fa6359c7147b34149b730a4e9c3a5a08b843063d120a68e9b5573901f3d2171d50a2b19a6eadcd20dc167f1e0c304d9ab62070cd2f807557e82ec165cae49c7da39c34f600dff12ee7b21e3bb6555cc0687e15b4d1443c7b5af724be66ed35166be75f4a8a940343a7867c76cdc6721ca5f2e4809dc83b66ca555f91b27d6428a6a43874fcc86b35da009772b793ee844d70ada69511ae05a7a8b4cac505e6deae9f2a7939c11a18d136f93ae1cc3fa18ef7f33c77c495b00000000000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x9, 0x5, 0x0, 0x1, 0x8, 0xc704, 0x4ac, 0xda, 0xfff, 0xffff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x23, {0x23, 0x3, "b9f9fa06d8d005a6efcbf0746fc928ad5e33cdff40a4c25d75f90c58552b08218d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="4007d0000000b9ec7fa6359c7147b34149b730a4e9c3a5a08b843063d120a68e9b5573901f3d2171d50a2b19a6eadcd20dc167f1e0c304d9ab62070cd2f807557e82ec165cae49c7da39c34f600dff12ee7b21e3bb6555cc0687e15b4d1443c7b5af724be66ed35166be75f4a8a940343a7867c76cdc6721ca5f2e4809dc83b66ca555f91b27d6428a6a43874fcc86b35da009772b793ee844d70ada69511ae05a7a8b4cac505e6deae9f2a7939c11a18d136f93ae1cc3fa18ef7f33c77c495b00000000000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x9, 0x5, 0x0, 0x1, 0x8, 0xc704, 0x4ac, 0xda, 0xfff, 0xffff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 05:35:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/56, 0x0, 0xd000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000002c0)=r4) 05:35:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x3, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x3, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="ec610e8b600c00751adfb32c7b618251c054fb81d61be78337c22cc1d7f4b7d47ae8c96f282bef33dcecf20000000000000000000000000000007dd70000", @ANYRESOCT=r2, @ANYRESDEC], 0xfffffffffffffe84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pread64(r4, &(0x7f00000002c0)=""/113, 0x71, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:58 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000"], 0x0) [ 1604.794101][T25786] usb 6-1: USB disconnect, device number 93 05:35:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async, rerun: 32) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (rerun: 32) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/56, 0x0, 0xd000}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000002c0)=r4) 05:35:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="ec610e8b600c00751adfb32c7b618251c054fb81d61be78337c22cc1d7f4b7d47ae8c96f282bef33dcecf20000000000000000000000000000007dd70000", @ANYRESOCT=r2, @ANYRESDEC], 0xfffffffffffffe84) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) pread64(r4, &(0x7f00000002c0)=""/113, 0x71, 0x5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:35:59 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080000000000203000100000000000000000000000000003485a8b6e2ed80ffd6f492219ac3251cd486e3ca052588063a225466e0da5d6300428c2e4c57ff815ee57c8b04e3b60b501b618bc1c9f53783a78d8c02e076d882eeddd6cc77504cbe184c1e93800c00a52c892bd8f14d4c81965ddced94"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_connect(0x0, 0x395, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd5, 0xfd, 0x49, 0x8, 0x24c6, 0x8680, 0xb72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x3, 0x7f, 0x0, 0x20, 0x18, [{{0x9, 0x4, 0xa2, 0x85, 0x0, 0xff, 0x47, 0xd0, 0x81}}, {{0x9, 0x4, 0xfd, 0x1, 0xd, 0x3, 0xd0, 0x2, 0x8, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x3, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}, @generic={0xf1, 0xd, "7f033fcac2035b48a6abf7e97cefccaee3f0bfd75f24ff1cbace8c73dab50a0eeac481054c6a7869c166006bb81098ca5744f38fe950a17fcfeec44f0c75de95a9a1e8da302086d7225681f541003a70ac492f294c3a7ffb74a7943b48b1cb4592fa080130f715f9ce957276705bd887efd9c7729d779388be6a2c243f5aba8fb558db96abdf482f85f7c6f33ae94228f4690617da6b8f8b4084b7e9bce5b988952b5c88e53f8c312ef809b9b3abd366e0f2027947143d313bfa4a6c8ad7286062d18ea48ab0008b9a00e0f4be348f245c81d2648937d2609d1028fd280a41af67eb1bc2ecfa65b907c6beddbe9781"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x2, 0x69, [@generic={0x3f, 0x9, "0462986919de33e325bb653d02901bf230425722ae973f278a3195921efe750ba44b1f09e40ed34549a7f97169e291c8857f49d072e5e919d9f88fbf2f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x14, 0x50, 0xfc, 0x3f, 0x1, [@generic={0x2d, 0x2, "2de194d5a4b8462262df16574925b9989a10b59528a7e767486b1ae8408abe28e79321ea793e8f1a2c28e4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x81, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x3f, 0x3f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb, 0xfe, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x51, 0x3f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x5, 0x2}}, {{0x9, 0x5, 0x5a5b77e35a6404c0, 0x1, 0x40, 0x20, 0xdb, 0x5, [@generic={0x57, 0x2, "5b7bdb9da457201792bad202c7c35def14241c8ffb83b3ccb4861cb931e8c31800720c248ca3983f2f854a3b683118eb64e74c8ff25b7ad4d425b45171ed58e9178c1373ddabc0f31cdd5e2502051959c435fca590"}]}}, {{0x9, 0x5, 0xb, 0x11, 0x420, 0x6, 0x2, 0x1}}]}}, {{0x9, 0x4, 0x71, 0x1f, 0x1, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3bb557a2"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x2, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0xe8}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x65, "a5cdbb483f53e7ca898accd6041693579727e6f5e5d16d86c4f9de58aed302b980ae6de10579c57c194507ff55833896b7240df08645a6a7e69ed0ce745a9b5273cb1c74ae3a86231875ce36d88c54e802a23780a7ec750e2ff98dfa1b620ff3f354436d772b6d421fbb96a9185ecfbcf32370146b358159c74a0de13205c2fca25eaf7553f4030a18d576f835b79b4201ab9c4411abff2e8101bb8acdf4e3cab65ab0aacb240c524f32e5e1b55482a24b37ba"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x20, 0x490}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4c43, 0xc7, 0x1f, 0x8, 0x66}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x4, 0x3, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xf4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xfeff}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x1, 0x7, 0x27, 0xff, 0x6}, 0x31, &(0x7f0000000e40)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x8, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0xff, 0xe44}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x6, 0x447}, @generic={0x14, 0x10, 0xa, "ce52135a25091cb937542102c3a6ccac65"}]}, 0x1, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x721, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xde, 0x42, 0xc1, 0xff, 0xb48, 0x1003, 0x4381, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70f, 0x3, 0x9, 0x4, 0x0, 0x7f, [{{0x9, 0x4, 0x5a, 0x20, 0xe, 0x3b, 0x8e, 0x75, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0x1, 0x0, 0x38, 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xa3}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x4, 0x1, 0x2], 0x8d}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x6, 0x9, 0x2, 0x7, 0x9], 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x8, 0x1ff, 0x81, 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0xa, 0x8, 0x3, 0x9, 0x5], 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x81, 0x4, "fbf18220"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x1, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x3f, 0x0, [@generic={0xdc, 0x4, "3833afc909a0c6126cad695e0afe6a20107105cf4ae9e64fd46d21553593be3ef60a7a4f75f77e17ae4b22af5977a14f31109249946b79448c5eda8108dc6350f06affdbb8d785ce2379b56c70f360cb6f0222acd0204154bf978415dd615c6e4c3c468dcb50101026f89b80b68218e6db2bc1cfef0033589a3e43c63e103dcdbe4de6c10eabd4a0fa99dcf79f5c88b2e622148f21a3566a9a47098406c94662bd320adf871dba89f98942305fe665b20765137fe685e16435d2d6f44612e483add0d28a574ea9c2965b289451ce73319988f947cf13c94e1b8d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1f, 0x2d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xed267bad57b91576, 0x8, 0x40, 0x3f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc4, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7e, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x0, 0x2, 0x9, [@generic={0x3e, 0x7, "e713b0ad1357969f675c69cc2903d8e7af4ece661c8c1064912a1f91fd86bf5252b738de53b05817c64fdae3470e8dc2d364d3eaa8d1a831610d708a"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x86, 0x81, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3d7, 0x2, 0x2, 0x0, [@generic={0xb1, 0x1, "c5d756d624e079ffe8f1a8bb370ecf7b459458231d4cc572c6275654e38ac0019d75ec8490bf96c782a1e395dc7fe50c5cec615cfacf162f0ba622e8aec98969ff28e2fd3dae49479a20603984e569e292ed50dcee673c2ed98294acf95536ac795c405e3f9c4838b612b563af3ce23300a3006a79bf6ef7a4709ada747c1c16794270889ebe8bc088eec411ab3cb259d39d30e13a2fb7f5224009d5d01eb97f722706c682327e85525400e4a2a0a8"}, @generic={0x6c, 0x10, "59539c905317b34aec7e3e781a2b22e130b5908b9a7cb08082249c7548f9902eb60b29f78563ca97873336bda4b8a4d7823b1a15bfe44d85d01f7f759c69e2e2a06e95680b4884ea561d1f192c2a6888a1852f3fc2856290c73a5dd057872e6395caa59e27794c498f68"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x20}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xdb, 0x40, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x80, 0x8, 0x3f, [@generic={0x29, 0x0, "0fdb6c06cd2a65ed5e825b0f0e32d99fecd66aa1703e4a5d305760ff89843aaf40012a0be08be6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7b, 0x7f, 0x23}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x81, 0x26, 0x7, [@generic={0x28, 0x3, "ae20f20ad1cd84fc012f6c050f26e2a1debadec8e336f10eb9ec3cc9c8fc42153e28301aff4b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x3e, 0x6, 0xe0, [@generic={0x3d, 0xe, "8bd67e46c0d0774c673752ee65e63d8594fde8ac4cbf0cc50491641218802a6bc32cfbca94c621e83d4f28b89da2143fb5d6efc558a4f91f1524bc"}]}}]}}, {{0x9, 0x4, 0xa4, 0x0, 0x2, 0x8c, 0xc0, 0xc6, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x4, 0x81, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6f, "2aae9569b96a"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0x8, 0x7], 0x8}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x2, 0x0, "08a6bb539f8127999a"}]}], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x0, 0x73, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4c7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x8, 0xfa}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x7, 0x5d, 0xe9, 0x74, 0xfc, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0xff}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0xc, "5931c9"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xff24, 0x1, "0d5b2e040a"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x37d8, 0x8001}, {0x6, 0x24, 0x1a, 0x4, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0xff, 0x3f, 0x80, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x0, 0x20}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe5, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x800}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x200, 0x0, 0x7, 0x4, [@generic={0x7e, 0x1a, "6c6a29e39558862136d414cb1630ff0ef79f37a01ca8598129ced601d6ca62ab279a3027fdf61ed8a6adbb86c3aaa7098acab538a48ea1a46c8cc558eeb1831a79bad6859416a36ef3eb56685bc486bc646684c76b15dec7f87e6740a5105d11411ceeffafe8f9052665562b91a1e502a729e4568553d432ea6fd660"}, @generic={0xc1, 0x9, "4a80f02f8456dfba42ca859af89bc3a23989b32b74fdad4154ee99636ad78ed0c13549c809d8e9d5d781e7ec4007a99880c58277f7ab5a332d197154631acb443f7280a20b91bd282cb0a2a071ecf86fb003a500834578612e6d59013f777cfc0bd84311f6f66168365bcb46bbf092146466a8f616ab40ee45ee91102389087ce97f731d433b8b9fa18cc53fb589fa187e9e080ff805d2fa99a315d1c3e24ccd656a806b3f522ec2fda09ab32690ccde8b6686506c94bf77522f5c7ed38ba8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xa5, 0x20, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x1, 0x6, 0x1, [@generic={0x27, 0x30, "a9e7657a13b8f6aefe5bfb72144ea8b9ac082f49cc3aad0d5e41480fba6bc585e546abe69c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xcd, 0x6, 0x7, [@generic={0xa2, 0x4, "7c0b98435bd2e44c89a0079d5b9b3ded89ce6fad919204f81c94e34bcb9c433cdc2cb7afb9d6ed207dba06afa0b6b3e45977159fc03b3b5019519936ceafce7c6ed95b0b79d32c879079fc030874b485aeebc1ee67a67f86949472fd2c76f0fcaeebf79d135e099ce3ce2613d8eea51d870e5de841b23c72a83d99607be0f52dc46acb6d20558c6cac1fff08bd618752b7cad960bb7626153607ed787001b77f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x100}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6c, 0x13, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x250, 0x9, 0x5, 0x6f, 0x40, 0x7f}, 0x5c, &(0x7f0000001680)={0x5, 0xf, 0x5c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x2, 0xff7b, 0x1f}, @generic={0x17, 0x10, 0xa, "90dc99f3c496388c584c9bad07572f8fc26d183b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0xc3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fb683ecfaf898ed289adce59052d74d7"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x401, 0x1e, 0x4b, [0x3f]}]}, 0x5, [{0xdc, &(0x7f0000001700)=@string={0xdc, 0x3, "53a76d87c2ae3ab1de49091046095d0491bea07cc5d3e11e6b62de8469434123a960631d952c696d86df3c44d01c292fc8fea360c349eefa328f4339a912f8b918180210a288bf41389f454b17a7fefc69d107af7cc64f57b4df35972d3fb82f7f15357aa552f4cb25916e4c143d01d6c6065373b55c961ee0b09c50a156cdb9c5ab74500e7979c955b3b6f8e543a7c790516a0a23c33458534b9496444776eed898c8e9729341891b3a730ac18aa87af27ee584ada33fac553b59c43047f81629c74d9decdb26909c801906627cda2222ecab10e4cde752486c"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f0000001840)=@string={0xf, 0x3, "ad8a96a85d8fe8f34f8b6b3ab8"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x303f}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x97624191853400f7, 0xe, 0x9f, {0x9f, 0xe, "878f6d077cc883fb2f2b806a6babcd345249d2d2204244605471839274d9d916b9b44694b20bce49b8d14ad89fbe5c7382dd342c9db714cf406b96cf191cee2c81e086b3d23582acdf0755a037bb76a853a8b8d376f6e2ed9a4905f2b7819e3b0c0a7d4eb849e8b02b28d8461f6fefc001d135f1a25855c42f65c9b0709aedb75c6449275f2ee9fc0dedacf04e590cfd962c59f2777c007ad6bfea1b19"}}, &(0x7f0000000380)={0x0, 0x3, 0xba, @string={0xba, 0x3, "531f7b9b3cc0d1d888f55df6d855334a036fc87f62198e36e68e63f12c1ee99dc089212f9ed8c544b9733908cae5e07eda0a33c214406aff545b9ef123b49b7817ee8fd4569c3d1b211b0a0a11a919cfa9d9fdc88829252048c6cf91b093af2c06198e4e01e32db55a5057c7ebf297eef4089734bd8df307ff4f66b8a78a9eb2e1b133b79709fd3831802bf9675ef1fb00448afc309c4e0fa06be7930a5fd83742ffa6ba7db5be7403369db0229b02ffccf20c286ef9175b"}}, &(0x7f00000004c0)={0x0, 0xf, 0xb7, {0x5, 0xf, 0xb7, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x401, 0xf00, 0x2c4c, [0xff3fcf, 0x3f30]}, @generic={0x7c, 0x10, 0x4, "b123a4e8a7d6f9c00830e12fddf030237b50d6728edaf3a65daad7271d236840031c1fd89c394b95d3ccf002b504bed539e89d47a422a8c17fcc80179cbaa31ddb2b561d9b019da70fedc7b56aeb0b64be927e61a8c8d553d171266c311be3ef5ac65230ebcda76fea47f8f23c1a7e346f260bd9759e5d2c54"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xd, 0xa7d}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7, 0x1100f, 0x6, [0xc030, 0xff3f00, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x38, 0x2, 0x3, 0x9, "49588d17", "6170d1bf"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x33, 0x17, 0xff, 0x213a, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x16, 0x8b, "a77c3ad6b3be5c31bf3c2f861e50bf6bbb353f599cfc2ea6915e9480642111b8dab38bc6d821b447372bc77fef5bc42cba3c138d328b97ea5f06af3ad02876cd474d4148af900a2ed03d4f4f08e894d47245bc34c467cc2a617130b3c3e959728f1cf7a1be00fe65a6854752984fa252effd853e4517fd37f9ce4092cb15981f789e7e781c17a525e82c01"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "86ba"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'g>'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) [ 1604.962287][ T3706] usb 4-1: USB disconnect, device number 37 05:35:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x3, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x3, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:35:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x8) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="ec610e8b600c00751adfb32c7b618251c054fb81d61be78337c22cc1d7f4b7d47ae8c96f282bef33dcecf20000000000000000000000000000007dd70000", @ANYRESOCT=r2, @ANYRESDEC], 0xfffffffffffffe84) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async, rerun: 32) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) pread64(r4, &(0x7f00000002c0)=""/113, 0x71, 0x5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1605.088666][T25782] usb 3-1: new high-speed USB device number 49 using dummy_hcd 05:35:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000006c0)={0x10000, &(0x7f0000000680), 0x1, r2, 0xa}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000200)="99db824009ac633fcfaa3ef07f7d3cedbc6350098d716df4446c859d0608c97f2d3dcb5588064f6e", 0x28}, {&(0x7f00000002c0)="dec4f5ce1f0be50469db09bfe713b4b20e943fb4d59eea67a3fdadbdfddca6aeb7da18586c7e655a3dd752ad7345543ab6a06ebb9bdd1bda0b9ce81d8af3663bae9293b7bb17db3c31fd323e57c377f986d9b83ff6fd1b1a5c308da30ba855c2", 0x60}, {&(0x7f0000000500)="4638bfbfd9f2f35dcce5b447e032d2f12c56a30007d0abbfeca3998b6ff5c1c536f96de769ec67bb51b01e53478ea0947e0cf1237ae5963989412fe68bc8c15aab48d3c6a24805d9f1823faa9866ec70bc0366fc83d66a89c3630d62bf7338c3fb21c3efc8c406481c3e902b381516097e8822481144a8e5fb138c87ba4698195d1fcdbb64b31332282d55e99ed2ae57c4d06b1e1a2e774f3c7990faf1486adcbd8f", 0xa2}, {&(0x7f0000000340)="cda3e64860136e77a295f3799a09e2b0a0f06ae76962390dce1ea70533", 0x1d}], 0x5, 0x5) 05:35:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1605.228535][T25786] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1605.328595][T25782] usb 3-1: Using ep0 maxpacket: 16 [ 1605.438744][ T3706] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1605.448690][T25782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.460269][T25782] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1605.478443][T25786] usb 6-1: Using ep0 maxpacket: 16 [ 1605.630016][T25782] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1605.639470][T25782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.647482][T25782] usb 3-1: Product: syz [ 1605.648615][ T3706] usb 4-1: device descriptor read/64, error 18 [ 1605.651906][T25782] usb 3-1: Manufacturer: syz [ 1605.662925][T25782] usb 3-1: SerialNumber: syz [ 1605.670458][T25782] usb 3-1: config 0 descriptor?? [ 1605.758616][T25786] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1605.768149][T25786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.776633][T25786] usb 6-1: Product: syz [ 1605.780877][T25786] usb 6-1: Manufacturer: syz [ 1605.785514][T25786] usb 6-1: SerialNumber: syz [ 1605.799139][T25786] usb 6-1: config 0 descriptor?? [ 1605.841983][T25786] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1605.913023][T27370] usb 3-1: USB disconnect, device number 49 [ 1605.938560][ T3706] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1606.138473][ T3706] usb 4-1: device descriptor read/64, error 18 [ 1606.268694][ T3706] usb usb4-port1: attempt power cycle [ 1606.488532][T25786] gspca_vc032x: reg_r err -32 [ 1606.493375][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.498999][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.504475][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.510062][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.515464][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.520980][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.526388][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.531945][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.537483][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.542989][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.548517][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.553956][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.559397][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.564798][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.570392][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.575766][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.581208][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.587177][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.592552][T25786] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.597847][T25786] gspca_vc032x: Unknown sensor... [ 1606.603182][T25786] vc032x: probe of 6-1:0.0 failed with error -22 [ 1606.688626][ T3706] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1606.778586][ T3706] usb 4-1: Invalid ep0 maxpacket: 0 [ 1606.928486][ T3706] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1607.038532][ T3706] usb 4-1: Invalid ep0 maxpacket: 0 [ 1607.043907][ T3706] usb usb4-port1: unable to enumerate USB device [ 1607.079564][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.085906][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 05:36:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x23, {0x23, 0x3, "b9f9fa06d8d005a6efcbf0746fc928ad5e33cdff40a4c25d75f90c58552b08218d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="4007d0000000b9ec7fa6359c7147b34149b730a4e9c3a5a08b843063d120a68e9b5573901f3d2171d50a2b19a6eadcd20dc167f1e0c304d9ab62070cd2f807557e82ec165cae49c7da39c34f600dff12ee7b21e3bb6555cc0687e15b4d1443c7b5af724be66ed35166be75f4a8a940343a7867c76cdc6721ca5f2e4809dc83b66ca555f91b27d6428a6a43874fcc86b35da009772b793ee844d70ada69511ae05a7a8b4cac505e6deae9f2a7939c11a18d136f93ae1cc3fa18ef7f33c77c495b00000000000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x9, 0x5, 0x0, 0x1, 0x8, 0xc704, 0x4ac, 0xda, 0xfff, 0xffff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000006c0)={0x10000, &(0x7f0000000680), 0x1, r2, 0xa}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000200)="99db824009ac633fcfaa3ef07f7d3cedbc6350098d716df4446c859d0608c97f2d3dcb5588064f6e", 0x28}, {&(0x7f00000002c0)="dec4f5ce1f0be50469db09bfe713b4b20e943fb4d59eea67a3fdadbdfddca6aeb7da18586c7e655a3dd752ad7345543ab6a06ebb9bdd1bda0b9ce81d8af3663bae9293b7bb17db3c31fd323e57c377f986d9b83ff6fd1b1a5c308da30ba855c2", 0x60}, {&(0x7f0000000500)="4638bfbfd9f2f35dcce5b447e032d2f12c56a30007d0abbfeca3998b6ff5c1c536f96de769ec67bb51b01e53478ea0947e0cf1237ae5963989412fe68bc8c15aab48d3c6a24805d9f1823faa9866ec70bc0366fc83d66a89c3630d62bf7338c3fb21c3efc8c406481c3e902b381516097e8822481144a8e5fb138c87ba4698195d1fcdbb64b31332282d55e99ed2ae57c4d06b1e1a2e774f3c7990faf1486adcbd8f", 0xa2}, {&(0x7f0000000340)="cda3e64860136e77a295f3799a09e2b0a0f06ae76962390dce1ea70533", 0x1d}], 0x5, 0x5) 05:36:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001500)={0x3, 0x0, [{0xf004, 0x3a, &(0x7f0000000200)=""/58}, {0xf000, 0x4e, &(0x7f00000002c0)=""/78}, {0x5000, 0x1000, &(0x7f0000000500)=""/4096}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(r3, &(0x7f0000001600)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000340)={0x2, r2}) 05:36:01 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200010000000009"], 0x0) [ 1607.178678][ T4891] UDC core: couldn't find an available UDC or it's busy: -16 [ 1607.187165][ T4891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1607.208507][ T3706] usb 6-1: USB disconnect, device number 94 05:36:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async, rerun: 64) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000006c0)={0x10000, &(0x7f0000000680), 0x1, r2, 0xa}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000200)="99db824009ac633fcfaa3ef07f7d3cedbc6350098d716df4446c859d0608c97f2d3dcb5588064f6e", 0x28}, {&(0x7f00000002c0)="dec4f5ce1f0be50469db09bfe713b4b20e943fb4d59eea67a3fdadbdfddca6aeb7da18586c7e655a3dd752ad7345543ab6a06ebb9bdd1bda0b9ce81d8af3663bae9293b7bb17db3c31fd323e57c377f986d9b83ff6fd1b1a5c308da30ba855c2", 0x60}, {&(0x7f0000000500)="4638bfbfd9f2f35dcce5b447e032d2f12c56a30007d0abbfeca3998b6ff5c1c536f96de769ec67bb51b01e53478ea0947e0cf1237ae5963989412fe68bc8c15aab48d3c6a24805d9f1823faa9866ec70bc0366fc83d66a89c3630d62bf7338c3fb21c3efc8c406481c3e902b381516097e8822481144a8e5fb138c87ba4698195d1fcdbb64b31332282d55e99ed2ae57c4d06b1e1a2e774f3c7990faf1486adcbd8f", 0xa2}, {&(0x7f0000000340)="cda3e64860136e77a295f3799a09e2b0a0f06ae76962390dce1ea70533", 0x1d}], 0x5, 0x5) [ 1607.518463][T25786] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1607.688442][ T3706] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1607.758450][T25786] usb 3-1: Using ep0 maxpacket: 16 [ 1607.878641][T25786] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1607.938464][ T3706] usb 6-1: Using ep0 maxpacket: 16 05:36:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080000000000203000100000000000000000000000000003485a8b6e2ed80ffd6f492219ac3251cd486e3ca052588063a225466e0da5d6300428c2e4c57ff815ee57c8b04e3b60b501b618bc1c9f53783a78d8c02e076d882eeddd6cc77504cbe184c1e93800c00a52c892bd8f14d4c81965ddced94"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x395, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd5, 0xfd, 0x49, 0x8, 0x24c6, 0x8680, 0xb72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x3, 0x7f, 0x0, 0x20, 0x18, [{{0x9, 0x4, 0xa2, 0x85, 0x0, 0xff, 0x47, 0xd0, 0x81}}, {{0x9, 0x4, 0xfd, 0x1, 0xd, 0x3, 0xd0, 0x2, 0x8, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x3, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}, @generic={0xf1, 0xd, "7f033fcac2035b48a6abf7e97cefccaee3f0bfd75f24ff1cbace8c73dab50a0eeac481054c6a7869c166006bb81098ca5744f38fe950a17fcfeec44f0c75de95a9a1e8da302086d7225681f541003a70ac492f294c3a7ffb74a7943b48b1cb4592fa080130f715f9ce957276705bd887efd9c7729d779388be6a2c243f5aba8fb558db96abdf482f85f7c6f33ae94228f4690617da6b8f8b4084b7e9bce5b988952b5c88e53f8c312ef809b9b3abd366e0f2027947143d313bfa4a6c8ad7286062d18ea48ab0008b9a00e0f4be348f245c81d2648937d2609d1028fd280a41af67eb1bc2ecfa65b907c6beddbe9781"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x2, 0x69, [@generic={0x3f, 0x9, "0462986919de33e325bb653d02901bf230425722ae973f278a3195921efe750ba44b1f09e40ed34549a7f97169e291c8857f49d072e5e919d9f88fbf2f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x14, 0x50, 0xfc, 0x3f, 0x1, [@generic={0x2d, 0x2, "2de194d5a4b8462262df16574925b9989a10b59528a7e767486b1ae8408abe28e79321ea793e8f1a2c28e4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x81, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x3f, 0x3f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb, 0xfe, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x51, 0x3f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x5, 0x2}}, {{0x9, 0x5, 0x5a5b77e35a6404c0, 0x1, 0x40, 0x20, 0xdb, 0x5, [@generic={0x57, 0x2, "5b7bdb9da457201792bad202c7c35def14241c8ffb83b3ccb4861cb931e8c31800720c248ca3983f2f854a3b683118eb64e74c8ff25b7ad4d425b45171ed58e9178c1373ddabc0f31cdd5e2502051959c435fca590"}]}}, {{0x9, 0x5, 0xb, 0x11, 0x420, 0x6, 0x2, 0x1}}]}}, {{0x9, 0x4, 0x71, 0x1f, 0x1, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3bb557a2"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x2, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0xe8}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x65, "a5cdbb483f53e7ca898accd6041693579727e6f5e5d16d86c4f9de58aed302b980ae6de10579c57c194507ff55833896b7240df08645a6a7e69ed0ce745a9b5273cb1c74ae3a86231875ce36d88c54e802a23780a7ec750e2ff98dfa1b620ff3f354436d772b6d421fbb96a9185ecfbcf32370146b358159c74a0de13205c2fca25eaf7553f4030a18d576f835b79b4201ab9c4411abff2e8101bb8acdf4e3cab65ab0aacb240c524f32e5e1b55482a24b37ba"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x20, 0x490}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4c43, 0xc7, 0x1f, 0x8, 0x66}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x4, 0x3, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xf4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xfeff}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x1, 0x7, 0x27, 0xff, 0x6}, 0x31, &(0x7f0000000e40)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x8, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0xff, 0xe44}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x6, 0x447}, @generic={0x14, 0x10, 0xa, "ce52135a25091cb937542102c3a6ccac65"}]}, 0x1, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x721, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xde, 0x42, 0xc1, 0xff, 0xb48, 0x1003, 0x4381, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70f, 0x3, 0x9, 0x4, 0x0, 0x7f, [{{0x9, 0x4, 0x5a, 0x20, 0xe, 0x3b, 0x8e, 0x75, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0x1, 0x0, 0x38, 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xa3}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x4, 0x1, 0x2], 0x8d}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x6, 0x9, 0x2, 0x7, 0x9], 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x8, 0x1ff, 0x81, 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0xa, 0x8, 0x3, 0x9, 0x5], 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x81, 0x4, "fbf18220"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x1, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x3f, 0x0, [@generic={0xdc, 0x4, "3833afc909a0c6126cad695e0afe6a20107105cf4ae9e64fd46d21553593be3ef60a7a4f75f77e17ae4b22af5977a14f31109249946b79448c5eda8108dc6350f06affdbb8d785ce2379b56c70f360cb6f0222acd0204154bf978415dd615c6e4c3c468dcb50101026f89b80b68218e6db2bc1cfef0033589a3e43c63e103dcdbe4de6c10eabd4a0fa99dcf79f5c88b2e622148f21a3566a9a47098406c94662bd320adf871dba89f98942305fe665b20765137fe685e16435d2d6f44612e483add0d28a574ea9c2965b289451ce73319988f947cf13c94e1b8d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1f, 0x2d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xed267bad57b91576, 0x8, 0x40, 0x3f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc4, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7e, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x0, 0x2, 0x9, [@generic={0x3e, 0x7, "e713b0ad1357969f675c69cc2903d8e7af4ece661c8c1064912a1f91fd86bf5252b738de53b05817c64fdae3470e8dc2d364d3eaa8d1a831610d708a"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x86, 0x81, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3d7, 0x2, 0x2, 0x0, [@generic={0xb1, 0x1, "c5d756d624e079ffe8f1a8bb370ecf7b459458231d4cc572c6275654e38ac0019d75ec8490bf96c782a1e395dc7fe50c5cec615cfacf162f0ba622e8aec98969ff28e2fd3dae49479a20603984e569e292ed50dcee673c2ed98294acf95536ac795c405e3f9c4838b612b563af3ce23300a3006a79bf6ef7a4709ada747c1c16794270889ebe8bc088eec411ab3cb259d39d30e13a2fb7f5224009d5d01eb97f722706c682327e85525400e4a2a0a8"}, @generic={0x6c, 0x10, "59539c905317b34aec7e3e781a2b22e130b5908b9a7cb08082249c7548f9902eb60b29f78563ca97873336bda4b8a4d7823b1a15bfe44d85d01f7f759c69e2e2a06e95680b4884ea561d1f192c2a6888a1852f3fc2856290c73a5dd057872e6395caa59e27794c498f68"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x20}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xdb, 0x40, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x80, 0x8, 0x3f, [@generic={0x29, 0x0, "0fdb6c06cd2a65ed5e825b0f0e32d99fecd66aa1703e4a5d305760ff89843aaf40012a0be08be6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7b, 0x7f, 0x23}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x81, 0x26, 0x7, [@generic={0x28, 0x3, "ae20f20ad1cd84fc012f6c050f26e2a1debadec8e336f10eb9ec3cc9c8fc42153e28301aff4b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x3e, 0x6, 0xe0, [@generic={0x3d, 0xe, "8bd67e46c0d0774c673752ee65e63d8594fde8ac4cbf0cc50491641218802a6bc32cfbca94c621e83d4f28b89da2143fb5d6efc558a4f91f1524bc"}]}}]}}, {{0x9, 0x4, 0xa4, 0x0, 0x2, 0x8c, 0xc0, 0xc6, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x4, 0x81, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6f, "2aae9569b96a"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0x8, 0x7], 0x8}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x2, 0x0, "08a6bb539f8127999a"}]}], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x0, 0x73, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4c7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x8, 0xfa}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x7, 0x5d, 0xe9, 0x74, 0xfc, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0xff}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0xc, "5931c9"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xff24, 0x1, "0d5b2e040a"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x37d8, 0x8001}, {0x6, 0x24, 0x1a, 0x4, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0xff, 0x3f, 0x80, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x0, 0x20}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe5, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x800}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x200, 0x0, 0x7, 0x4, [@generic={0x7e, 0x1a, "6c6a29e39558862136d414cb1630ff0ef79f37a01ca8598129ced601d6ca62ab279a3027fdf61ed8a6adbb86c3aaa7098acab538a48ea1a46c8cc558eeb1831a79bad6859416a36ef3eb56685bc486bc646684c76b15dec7f87e6740a5105d11411ceeffafe8f9052665562b91a1e502a729e4568553d432ea6fd660"}, @generic={0xc1, 0x9, "4a80f02f8456dfba42ca859af89bc3a23989b32b74fdad4154ee99636ad78ed0c13549c809d8e9d5d781e7ec4007a99880c58277f7ab5a332d197154631acb443f7280a20b91bd282cb0a2a071ecf86fb003a500834578612e6d59013f777cfc0bd84311f6f66168365bcb46bbf092146466a8f616ab40ee45ee91102389087ce97f731d433b8b9fa18cc53fb589fa187e9e080ff805d2fa99a315d1c3e24ccd656a806b3f522ec2fda09ab32690ccde8b6686506c94bf77522f5c7ed38ba8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xa5, 0x20, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x1, 0x6, 0x1, [@generic={0x27, 0x30, "a9e7657a13b8f6aefe5bfb72144ea8b9ac082f49cc3aad0d5e41480fba6bc585e546abe69c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xcd, 0x6, 0x7, [@generic={0xa2, 0x4, "7c0b98435bd2e44c89a0079d5b9b3ded89ce6fad919204f81c94e34bcb9c433cdc2cb7afb9d6ed207dba06afa0b6b3e45977159fc03b3b5019519936ceafce7c6ed95b0b79d32c879079fc030874b485aeebc1ee67a67f86949472fd2c76f0fcaeebf79d135e099ce3ce2613d8eea51d870e5de841b23c72a83d99607be0f52dc46acb6d20558c6cac1fff08bd618752b7cad960bb7626153607ed787001b77f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x100}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6c, 0x13, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x250, 0x9, 0x5, 0x6f, 0x40, 0x7f}, 0x5c, &(0x7f0000001680)={0x5, 0xf, 0x5c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x2, 0xff7b, 0x1f}, @generic={0x17, 0x10, 0xa, "90dc99f3c496388c584c9bad07572f8fc26d183b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0xc3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fb683ecfaf898ed289adce59052d74d7"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x401, 0x1e, 0x4b, [0x3f]}]}, 0x5, [{0xdc, &(0x7f0000001700)=@string={0xdc, 0x3, "53a76d87c2ae3ab1de49091046095d0491bea07cc5d3e11e6b62de8469434123a960631d952c696d86df3c44d01c292fc8fea360c349eefa328f4339a912f8b918180210a288bf41389f454b17a7fefc69d107af7cc64f57b4df35972d3fb82f7f15357aa552f4cb25916e4c143d01d6c6065373b55c961ee0b09c50a156cdb9c5ab74500e7979c955b3b6f8e543a7c790516a0a23c33458534b9496444776eed898c8e9729341891b3a730ac18aa87af27ee584ada33fac553b59c43047f81629c74d9decdb26909c801906627cda2222ecab10e4cde752486c"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f0000001840)=@string={0xf, 0x3, "ad8a96a85d8fe8f34f8b6b3ab8"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x303f}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x97624191853400f7, 0xe, 0x9f, {0x9f, 0xe, "878f6d077cc883fb2f2b806a6babcd345249d2d2204244605471839274d9d916b9b44694b20bce49b8d14ad89fbe5c7382dd342c9db714cf406b96cf191cee2c81e086b3d23582acdf0755a037bb76a853a8b8d376f6e2ed9a4905f2b7819e3b0c0a7d4eb849e8b02b28d8461f6fefc001d135f1a25855c42f65c9b0709aedb75c6449275f2ee9fc0dedacf04e590cfd962c59f2777c007ad6bfea1b19"}}, &(0x7f0000000380)={0x0, 0x3, 0xba, @string={0xba, 0x3, "531f7b9b3cc0d1d888f55df6d855334a036fc87f62198e36e68e63f12c1ee99dc089212f9ed8c544b9733908cae5e07eda0a33c214406aff545b9ef123b49b7817ee8fd4569c3d1b211b0a0a11a919cfa9d9fdc88829252048c6cf91b093af2c06198e4e01e32db55a5057c7ebf297eef4089734bd8df307ff4f66b8a78a9eb2e1b133b79709fd3831802bf9675ef1fb00448afc309c4e0fa06be7930a5fd83742ffa6ba7db5be7403369db0229b02ffccf20c286ef9175b"}}, &(0x7f00000004c0)={0x0, 0xf, 0xb7, {0x5, 0xf, 0xb7, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x401, 0xf00, 0x2c4c, [0xff3fcf, 0x3f30]}, @generic={0x7c, 0x10, 0x4, "b123a4e8a7d6f9c00830e12fddf030237b50d6728edaf3a65daad7271d236840031c1fd89c394b95d3ccf002b504bed539e89d47a422a8c17fcc80179cbaa31ddb2b561d9b019da70fedc7b56aeb0b64be927e61a8c8d553d171266c311be3ef5ac65230ebcda76fea47f8f23c1a7e346f260bd9759e5d2c54"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xd, 0xa7d}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7, 0x1100f, 0x6, [0xc030, 0xff3f00, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x38, 0x2, 0x3, 0x9, "49588d17", "6170d1bf"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x33, 0x17, 0xff, 0x213a, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x16, 0x8b, "a77c3ad6b3be5c31bf3c2f861e50bf6bbb353f599cfc2ea6915e9480642111b8dab38bc6d821b447372bc77fef5bc42cba3c138d328b97ea5f06af3ad02876cd474d4148af900a2ed03d4f4f08e894d47245bc34c467cc2a617130b3c3e959728f1cf7a1be00fe65a6854752984fa252effd853e4517fd37f9ce4092cb15981f789e7e781c17a525e82c01"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "86ba"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'g>'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) 05:36:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001500)={0x3, 0x0, [{0xf004, 0x3a, &(0x7f0000000200)=""/58}, {0xf000, 0x4e, &(0x7f00000002c0)=""/78}, {0x5000, 0x1000, &(0x7f0000000500)=""/4096}]}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(r3, &(0x7f0000001600)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000340)={0x2, r2}) 05:36:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="66eb1a65dcd4079b7eb2e16b4f5751d6ea756d009f7e358903e26fe0c4ccf093e9b7391567b724c12d87396991625878471f906f3fd7d86b764b11b7beaaab3b243dede9afb8a91f387e3ac3e439815f134413fca6a7e1f1e3ff60c9079183bcd30ebad939e7515949f41e072cf6", 0x6e}, {&(0x7f0000000500)="69a5bbc74d3d343dbf567727ad551c78113cf8e47bb1e844e78d19dc25dd86d8c10c54b9065463cf9f0fb58ee670fdb4d48979e9dc8fb901f6c8d9bff63da0f4b755a006048f31595774855a0b21375d430cb12512a534c2dad4c43e3b5b1c1bd9ea4266aff3227998", 0x69}], 0x2, 0x1, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1d000, 0x1000, &(0x7f0000000500)=""/4096}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000001600)="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", 0x1000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000340)='./file0\x00', 0x6c046324c693e6ea, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 1608.038782][T25786] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1608.047868][T25786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.089687][T25786] usb 3-1: Product: syz [ 1608.104229][T25786] usb 3-1: Manufacturer: syz [ 1608.122735][T25786] usb 3-1: SerialNumber: syz [ 1608.142310][T25786] usb 3-1: config 0 descriptor?? 05:36:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1d000, 0x1000, &(0x7f0000000500)=""/4096}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000001600)="0422513bf73970c2c0e4ad081596e77f4a84ed6d43643a2e1339d7bba47827d17bdae964ecfa404dd99489f3c040d9272e4db41a7a04cb406809b5bd170b1b234de2ed6c85809abd965a5f27a564a32132a5d7aa505aad679c844cbc103f38f05308180630eb15b6ec27277389e428472142edc1d0fda8633ce814df681eed9848453e596afc94247c061c309b24c83d59404f07b6d83ade70a2e199df9be500b09dc41060aa1441f4e9cf85e6f9d995b3b0ea0b92f467079867e36fede58e94f7d872884b8857042927454a94a8a8f845da347254408e013172a971a3d0cf1765b04867f04e996b6c005162361f6a4e51f504f86243db4f545ccaa9ceb1c0a029acc1fe543afa028e844a73aac5f020c998f1bc1886dc9ff8a57fa7af3157e30c53af55ccbb87941a49c2587aa640359c2e225a86d45413e3b680c621a6778c18029d62227d2248e0fd395f40fc56b887497d70449a5c30c8e12f2e97d88e375f93f3e0f89d05f8f80b8e946f97e80e6a0e06d4c344eb294aad69f17dcaf79397c044dc27d0ad5c86f8c70223ee2996a757ededa6e195fc6421316929eca37eac5f2901b0a834c3f66e95edc551f2c1530c79d4585410b06056e9a0cef457f61207e2a27724872fe2a9a9b1acde4567adbdab7af43fbcf6669c8c4cbc9711028078326296b20d0f8e17bebd539852289e8eb17901bac20bacca8cb2520fc88129daf188730492c0b6c3da5b2f3bd960bb1bbce8e3599c1418a576885b610d95d21d298412939a84923b5c3e3f9cff0dbaa36f1ebed9ef14c5d5c66133dfa2df97cd24866491903473e0f0b5672ce5e12d070296ebb5ef9460c84ae64543de5adbd88474a9b55d1d1576e945c57e58d8bc4c00364433cb1931cfc6320d966864e95473f3cf0492c5bdd3a12a3256f225e04bdbbee1f21016653cb5df0d3e12767995c4736d409f2b57c449d7cecd0ed62483097a5c5e0fd048432ba62dfe4146c96c13aac06e0bfdd887ca7284f63c7939ffc8b39f1f88c317f78911d099768dadec161676896338fc83cd287184d46a43d07fe93ad1917db16fb19e59399802c5639f112316fcb6f47c5072ab2ba57b3214e6837ddb0b2b279933c740bdcfd0392da308713b5ec53c5ef00b3103595370078f7dc4a095ccf63cac000e0fb365bd030a606d57455b141637fc809d2df3d59bc586c93fe0e4913d89be6727cd0e8eef0656d1e5b87d18aa3bf5ab3564a8f3cd959dfb865556c3941d99761c62652c6ba2ccf1ccc8e562f42740d94dcc05920caef9c72318757b3e9ac2d0a9e30b287eaefe3c043bf0139e9cf6db63f69abff705090eca71680d86f2e0af5c056d6a18630217615607dbd6d79b3d150cac54d041d7eeab9755ab4178473d7c8ad3397ddcf0834d7b0ebbdff9ac00fa301ee49bdabcf80c85c85a2eecf615140380c96cd12f916f9488ec475d76ef4bfaec0f3f38f76534c65c0ddd1c1e670222b78314b65da7040aeed4d04bdfa585247d8de5a798482d31c461c8aaaca24206d9cba36a2530d1af24e3b5f9ff98613752f46f7c0c1a2f62f126a1c8890c481f56cec724398b5c0097a86b98b9fa408888294bd7e9af6dfad0238f339756b9cb36c51c51a731950ae79120d35d3576291d089b8a60a6e0e08eba28565b1f7b2d63d2b692128a57588b566cf401efb58b11122a1599b32b989bb85e84e139babed172446cafbf6ce887def7cbb75e0834c1ba6a4ea836e27a88d7a209e431a57af601c7c410db817155294c6bab9e2fa26b1f143cbde39364e14a71be06ea1270aab3a90e47fd9738dc8ca306bac423eb2804d2e62d8da03fdccb18ed8a743191c45823e9f86570319fe3d750a115a47b5bb74cc7557c2fc821e55de21c791c12d26aa3fb1e21ac662e472ff11b3077ac49a94a8ca5f7c14f6194945352393163fdb593809f2216e5576d761374b5b1c4516ab44ba11497872730db33d976c910c2b6cd5349240e32362e139a649ab00c3b3e559a1648c66101243e20e26ce9dce72013fcf7b8eb3cf4a4f224d6f94d6f02fe983d5c526b3ceac8e02b5b29bdc419001880e67f6ba9b045f45330169d62b19f08e1673514c2ab1bfc9042d4c06d612d5c374074fec8dd7dffe2e232fdaa0c02b0c08b34f3f7ec93c30f3c54813acae9cd1278c11e83787fe6679a69e1ac30a1b8b21d126f0045637f83b517c990554068d5fe8fe4a81bb3a2b32aa081dde69499fad8a4fdc6dde05c1e8d1d9f78b5d9933c4aa3f83e8301de09e316a93af76d4460f32ba674c15c3425063034f876b67b7a1d148b493ba8f10b429e341d733dee8be6d4e973f23589957b76d76947662111f3a61e855bf87bbbd95f9b469ea75e669c7756d294ffd9bf3ca6a089d7dea87acae8f8eb45b61d3db943a33cd1569c1f16261add62956d7c301f19a43dc923d1c9b95302e4556199259bb145ee65d8013053793ccc3f788baae9e2d427cef0b013fc40fc54cbef5ac6b8fdde75fcb8bdde21558c8305d35b025e5f607cc395c24be38c7e4d5987c4fff2e0924cf5fe67c6a459b93cd604c7a15428b31f750d687189faf6df3c2f36e2bd4b8b4bc08f100be10a6c80bdbc87e4cf1a77dead58aad5591552ef2a4c07bdbcc00b97ca16511fde07d988f4c0e5f4f58653eda07c8c5e8b6382006462efea291b5cfc499da908be54681553967b807430f8769627e6f057058856c9852bab1ff23320932e778e236e406bb9db9735f5726db041a37c8748de841ac3f0f4f0b353ea33226a4d728c37597fda0a7077eba7a1f264d73c412d0c724bd9a9e131e2e46b0ff114c5e560407a32c0893a0feeac74fcbcb821263e85b06ae0d9dc265af51d127d6806f9d95e422092ebd1c6af95e4fe88f8af75ca5d4a31752aaa5550cd625f1401f115b72076462d84e3eebcb6fa926476e5e6314d0afe312935de3eb7d9522856749d854ca512dccd710aa32bacb9a8f8d0850aa9e7e97fa09ebae17a27798e6ee4dec85102e5b339885c3ef68bf465dd8e133d617f596f5c5a4ed5a2b7f5a653999ecd8ba9e57fe81806b4ba709d641e9b39ed666f1bb807c01b0151168c1090ff8bed1ee369b3e813484b97a80cb4d0781a8661f2414ac2beadde2f69dbf5a296a82ebc9fe14ee9f62425abc9a0af9d8861fdd6730270e54c0fab091adee0f0be102ba0fea7d56f2458094b2bd23003076b04e69c73ae7b629aaa354b1b5a2255987c111aaf43a01683c6e4cdfcbaf732eef1c4a3f83ed0a5146aec663b9ba80fd690a7c0e09ef25ac96ef40a2c82e5caaa68ba04cca8c6a97f9f02a55f6b66a638606d1a4977bdd31ec013dfa742d86971de81a0710136932a0881a0a97165d6f1db962dedbddaa2fc1a42f7ea0e51bac86a469e5b6d78397a3cd14380f3cda3336cf79e555e36fdaf7688c12c020ec42399c36be614b6cad6524005302c752a7c4359e72dd740eb90357930c3e5ba6659a1400e0db6baa5cf09562f722205ef57215feae7012fb6b434321d0a578100220bb1bc04433ed3204082a8133d59a646b565ebc799eb65c13fa37fb005c7e01616b3f7c82d001a434a3c6cbf00a7912bda4551554e45b0580c18e68cbed7aa9d76012cdea03891cad7b018f067086abe264b447d02af4790bb0bdecb13d8ea3de202f3998980233daeda04fc4147cb2aebe3ecc455e3d6972c14fe61188c8de5be10d8fa2354e32e14de255c1049d243d020a1335dd2fc43bfed7f29a221dba14f25c8a317672ff2ca7ca10beb006771e8e18dccdf5166f5313664a8f6d9b3d58077f6cf7f93153c6650dbea8377ac4a6f3ed547b386c16d01fff9ae29fcfa34262b4366cd76facd0a5cf3bf32c9982eaaa326c1473f17e4c6944b944fb1182db8a0b959435c7e8c56eb28c35df11fcdadb5973cec5c4487dbb01f0c32d89293ad2581a3ce5907671255308f410552ce34fa1daab1404965dbf248208f79c2178ccc869b180df38f8775f3db2f557fd85916e27ac7975db676a051c78eef696794994eb4634fbef399d5eabebbd1e915dee1aac808aed82c88d9ac34ff49b3cf1087569b40b87d81cd772f58846d250af7d9c01c9a39d7aa12e2dbe0544238c3087318e00302e6672f26281bd2b2f76b491005679572319ee7d5a924f1b5abd02becad359289d006f8d696cf0e9d1114439ac16d8c53b2d54f45f81ec3ede98acc10afd67d46b0c9eea2a86b13ffeed6cb531800417073141001470211ec91037549ff933980ba53b609143f61f2e4852557f61790410bf41418172bd22214b891189bacf2b73296c7e0e14c815c54d6ec945358e3baea3ce043191549a75ff40e4207d365571052bc0a656b257fd0e37776b388cacec127c2a4804a5c2f778b8a161a25b99ab79d381eb48e2034361fcd8060e7a0c910fe961986ef869be700c9d5a9d8c923f22368f499acdc91748d1462dca5e1f1108999b304ee302e0a9c0b23b761552b04ae5a2ad342e8be015e0f4cf11b8f4b93a2730df13bf3bcefda6e3ca98fe7b8afdf78ebd2ea6bbde097b418b103186921fc1af638ae5c9c83d0241b95e4c17081c6b475a108679530b9aa6e430da87a8a70b66ecc4b8defa13efb93f7306771633d91b20d3202795d79e40315dfe4a076eb8a1ab10b1815c865fc1b2776aba57e7145f0029ba27e6c84f766604e32b4253495c18e0a497c917a0130fb21cfdd88f599d3034bdee1d6099734034f137c3bd6e7079eb41c3ead898430cff7e5485b1813ea68dd3b7cfd254021520782fd22924e582be666b3c8e3454e232e41a7312354c6a8c7f5d8691bfae6805b191288cd16b11529259ea8005a9bfdf4b2d48098ff8c8e3344af0763b2ed9e7ef8b2e27a4fabf26132512696f75e01556b4d3e2c785dccac0dddd1cdbb1905b23ebfe538b92520d1341f8cf11e0ab3f1bc95eaee734a4fbc1b81a67aa9e538301e991a93a98f55f54b9f59392dc34e470f8fe1b997df899efd855bea4e01fa8ca299104a133ad6ffe8ae4989669238a868b5a66fc221eac0a82a290bffbe89b4c95d7aceb73d0ec5888c083894a73ddd95e37d14d63e2da20a37525cce1a303c9243f298f6e0d615386fe44b5397c83dd0cdd0f1e0fb4600a701c4d2e07b485f38f03d70302b153aff50358e3edbcd45bfb593ea7330a4ad42bb89b57898a707e92be412676ddbf26e54cc785e02bae6b2296544d77b1c3ba8f58220770d24c8c374fc433c7fd6eb63bc3b917acd135719b0501a98033a13966871f3165845a21f7c4bd546fe4d5248f4dd9ba365f1ced530e34e2c52d2fc63a8aca153fbb094e2cd1f83a1773880eb261db19e60468d5c224875be7cd13eb34dfe69861fdfdd93a23254c6881b7d5aed5fc927f891e24551788935e52542bcc945fda1179651118ab1c066fbcf465c2cfa4e2795a24b244a232e435846755bb946b3a6d8b4e6571f543482a289bb91ac764ef0c54b97aef581834a0413d88e95e9c94e6876acdd47b95b0c91075f166f66c0ee08f1f304b762836033c6b8b86cd42cf59f2a00f9e4e929ac023bed29d4368be573ba77e571207ee66bb9bad4445e64ac6151cd62ee004c4c762f3979567f0750460409111e8c0f2da55c126761e27bb3ccd495553c439e72c3eaa1c65e4cb6423a868749509f9f9ceec6422bb210d78224c00ae05efef900427cf79b0ba9063d51ef636963651e0f30aa7d30f28ad09e3cdf3e403e9d9821b0dd048fd9e3f6c788744a2ad2cfaab29235285a2cbb1ae32cabcfa12b8932ae55b759", 0x1000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000340)='./file0\x00', 0x6c046324c693e6ea, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1d000, 0x1000, &(0x7f0000000500)=""/4096}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000001600)="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", 0x1000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) open(&(0x7f0000000340)='./file0\x00', 0x6c046324c693e6ea, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) (async) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) [ 1608.270592][ T3706] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1608.288132][ T3706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.317151][ T3706] usb 6-1: Product: syz [ 1608.337764][ T3706] usb 6-1: Manufacturer: syz [ 1608.354279][ T3706] usb 6-1: SerialNumber: syz [ 1608.399499][ T3706] usb 6-1: config 0 descriptor?? [ 1608.408218][T25782] usb 3-1: USB disconnect, device number 50 [ 1608.441174][ T3706] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1608.506420][T25785] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1608.705559][T25785] usb 4-1: device descriptor read/64, error 18 [ 1608.988479][T25785] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1609.148497][ T3706] gspca_vc032x: reg_r err -32 [ 1609.153414][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.159256][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.164795][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.170390][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.175858][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.181419][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.186884][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.192210][T25785] usb 4-1: device descriptor read/64, error 18 [ 1609.203180][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.208665][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.214486][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.224478][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.229861][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.235159][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.240672][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.245961][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.252063][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.257397][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.262737][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.268028][ T3706] gspca_vc032x: I2c Bus Busy Wait 00 [ 1609.273399][ T3706] gspca_vc032x: Unknown sensor... [ 1609.278501][ T3706] vc032x: probe of 6-1:0.0 failed with error -22 [ 1609.308786][T25785] usb usb4-port1: attempt power cycle [ 1609.718677][T25785] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1609.808634][T25785] usb 4-1: Invalid ep0 maxpacket: 0 [ 1609.958468][T25785] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1610.048795][T25785] usb 4-1: Invalid ep0 maxpacket: 0 [ 1610.054424][T25785] usb usb4-port1: unable to enumerate USB device 05:36:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904", @ANYRES16=0x0], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000015c0)={0x24, &(0x7f00000014c0)={0x20, 0x8, 0x13, {0x13, 0x31, "ce51ba3eb276f125fbc10f90e887842a61"}}, &(0x7f0000001500)={0x0, 0x3, 0x23, @string={0x23, 0x3, "60f986ac76ce8b4fed3502b5fc4569ad0b5fef4799fe9ec7bf29eaddf8eb1d42e3"}}, &(0x7f0000001540)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "203f87e2"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfd, 0x1, {0x22, 0x778}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001600)={0x0, 0x30, 0xeb, "0fbe9e59b197a57352b9896f200e3e6c93cdf7e18e7e8db3dbaceb4a6ae0ea1cd154a389ab0931e1b2218ded8c8a368e159b04c0c9e1f97776dc2b01b2d29021f1c303923c439c397de2ebb7f7d3e154173511c453ec89dd488b4d636c0a1b19cfd5ef269fbe342fef736112da3190a38820d3527d09b36909234e63a689abd59199036d2142cdda0705c82bb07f032f59194e834afe2af314d5ffc1f9d19afe148a67c24074646db9ada582251e0524e9bf906f26398a54613f1310c5e26574dc4d7d65d11ac4e72ba10a65f2ebb03495d773a710afecaad0fc950616740b8ef3530761004247e5836950"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001780)={0x20, 0x1, 0xfc, "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"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000c80)={0x20, 0xc, 0x8a, {0x8a, 0x3, "209d7fa9cba5750e01a9180bbd9a865074e31b6efa5c9a100c545871c97627fc17dc39062dd5aab7e4c94cbeaa2d64c327645cfbfc782a4df17982b86737b2daa426d67a5f0ca01d6545174afd6cb0cda900df883566d354fbd6e87cedc2007a50a3cc59e3a7a002f7e53cf1f5309be905391693604251e5f57c4799291d481faaadd6bea219bf0e"}}, &(0x7f0000000d40)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "6cfc4cab5946d5a2d8f35a797932eb29f36a9f69d97b1c72e7d19d9745d25cdb734ba3503de8a49e34f8705ad6e0c1031c21470b5edf0c398318bba4a4b3dc03e74916e35b1487d69b72ef64ad2d675331096f2626b5c2ec741c48ffcbdfa80b691955eaaa626095d02f6c1293c72272b8243acd26fa8d37d87786bca601892f7afb7cf2deba67e8d5c3edcf228794a2265ac59a78062e6d5b36a2ce84c839d38aa2257d156fe1523f0fb8a8f87b70b532a00d668967211166ab4535436504bd726f6065927fe1766965b0b57c133cee0e63a39e936a3f5c9cfd3ca33b61168d6706cb9d168e275b5b8b657c98ab21ec72705e"}}, &(0x7f0000000e40)={0x0, 0xf, 0xbf, {0x5, 0xf, 0xbf, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x1, 0x0, 0x1, 0x11f, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0x0, 0x3, [0x3f, 0x30, 0xff003f, 0xff18, 0xc0, 0xff000f]}, @generic={0x6b, 0x10, 0xb, "67181933ddc4b213398ca06d58fcc08265860df37fea0071881e203e0c23c368bf586eb09edcec21226a29fdae8e541d9c34c7c7c52ca3b3c6bb983585d60398a3afbaa3fe721384fffc633428da74732abe03a39fd0005d063983c0428190fee53b4b86eb786759"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x8, 0x0, 0x7f, [0xf, 0xc0, 0xff003f, 0xff00c0, 0xff0000]}]}}, &(0x7f0000000f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0xe0, "9f37d2dc", "3a4d58dc"}}, &(0x7f0000000f80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x90, 0x7f, 0x20, 0x1, 0x7ff}}}, &(0x7f0000001400)={0x84, &(0x7f0000001000)={0x40, 0xf, 0x34, "dd1a199bbffbbf94b18bda9fdf5af9401d40c812a20cb64d2b4d1f88f3fa90bd8f9f081f6272bf910b3b8ea4256521088723061f"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001100)={0x20, 0x0, 0x8, {0x80, 0x8, [0xf]}}, &(0x7f0000001140)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000001180)={0x40, 0x9, 0x1, 0x20}, &(0x7f00000011c0)={0x40, 0xb, 0x2, "c0d1"}, &(0x7f0000001200)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001240)={0x40, 0x13, 0x6, @local}, &(0x7f0000001280)={0x40, 0x17, 0x6, @random="0cbebb69a939"}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "9c21"}, &(0x7f0000001300)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0xff, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x60, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xd97}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x7, 0x81, 0x10, 0x4}, 0x32, &(0x7f0000000280)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x7, 0xa2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x2, 0x80, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0x3, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x0, 0x8}]}, 0x9, [{0xd3, &(0x7f0000000300)=@string={0xd3, 0x3, "bee7ba19c39c3e95d83d2d15af08ae507a76113b99a1fa93ef159f725f542f2ac070d601038ec339cad403174c2c19910178b8048b01b231df66b8457e1b10e5d88a614566988e6398a5c020e289ebb3102ec2812fdb33f275192b47cb1aeed46d95f0e3dd97c295d04ad117a6c3442ea0d2b2fb65d83d17b1cebf90258783f95a07e8bb665cfb083668535554cdad4e38919366a952cce2c2480db68fdcf73f5151a06655e950881602cbf2142bbc87d49564949796ee0933d3a14fc6c160793d83e3cbb1f0bdf043097a17fd98bfcac4"}}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "5312137a975fcb555fbdc73d667f98c14d06f3d7a72ea23780532fedce972a0476e0d72cf2839783febd7844faa278485b0a8834c87ad1dd42140388d83082e2e7fe297f920bcec066b213ad50d9a42b3f5c79612db95e9c70d942d754c9b6ff85c8eb0c641e3319699ebdde55e5b4d91a6364a666a46531194a49832f53e5957c3d031564f83652b459a6d30ccfa5ed0da7466c244ab9dfea6dca7e3725343e13da08d22859cc3f5dcc45a4184c6bd39219c84721d0e8e52126333369e74d33715d64806f2d960e3fc7fd15d085422592481c59bbafcdc4c058cef280e8bfd221d2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c01}}, {0x5d, &(0x7f00000005c0)=@string={0x5d, 0x3, "435443f452d72de6a78f893b072b4fc35d9ef71bef1870faf99a5ecf1bbad4cef51f78bd749ec1de23c7964b6f13e74869dd7f77753a80720d7e9d46d693f3792634fca24c89f4e8bb976277fd0abb9127c3ee74003b1ab7b69c86"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "8b3575a49cb9185f21c8be65ef369f7b1f5fbd21d399bd77ff21fce9a2323a8004e7eff4bb729a7904a89a81f5ef76e23f7cef4a8490fcc6aa74eb09313e481682d3121640437aa73f0104d31de4486946e7a1965c0b96aa0e0f142d3b543928c3014ca5ddd640a6f858efcebe5c1dd86c85c4f92f00664e04f606febd94ae4de5c1d4f6094190101ff9f3d82b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x20, 0x22, 0x59, {0x59, 0x5, "5d78ea21a7634cefb29dc8080d5f8886221041818327317d2628665339990a43d561c6c29775d870b172921bc70f8bc994393a9328bb5ce728395d84f9140b8e9f64be2c5dc031b383f02f5dcdb0d49a1da39e49ef3bfb"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000940), &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x3e1}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a00)={0x20, 0xc, 0x48, "2312ff61da08be7874e162c02bfd81fd92a84c113a0ef114b223f78873a8a26103c4156a331be852ec82040a38ad8bed590afb0a590f9716cd24a310f7f3d0e96a5fd46697684f3f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x1, 0xc2, "c6e5fb7d3fc3c59ff0e2803ee264547d13fd8917a2d9309d89ccfa250c56498ca04ed760233be65835ff844f05cfe9be5813b2948ecfd64fa21790e3fdf164c51ddee5caabb4585dda3fd6fe41e7813546b982c916f6331c4a4cc791727f074a5e1c537f1b6b67203bb84497ee548820e2980c277eb8d4b825f71e00ce3dc5fd52ed29920fbc647c6db6d247f482a727f9d84be6449c4897601266481288ebcc771eb4dda8c8ebcc79b449b60628335248a2690b68fa5801bbc09857d06d11f736cf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0xff}}) 05:36:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="66eb1a65dcd4079b7eb2e16b4f5751d6ea756d009f7e358903e26fe0c4ccf093e9b7391567b724c12d87396991625878471f906f3fd7d86b764b11b7beaaab3b243dede9afb8a91f387e3ac3e439815f134413fca6a7e1f1e3ff60c9079183bcd30ebad939e7515949f41e072cf6", 0x6e}, {&(0x7f0000000500)="69a5bbc74d3d343dbf567727ad551c78113cf8e47bb1e844e78d19dc25dd86d8c10c54b9065463cf9f0fb58ee670fdb4d48979e9dc8fb901f6c8d9bff63da0f4b755a006048f31595774855a0b21375d430cb12512a534c2dad4c43e3b5b1c1bd9ea4266aff3227998", 0x69}], 0x2, 0x1, 0x400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1d000, 0x1000, &(0x7f0000000500)=""/4096}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000001600)="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", 0x1000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000340)='./file0\x00', 0x6c046324c693e6ea, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1d000, 0x1000, &(0x7f0000000500)=""/4096}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000001600)="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", 0x1000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) open(&(0x7f0000000340)='./file0\x00', 0x6c046324c693e6ea, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) (async) openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) 05:36:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001500)={0x3, 0x0, [{0xf004, 0x3a, &(0x7f0000000200)=""/58}, {0xf000, 0x4e, &(0x7f00000002c0)=""/78}, {0x5000, 0x1000, &(0x7f0000000500)=""/4096}]}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(r3, &(0x7f0000001600)='cgroup.freeze\x00', 0x275a, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) (async, rerun: 32) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000340)={0x2, r2}) 05:36:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200010000000009"], 0x0) [ 1610.262492][T25785] usb 6-1: USB disconnect, device number 95 05:36:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="66eb1a65dcd4079b7eb2e16b4f5751d6ea756d009f7e358903e26fe0c4ccf093e9b7391567b724c12d87396991625878471f906f3fd7d86b764b11b7beaaab3b243dede9afb8a91f387e3ac3e439815f134413fca6a7e1f1e3ff60c9079183bcd30ebad939e7515949f41e072cf6", 0x6e}, {&(0x7f0000000500)="69a5bbc74d3d343dbf567727ad551c78113cf8e47bb1e844e78d19dc25dd86d8c10c54b9065463cf9f0fb58ee670fdb4d48979e9dc8fb901f6c8d9bff63da0f4b755a006048f31595774855a0b21375d430cb12512a534c2dad4c43e3b5b1c1bd9ea4266aff3227998", 0x69}], 0x2, 0x1, 0x400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000040000000000000000", @ANYRES32=r2, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1610.588556][ T3706] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1610.708500][T25785] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1610.838693][ T3706] usb 3-1: Using ep0 maxpacket: 16 [ 1610.948538][T25785] usb 6-1: Using ep0 maxpacket: 16 [ 1610.958835][ T3706] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 05:36:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080000000000203000100000000000000000000000000003485a8b6e2ed80ffd6f492219ac3251cd486e3ca052588063a225466e0da5d6300428c2e4c57ff815ee57c8b04e3b60b501b618bc1c9f53783a78d8c02e076d882eeddd6cc77504cbe184c1e93800c00a52c892bd8f14d4c81965ddced94"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_connect(0x0, 0x395, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd5, 0xfd, 0x49, 0x8, 0x24c6, 0x8680, 0xb72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x3, 0x7f, 0x0, 0x20, 0x18, [{{0x9, 0x4, 0xa2, 0x85, 0x0, 0xff, 0x47, 0xd0, 0x81}}, {{0x9, 0x4, 0xfd, 0x1, 0xd, 0x3, 0xd0, 0x2, 0x8, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x3, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}, @generic={0xf1, 0xd, "7f033fcac2035b48a6abf7e97cefccaee3f0bfd75f24ff1cbace8c73dab50a0eeac481054c6a7869c166006bb81098ca5744f38fe950a17fcfeec44f0c75de95a9a1e8da302086d7225681f541003a70ac492f294c3a7ffb74a7943b48b1cb4592fa080130f715f9ce957276705bd887efd9c7729d779388be6a2c243f5aba8fb558db96abdf482f85f7c6f33ae94228f4690617da6b8f8b4084b7e9bce5b988952b5c88e53f8c312ef809b9b3abd366e0f2027947143d313bfa4a6c8ad7286062d18ea48ab0008b9a00e0f4be348f245c81d2648937d2609d1028fd280a41af67eb1bc2ecfa65b907c6beddbe9781"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x2, 0x69, [@generic={0x3f, 0x9, "0462986919de33e325bb653d02901bf230425722ae973f278a3195921efe750ba44b1f09e40ed34549a7f97169e291c8857f49d072e5e919d9f88fbf2f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x14, 0x50, 0xfc, 0x3f, 0x1, [@generic={0x2d, 0x2, "2de194d5a4b8462262df16574925b9989a10b59528a7e767486b1ae8408abe28e79321ea793e8f1a2c28e4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x81, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x3f, 0x3f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb, 0xfe, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x51, 0x3f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x5, 0x2}}, {{0x9, 0x5, 0x5a5b77e35a6404c0, 0x1, 0x40, 0x20, 0xdb, 0x5, [@generic={0x57, 0x2, "5b7bdb9da457201792bad202c7c35def14241c8ffb83b3ccb4861cb931e8c31800720c248ca3983f2f854a3b683118eb64e74c8ff25b7ad4d425b45171ed58e9178c1373ddabc0f31cdd5e2502051959c435fca590"}]}}, {{0x9, 0x5, 0xb, 0x11, 0x420, 0x6, 0x2, 0x1}}]}}, {{0x9, 0x4, 0x71, 0x1f, 0x1, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3bb557a2"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x2, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0xe8}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x65, "a5cdbb483f53e7ca898accd6041693579727e6f5e5d16d86c4f9de58aed302b980ae6de10579c57c194507ff55833896b7240df08645a6a7e69ed0ce745a9b5273cb1c74ae3a86231875ce36d88c54e802a23780a7ec750e2ff98dfa1b620ff3f354436d772b6d421fbb96a9185ecfbcf32370146b358159c74a0de13205c2fca25eaf7553f4030a18d576f835b79b4201ab9c4411abff2e8101bb8acdf4e3cab65ab0aacb240c524f32e5e1b55482a24b37ba"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x20, 0x490}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4c43, 0xc7, 0x1f, 0x8, 0x66}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x4, 0x3, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xf4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xfeff}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x1, 0x7, 0x27, 0xff, 0x6}, 0x31, &(0x7f0000000e40)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x8, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0xff, 0xe44}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x6, 0x447}, @generic={0x14, 0x10, 0xa, "ce52135a25091cb937542102c3a6ccac65"}]}, 0x1, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x721, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xde, 0x42, 0xc1, 0xff, 0xb48, 0x1003, 0x4381, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70f, 0x3, 0x9, 0x4, 0x0, 0x7f, [{{0x9, 0x4, 0x5a, 0x20, 0xe, 0x3b, 0x8e, 0x75, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0x1, 0x0, 0x38, 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xa3}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x4, 0x1, 0x2], 0x8d}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x6, 0x9, 0x2, 0x7, 0x9], 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x8, 0x1ff, 0x81, 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0xa, 0x8, 0x3, 0x9, 0x5], 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x81, 0x4, "fbf18220"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x1, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x3f, 0x0, [@generic={0xdc, 0x4, "3833afc909a0c6126cad695e0afe6a20107105cf4ae9e64fd46d21553593be3ef60a7a4f75f77e17ae4b22af5977a14f31109249946b79448c5eda8108dc6350f06affdbb8d785ce2379b56c70f360cb6f0222acd0204154bf978415dd615c6e4c3c468dcb50101026f89b80b68218e6db2bc1cfef0033589a3e43c63e103dcdbe4de6c10eabd4a0fa99dcf79f5c88b2e622148f21a3566a9a47098406c94662bd320adf871dba89f98942305fe665b20765137fe685e16435d2d6f44612e483add0d28a574ea9c2965b289451ce73319988f947cf13c94e1b8d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1f, 0x2d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xed267bad57b91576, 0x8, 0x40, 0x3f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc4, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7e, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x0, 0x2, 0x9, [@generic={0x3e, 0x7, "e713b0ad1357969f675c69cc2903d8e7af4ece661c8c1064912a1f91fd86bf5252b738de53b05817c64fdae3470e8dc2d364d3eaa8d1a831610d708a"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x86, 0x81, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3d7, 0x2, 0x2, 0x0, [@generic={0xb1, 0x1, "c5d756d624e079ffe8f1a8bb370ecf7b459458231d4cc572c6275654e38ac0019d75ec8490bf96c782a1e395dc7fe50c5cec615cfacf162f0ba622e8aec98969ff28e2fd3dae49479a20603984e569e292ed50dcee673c2ed98294acf95536ac795c405e3f9c4838b612b563af3ce23300a3006a79bf6ef7a4709ada747c1c16794270889ebe8bc088eec411ab3cb259d39d30e13a2fb7f5224009d5d01eb97f722706c682327e85525400e4a2a0a8"}, @generic={0x6c, 0x10, "59539c905317b34aec7e3e781a2b22e130b5908b9a7cb08082249c7548f9902eb60b29f78563ca97873336bda4b8a4d7823b1a15bfe44d85d01f7f759c69e2e2a06e95680b4884ea561d1f192c2a6888a1852f3fc2856290c73a5dd057872e6395caa59e27794c498f68"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x20}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xdb, 0x40, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x80, 0x8, 0x3f, [@generic={0x29, 0x0, "0fdb6c06cd2a65ed5e825b0f0e32d99fecd66aa1703e4a5d305760ff89843aaf40012a0be08be6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7b, 0x7f, 0x23}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x81, 0x26, 0x7, [@generic={0x28, 0x3, "ae20f20ad1cd84fc012f6c050f26e2a1debadec8e336f10eb9ec3cc9c8fc42153e28301aff4b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x3e, 0x6, 0xe0, [@generic={0x3d, 0xe, "8bd67e46c0d0774c673752ee65e63d8594fde8ac4cbf0cc50491641218802a6bc32cfbca94c621e83d4f28b89da2143fb5d6efc558a4f91f1524bc"}]}}]}}, {{0x9, 0x4, 0xa4, 0x0, 0x2, 0x8c, 0xc0, 0xc6, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x4, 0x81, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6f, "2aae9569b96a"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0x8, 0x7], 0x8}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x2, 0x0, "08a6bb539f8127999a"}]}], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x0, 0x73, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4c7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x8, 0xfa}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x7, 0x5d, 0xe9, 0x74, 0xfc, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0xff}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0xc, "5931c9"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xff24, 0x1, "0d5b2e040a"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x37d8, 0x8001}, {0x6, 0x24, 0x1a, 0x4, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0xff, 0x3f, 0x80, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x0, 0x20}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe5, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x800}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x200, 0x0, 0x7, 0x4, [@generic={0x7e, 0x1a, "6c6a29e39558862136d414cb1630ff0ef79f37a01ca8598129ced601d6ca62ab279a3027fdf61ed8a6adbb86c3aaa7098acab538a48ea1a46c8cc558eeb1831a79bad6859416a36ef3eb56685bc486bc646684c76b15dec7f87e6740a5105d11411ceeffafe8f9052665562b91a1e502a729e4568553d432ea6fd660"}, @generic={0xc1, 0x9, "4a80f02f8456dfba42ca859af89bc3a23989b32b74fdad4154ee99636ad78ed0c13549c809d8e9d5d781e7ec4007a99880c58277f7ab5a332d197154631acb443f7280a20b91bd282cb0a2a071ecf86fb003a500834578612e6d59013f777cfc0bd84311f6f66168365bcb46bbf092146466a8f616ab40ee45ee91102389087ce97f731d433b8b9fa18cc53fb589fa187e9e080ff805d2fa99a315d1c3e24ccd656a806b3f522ec2fda09ab32690ccde8b6686506c94bf77522f5c7ed38ba8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xa5, 0x20, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x1, 0x6, 0x1, [@generic={0x27, 0x30, "a9e7657a13b8f6aefe5bfb72144ea8b9ac082f49cc3aad0d5e41480fba6bc585e546abe69c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xcd, 0x6, 0x7, [@generic={0xa2, 0x4, "7c0b98435bd2e44c89a0079d5b9b3ded89ce6fad919204f81c94e34bcb9c433cdc2cb7afb9d6ed207dba06afa0b6b3e45977159fc03b3b5019519936ceafce7c6ed95b0b79d32c879079fc030874b485aeebc1ee67a67f86949472fd2c76f0fcaeebf79d135e099ce3ce2613d8eea51d870e5de841b23c72a83d99607be0f52dc46acb6d20558c6cac1fff08bd618752b7cad960bb7626153607ed787001b77f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x100}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6c, 0x13, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x250, 0x9, 0x5, 0x6f, 0x40, 0x7f}, 0x5c, &(0x7f0000001680)={0x5, 0xf, 0x5c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x2, 0xff7b, 0x1f}, @generic={0x17, 0x10, 0xa, "90dc99f3c496388c584c9bad07572f8fc26d183b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0xc3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fb683ecfaf898ed289adce59052d74d7"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x401, 0x1e, 0x4b, [0x3f]}]}, 0x5, [{0xdc, &(0x7f0000001700)=@string={0xdc, 0x3, "53a76d87c2ae3ab1de49091046095d0491bea07cc5d3e11e6b62de8469434123a960631d952c696d86df3c44d01c292fc8fea360c349eefa328f4339a912f8b918180210a288bf41389f454b17a7fefc69d107af7cc64f57b4df35972d3fb82f7f15357aa552f4cb25916e4c143d01d6c6065373b55c961ee0b09c50a156cdb9c5ab74500e7979c955b3b6f8e543a7c790516a0a23c33458534b9496444776eed898c8e9729341891b3a730ac18aa87af27ee584ada33fac553b59c43047f81629c74d9decdb26909c801906627cda2222ecab10e4cde752486c"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f0000001840)=@string={0xf, 0x3, "ad8a96a85d8fe8f34f8b6b3ab8"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x303f}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x97624191853400f7, 0xe, 0x9f, {0x9f, 0xe, "878f6d077cc883fb2f2b806a6babcd345249d2d2204244605471839274d9d916b9b44694b20bce49b8d14ad89fbe5c7382dd342c9db714cf406b96cf191cee2c81e086b3d23582acdf0755a037bb76a853a8b8d376f6e2ed9a4905f2b7819e3b0c0a7d4eb849e8b02b28d8461f6fefc001d135f1a25855c42f65c9b0709aedb75c6449275f2ee9fc0dedacf04e590cfd962c59f2777c007ad6bfea1b19"}}, &(0x7f0000000380)={0x0, 0x3, 0xba, @string={0xba, 0x3, "531f7b9b3cc0d1d888f55df6d855334a036fc87f62198e36e68e63f12c1ee99dc089212f9ed8c544b9733908cae5e07eda0a33c214406aff545b9ef123b49b7817ee8fd4569c3d1b211b0a0a11a919cfa9d9fdc88829252048c6cf91b093af2c06198e4e01e32db55a5057c7ebf297eef4089734bd8df307ff4f66b8a78a9eb2e1b133b79709fd3831802bf9675ef1fb00448afc309c4e0fa06be7930a5fd83742ffa6ba7db5be7403369db0229b02ffccf20c286ef9175b"}}, &(0x7f00000004c0)={0x0, 0xf, 0xb7, {0x5, 0xf, 0xb7, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x401, 0xf00, 0x2c4c, [0xff3fcf, 0x3f30]}, @generic={0x7c, 0x10, 0x4, "b123a4e8a7d6f9c00830e12fddf030237b50d6728edaf3a65daad7271d236840031c1fd89c394b95d3ccf002b504bed539e89d47a422a8c17fcc80179cbaa31ddb2b561d9b019da70fedc7b56aeb0b64be927e61a8c8d553d171266c311be3ef5ac65230ebcda76fea47f8f23c1a7e346f260bd9759e5d2c54"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xd, 0xa7d}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7, 0x1100f, 0x6, [0xc030, 0xff3f00, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x38, 0x2, 0x3, 0x9, "49588d17", "6170d1bf"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x33, 0x17, 0xff, 0x213a, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x16, 0x8b, "a77c3ad6b3be5c31bf3c2f861e50bf6bbb353f599cfc2ea6915e9480642111b8dab38bc6d821b447372bc77fef5bc42cba3c138d328b97ea5f06af3ad02876cd474d4148af900a2ed03d4f4f08e894d47245bc34c467cc2a617130b3c3e959728f1cf7a1be00fe65a6854752984fa252effd853e4517fd37f9ce4092cb15981f789e7e781c17a525e82c01"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "86ba"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'g>'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080000000000203000100000000000000000000000000003485a8b6e2ed80ffd6f492219ac3251cd486e3ca052588063a225466e0da5d6300428c2e4c57ff815ee57c8b04e3b60b501b618bc1c9f53783a78d8c02e076d882eeddd6cc77504cbe184c1e93800c00a52c892bd8f14d4c81965ddced94"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x395, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd5, 0xfd, 0x49, 0x8, 0x24c6, 0x8680, 0xb72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x3, 0x7f, 0x0, 0x20, 0x18, [{{0x9, 0x4, 0xa2, 0x85, 0x0, 0xff, 0x47, 0xd0, 0x81}}, {{0x9, 0x4, 0xfd, 0x1, 0xd, 0x3, 0xd0, 0x2, 0x8, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x3, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}, @generic={0xf1, 0xd, "7f033fcac2035b48a6abf7e97cefccaee3f0bfd75f24ff1cbace8c73dab50a0eeac481054c6a7869c166006bb81098ca5744f38fe950a17fcfeec44f0c75de95a9a1e8da302086d7225681f541003a70ac492f294c3a7ffb74a7943b48b1cb4592fa080130f715f9ce957276705bd887efd9c7729d779388be6a2c243f5aba8fb558db96abdf482f85f7c6f33ae94228f4690617da6b8f8b4084b7e9bce5b988952b5c88e53f8c312ef809b9b3abd366e0f2027947143d313bfa4a6c8ad7286062d18ea48ab0008b9a00e0f4be348f245c81d2648937d2609d1028fd280a41af67eb1bc2ecfa65b907c6beddbe9781"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x2, 0x69, [@generic={0x3f, 0x9, "0462986919de33e325bb653d02901bf230425722ae973f278a3195921efe750ba44b1f09e40ed34549a7f97169e291c8857f49d072e5e919d9f88fbf2f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x14, 0x50, 0xfc, 0x3f, 0x1, [@generic={0x2d, 0x2, "2de194d5a4b8462262df16574925b9989a10b59528a7e767486b1ae8408abe28e79321ea793e8f1a2c28e4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x81, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x3f, 0x3f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb, 0xfe, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x51, 0x3f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x5, 0x2}}, {{0x9, 0x5, 0x5a5b77e35a6404c0, 0x1, 0x40, 0x20, 0xdb, 0x5, [@generic={0x57, 0x2, "5b7bdb9da457201792bad202c7c35def14241c8ffb83b3ccb4861cb931e8c31800720c248ca3983f2f854a3b683118eb64e74c8ff25b7ad4d425b45171ed58e9178c1373ddabc0f31cdd5e2502051959c435fca590"}]}}, {{0x9, 0x5, 0xb, 0x11, 0x420, 0x6, 0x2, 0x1}}]}}, {{0x9, 0x4, 0x71, 0x1f, 0x1, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3bb557a2"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x2, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0xe8}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x65, "a5cdbb483f53e7ca898accd6041693579727e6f5e5d16d86c4f9de58aed302b980ae6de10579c57c194507ff55833896b7240df08645a6a7e69ed0ce745a9b5273cb1c74ae3a86231875ce36d88c54e802a23780a7ec750e2ff98dfa1b620ff3f354436d772b6d421fbb96a9185ecfbcf32370146b358159c74a0de13205c2fca25eaf7553f4030a18d576f835b79b4201ab9c4411abff2e8101bb8acdf4e3cab65ab0aacb240c524f32e5e1b55482a24b37ba"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x20, 0x490}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4c43, 0xc7, 0x1f, 0x8, 0x66}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x4, 0x3, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xf4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xfeff}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x1, 0x7, 0x27, 0xff, 0x6}, 0x31, &(0x7f0000000e40)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x8, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0xff, 0xe44}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x6, 0x447}, @generic={0x14, 0x10, 0xa, "ce52135a25091cb937542102c3a6ccac65"}]}, 0x1, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x447}}]}) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x721, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xde, 0x42, 0xc1, 0xff, 0xb48, 0x1003, 0x4381, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70f, 0x3, 0x9, 0x4, 0x0, 0x7f, [{{0x9, 0x4, 0x5a, 0x20, 0xe, 0x3b, 0x8e, 0x75, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0x1, 0x0, 0x38, 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xa3}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x4, 0x1, 0x2], 0x8d}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x6, 0x9, 0x2, 0x7, 0x9], 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x8, 0x1ff, 0x81, 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0xa, 0x8, 0x3, 0x9, 0x5], 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x81, 0x4, "fbf18220"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x1, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x3f, 0x0, [@generic={0xdc, 0x4, "3833afc909a0c6126cad695e0afe6a20107105cf4ae9e64fd46d21553593be3ef60a7a4f75f77e17ae4b22af5977a14f31109249946b79448c5eda8108dc6350f06affdbb8d785ce2379b56c70f360cb6f0222acd0204154bf978415dd615c6e4c3c468dcb50101026f89b80b68218e6db2bc1cfef0033589a3e43c63e103dcdbe4de6c10eabd4a0fa99dcf79f5c88b2e622148f21a3566a9a47098406c94662bd320adf871dba89f98942305fe665b20765137fe685e16435d2d6f44612e483add0d28a574ea9c2965b289451ce73319988f947cf13c94e1b8d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1f, 0x2d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xed267bad57b91576, 0x8, 0x40, 0x3f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc4, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7e, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x0, 0x2, 0x9, [@generic={0x3e, 0x7, "e713b0ad1357969f675c69cc2903d8e7af4ece661c8c1064912a1f91fd86bf5252b738de53b05817c64fdae3470e8dc2d364d3eaa8d1a831610d708a"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x86, 0x81, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3d7, 0x2, 0x2, 0x0, [@generic={0xb1, 0x1, "c5d756d624e079ffe8f1a8bb370ecf7b459458231d4cc572c6275654e38ac0019d75ec8490bf96c782a1e395dc7fe50c5cec615cfacf162f0ba622e8aec98969ff28e2fd3dae49479a20603984e569e292ed50dcee673c2ed98294acf95536ac795c405e3f9c4838b612b563af3ce23300a3006a79bf6ef7a4709ada747c1c16794270889ebe8bc088eec411ab3cb259d39d30e13a2fb7f5224009d5d01eb97f722706c682327e85525400e4a2a0a8"}, @generic={0x6c, 0x10, "59539c905317b34aec7e3e781a2b22e130b5908b9a7cb08082249c7548f9902eb60b29f78563ca97873336bda4b8a4d7823b1a15bfe44d85d01f7f759c69e2e2a06e95680b4884ea561d1f192c2a6888a1852f3fc2856290c73a5dd057872e6395caa59e27794c498f68"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x20}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xdb, 0x40, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x80, 0x8, 0x3f, [@generic={0x29, 0x0, "0fdb6c06cd2a65ed5e825b0f0e32d99fecd66aa1703e4a5d305760ff89843aaf40012a0be08be6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7b, 0x7f, 0x23}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x81, 0x26, 0x7, [@generic={0x28, 0x3, "ae20f20ad1cd84fc012f6c050f26e2a1debadec8e336f10eb9ec3cc9c8fc42153e28301aff4b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x3e, 0x6, 0xe0, [@generic={0x3d, 0xe, "8bd67e46c0d0774c673752ee65e63d8594fde8ac4cbf0cc50491641218802a6bc32cfbca94c621e83d4f28b89da2143fb5d6efc558a4f91f1524bc"}]}}]}}, {{0x9, 0x4, 0xa4, 0x0, 0x2, 0x8c, 0xc0, 0xc6, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x4, 0x81, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6f, "2aae9569b96a"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0x8, 0x7], 0x8}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x2, 0x0, "08a6bb539f8127999a"}]}], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x0, 0x73, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4c7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x8, 0xfa}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x7, 0x5d, 0xe9, 0x74, 0xfc, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0xff}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0xc, "5931c9"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xff24, 0x1, "0d5b2e040a"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x37d8, 0x8001}, {0x6, 0x24, 0x1a, 0x4, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0xff, 0x3f, 0x80, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x0, 0x20}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe5, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x800}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x200, 0x0, 0x7, 0x4, [@generic={0x7e, 0x1a, "6c6a29e39558862136d414cb1630ff0ef79f37a01ca8598129ced601d6ca62ab279a3027fdf61ed8a6adbb86c3aaa7098acab538a48ea1a46c8cc558eeb1831a79bad6859416a36ef3eb56685bc486bc646684c76b15dec7f87e6740a5105d11411ceeffafe8f9052665562b91a1e502a729e4568553d432ea6fd660"}, @generic={0xc1, 0x9, "4a80f02f8456dfba42ca859af89bc3a23989b32b74fdad4154ee99636ad78ed0c13549c809d8e9d5d781e7ec4007a99880c58277f7ab5a332d197154631acb443f7280a20b91bd282cb0a2a071ecf86fb003a500834578612e6d59013f777cfc0bd84311f6f66168365bcb46bbf092146466a8f616ab40ee45ee91102389087ce97f731d433b8b9fa18cc53fb589fa187e9e080ff805d2fa99a315d1c3e24ccd656a806b3f522ec2fda09ab32690ccde8b6686506c94bf77522f5c7ed38ba8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xa5, 0x20, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x1, 0x6, 0x1, [@generic={0x27, 0x30, "a9e7657a13b8f6aefe5bfb72144ea8b9ac082f49cc3aad0d5e41480fba6bc585e546abe69c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xcd, 0x6, 0x7, [@generic={0xa2, 0x4, "7c0b98435bd2e44c89a0079d5b9b3ded89ce6fad919204f81c94e34bcb9c433cdc2cb7afb9d6ed207dba06afa0b6b3e45977159fc03b3b5019519936ceafce7c6ed95b0b79d32c879079fc030874b485aeebc1ee67a67f86949472fd2c76f0fcaeebf79d135e099ce3ce2613d8eea51d870e5de841b23c72a83d99607be0f52dc46acb6d20558c6cac1fff08bd618752b7cad960bb7626153607ed787001b77f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x100}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6c, 0x13, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x250, 0x9, 0x5, 0x6f, 0x40, 0x7f}, 0x5c, &(0x7f0000001680)={0x5, 0xf, 0x5c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x2, 0xff7b, 0x1f}, @generic={0x17, 0x10, 0xa, "90dc99f3c496388c584c9bad07572f8fc26d183b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0xc3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fb683ecfaf898ed289adce59052d74d7"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x401, 0x1e, 0x4b, [0x3f]}]}, 0x5, [{0xdc, &(0x7f0000001700)=@string={0xdc, 0x3, "53a76d87c2ae3ab1de49091046095d0491bea07cc5d3e11e6b62de8469434123a960631d952c696d86df3c44d01c292fc8fea360c349eefa328f4339a912f8b918180210a288bf41389f454b17a7fefc69d107af7cc64f57b4df35972d3fb82f7f15357aa552f4cb25916e4c143d01d6c6065373b55c961ee0b09c50a156cdb9c5ab74500e7979c955b3b6f8e543a7c790516a0a23c33458534b9496444776eed898c8e9729341891b3a730ac18aa87af27ee584ada33fac553b59c43047f81629c74d9decdb26909c801906627cda2222ecab10e4cde752486c"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f0000001840)=@string={0xf, 0x3, "ad8a96a85d8fe8f34f8b6b3ab8"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x303f}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x97624191853400f7, 0xe, 0x9f, {0x9f, 0xe, "878f6d077cc883fb2f2b806a6babcd345249d2d2204244605471839274d9d916b9b44694b20bce49b8d14ad89fbe5c7382dd342c9db714cf406b96cf191cee2c81e086b3d23582acdf0755a037bb76a853a8b8d376f6e2ed9a4905f2b7819e3b0c0a7d4eb849e8b02b28d8461f6fefc001d135f1a25855c42f65c9b0709aedb75c6449275f2ee9fc0dedacf04e590cfd962c59f2777c007ad6bfea1b19"}}, &(0x7f0000000380)={0x0, 0x3, 0xba, @string={0xba, 0x3, "531f7b9b3cc0d1d888f55df6d855334a036fc87f62198e36e68e63f12c1ee99dc089212f9ed8c544b9733908cae5e07eda0a33c214406aff545b9ef123b49b7817ee8fd4569c3d1b211b0a0a11a919cfa9d9fdc88829252048c6cf91b093af2c06198e4e01e32db55a5057c7ebf297eef4089734bd8df307ff4f66b8a78a9eb2e1b133b79709fd3831802bf9675ef1fb00448afc309c4e0fa06be7930a5fd83742ffa6ba7db5be7403369db0229b02ffccf20c286ef9175b"}}, &(0x7f00000004c0)={0x0, 0xf, 0xb7, {0x5, 0xf, 0xb7, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x401, 0xf00, 0x2c4c, [0xff3fcf, 0x3f30]}, @generic={0x7c, 0x10, 0x4, "b123a4e8a7d6f9c00830e12fddf030237b50d6728edaf3a65daad7271d236840031c1fd89c394b95d3ccf002b504bed539e89d47a422a8c17fcc80179cbaa31ddb2b561d9b019da70fedc7b56aeb0b64be927e61a8c8d553d171266c311be3ef5ac65230ebcda76fea47f8f23c1a7e346f260bd9759e5d2c54"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xd, 0xa7d}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7, 0x1100f, 0x6, [0xc030, 0xff3f00, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x38, 0x2, 0x3, 0x9, "49588d17", "6170d1bf"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x33, 0x17, 0xff, 0x213a, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x16, 0x8b, "a77c3ad6b3be5c31bf3c2f861e50bf6bbb353f599cfc2ea6915e9480642111b8dab38bc6d821b447372bc77fef5bc42cba3c138d328b97ea5f06af3ad02876cd474d4148af900a2ed03d4f4f08e894d47245bc34c467cc2a617130b3c3e959728f1cf7a1be00fe65a6854752984fa252effd853e4517fd37f9ce4092cb15981f789e7e781c17a525e82c01"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "86ba"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'g>'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) (async) 05:36:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xe1965000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/98, &(0x7f0000000580)=""/123, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (rerun: 32) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000040000000000000000", @ANYRES32=r2, @ANYBLOB="06000000000000002e2f66696c653000"]) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1611.148724][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1611.167520][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.180745][ T3706] usb 3-1: Product: syz 05:36:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xe1965000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/98, &(0x7f0000000580)=""/123, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xe1965000) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/98, &(0x7f0000000580)=""/123, 0x1000}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1611.203315][ T3706] usb 3-1: Manufacturer: syz [ 1611.231626][T25785] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1611.237815][ T3706] usb 3-1: SerialNumber: syz [ 1611.241244][T25785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.255321][T25785] usb 6-1: Product: syz [ 1611.263775][T25785] usb 6-1: Manufacturer: syz [ 1611.267032][ T3706] usb 3-1: config 0 descriptor?? [ 1611.272541][T25785] usb 6-1: SerialNumber: syz [ 1611.299215][T25785] usb 6-1: config 0 descriptor?? [ 1611.343817][T25785] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1611.513846][ T3706] usb 3-1: USB disconnect, device number 51 [ 1611.518575][ T3675] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1611.543729][ T4991] UDC core: couldn't find an available UDC or it's busy: -16 [ 1611.552783][ T4991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1611.728528][ T3675] usb 4-1: device descriptor read/64, error 18 [ 1611.998511][ T3675] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1612.048482][T25785] gspca_vc032x: reg_r err -32 [ 1612.053182][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.058591][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.063878][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.069303][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.074593][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.079963][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.085267][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.090623][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.095905][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.101275][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.106566][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.111975][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.117736][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.123634][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.129800][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.135097][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.140491][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.145786][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.151187][T25785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1612.156472][T25785] gspca_vc032x: Unknown sensor... [ 1612.161662][T25785] vc032x: probe of 6-1:0.0 failed with error -22 [ 1612.188390][ T3675] usb 4-1: device descriptor read/64, error 18 [ 1612.310184][ T3675] usb usb4-port1: attempt power cycle [ 1612.728462][ T3675] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1612.732710][ T5037] UDC core: couldn't find an available UDC or it's busy: -16 [ 1612.744021][ T5037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1612.818679][ T3675] usb 4-1: Invalid ep0 maxpacket: 0 [ 1612.968419][ T3675] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1613.058854][ T3675] usb 4-1: Invalid ep0 maxpacket: 0 [ 1613.064430][ T3675] usb usb4-port1: unable to enumerate USB device 05:36:07 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904", @ANYRES16=0x0], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000015c0)={0x24, &(0x7f00000014c0)={0x20, 0x8, 0x13, {0x13, 0x31, "ce51ba3eb276f125fbc10f90e887842a61"}}, &(0x7f0000001500)={0x0, 0x3, 0x23, @string={0x23, 0x3, "60f986ac76ce8b4fed3502b5fc4569ad0b5fef4799fe9ec7bf29eaddf8eb1d42e3"}}, &(0x7f0000001540)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "203f87e2"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfd, 0x1, {0x22, 0x778}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001600)={0x0, 0x30, 0xeb, "0fbe9e59b197a57352b9896f200e3e6c93cdf7e18e7e8db3dbaceb4a6ae0ea1cd154a389ab0931e1b2218ded8c8a368e159b04c0c9e1f97776dc2b01b2d29021f1c303923c439c397de2ebb7f7d3e154173511c453ec89dd488b4d636c0a1b19cfd5ef269fbe342fef736112da3190a38820d3527d09b36909234e63a689abd59199036d2142cdda0705c82bb07f032f59194e834afe2af314d5ffc1f9d19afe148a67c24074646db9ada582251e0524e9bf906f26398a54613f1310c5e26574dc4d7d65d11ac4e72ba10a65f2ebb03495d773a710afecaad0fc950616740b8ef3530761004247e5836950"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001780)={0x20, 0x1, 0xfc, "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"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000c80)={0x20, 0xc, 0x8a, {0x8a, 0x3, "209d7fa9cba5750e01a9180bbd9a865074e31b6efa5c9a100c545871c97627fc17dc39062dd5aab7e4c94cbeaa2d64c327645cfbfc782a4df17982b86737b2daa426d67a5f0ca01d6545174afd6cb0cda900df883566d354fbd6e87cedc2007a50a3cc59e3a7a002f7e53cf1f5309be905391693604251e5f57c4799291d481faaadd6bea219bf0e"}}, &(0x7f0000000d40)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "6cfc4cab5946d5a2d8f35a797932eb29f36a9f69d97b1c72e7d19d9745d25cdb734ba3503de8a49e34f8705ad6e0c1031c21470b5edf0c398318bba4a4b3dc03e74916e35b1487d69b72ef64ad2d675331096f2626b5c2ec741c48ffcbdfa80b691955eaaa626095d02f6c1293c72272b8243acd26fa8d37d87786bca601892f7afb7cf2deba67e8d5c3edcf228794a2265ac59a78062e6d5b36a2ce84c839d38aa2257d156fe1523f0fb8a8f87b70b532a00d668967211166ab4535436504bd726f6065927fe1766965b0b57c133cee0e63a39e936a3f5c9cfd3ca33b61168d6706cb9d168e275b5b8b657c98ab21ec72705e"}}, &(0x7f0000000e40)={0x0, 0xf, 0xbf, {0x5, 0xf, 0xbf, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x1, 0x0, 0x1, 0x11f, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0x0, 0x3, [0x3f, 0x30, 0xff003f, 0xff18, 0xc0, 0xff000f]}, @generic={0x6b, 0x10, 0xb, "67181933ddc4b213398ca06d58fcc08265860df37fea0071881e203e0c23c368bf586eb09edcec21226a29fdae8e541d9c34c7c7c52ca3b3c6bb983585d60398a3afbaa3fe721384fffc633428da74732abe03a39fd0005d063983c0428190fee53b4b86eb786759"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x8, 0x0, 0x7f, [0xf, 0xc0, 0xff003f, 0xff00c0, 0xff0000]}]}}, &(0x7f0000000f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0xe0, "9f37d2dc", "3a4d58dc"}}, &(0x7f0000000f80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x90, 0x7f, 0x20, 0x1, 0x7ff}}}, &(0x7f0000001400)={0x84, &(0x7f0000001000)={0x40, 0xf, 0x34, "dd1a199bbffbbf94b18bda9fdf5af9401d40c812a20cb64d2b4d1f88f3fa90bd8f9f081f6272bf910b3b8ea4256521088723061f"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001100)={0x20, 0x0, 0x8, {0x80, 0x8, [0xf]}}, &(0x7f0000001140)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000001180)={0x40, 0x9, 0x1, 0x20}, &(0x7f00000011c0)={0x40, 0xb, 0x2, "c0d1"}, &(0x7f0000001200)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001240)={0x40, 0x13, 0x6, @local}, &(0x7f0000001280)={0x40, 0x17, 0x6, @random="0cbebb69a939"}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "9c21"}, &(0x7f0000001300)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0xff, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x60, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xd97}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x7, 0x81, 0x10, 0x4}, 0x32, &(0x7f0000000280)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x7, 0xa2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x2, 0x80, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0x3, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x0, 0x8}]}, 0x9, [{0xd3, &(0x7f0000000300)=@string={0xd3, 0x3, "bee7ba19c39c3e95d83d2d15af08ae507a76113b99a1fa93ef159f725f542f2ac070d601038ec339cad403174c2c19910178b8048b01b231df66b8457e1b10e5d88a614566988e6398a5c020e289ebb3102ec2812fdb33f275192b47cb1aeed46d95f0e3dd97c295d04ad117a6c3442ea0d2b2fb65d83d17b1cebf90258783f95a07e8bb665cfb083668535554cdad4e38919366a952cce2c2480db68fdcf73f5151a06655e950881602cbf2142bbc87d49564949796ee0933d3a14fc6c160793d83e3cbb1f0bdf043097a17fd98bfcac4"}}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "5312137a975fcb555fbdc73d667f98c14d06f3d7a72ea23780532fedce972a0476e0d72cf2839783febd7844faa278485b0a8834c87ad1dd42140388d83082e2e7fe297f920bcec066b213ad50d9a42b3f5c79612db95e9c70d942d754c9b6ff85c8eb0c641e3319699ebdde55e5b4d91a6364a666a46531194a49832f53e5957c3d031564f83652b459a6d30ccfa5ed0da7466c244ab9dfea6dca7e3725343e13da08d22859cc3f5dcc45a4184c6bd39219c84721d0e8e52126333369e74d33715d64806f2d960e3fc7fd15d085422592481c59bbafcdc4c058cef280e8bfd221d2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c01}}, {0x5d, &(0x7f00000005c0)=@string={0x5d, 0x3, "435443f452d72de6a78f893b072b4fc35d9ef71bef1870faf99a5ecf1bbad4cef51f78bd749ec1de23c7964b6f13e74869dd7f77753a80720d7e9d46d693f3792634fca24c89f4e8bb976277fd0abb9127c3ee74003b1ab7b69c86"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "8b3575a49cb9185f21c8be65ef369f7b1f5fbd21d399bd77ff21fce9a2323a8004e7eff4bb729a7904a89a81f5ef76e23f7cef4a8490fcc6aa74eb09313e481682d3121640437aa73f0104d31de4486946e7a1965c0b96aa0e0f142d3b543928c3014ca5ddd640a6f858efcebe5c1dd86c85c4f92f00664e04f606febd94ae4de5c1d4f6094190101ff9f3d82b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x409}}]}) (rerun: 64) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x20, 0x22, 0x59, {0x59, 0x5, "5d78ea21a7634cefb29dc8080d5f8886221041818327317d2628665339990a43d561c6c29775d870b172921bc70f8bc994393a9328bb5ce728395d84f9140b8e9f64be2c5dc031b383f02f5dcdb0d49a1da39e49ef3bfb"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000940), &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x3e1}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a00)={0x20, 0xc, 0x48, "2312ff61da08be7874e162c02bfd81fd92a84c113a0ef114b223f78873a8a26103c4156a331be852ec82040a38ad8bed590afb0a590f9716cd24a310f7f3d0e96a5fd46697684f3f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x1, 0xc2, "c6e5fb7d3fc3c59ff0e2803ee264547d13fd8917a2d9309d89ccfa250c56498ca04ed760233be65835ff844f05cfe9be5813b2948ecfd64fa21790e3fdf164c51ddee5caabb4585dda3fd6fe41e7813546b982c916f6331c4a4cc791727f074a5e1c537f1b6b67203bb84497ee548820e2980c277eb8d4b825f71e00ce3dc5fd52ed29920fbc647c6db6d247f482a727f9d84be6449c4897601266481288ebcc771eb4dda8c8ebcc79b449b60628335248a2690b68fa5801bbc09857d06d11f736cf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0xff}}) 05:36:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (rerun: 32) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (rerun: 64) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000040000000000000000", @ANYRES32=r2, @ANYBLOB="06000000000000002e2f66696c653000"]) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:07 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xe1965000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/98, &(0x7f0000000580)=""/123, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r4) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:07 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c331000102030109021200010000000009"], 0x0) [ 1613.773992][T27370] usb 6-1: USB disconnect, device number 96 [ 1613.833741][ T5055] UDC core: couldn't find an available UDC or it's busy: -16 [ 1613.848065][ T5055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1613.873483][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 05:36:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffff3e3, 0x10040) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000003c0)={0x3, r4}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000002c0)=""/246, &(0x7f00000000c0)=""/89, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1613.888944][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1613.906908][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 [ 1613.916144][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1613.961313][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 [ 1614.001171][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:36:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x30000, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x3, 0x4, 0x0, &(0x7f0000000640)=""/70, 0x0, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r4], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x120150}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES64=r6, @ANYBLOB="53fb3cbd7404394f000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x24040080) [ 1614.054561][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 [ 1614.070528][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1614.078760][ T3706] usb 3-1: new high-speed USB device number 52 using dummy_hcd 05:36:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0x105, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x30, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x3, 0x1f, 0x61, 0x29, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0xc, 0x9, 0x5d, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x1b}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x53, 0x9, "2508a5", "00e2a4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x69, 0x0, "e5062431eb"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1f, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x0, 0xf4f0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x5, "5683fb", "93"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x3, 0x0, "8ff0769c51d60a"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x56, 0x2, 0x0, 0x3f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0xff, 0x9, "4eec94", '&fX'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0xb1, "", "65b4fb"}, @as_header={0x7, 0x24, 0x1, 0xd6, 0x1, 0x1005}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x80, 0x9, {0x7, 0x25, 0x1, 0x82, 0x6, 0x237}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x64, 0x1, 0x11, 0x10, 0x9}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x6, 0x6e0b}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x0, 0x8, 0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}, {0x66, &(0x7f0000000300)=@string={0x66, 0x3, "492320e233494bfc1ac6e7dea2534355a6490d2c5eadf80df7c4a3649ec4bf8b8a6c08994e61b5c27fbb3cf4489244b28560a9e36b4876b6edd37873f4591d6985fe1c1673b1d5c19cf83e0b8883c0bf02824b31f2b537d270c11e49787092f0594a6965"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1614.189045][T27370] usb 6-1: new high-speed USB device number 97 using dummy_hcd 05:36:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffff3e3, 0x10040) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000003c0)={0x3, r4}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000002c0)=""/246, &(0x7f00000000c0)=""/89, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffff3e3, 0x10040) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000003c0)={0x3, r4}) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000002c0)=""/246, &(0x7f00000000c0)=""/89, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x30000, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x3, 0x4, 0x0, &(0x7f0000000640)=""/70, 0x0, 0x2}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r4], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x120150}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES64=r6, @ANYBLOB="53fb3cbd7404394f000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x24040080) 05:36:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r4) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1614.334490][ T3706] usb 3-1: Using ep0 maxpacket: 16 [ 1614.381505][T27370] usb 6-1: device descriptor read/64, error 18 05:36:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffff3e3, 0x10040) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000003c0)={0x3, r4}) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000002c0)=""/246, &(0x7f00000000c0)=""/89, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1614.458842][ T3706] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1614.628615][ T3706] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1614.637700][ T3706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.648357][T30029] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1614.658625][T27370] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1614.713796][ T3706] usb 3-1: Product: syz [ 1614.727624][ T3706] usb 3-1: Manufacturer: syz [ 1614.743192][ T3706] usb 3-1: SerialNumber: syz [ 1614.776204][ T3706] usb 3-1: config 0 descriptor?? [ 1614.868530][T27370] usb 6-1: device descriptor read/64, error 18 [ 1614.888754][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1614.989469][T27370] usb usb6-port1: attempt power cycle [ 1615.026451][ T3706] usb 3-1: USB disconnect, device number 52 [ 1615.168641][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1615.177694][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.192083][T30029] usb 4-1: Product: syz [ 1615.196298][T30029] usb 4-1: Manufacturer: syz [ 1615.202216][T30029] usb 4-1: SerialNumber: syz [ 1615.219713][T30029] usb 4-1: config 0 descriptor?? [ 1615.264248][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1615.398613][T27370] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1615.460838][ T5078] UDC core: couldn't find an available UDC or it's busy: -16 [ 1615.468492][ T5078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1615.568535][T27370] usb 6-1: device descriptor read/8, error -61 [ 1615.838451][T27370] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1616.008480][T27370] usb 6-1: device descriptor read/8, error -61 [ 1616.129638][T27370] usb usb6-port1: unable to enumerate USB device [ 1616.368492][T30029] gspca_vc032x: reg_w err -71 [ 1616.373342][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.379156][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.384523][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.390276][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.395639][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.401584][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.406976][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.412613][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.418562][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.423865][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.429271][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.434589][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.440019][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.445319][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.450670][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.455961][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.461423][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.466714][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.472039][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1616.477326][T30029] gspca_vc032x: Unknown sensor... [ 1616.482491][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1616.495751][T30029] usb 4-1: USB disconnect, device number 50 05:36:10 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904", @ANYRES16=0x0], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000015c0)={0x24, &(0x7f00000014c0)={0x20, 0x8, 0x13, {0x13, 0x31, "ce51ba3eb276f125fbc10f90e887842a61"}}, &(0x7f0000001500)={0x0, 0x3, 0x23, @string={0x23, 0x3, "60f986ac76ce8b4fed3502b5fc4569ad0b5fef4799fe9ec7bf29eaddf8eb1d42e3"}}, &(0x7f0000001540)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "203f87e2"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfd, 0x1, {0x22, 0x778}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001600)={0x0, 0x30, 0xeb, "0fbe9e59b197a57352b9896f200e3e6c93cdf7e18e7e8db3dbaceb4a6ae0ea1cd154a389ab0931e1b2218ded8c8a368e159b04c0c9e1f97776dc2b01b2d29021f1c303923c439c397de2ebb7f7d3e154173511c453ec89dd488b4d636c0a1b19cfd5ef269fbe342fef736112da3190a38820d3527d09b36909234e63a689abd59199036d2142cdda0705c82bb07f032f59194e834afe2af314d5ffc1f9d19afe148a67c24074646db9ada582251e0524e9bf906f26398a54613f1310c5e26574dc4d7d65d11ac4e72ba10a65f2ebb03495d773a710afecaad0fc950616740b8ef3530761004247e5836950"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001780)={0x20, 0x1, 0xfc, "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"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000c80)={0x20, 0xc, 0x8a, {0x8a, 0x3, "209d7fa9cba5750e01a9180bbd9a865074e31b6efa5c9a100c545871c97627fc17dc39062dd5aab7e4c94cbeaa2d64c327645cfbfc782a4df17982b86737b2daa426d67a5f0ca01d6545174afd6cb0cda900df883566d354fbd6e87cedc2007a50a3cc59e3a7a002f7e53cf1f5309be905391693604251e5f57c4799291d481faaadd6bea219bf0e"}}, &(0x7f0000000d40)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "6cfc4cab5946d5a2d8f35a797932eb29f36a9f69d97b1c72e7d19d9745d25cdb734ba3503de8a49e34f8705ad6e0c1031c21470b5edf0c398318bba4a4b3dc03e74916e35b1487d69b72ef64ad2d675331096f2626b5c2ec741c48ffcbdfa80b691955eaaa626095d02f6c1293c72272b8243acd26fa8d37d87786bca601892f7afb7cf2deba67e8d5c3edcf228794a2265ac59a78062e6d5b36a2ce84c839d38aa2257d156fe1523f0fb8a8f87b70b532a00d668967211166ab4535436504bd726f6065927fe1766965b0b57c133cee0e63a39e936a3f5c9cfd3ca33b61168d6706cb9d168e275b5b8b657c98ab21ec72705e"}}, &(0x7f0000000e40)={0x0, 0xf, 0xbf, {0x5, 0xf, 0xbf, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x1, 0x0, 0x1, 0x11f, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0x0, 0x3, [0x3f, 0x30, 0xff003f, 0xff18, 0xc0, 0xff000f]}, @generic={0x6b, 0x10, 0xb, "67181933ddc4b213398ca06d58fcc08265860df37fea0071881e203e0c23c368bf586eb09edcec21226a29fdae8e541d9c34c7c7c52ca3b3c6bb983585d60398a3afbaa3fe721384fffc633428da74732abe03a39fd0005d063983c0428190fee53b4b86eb786759"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x8, 0x0, 0x7f, [0xf, 0xc0, 0xff003f, 0xff00c0, 0xff0000]}]}}, &(0x7f0000000f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0xe0, "9f37d2dc", "3a4d58dc"}}, &(0x7f0000000f80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x90, 0x7f, 0x20, 0x1, 0x7ff}}}, &(0x7f0000001400)={0x84, &(0x7f0000001000)={0x40, 0xf, 0x34, "dd1a199bbffbbf94b18bda9fdf5af9401d40c812a20cb64d2b4d1f88f3fa90bd8f9f081f6272bf910b3b8ea4256521088723061f"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001100)={0x20, 0x0, 0x8, {0x80, 0x8, [0xf]}}, &(0x7f0000001140)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000001180)={0x40, 0x9, 0x1, 0x20}, &(0x7f00000011c0)={0x40, 0xb, 0x2, "c0d1"}, &(0x7f0000001200)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001240)={0x40, 0x13, 0x6, @local}, &(0x7f0000001280)={0x40, 0x17, 0x6, @random="0cbebb69a939"}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "9c21"}, &(0x7f0000001300)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0xff, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x60, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xd97}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x7, 0x81, 0x10, 0x4}, 0x32, &(0x7f0000000280)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x7, 0xa2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x2, 0x80, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0x3, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x0, 0x8}]}, 0x9, [{0xd3, &(0x7f0000000300)=@string={0xd3, 0x3, "bee7ba19c39c3e95d83d2d15af08ae507a76113b99a1fa93ef159f725f542f2ac070d601038ec339cad403174c2c19910178b8048b01b231df66b8457e1b10e5d88a614566988e6398a5c020e289ebb3102ec2812fdb33f275192b47cb1aeed46d95f0e3dd97c295d04ad117a6c3442ea0d2b2fb65d83d17b1cebf90258783f95a07e8bb665cfb083668535554cdad4e38919366a952cce2c2480db68fdcf73f5151a06655e950881602cbf2142bbc87d49564949796ee0933d3a14fc6c160793d83e3cbb1f0bdf043097a17fd98bfcac4"}}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "5312137a975fcb555fbdc73d667f98c14d06f3d7a72ea23780532fedce972a0476e0d72cf2839783febd7844faa278485b0a8834c87ad1dd42140388d83082e2e7fe297f920bcec066b213ad50d9a42b3f5c79612db95e9c70d942d754c9b6ff85c8eb0c641e3319699ebdde55e5b4d91a6364a666a46531194a49832f53e5957c3d031564f83652b459a6d30ccfa5ed0da7466c244ab9dfea6dca7e3725343e13da08d22859cc3f5dcc45a4184c6bd39219c84721d0e8e52126333369e74d33715d64806f2d960e3fc7fd15d085422592481c59bbafcdc4c058cef280e8bfd221d2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c01}}, {0x5d, &(0x7f00000005c0)=@string={0x5d, 0x3, "435443f452d72de6a78f893b072b4fc35d9ef71bef1870faf99a5ecf1bbad4cef51f78bd749ec1de23c7964b6f13e74869dd7f77753a80720d7e9d46d693f3792634fca24c89f4e8bb976277fd0abb9127c3ee74003b1ab7b69c86"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "8b3575a49cb9185f21c8be65ef369f7b1f5fbd21d399bd77ff21fce9a2323a8004e7eff4bb729a7904a89a81f5ef76e23f7cef4a8490fcc6aa74eb09313e481682d3121640437aa73f0104d31de4486946e7a1965c0b96aa0e0f142d3b543928c3014ca5ddd640a6f858efcebe5c1dd86c85c4f92f00664e04f606febd94ae4de5c1d4f6094190101ff9f3d82b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x20, 0x22, 0x59, {0x59, 0x5, "5d78ea21a7634cefb29dc8080d5f8886221041818327317d2628665339990a43d561c6c29775d870b172921bc70f8bc994393a9328bb5ce728395d84f9140b8e9f64be2c5dc031b383f02f5dcdb0d49a1da39e49ef3bfb"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000940), &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x3e1}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a00)={0x20, 0xc, 0x48, "2312ff61da08be7874e162c02bfd81fd92a84c113a0ef114b223f78873a8a26103c4156a331be852ec82040a38ad8bed590afb0a590f9716cd24a310f7f3d0e96a5fd46697684f3f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x1, 0xc2, "c6e5fb7d3fc3c59ff0e2803ee264547d13fd8917a2d9309d89ccfa250c56498ca04ed760233be65835ff844f05cfe9be5813b2948ecfd64fa21790e3fdf164c51ddee5caabb4585dda3fd6fe41e7813546b982c916f6331c4a4cc791727f074a5e1c537f1b6b67203bb84497ee548820e2980c277eb8d4b825f71e00ce3dc5fd52ed29920fbc647c6db6d247f482a727f9d84be6449c4897601266481288ebcc771eb4dda8c8ebcc79b449b60628335248a2690b68fa5801bbc09857d06d11f736cf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0xff}}) 05:36:10 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x30000, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x3, 0x4, 0x0, &(0x7f0000000640)=""/70, 0x0, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r4], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x120150}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES64=r6, @ANYBLOB="53fb3cbd7404394f000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x24040080) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x30000, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x3}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x3, 0x4, 0x0, &(0x7f0000000640)=""/70, 0x0, 0x2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r4], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x120150}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES64=r6, @ANYBLOB="53fb3cbd7404394f000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x24040080) (async) 05:36:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000314000/0x3000)=nil, &(0x7f00008e1000/0x1000)=nil, &(0x7f000096f000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f00005dd000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000aae000/0x2000)=nil, &(0x7f00000cd000/0x4000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00008c9000/0x2000)=nil, &(0x7f0000000500)="f53a6cffea0c5eee748480690e861d60f2fc531a6959973eb78e746861786352a50be57d7bd7e5473265f6c649ac1e971a27f02d7708eeedf5feaa93f928ea973f140fadbd34b4f3d16e4997aacf01de2767ba1cc4a9d35c2a8e44741e2a35d9a0b02c6013660be80eb04fc648642cd54e711e5faadf5e4578de2494932caca5124e6b5c8453e0072bb4d3ff6cc71bb93622fdfc062542ddf4c875a033a272c6bd8b2b6361d2fea3181346c96b3f0476cf09f4c08bbd59c34e7e3b4cf7a0cb671013a91c8d0feb4098c15738ffaeb3f2b59a38d8f21f5aab8208f097e3b8b76c7e560f1a74d48d5f42ef4755627128a3b1299767b436c4582f", 0xf9}, 0x68) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x2c100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x2, 0x1, &(0x7f00000002c0)=""/39, &(0x7f0000000300)=""/125, &(0x7f0000000500)=""/170, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffff3e3, 0x10040) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000003c0)={0x3, r4}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000002c0)=""/246, &(0x7f00000000c0)=""/89, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_connect$uac1(0x3, 0x105, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x30, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x3, 0x1f, 0x61, 0x29, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0xc, 0x9, 0x5d, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x1b}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x53, 0x9, "2508a5", "00e2a4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x69, 0x0, "e5062431eb"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1f, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x0, 0xf4f0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x5, "5683fb", "93"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x3, 0x0, "8ff0769c51d60a"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x56, 0x2, 0x0, 0x3f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0xff, 0x9, "4eec94", '&fX'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0xb1, "", "65b4fb"}, @as_header={0x7, 0x24, 0x1, 0xd6, 0x1, 0x1005}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x80, 0x9, {0x7, 0x25, 0x1, 0x82, 0x6, 0x237}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x64, 0x1, 0x11, 0x10, 0x9}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x6, 0x6e0b}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x0, 0x8, 0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}, {0x66, &(0x7f0000000300)=@string={0x66, 0x3, "492320e233494bfc1ac6e7dea2534355a6490d2c5eadf80df7c4a3649ec4bf8b8a6c08994e61b5c27fbb3cf4489244b28560a9e36b4876b6edd37873f4591d6985fe1c1673b1d5c19cf83e0b8883c0bf02824b31f2b537d270c11e49787092f0594a6965"}}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1616.919447][ T5125] UDC core: couldn't find an available UDC or it's busy: -16 [ 1616.942569][ T5125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:36:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x2c100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x2, 0x1, &(0x7f00000002c0)=""/39, &(0x7f0000000300)=""/125, &(0x7f0000000500)=""/170, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x2c100, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x2, 0x1, &(0x7f00000002c0)=""/39, &(0x7f0000000300)=""/125, &(0x7f0000000500)=""/170, 0x1}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000314000/0x3000)=nil, &(0x7f00008e1000/0x1000)=nil, &(0x7f000096f000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f00005dd000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000aae000/0x2000)=nil, &(0x7f00000cd000/0x4000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00008c9000/0x2000)=nil, &(0x7f0000000500)="f53a6cffea0c5eee748480690e861d60f2fc531a6959973eb78e746861786352a50be57d7bd7e5473265f6c649ac1e971a27f02d7708eeedf5feaa93f928ea973f140fadbd34b4f3d16e4997aacf01de2767ba1cc4a9d35c2a8e44741e2a35d9a0b02c6013660be80eb04fc648642cd54e711e5faadf5e4578de2494932caca5124e6b5c8453e0072bb4d3ff6cc71bb93622fdfc062542ddf4c875a033a272c6bd8b2b6361d2fea3181346c96b3f0476cf09f4c08bbd59c34e7e3b4cf7a0cb671013a91c8d0feb4098c15738ffaeb3f2b59a38d8f21f5aab8208f097e3b8b76c7e560f1a74d48d5f42ef4755627128a3b1299767b436c4582f", 0xf9}, 0x68) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000314000/0x3000)=nil, &(0x7f00008e1000/0x1000)=nil, &(0x7f000096f000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f00005dd000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000aae000/0x2000)=nil, &(0x7f00000cd000/0x4000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00008c9000/0x2000)=nil, &(0x7f0000000500)="f53a6cffea0c5eee748480690e861d60f2fc531a6959973eb78e746861786352a50be57d7bd7e5473265f6c649ac1e971a27f02d7708eeedf5feaa93f928ea973f140fadbd34b4f3d16e4997aacf01de2767ba1cc4a9d35c2a8e44741e2a35d9a0b02c6013660be80eb04fc648642cd54e711e5faadf5e4578de2494932caca5124e6b5c8453e0072bb4d3ff6cc71bb93622fdfc062542ddf4c875a033a272c6bd8b2b6361d2fea3181346c96b3f0476cf09f4c08bbd59c34e7e3b4cf7a0cb671013a91c8d0feb4098c15738ffaeb3f2b59a38d8f21f5aab8208f097e3b8b76c7e560f1a74d48d5f42ef4755627128a3b1299767b436c4582f", 0xf9}, 0x68) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x0, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000314000/0x3000)=nil, &(0x7f00008e1000/0x1000)=nil, &(0x7f000096f000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f00005dd000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000aae000/0x2000)=nil, &(0x7f00000cd000/0x4000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00008c9000/0x2000)=nil, &(0x7f0000000500)="f53a6cffea0c5eee748480690e861d60f2fc531a6959973eb78e746861786352a50be57d7bd7e5473265f6c649ac1e971a27f02d7708eeedf5feaa93f928ea973f140fadbd34b4f3d16e4997aacf01de2767ba1cc4a9d35c2a8e44741e2a35d9a0b02c6013660be80eb04fc648642cd54e711e5faadf5e4578de2494932caca5124e6b5c8453e0072bb4d3ff6cc71bb93622fdfc062542ddf4c875a033a272c6bd8b2b6361d2fea3181346c96b3f0476cf09f4c08bbd59c34e7e3b4cf7a0cb671013a91c8d0feb4098c15738ffaeb3f2b59a38d8f21f5aab8208f097e3b8b76c7e560f1a74d48d5f42ef4755627128a3b1299767b436c4582f", 0xf9}, 0x68) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1617.191208][T25786] usb 4-1: new high-speed USB device number 51 using dummy_hcd 05:36:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000314000/0x3000)=nil, &(0x7f00008e1000/0x1000)=nil, &(0x7f000096f000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f00005dd000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000aae000/0x2000)=nil, &(0x7f00000cd000/0x4000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00008c9000/0x2000)=nil, &(0x7f0000000500)="f53a6cffea0c5eee748480690e861d60f2fc531a6959973eb78e746861786352a50be57d7bd7e5473265f6c649ac1e971a27f02d7708eeedf5feaa93f928ea973f140fadbd34b4f3d16e4997aacf01de2767ba1cc4a9d35c2a8e44741e2a35d9a0b02c6013660be80eb04fc648642cd54e711e5faadf5e4578de2494932caca5124e6b5c8453e0072bb4d3ff6cc71bb93622fdfc062542ddf4c875a033a272c6bd8b2b6361d2fea3181346c96b3f0476cf09f4c08bbd59c34e7e3b4cf7a0cb671013a91c8d0feb4098c15738ffaeb3f2b59a38d8f21f5aab8208f097e3b8b76c7e560f1a74d48d5f42ef4755627128a3b1299767b436c4582f", 0xf9}, 0x68) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x0, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1617.336251][ T3675] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1617.477164][T25786] usb 4-1: Using ep0 maxpacket: 32 [ 1617.618534][ T3675] usb 6-1: Using ep0 maxpacket: 16 [ 1617.678616][T25786] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1617.687441][T25786] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1617.698016][T25786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1617.878980][T25786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1617.888067][T25786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.896444][T25786] usb 4-1: Product: syz [ 1617.901109][T25786] usb 4-1: Manufacturer: ⍉䤳ﱋ옚厢啃䦦Ⰽ굞෸쓷撣쒞访沊餈慎습뭿鉈뉄悅䡫뙶폭獸姴椝ﺅᘜ녳쇕ା莈뿀舂ㅋ뗲툷셰䤞灸䩙敩 [ 1617.918706][ T3675] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1617.927761][ T3675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.936096][T25786] usb 4-1: SerialNumber: syz [ 1617.943551][ T3675] usb 6-1: Product: syz [ 1617.947746][ T3675] usb 6-1: Manufacturer: syz [ 1617.953527][ T3675] usb 6-1: SerialNumber: syz [ 1617.960025][ T3675] usb 6-1: config 0 descriptor?? [ 1618.011111][ T3675] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1618.211584][ T5126] UDC core: couldn't find an available UDC or it's busy: -16 [ 1618.219787][ T5126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1618.328627][T25786] usb 4-1: 0:2 : does not exist [ 1618.338965][T25786] usb 4-1: USB disconnect, device number 51 [ 1618.373063][T27342] udevd[27342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1618.670643][ T5175] UDC core: couldn't find an available UDC or it's busy: -16 [ 1618.678056][ T5175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1618.686121][ T3675] gspca_vc032x: reg_r err -32 [ 1618.690979][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.706314][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.712066][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.717375][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.723180][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.728868][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.734168][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.740216][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.745515][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.751206][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.756502][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.762518][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.767814][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.773919][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.779555][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.784853][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.790446][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.795807][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.801802][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1618.807101][ T3675] gspca_vc032x: Unknown sensor... [ 1618.812575][ T3675] vc032x: probe of 6-1:0.0 failed with error -22 05:36:14 executing program 5: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="6e3a2c2319c6cb9165de1601f9931fe55af8edb6df9dccd06505a42c59638be7904dc61d8238b10cb324c5d36f867f70536b66f71c190acf66038f3005d0292ef7fe8962145e7926d1b8e2e10db4f9f4ae1bc313d443a9823354905ac7b2c007f0c07961ec2c1f0000003ab9b9b2107cf2930162eb0a7626d75529b0b3adbc98f098c355936b5a93beb6333d7b8094000a33fc7ed555a39b1600"/174, @ANYRESDEC=0x0, @ANYBLOB="414e2a1a539f28e8fda779bd3c9463956e501f22d07e13e1adb95567ec42e174c38a2f19710f375dc1d94933586e453836a5460307a1982739e4f5dec4fffb7d905b2666bd86039fe5305a59e7251faac13a539e0259ad9bd743c2d0c2e14f1a52b35ec58aae1cd2ed8b2e54e183f0962e9857e1ef782cd497ccd5e6f72d6af830fc6ab697d1"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2030ba7b0000e9063806d19773b4024a222b97d25c19c2c34c5c99d77a062744ff10754aee0f81afd254588b5bb14f2d94030b91b0a08f09be7915a0e00bd8a3a3561e36156ccaec8b3546fe2148c007421f3db843106908b953e1649397d2bee045bc02e4c989312041911645f914fc6ef18125cc481c8163b67a8cccc45ddf62fd0b452c9061298ea146e263372072ea480948215143c38805e404e070af956b63a82abacf05f9ef802f2a8f5649e20faebc23dd50c1e1b7f2ba6cd6087a9ab44e0d9804e18fbdb76bf135082546402cafe36449c13eb433cb4da6442c204636131c183e00"/239], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0xba, "b1a9c1b50b919b45b7ef60f615af73d1f9d8ef3611749e3dec3586e0cc4133827d2a2822038f42646cd611f638ceee012abad40098010e0d43a2ed0966d30ebf982cd0c1950e3f8e2f75e4ad598fcba1a37aaeb2c87e30797e69712c10d40de3107a0cb224876bf3d489fea043d1579296b962017b08f8a9aa0755f3d880983a739c018addf35ba231c3fdbbf22e1bb99a8da95285004dadd3ff2628c815bb0e1c65b2d1af54a9f5e50b4c34c8eca8849dacb7c094e3aad66218"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x80000001, 0x101, 0x4, 0x7, 0x0, 0x1, 0xa3, 0x1, 0x55, 0x6}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000006c0)={0x40, 0x23, 0xff, {0xff, 0xf, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000840)={0x0, 0x22, 0xa, {[@main=@item_012={0x2, 0x0, 0xb, "31bb"}, @global=@item_4={0x3, 0x1, 0x9, 'k!Sa'}, @main=@item_012={0x1, 0x0, 0xb, "b6"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd5, 0x1, {0x22, 0x793}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x18, 0x82, "9acc6dfe6b905d0834828b03fdd6609c21663dcf2a509d4670e9528f864b202cba4d85d148ad48bef872106e6cc01430208ec793f3905f55642c48ad830299f044a29bed8b3818d18d29c94aac2d71217847bd43295cea9d02035f55282c8c90689f94efebbee0dc0bfeecb2daa0861ea4ad65bd66bb72b427f9ebae1b4591fcbdc0"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000a40)={0x20, 0x1, 0xbd, "145527c79a498f6a589ea5f2994ec5d24af30a056afb14aea37402562668939ee603d1df9248ea58c302ab32cea67093b6367f098feda8e918d837253a5079c72b34186875bc45accbb1124faabfc0135db1f0d267e99eca653448f4b60d8d988aceb31022616591bfcd75bcf5dc83a4055116ba3d7a98f120062fe48c345b323c74a18cddb4e2369157713ec2c75394e6ac8bbdb8b864d56c969cd4ccace3865cd42278ace7a7b9fc1407dfb6660a1255b013a4b2e54a3237f54b6d52"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) 05:36:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x2c100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x2, 0x1, &(0x7f00000002c0)=""/39, &(0x7f0000000300)=""/125, &(0x7f0000000500)=""/170, 0x1}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) write(r3, &(0x7f0000000200)="310d256bf1d6cedc8593be1821ca29ec331b6a647b8c275c40760f1cd66d695d5ac94624a7849480205ca7337b17c386da63ef41b3b57938", 0x38) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)={0x4, 0x0, [{0xf000, 0x95, &(0x7f0000000640)=""/149}, {0x2000, 0xbd, &(0x7f0000000700)=""/189}, {0x1000, 0x57, &(0x7f0000000840)=""/87}, {0x2000, 0x6, &(0x7f00000007c0)=""/6}]}) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f00000002c0)=""/147, &(0x7f0000000500)=""/219, &(0x7f0000000200), 0x2}) r4 = memfd_secret(0x80000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0x105, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x30, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x3, 0x1f, 0x61, 0x29, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0xc, 0x9, 0x5d, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x1b}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x53, 0x9, "2508a5", "00e2a4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x69, 0x0, "e5062431eb"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1f, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x0, 0xf4f0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x5, "5683fb", "93"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x3, 0x0, "8ff0769c51d60a"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x56, 0x2, 0x0, 0x3f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0xff, 0x9, "4eec94", '&fX'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0xb1, "", "65b4fb"}, @as_header={0x7, 0x24, 0x1, 0xd6, 0x1, 0x1005}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x80, 0x9, {0x7, 0x25, 0x1, 0x82, 0x6, 0x237}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x64, 0x1, 0x11, 0x10, 0x9}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x6, 0x6e0b}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x0, 0x8, 0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}, {0x66, &(0x7f0000000300)=@string={0x66, 0x3, "492320e233494bfc1ac6e7dea2534355a6490d2c5eadf80df7c4a3649ec4bf8b8a6c08994e61b5c27fbb3cf4489244b28560a9e36b4876b6edd37873f4591d6985fe1c1673b1d5c19cf83e0b8883c0bf02824b31f2b537d270c11e49787092f0594a6965"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_connect$uac1(0x3, 0x105, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x30, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x3, 0x1f, 0x61, 0x29, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0xc, 0x9, 0x5d, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x1b}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x53, 0x9, "2508a5", "00e2a4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x69, 0x0, "e5062431eb"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1f, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x0, 0xf4f0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x5, "5683fb", "93"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x3, 0x0, "8ff0769c51d60a"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x56, 0x2, 0x0, 0x3f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0xff, 0x9, "4eec94", '&fX'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0xb1, "", "65b4fb"}, @as_header={0x7, 0x24, 0x1, 0xd6, 0x1, 0x1005}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x80, 0x9, {0x7, 0x25, 0x1, 0x82, 0x6, 0x237}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x64, 0x1, 0x11, 0x10, 0x9}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x6, 0x6e0b}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x0, 0x8, 0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}, {0x66, &(0x7f0000000300)=@string={0x66, 0x3, "492320e233494bfc1ac6e7dea2534355a6490d2c5eadf80df7c4a3649ec4bf8b8a6c08994e61b5c27fbb3cf4489244b28560a9e36b4876b6edd37873f4591d6985fe1c1673b1d5c19cf83e0b8883c0bf02824b31f2b537d270c11e49787092f0594a6965"}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) [ 1619.896302][ T3675] usb 6-1: USB disconnect, device number 101 [ 1619.994480][ T5179] warn_alloc: 1 callbacks suppressed 05:36:14 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x140, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x178, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x7fff, 0x4169, 0x401}) recvfrom$inet(r3, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1619.994498][ T5179] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1620.087516][ T5179] CPU: 0 PID: 5179 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00020-g555f3d7be91a #0 [ 1620.097980][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.108059][ T5179] Call Trace: [ 1620.111351][ T5179] [ 1620.114299][ T5179] dump_stack_lvl+0xcd/0x134 [ 1620.118918][ T5179] warn_alloc.cold+0x9b/0x189 [ 1620.123627][ T5179] ? zone_watermark_ok_safe+0x290/0x290 [ 1620.129207][ T5179] ? __kmalloc_node+0x62/0x390 [ 1620.134018][ T5179] ? __vmalloc_node_range+0x7bf/0x1060 [ 1620.139518][ T5179] __vmalloc_node_range+0xe1e/0x1060 [ 1620.144847][ T5179] ? vfree_atomic+0xe0/0xe0 [ 1620.149380][ T5179] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1620.154960][ T5179] ? kernel_clone+0xe7/0xab0 [ 1620.159578][ T5179] copy_process+0x926/0x7300 [ 1620.164206][ T5179] ? kernel_clone+0xe7/0xab0 [ 1620.168824][ T5179] ? lock_chain_count+0x20/0x20 [ 1620.173701][ T5179] ? lock_chain_count+0x20/0x20 [ 1620.178587][ T5179] ? find_held_lock+0x2d/0x110 05:36:14 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x140, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x178, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x7fff, 0x4169, 0x401}) recvfrom$inet(r3, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x140, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x178, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x7fff, 0x4169, 0x401}) (async) recvfrom$inet(r3, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1620.183391][ T5179] ? __cleanup_sighand+0xb0/0xb0 [ 1620.188352][ T5179] ? lock_downgrade+0x6e0/0x6e0 [ 1620.193245][ T5179] ? __lock_acquire+0x1655/0x5470 [ 1620.198302][ T5179] ? kernel_clone+0x314/0xab0 [ 1620.203011][ T5179] kernel_clone+0xe7/0xab0 [ 1620.207459][ T5179] ? create_io_thread+0xf0/0xf0 [ 1620.208660][T27370] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1620.212337][ T5179] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1620.212373][ T5179] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1620.212409][ T5179] ? find_held_lock+0x2d/0x110 [ 1620.236635][ T5179] __do_sys_clone+0xc8/0x110 [ 1620.241272][ T5179] ? kernel_clone+0xab0/0xab0 [ 1620.245980][ T5179] ? lock_downgrade+0x6e0/0x6e0 [ 1620.250869][ T5179] ? syscall_enter_from_user_mode+0x21/0x70 [ 1620.256801][ T5179] do_syscall_64+0x35/0xb0 [ 1620.261253][ T5179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.267180][ T5179] RIP: 0033:0x7fb8d9276481 [ 1620.271622][ T5179] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1620.291249][ T5179] RSP: 002b:00007fb8d98bba68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1620.299922][ T5179] RAX: ffffffffffffffda RBX: 00007fb8d7b03700 RCX: 00007fb8d9276481 [ 1620.307912][ T5179] RDX: 00007fb8d7b039d0 RSI: 00007fb8d7b032f0 RDI: 00000000003d0f00 [ 1620.315893][ T5179] RBP: 00007fb8d98bbcb0 R08: 00007fb8d7b03700 R09: 00007fb8d7b03700 [ 1620.323857][ T5179] R10: 00007fb8d7b039d0 R11: 0000000000000206 R12: 00007fb8d98bbb1e [ 1620.331820][ T5179] R13: 00007fb8d98bbb1f R14: 00007fb8d7b03300 R15: 0000000000022000 [ 1620.351355][ T5179] [ 1620.359492][ T5179] Mem-Info: [ 1620.362866][ T5179] active_anon:597 inactive_anon:136532 isolated_anon:0 [ 1620.362866][ T5179] active_file:4049 inactive_file:7059 isolated_file:0 [ 1620.362866][ T5179] unevictable:768 dirty:0 writeback:0 [ 1620.362866][ T5179] slab_reclaimable:18826 slab_unreclaimable:108083 [ 1620.362866][ T5179] mapped:28151 shmem:2265 pagetables:2288 bounce:0 05:36:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, 'memory.current\x00'}, {0x20, '\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "2950ff7623e2ce318fb5a70ae5c350eea776508912664efdb354d7f75ef0f6e4da33d045e6f5ba618022c6c42979447f3ab3c505656cb8448edfe8628d3530577cad414157337f0761b5c6e9cf8ec30659c747ca7de59a71cead5d26440ee915538b85c0f15cbd80c0086f4ff1c290ae8f94d1b45b202d3a2cc635d93616735878f9c97824ea2c0d276c0545de3d75d1214d565924f25b4cb5b5c5fd533734742a6b06e9fe327dbdcbfa6fd9f07e36fddffb634bd07d864cf51ea09e67c890139e5aaeb73691f0102de5dc76d9e9be91"}, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x110, r3, 0x82000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:14 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x140, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[]) r2 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x178, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x7fff, 0x4169, 0x401}) recvfrom$inet(r3, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1620.362866][ T5179] kernel_misc_reclaimable:0 [ 1620.362866][ T5179] free:1322039 free_pcp:6646 free_cma:0 [ 1620.413276][ T5179] Node 0 active_anon:2380kB inactive_anon:543148kB active_file:16124kB inactive_file:28236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112604kB dirty:0kB writeback:0kB shmem:6584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB kernel_stack:12804kB pagetables:9148kB all_unreclaimable? no 05:36:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)=ANY=[]) (async) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)={0x4, 0x0, [{0xf000, 0x95, &(0x7f0000000640)=""/149}, {0x2000, 0xbd, &(0x7f0000000700)=""/189}, {0x1000, 0x57, &(0x7f0000000840)=""/87}, {0x2000, 0x6, &(0x7f00000007c0)=""/6}]}) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f00000002c0)=""/147, &(0x7f0000000500)=""/219, &(0x7f0000000200), 0x2}) r4 = memfd_secret(0x80000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1620.457286][ T5179] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1620.486695][T27370] usb 4-1: Using ep0 maxpacket: 16 05:36:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, &(0x7f0000000100)=""/56, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f00000002c0)=""/61, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1620.563334][ T5179] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.619162][ T5179] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1620.625838][ T5179] Node 0 DMA32 free:1323024kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:4872kB inactive_anon:545140kB active_file:16124kB inactive_file:28236kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716632kB mlocked:0kB bounce:0kB free_pcp:29828kB local_pcp:7352kB free_cma:0kB [ 1620.659675][ T5179] lowmem_reserve[]: 0 0 0 0 0 [ 1620.664719][ T5179] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.698727][ T3675] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1620.745142][ T5179] lowmem_reserve[]: 0 0 0 0 0 [ 1620.751194][ T5179] Node 1 Normal free:3944112kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:480kB free_cma:0kB [ 1620.768716][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1620.789032][ T5179] lowmem_reserve[]: 0 0 0 0 0 [ 1620.801327][ T5179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1620.825855][ T5179] Node 0 DMA32: 1418*4kB (UME) 1297*8kB (UME) 781*16kB (UME) 397*32kB (UME) 185*64kB (UME) 80*128kB (UME) 20*256kB (UME) 3*512kB (ME) 1*1024kB (M) 7*2048kB (UM) 304*4096kB (UM) = 1330528kB [ 1620.848375][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.852422][ T5179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1620.866553][T27370] usb 4-1: Product: syz [ 1620.883526][ T5179] Node 1 Normal: 194*4kB (UE) 43*8kB (UME) 37*16kB (UE) 158*32kB (UE) 75*64kB (UME) 21*128kB (UME) 11*256kB (UE) 8*512kB (U) 1*1024kB (U) 3*2048kB (ME) 956*4096kB (M) = 3944112kB [ 1620.886858][T27370] usb 4-1: Manufacturer: syz [ 1620.909484][ T5179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.914843][T27370] usb 4-1: SerialNumber: syz [ 1620.919834][ T3675] usb 6-1: device descriptor read/64, error 18 [ 1620.932490][ T5179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1620.937173][T27370] usb 4-1: config 0 descriptor?? [ 1620.945119][ T5179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.957649][ T5179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1620.976784][ T5179] 13407 total pagecache pages [ 1620.982012][ T5179] 0 pages in swap cache [ 1620.984011][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1620.986405][ T5179] Swap cache stats: add 0, delete 0, find 0/0 [ 1620.999437][ T5179] Free swap = 0kB [ 1621.003172][ T5179] Total swap = 0kB [ 1621.007137][ T5179] 2097051 pages RAM [ 1621.011246][ T5179] 0 pages HighMem/MovableOnly [ 1621.016060][ T5179] 384548 pages reserved [ 1621.024412][ T5179] 0 pages cma reserved [ 1621.182557][ T5189] UDC core: couldn't find an available UDC or it's busy: -16 [ 1621.190000][ T5189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1621.218390][ T3675] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1621.408487][ T3675] usb 6-1: device descriptor read/64, error 18 [ 1621.529779][ T3675] usb usb6-port1: attempt power cycle [ 1621.938362][ T3675] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1622.049856][ T5189] UDC core: couldn't find an available UDC or it's busy: -16 [ 1622.053764][ T5249] UDC core: couldn't find an available UDC or it's busy: -16 [ 1622.057268][ T5189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1622.074286][ T5249] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1622.108698][ T3675] usb 6-1: device descriptor read/8, error -61 [ 1622.378497][ T3675] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1622.428512][T27370] gspca_vc032x: reg_w err -71 [ 1622.433485][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.441249][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.446688][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.452137][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.457435][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.463720][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.469159][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.474450][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.479783][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.485072][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.490466][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.495787][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.501146][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.506428][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.511850][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.517147][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.522595][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.528353][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.533655][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1622.541326][T27370] gspca_vc032x: Unknown sensor... [ 1622.546396][T27370] vc032x: probe of 4-1:0.0 failed with error -22 [ 1622.548600][ T3675] usb 6-1: device descriptor read/8, error -61 [ 1622.554378][T27370] usb 4-1: USB disconnect, device number 52 [ 1622.708600][ T3675] usb usb6-port1: unable to enumerate USB device 05:36:17 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, &(0x7f0000000100)=""/56, 0x0, 0x10000}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f00000002c0)=""/61, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 5: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="6e3a2c2319c6cb9165de1601f9931fe55af8edb6df9dccd06505a42c59638be7904dc61d8238b10cb324c5d36f867f70536b66f71c190acf66038f3005d0292ef7fe8962145e7926d1b8e2e10db4f9f4ae1bc313d443a9823354905ac7b2c007f0c07961ec2c1f0000003ab9b9b2107cf2930162eb0a7626d75529b0b3adbc98f098c355936b5a93beb6333d7b8094000a33fc7ed555a39b1600"/174, @ANYRESDEC=0x0, @ANYBLOB="414e2a1a539f28e8fda779bd3c9463956e501f22d07e13e1adb95567ec42e174c38a2f19710f375dc1d94933586e453836a5460307a1982739e4f5dec4fffb7d905b2666bd86039fe5305a59e7251faac13a539e0259ad9bd743c2d0c2e14f1a52b35ec58aae1cd2ed8b2e54e183f0962e9857e1ef782cd497ccd5e6f72d6af830fc6ab697d1"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2030ba7b0000e9063806d19773b4024a222b97d25c19c2c34c5c99d77a062744ff10754aee0f81afd254588b5bb14f2d94030b91b0a08f09be7915a0e00bd8a3a3561e36156ccaec8b3546fe2148c007421f3db843106908b953e1649397d2bee045bc02e4c989312041911645f914fc6ef18125cc481c8163b67a8cccc45ddf62fd0b452c9061298ea146e263372072ea480948215143c38805e404e070af956b63a82abacf05f9ef802f2a8f5649e20faebc23dd50c1e1b7f2ba6cd6087a9ab44e0d9804e18fbdb76bf135082546402cafe36449c13eb433cb4da6442c204636131c183e00"/239], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0xba, "b1a9c1b50b919b45b7ef60f615af73d1f9d8ef3611749e3dec3586e0cc4133827d2a2822038f42646cd611f638ceee012abad40098010e0d43a2ed0966d30ebf982cd0c1950e3f8e2f75e4ad598fcba1a37aaeb2c87e30797e69712c10d40de3107a0cb224876bf3d489fea043d1579296b962017b08f8a9aa0755f3d880983a739c018addf35ba231c3fdbbf22e1bb99a8da95285004dadd3ff2628c815bb0e1c65b2d1af54a9f5e50b4c34c8eca8849dacb7c094e3aad66218"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x80000001, 0x101, 0x4, 0x7, 0x0, 0x1, 0xa3, 0x1, 0x55, 0x6}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000006c0)={0x40, 0x23, 0xff, {0xff, 0xf, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000840)={0x0, 0x22, 0xa, {[@main=@item_012={0x2, 0x0, 0xb, "31bb"}, @global=@item_4={0x3, 0x1, 0x9, 'k!Sa'}, @main=@item_012={0x1, 0x0, 0xb, "b6"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd5, 0x1, {0x22, 0x793}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x18, 0x82, "9acc6dfe6b905d0834828b03fdd6609c21663dcf2a509d4670e9528f864b202cba4d85d148ad48bef872106e6cc01430208ec793f3905f55642c48ad830299f044a29bed8b3818d18d29c94aac2d71217847bd43295cea9d02035f55282c8c90689f94efebbee0dc0bfeecb2daa0861ea4ad65bd66bb72b427f9ebae1b4591fcbdc0"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000a40)={0x20, 0x1, 0xbd, "145527c79a498f6a589ea5f2994ec5d24af30a056afb14aea37402562668939ee603d1df9248ea58c302ab32cea67093b6367f098feda8e918d837253a5079c72b34186875bc45accbb1124faabfc0135db1f0d267e99eca653448f4b60d8d988aceb31022616591bfcd75bcf5dc83a4055116ba3d7a98f120062fe48c345b323c74a18cddb4e2369157713ec2c75394e6ac8bbdb8b864d56c969cd4ccace3865cd42278ace7a7b9fc1407dfb6660a1255b013a4b2e54a3237f54b6d52"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) 05:36:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)=ANY=[]) (async) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)={0x4, 0x0, [{0xf000, 0x95, &(0x7f0000000640)=""/149}, {0x2000, 0xbd, &(0x7f0000000700)=""/189}, {0x1000, 0x57, &(0x7f0000000840)=""/87}, {0x2000, 0x6, &(0x7f00000007c0)=""/6}]}) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f00000002c0)=""/147, &(0x7f0000000500)=""/219, &(0x7f0000000200), 0x2}) (async) r4 = memfd_secret(0x80000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, &(0x7f0000000100)=""/56, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f00000002c0)=""/61, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x56, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0xa36, 0x9, 0x1, {0x22, 0x9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x8, 0x80}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x4, 0x80, 0x8, 0x9}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x3, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "23675d32b66fdfc908e95072e689ca2e"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4439}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xdca5}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "6a3939ba8aae36e9c3ddd5fa77fc8abf83f296a9290f2f9674e8fdd4d20b201d69b50d8130d163a4"}}, {0x52, &(0x7f0000000300)=@string={0x52, 0x3, "4d1fb223ada07d0d14efcc3bb0aa991daaa4be75c2c09c849edc6ddd683d7bd3c540e364fbac63e63acef87ab12cbc626959249000e147fdbf7e2f2f7b684911e358c66020280222126d35c4cca261f1"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f00000004c0)={0x0, 0x21, 0xd6, {0xd6, 0x22, "5e23fd6dab2921a0f1aafc7bf5643f45465b41d3e987ea463badae01e843a588a0db0fa0062942e4d0dd8ddedaa2f65ae9fb976e9ec7c3cad0f8308338a06971c1f74ff869160f5dac4cf47cd13336120f8e16db8681ac04ce9fc3689b2d37284227cecac9c1f1b5e757f2f830c2f8a8dc79fd45b47a8b072e44ed660212cde72affbfe80f28c8390ae339c94c1adb82bca9d7092b6b4656e89c9c3c0f35f605b5b6eb2c19f50243a7cf172a3195b8c5dfcf8f4d57dd4117bf8f7fc2330820abe818bf13689d602562f53564f1703f9e39967b17"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0xb, 0xa7, "126dcec790a060b01f38f38f98555524a32519556306fab6238bd869db814fb5d95411bc35a1468083cec4a1a12297bc6b141ba7b58fe27084480e62e24837e62e37661d1b941ce84b17266b27331d5d18b7b4c71347864a771b74a7e8db9c37fc46e3df9817514333067742af6675fd61239effef0a972fd7489d68b48b17684c9ef6ed72642c43744fefeb095f60d86bfaf6dd18393720417f86ee86a03a7c4b8ee322451f0f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "d50c"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "b99f"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "225515"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "718a723f"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "52e954"}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0xe}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x2, 0x2000000088) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r3, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, &(0x7f0000000100)=""/56, 0x0, 0x10000}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f00000002c0)=""/61, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) 05:36:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1623.278492][T27370] usb 4-1: new high-speed USB device number 53 using dummy_hcd 05:36:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1623.460166][ T3675] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1623.528396][T27370] usb 4-1: Using ep0 maxpacket: 16 05:36:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1623.684633][ T3675] usb 6-1: device descriptor read/64, error 18 05:36:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1623.808827][T27370] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1623.823023][T27370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.840681][T27370] usb 4-1: Product: syz [ 1623.855963][T27370] usb 4-1: Manufacturer: syz [ 1623.867891][T27370] usb 4-1: SerialNumber: syz [ 1623.890659][T27370] usb 4-1: config 0 descriptor?? [ 1623.941601][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1623.978530][ T3675] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1624.178771][ T3675] usb 6-1: device descriptor read/64, error 18 [ 1624.309479][ T3675] usb usb6-port1: attempt power cycle [ 1624.581135][ T5271] UDC core: couldn't find an available UDC or it's busy: -16 [ 1624.588616][ T5271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1624.596704][ T5271] UDC core: couldn't find an available UDC or it's busy: -16 [ 1624.604259][ T5271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1624.618543][T27370] gspca_vc032x: reg_r err -71 [ 1624.623264][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.628630][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.633922][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.639311][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.644609][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.650808][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.656114][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.661576][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.666872][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.672451][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.677755][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.683380][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.688936][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.694306][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.699775][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.705141][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.711913][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.717282][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.722731][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1624.728390][T27370] gspca_vc032x: Unknown sensor... [ 1624.728610][ T3675] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1624.733624][T27370] vc032x: probe of 4-1:0.0 failed with error -22 [ 1624.754785][T27370] usb 4-1: USB disconnect, device number 53 [ 1624.948655][ T3675] usb 6-1: device descriptor read/8, error -61 [ 1625.218442][ T3675] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1625.398529][ T3675] usb 6-1: device descriptor read/8, error -61 [ 1625.519049][ T3675] usb usb6-port1: unable to enumerate USB device 05:36:20 executing program 5: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="6e3a2c2319c6cb9165de1601f9931fe55af8edb6df9dccd06505a42c59638be7904dc61d8238b10cb324c5d36f867f70536b66f71c190acf66038f3005d0292ef7fe8962145e7926d1b8e2e10db4f9f4ae1bc313d443a9823354905ac7b2c007f0c07961ec2c1f0000003ab9b9b2107cf2930162eb0a7626d75529b0b3adbc98f098c355936b5a93beb6333d7b8094000a33fc7ed555a39b1600"/174, @ANYRESDEC=0x0, @ANYBLOB="414e2a1a539f28e8fda779bd3c9463956e501f22d07e13e1adb95567ec42e174c38a2f19710f375dc1d94933586e453836a5460307a1982739e4f5dec4fffb7d905b2666bd86039fe5305a59e7251faac13a539e0259ad9bd743c2d0c2e14f1a52b35ec58aae1cd2ed8b2e54e183f0962e9857e1ef782cd497ccd5e6f72d6af830fc6ab697d1"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2030ba7b0000e9063806d19773b4024a222b97d25c19c2c34c5c99d77a062744ff10754aee0f81afd254588b5bb14f2d94030b91b0a08f09be7915a0e00bd8a3a3561e36156ccaec8b3546fe2148c007421f3db843106908b953e1649397d2bee045bc02e4c989312041911645f914fc6ef18125cc481c8163b67a8cccc45ddf62fd0b452c9061298ea146e263372072ea480948215143c38805e404e070af956b63a82abacf05f9ef802f2a8f5649e20faebc23dd50c1e1b7f2ba6cd6087a9ab44e0d9804e18fbdb76bf135082546402cafe36449c13eb433cb4da6442c204636131c183e00"/239], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0xba, "b1a9c1b50b919b45b7ef60f615af73d1f9d8ef3611749e3dec3586e0cc4133827d2a2822038f42646cd611f638ceee012abad40098010e0d43a2ed0966d30ebf982cd0c1950e3f8e2f75e4ad598fcba1a37aaeb2c87e30797e69712c10d40de3107a0cb224876bf3d489fea043d1579296b962017b08f8a9aa0755f3d880983a739c018addf35ba231c3fdbbf22e1bb99a8da95285004dadd3ff2628c815bb0e1c65b2d1af54a9f5e50b4c34c8eca8849dacb7c094e3aad66218"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x80000001, 0x101, 0x4, 0x7, 0x0, 0x1, 0xa3, 0x1, 0x55, 0x6}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000006c0)={0x40, 0x23, 0xff, {0xff, 0xf, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000840)={0x0, 0x22, 0xa, {[@main=@item_012={0x2, 0x0, 0xb, "31bb"}, @global=@item_4={0x3, 0x1, 0x9, 'k!Sa'}, @main=@item_012={0x1, 0x0, 0xb, "b6"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd5, 0x1, {0x22, 0x793}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x18, 0x82, "9acc6dfe6b905d0834828b03fdd6609c21663dcf2a509d4670e9528f864b202cba4d85d148ad48bef872106e6cc01430208ec793f3905f55642c48ad830299f044a29bed8b3818d18d29c94aac2d71217847bd43295cea9d02035f55282c8c90689f94efebbee0dc0bfeecb2daa0861ea4ad65bd66bb72b427f9ebae1b4591fcbdc0"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000a40)={0x20, 0x1, 0xbd, "145527c79a498f6a589ea5f2994ec5d24af30a056afb14aea37402562668939ee603d1df9248ea58c302ab32cea67093b6367f098feda8e918d837253a5079c72b34186875bc45accbb1124faabfc0135db1f0d267e99eca653448f4b60d8d988aceb31022616591bfcd75bcf5dc83a4055116ba3d7a98f120062fe48c345b323c74a18cddb4e2369157713ec2c75394e6ac8bbdb8b864d56c969cd4ccace3865cd42278ace7a7b9fc1407dfb6660a1255b013a4b2e54a3237f54b6d52"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) 05:36:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x2000000088) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) (async) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) sendto$inet(r3, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)={0x4, 0x0, [{0xf000, 0x95, &(0x7f0000000640)=""/149}, {0x2000, 0xbd, &(0x7f0000000700)=""/189}, {0x1000, 0x57, &(0x7f0000000840)=""/87}, {0x2000, 0x6, &(0x7f00000007c0)=""/6}]}) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f00000002c0)=""/147, &(0x7f0000000500)=""/219, &(0x7f0000000200), 0x2}) r4 = memfd_secret(0x80000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x7f) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/78, &(0x7f00000002c0)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x56, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0xa36, 0x9, 0x1, {0x22, 0x9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x8, 0x80}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x4, 0x80, 0x8, 0x9}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x3, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "23675d32b66fdfc908e95072e689ca2e"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4439}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xdca5}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "6a3939ba8aae36e9c3ddd5fa77fc8abf83f296a9290f2f9674e8fdd4d20b201d69b50d8130d163a4"}}, {0x52, &(0x7f0000000300)=@string={0x52, 0x3, "4d1fb223ada07d0d14efcc3bb0aa991daaa4be75c2c09c849edc6ddd683d7bd3c540e364fbac63e63acef87ab12cbc626959249000e147fdbf7e2f2f7b684911e358c66020280222126d35c4cca261f1"}}]}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f00000004c0)={0x0, 0x21, 0xd6, {0xd6, 0x22, "5e23fd6dab2921a0f1aafc7bf5643f45465b41d3e987ea463badae01e843a588a0db0fa0062942e4d0dd8ddedaa2f65ae9fb976e9ec7c3cad0f8308338a06971c1f74ff869160f5dac4cf47cd13336120f8e16db8681ac04ce9fc3689b2d37284227cecac9c1f1b5e757f2f830c2f8a8dc79fd45b47a8b072e44ed660212cde72affbfe80f28c8390ae339c94c1adb82bca9d7092b6b4656e89c9c3c0f35f605b5b6eb2c19f50243a7cf172a3195b8c5dfcf8f4d57dd4117bf8f7fc2330820abe818bf13689d602562f53564f1703f9e39967b17"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0xb, 0xa7, "126dcec790a060b01f38f38f98555524a32519556306fab6238bd869db814fb5d95411bc35a1468083cec4a1a12297bc6b141ba7b58fe27084480e62e24837e62e37661d1b941ce84b17266b27331d5d18b7b4c71347864a771b74a7e8db9c37fc46e3df9817514333067742af6675fd61239effef0a972fd7489d68b48b17684c9ef6ed72642c43744fefeb095f60d86bfaf6dd18393720417f86ee86a03a7c4b8ee322451f0f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "d50c"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "b99f"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "225515"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "718a723f"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "52e954"}}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0xe}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x2, 0x2000000088) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) (async) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) sendto$inet(r3, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x7f) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/78, &(0x7f00000002c0)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x2220}, {r2, 0x1002}, {r3, 0x7037}, {r4, 0x600}], 0x4, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1626.319016][ T3675] usb 4-1: new high-speed USB device number 54 using dummy_hcd 05:36:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3df827382c51ab3c, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) openat(r3, &(0x7f0000000680)='./file0\x00', 0x14b003, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x3, 0x2, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/148, &(0x7f00000005c0)=""/184, 0x2000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1626.538701][T30029] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1626.568656][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 1626.749097][T30029] usb 6-1: device descriptor read/64, error 18 [ 1626.848577][ T3675] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1626.857808][ T3675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.866883][ T3675] usb 4-1: Product: syz [ 1626.871357][ T3675] usb 4-1: Manufacturer: syz [ 1626.876025][ T3675] usb 4-1: SerialNumber: syz [ 1626.883195][ T3675] usb 4-1: config 0 descriptor?? [ 1626.930733][ T3675] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1627.038446][T30029] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1627.131345][ T5394] UDC core: couldn't find an available UDC or it's busy: -16 [ 1627.135190][ T5393] UDC core: couldn't find an available UDC or it's busy: -16 [ 1627.138898][ T5394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1627.157689][ T5393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1627.228515][T30029] usb 6-1: device descriptor read/64, error 18 [ 1627.238930][ T3675] gspca_vc032x: reg_r err -32 [ 1627.243666][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.249339][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.254660][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.260139][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.265445][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.271516][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.276846][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.282231][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.287523][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.293010][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.298388][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.303684][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.309238][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.314530][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.319910][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.325204][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.330614][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.335981][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.341310][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1627.346598][ T3675] gspca_vc032x: Unknown sensor... [ 1627.348634][T30029] usb usb6-port1: attempt power cycle [ 1627.351766][ T3675] vc032x: probe of 4-1:0.0 failed with error -22 [ 1627.399950][ T3706] usb 4-1: USB disconnect, device number 54 [ 1627.768392][T30029] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1627.938642][T30029] usb 6-1: device descriptor read/8, error -61 [ 1628.219417][T30029] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1628.408630][T30029] usb 6-1: device descriptor read/8, error -61 [ 1628.538740][T30029] usb usb6-port1: unable to enumerate USB device 05:36:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001020301090212000100000000090425b16d7e7e6a2bd67ae05d1cdcfe3fa7f7f23f57fd4c730f7ffe90102cf7fa1fa330267c325f55d45d2a096858a2ecfe3d5379cfe01ecdbbfc4b3a2a330699eaf555af83b9b707387444c5193e01c9d8dfa8320d879287da288261d62ea803efccaf6b1198"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x7f) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/78, &(0x7f00000002c0)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x7f) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/78, &(0x7f00000002c0)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3df827382c51ab3c, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:23 executing program 2: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000280)=0xfffffc2b) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x1, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x81, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/79, &(0x7f0000000480)=""/59}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) openat(r3, &(0x7f0000000680)='./file0\x00', 0x14b003, 0x40) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x3, 0x2, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/148, &(0x7f00000005c0)=""/184, 0x2000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x56, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0xa36, 0x9, 0x1, {0x22, 0x9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x8, 0x80}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x4, 0x80, 0x8, 0x9}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x3, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "23675d32b66fdfc908e95072e689ca2e"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4439}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xdca5}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "6a3939ba8aae36e9c3ddd5fa77fc8abf83f296a9290f2f9674e8fdd4d20b201d69b50d8130d163a4"}}, {0x52, &(0x7f0000000300)=@string={0x52, 0x3, "4d1fb223ada07d0d14efcc3bb0aa991daaa4be75c2c09c849edc6ddd683d7bd3c540e364fbac63e63acef87ab12cbc626959249000e147fdbf7e2f2f7b684911e358c66020280222126d35c4cca261f1"}}]}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "de8aaea90d77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f00000004c0)={0x0, 0x21, 0xd6, {0xd6, 0x22, "5e23fd6dab2921a0f1aafc7bf5643f45465b41d3e987ea463badae01e843a588a0db0fa0062942e4d0dd8ddedaa2f65ae9fb976e9ec7c3cad0f8308338a06971c1f74ff869160f5dac4cf47cd13336120f8e16db8681ac04ce9fc3689b2d37284227cecac9c1f1b5e757f2f830c2f8a8dc79fd45b47a8b072e44ed660212cde72affbfe80f28c8390ae339c94c1adb82bca9d7092b6b4656e89c9c3c0f35f605b5b6eb2c19f50243a7cf172a3195b8c5dfcf8f4d57dd4117bf8f7fc2330820abe818bf13689d602562f53564f1703f9e39967b17"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0xb, 0xa7, "126dcec790a060b01f38f38f98555524a32519556306fab6238bd869db814fb5d95411bc35a1468083cec4a1a12297bc6b141ba7b58fe27084480e62e24837e62e37661d1b941ce84b17266b27331d5d18b7b4c71347864a771b74a7e8db9c37fc46e3df9817514333067742af6675fd61239effef0a972fd7489d68b48b17684c9ef6ed72642c43744fefeb095f60d86bfaf6dd18393720417f86ee86a03a7c4b8ee322451f0f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "d50c"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "b99f"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "225515"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "718a723f"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "52e954"}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0xe}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (rerun: 64) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) openat(r3, &(0x7f0000000680)='./file0\x00', 0x14b003, 0x40) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x3, 0x2, &(0x7f00000002c0)=""/135, &(0x7f0000000500)=""/148, &(0x7f00000005c0)=""/184, 0x2000}) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) 05:36:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3df827382c51ab3c, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3df827382c51ab3c, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) renameat(r4, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) 05:36:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1629.398409][T30029] usb 4-1: new high-speed USB device number 55 using dummy_hcd 05:36:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) fcntl$getown(r3, 0x9) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000340)={0x10000, &(0x7f0000000300), 0x0, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "83ceb620a68074c8783407434df5f3cf"}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1629.581934][T27369] usb 6-1: new high-speed USB device number 114 using dummy_hcd 05:36:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1629.678494][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1629.848430][T27369] usb 6-1: Using ep0 maxpacket: 16 [ 1629.968832][T27369] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 1629.977062][T27369] usb 6-1: config 0 has no interface number 0 [ 1629.983754][T27369] usb 6-1: too many endpoints for config 0 interface 37 altsetting 177: 109, using maximum allowed: 30 [ 1629.995266][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1630.006176][T27369] usb 6-1: config 0 interface 37 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 1630.019671][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.027675][T30029] usb 4-1: Product: syz [ 1630.032538][T27369] usb 6-1: config 0 interface 37 has no altsetting 0 [ 1630.040118][T30029] usb 4-1: Manufacturer: syz [ 1630.044739][T30029] usb 4-1: SerialNumber: syz [ 1630.053713][T30029] usb 4-1: config 0 descriptor?? [ 1630.100948][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1630.248994][T27369] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1630.258244][T27369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.266476][T27369] usb 6-1: Product: syz [ 1630.270939][T27369] usb 6-1: Manufacturer: syz [ 1630.275712][T27369] usb 6-1: SerialNumber: syz [ 1630.283496][T27369] usb 6-1: config 0 descriptor?? [ 1630.510068][ T5475] UDC core: couldn't find an available UDC or it's busy: -16 [ 1630.510092][ T5476] UDC core: couldn't find an available UDC or it's busy: -16 [ 1630.517496][ T5475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1630.534175][ T5476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1630.548612][T30029] gspca_vc032x: reg_r err -32 [ 1630.553344][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.559034][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.564437][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.570111][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.575406][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.581477][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.586781][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.592456][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.597747][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.603534][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.608979][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.614278][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.620127][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.625410][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.630894][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.636182][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.641716][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.647011][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.653569][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.659636][T30029] gspca_vc032x: Unknown sensor... [ 1630.664742][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1630.672414][T30029] usb 4-1: USB disconnect, device number 55 [ 1630.680363][T27369] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1630.698494][T27369] gspca_vc032x: reg_w err -71 [ 1630.703380][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.709389][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.714859][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.720799][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.726222][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.731971][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.737363][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.743274][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.749040][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.754924][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.761807][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.767377][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.773135][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.778778][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.784191][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.790101][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.795514][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.801406][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.806822][T27369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.812404][T27369] gspca_vc032x: Unknown sensor... [ 1630.817693][T27369] vc032x: probe of 6-1:0.37 failed with error -22 [ 1630.826139][T27369] usb 6-1: USB disconnect, device number 114 05:36:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001020301090212000100000000090425b16d7e7e6a2bd67ae05d1cdcfe3fa7f7f23f57fd4c730f7ffe90102cf7fa1fa330267c325f55d45d2a096858a2ecfe3d5379cfe01ecdbbfc4b3a2a330699eaf555af83b9b707387444c5193e01c9d8dfa8320d879287da288261d62ea803efccaf6b1198"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async, rerun: 64) r1 = eventfd(0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) fcntl$getown(r3, 0x9) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000340)={0x10000, &(0x7f0000000300), 0x0, r2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "83ceb620a68074c8783407434df5f3cf"}, 0x14) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) renameat(r4, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) 05:36:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x19, {0x19, 0x9, "d0610eb479aabfc586124cb78ce46c7cdb9cdfe58ab3ec"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x8, "b84c3602"}, @local=@item_4={0x3, 0x2, 0x0, "3ff417cc"}, @local=@item_4={0x3, 0x2, 0x0, "b3a3ac24"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x10, 0x1, {0x22, 0x6af}}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0xde, "64a480e94629a15703e4edd98716ee0b1f19f45349dd75328971513b765da4fa4cf8d6b50ab4e3505f90f132a244a84887d5b7ba2f920a3d16f58d4e64044c44be665ae68880d7d9493e14402c5ec341bb8dc37d2298e49ac963b8ae66a3236abb34bd834c71fe65e53b5334308683ad7a4a1916da5f95e77d41ab23d6a444ec1dc1be42d3404959b7fb51b3632a7f0d92135f562c045c151f519d96559a78b46c9e1de970b0747b723e66ac8e27144cf2c7117b4378ccf56c7ee30dcc5254c262485d7e682744b8775f9f9fba219118862166d4e9de2ead47480bad70a5"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x1, 0x8f, "46e281bb17dcaae7ebc32454b60ba7dd9cd41a41cc3e4ce18d2eb9d56401761f436501b9189a46c669caf766f8a5078595f22a0ab3d5a9d7c3cd2584946cb98922a5950b18688cf39e56cb0abb87c30f90bafb5d109a1c3e05a7ad7ee4ffd02a85604b3023567eac29bc874e1cf9a4893d8e826241aa975bacf9e082037eefcf17b34219572d98e9c7c1c1ee50ef9b"}, &(0x7f0000000240)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x20, 0xf, 0x89, {0x89, 0x8, "0654f8fdc242d16124853f0fa7774fd28a4f2c65990d01cdd7fc13e4726b13bf88bb04bb4bce58c9fefb54b765efe73e8fa902baa9032520f9212b45a58d7a700fea775aa07f1a7868fb40960c1eceade5d1302f79a4346f7f9f7225121b2344f557b58de1f5818ff15964caf1fc42f94ce7f83427e5b570409681b40d8007fb557732b49e1808"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000440)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x8, "f5ab"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1f, 0x1, {0x22, 0x8ac}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0xe, 0x84, "784fdb5ef957a21b192485df7ca700d7342393573dfec1ad331c43d7dd117d3772348c30b5ac8167f8c8b818fd5867f1278b77a68369be9e1f7474043c8b3294a18b989a4cfb8d5c16f15416a2945efb9d4fc3afaae1b63808e13d8b8f6377a956bf7385c4f10d0c368f492127e08fb52f916f6fe68fc4d22f783b0f4f739ce7829fa975"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000800)={0x20, 0x1, 0x5a, "420d553b9db9a612744c653ec166019eba246af1262fd0057d6d020e4a339665aacdb4961d86ca0dd4a5bdb5e71040f3a88bd71ccb1ebae779436720231267dde01794f671f4ab9bea12a7a5db96552412fc346032e972203814"}, &(0x7f0000000880)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) fcntl$getown(r3, 0x9) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000340)={0x10000, &(0x7f0000000300), 0x0, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "83ceb620a68074c8783407434df5f3cf"}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) fcntl$getown(r3, 0x9) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) pipe2(&(0x7f00000002c0), 0x0) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000340)={0x10000, &(0x7f0000000300), 0x0, r2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "83ceb620a68074c8783407434df5f3cf"}, 0x14) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1631.498406][ T3675] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1631.558487][T30029] usb 6-1: new high-speed USB device number 115 using dummy_hcd 05:36:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x94240) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = socket$caif_stream(0x25, 0x1, 0x1) dup3(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1631.748600][ T3675] usb 4-1: Using ep0 maxpacket: 16 05:36:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) renameat(r4, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, 0x0) (async) renameat(r4, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000500)=""/247, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) [ 1631.848467][T30029] usb 6-1: Using ep0 maxpacket: 16 05:36:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1631.988670][T30029] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 1631.996885][T30029] usb 6-1: config 0 has no interface number 0 [ 1632.027580][T30029] usb 6-1: too many endpoints for config 0 interface 37 altsetting 177: 109, using maximum allowed: 30 [ 1632.028736][ T3675] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1632.047339][T30029] usb 6-1: config 0 interface 37 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 1632.058737][ T3675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.061888][T30029] usb 6-1: config 0 interface 37 has no altsetting 0 [ 1632.069548][ T3675] usb 4-1: Product: syz [ 1632.091454][ T3675] usb 4-1: Manufacturer: syz [ 1632.096457][ T3675] usb 4-1: SerialNumber: syz [ 1632.115760][ T3675] usb 4-1: config 0 descriptor?? [ 1632.170861][ T3675] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1632.258683][T30029] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1632.267765][T30029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.276227][T30029] usb 6-1: Product: syz [ 1632.280619][T30029] usb 6-1: Manufacturer: syz [ 1632.285243][T30029] usb 6-1: SerialNumber: syz [ 1632.294027][T30029] usb 6-1: config 0 descriptor?? [ 1632.680698][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1632.708651][T30029] gspca_vc032x: reg_w err -71 [ 1632.713567][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.719237][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.724651][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.730381][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.735820][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.741414][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.746799][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.752424][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.757776][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.763303][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.768829][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.774246][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.779713][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.785134][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.790590][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.795954][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.802547][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.807914][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.814257][ T5495] UDC core: couldn't find an available UDC or it's busy: -16 [ 1632.821691][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.822364][ T5495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1632.826982][T30029] gspca_vc032x: Unknown sensor... [ 1632.838574][ T3675] gspca_vc032x: reg_r err -32 [ 1632.839843][T30029] vc032x: probe of 6-1:0.37 failed with error -22 [ 1632.844240][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.844254][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.844265][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.844276][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.852640][T30029] usb 6-1: USB disconnect, device number 115 [ 1632.869991][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.891788][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.897113][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.905010][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.912778][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.918091][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.924435][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.933415][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.939696][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.944981][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.954038][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.960301][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.965638][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.974676][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.980971][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1632.986258][ T3675] gspca_vc032x: Unknown sensor... [ 1632.995349][ T3675] vc032x: probe of 4-1:0.0 failed with error -22 05:36:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007d5a3110c80a01c3310001020301090212000100000000090425b16d7e7e6a2bd67ae05d1cdcfe3fa7f7f23f57fd4c730f7ffe90102cf7fa1fa330267c325f55d45d2a096858a2ecfe3d5379cfe01ecdbbfc4b3a2a330699eaf555af83b9b707387444c5193e01c9d8dfa8320d879287da288261d62ea803efccaf6b1198"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) r4 = socket$caif_stream(0x25, 0x1, 0x1) dup3(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) 05:36:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x94240) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) (async, rerun: 32) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r3 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) lseek(r2, 0x0, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = socket$caif_stream(0x25, 0x1, 0x1) dup3(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1633.528468][T30029] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1633.778520][T30029] usb 6-1: Using ep0 maxpacket: 16 [ 1633.910528][T30029] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 1633.918824][T30029] usb 6-1: config 0 has no interface number 0 [ 1633.925022][T30029] usb 6-1: too many endpoints for config 0 interface 37 altsetting 177: 109, using maximum allowed: 30 [ 1633.937350][T30029] usb 6-1: config 0 interface 37 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 1633.951554][T30029] usb 6-1: config 0 interface 37 has no altsetting 0 [ 1634.140930][T30029] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1634.150040][T30029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.158019][T30029] usb 6-1: Product: syz [ 1634.162789][T30029] usb 6-1: Manufacturer: syz [ 1634.167415][T30029] usb 6-1: SerialNumber: syz [ 1634.179853][T30029] usb 6-1: config 0 descriptor?? 05:36:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x19, {0x19, 0x9, "d0610eb479aabfc586124cb78ce46c7cdb9cdfe58ab3ec"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x8, "b84c3602"}, @local=@item_4={0x3, 0x2, 0x0, "3ff417cc"}, @local=@item_4={0x3, 0x2, 0x0, "b3a3ac24"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x10, 0x1, {0x22, 0x6af}}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0xde, "64a480e94629a15703e4edd98716ee0b1f19f45349dd75328971513b765da4fa4cf8d6b50ab4e3505f90f132a244a84887d5b7ba2f920a3d16f58d4e64044c44be665ae68880d7d9493e14402c5ec341bb8dc37d2298e49ac963b8ae66a3236abb34bd834c71fe65e53b5334308683ad7a4a1916da5f95e77d41ab23d6a444ec1dc1be42d3404959b7fb51b3632a7f0d92135f562c045c151f519d96559a78b46c9e1de970b0747b723e66ac8e27144cf2c7117b4378ccf56c7ee30dcc5254c262485d7e682744b8775f9f9fba219118862166d4e9de2ead47480bad70a5"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x1, 0x8f, "46e281bb17dcaae7ebc32454b60ba7dd9cd41a41cc3e4ce18d2eb9d56401761f436501b9189a46c669caf766f8a5078595f22a0ab3d5a9d7c3cd2584946cb98922a5950b18688cf39e56cb0abb87c30f90bafb5d109a1c3e05a7ad7ee4ffd02a85604b3023567eac29bc874e1cf9a4893d8e826241aa975bacf9e082037eefcf17b34219572d98e9c7c1c1ee50ef9b"}, &(0x7f0000000240)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x20, 0xf, 0x89, {0x89, 0x8, "0654f8fdc242d16124853f0fa7774fd28a4f2c65990d01cdd7fc13e4726b13bf88bb04bb4bce58c9fefb54b765efe73e8fa902baa9032520f9212b45a58d7a700fea775aa07f1a7868fb40960c1eceade5d1302f79a4346f7f9f7225121b2344f557b58de1f5818ff15964caf1fc42f94ce7f83427e5b570409681b40d8007fb557732b49e1808"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000440)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x8, "f5ab"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1f, 0x1, {0x22, 0x8ac}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0xe, 0x84, "784fdb5ef957a21b192485df7ca700d7342393573dfec1ad331c43d7dd117d3772348c30b5ac8167f8c8b818fd5867f1278b77a68369be9e1f7474043c8b3294a18b989a4cfb8d5c16f15416a2945efb9d4fc3afaae1b63808e13d8b8f6377a956bf7385c4f10d0c368f492127e08fb52f916f6fe68fc4d22f783b0f4f739ce7829fa975"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000800)={0x20, 0x1, 0x5a, "420d553b9db9a612744c653ec166019eba246af1262fd0057d6d020e4a339665aacdb4961d86ca0dd4a5bdb5e71040f3a88bd71ccb1ebae779436720231267dde01794f671f4ab9bea12a7a5db96552412fc346032e972203814"}, &(0x7f0000000880)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f0000000480)=""/68}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt(r2, 0x5, 0x400, &(0x7f0000000500)=""/4096, &(0x7f0000000300)=0x1000) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 05:36:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x94240) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r3 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) lseek(r2, 0x0, 0x2) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = socket$caif_stream(0x25, 0x1, 0x1) dup3(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) socket$caif_stream(0x25, 0x1, 0x1) (async) dup3(r3, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x20) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1634.231165][ T3675] usb 4-1: USB disconnect, device number 56 05:36:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) lseek(r2, 0x0, 0x2) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000200)={@my=0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(r2, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) [ 1634.555450][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1634.581029][T30029] gspca_vc032x: reg_w err -71 [ 1634.590410][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.598192][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.611898][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.622629][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.628092][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.637034][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.648458][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.653915][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.661220][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.666632][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.672529][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.677929][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.678798][ T3675] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1634.683877][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.696594][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.702396][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.707788][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.713285][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.721999][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.727300][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.732627][T30029] gspca_vc032x: Unknown sensor... [ 1634.737685][T30029] vc032x: probe of 6-1:0.37 failed with error -22 [ 1634.746051][T30029] usb 6-1: USB disconnect, device number 116 [ 1634.938467][ T3675] usb 4-1: Using ep0 maxpacket: 16 05:36:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0x3c, {0x3c, 0x24, "7d3c4a2ce7c34ee27ea8327482349fd31fa5701f35cec77c3bf00a9d75e4ba9d6bddffb26f790b3f61273043cee523969d1bfc693efd58556883"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000640)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x5, 0x7f, 0xecb}, @ssp_cap={0xc, 0x10, 0xa, 0x6a, 0x0, 0x3, 0xf, 0x13}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x81, 0x6, 0x2, "dd77c0ae", "53caa69a"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x5, 0x1f, 0x8, 0x9, 0xf29}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x40, 0x13, 0x57, "d7907d6ab339f05bf04eec516927206a9120f1d308207a78eef4dab04aa1ca1baf01be72c693b9329e058b6d72f56f8f422ffafc1f28ee3e46dea760ca06208e8865fc40d692f953518f16d010e58b72f93f76af6d2a96"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x220, 0x4}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x5f8}, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "c0a8"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "308c"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x20, 0x31, 0x4f, {0x4f, 0x4, "5cb286da774841ba5b0b70910e0a076dad5d475a894fffe5a503ed2000f5a3ad4affac564c0bc49ce4aa490f6f146cae121f35789bc04bed80048b7c1bdf4439729540178da44aa4babf68ab90"}}, &(0x7f00000000c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "ec624f972dbbe1d2ab2f046bb7814d8b0a7eea8173c7bedd996f2ce0d082c09676ffcd"}}, &(0x7f0000000100)={0x0, 0x22, 0x29, {[@main=@item_4={0x3, 0x0, 0xa, "d1ff8f14"}, @main=@item_4={0x3, 0x0, 0x9, "0c27e68b"}, @local=@item_4={0x3, 0x2, 0x7, "e92e7b65"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, "e3"}, @global=@item_4={0x3, 0x1, 0x0, "c769b584"}, @global=@item_012={0x2, 0x1, 0xb, "6919"}, @main=@item_4={0x3, 0x0, 0x9, "5e6b109a"}, @local=@item_4={0x3, 0x2, 0x3, "3b9e0d30"}, @local=@item_4={0x3, 0x2, 0x0, "687761ef"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x514}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x20, 0x14, 0xdf, "cf55476379c777e87a8f5df4602b4c6bfbdfe1b7b34f792955978f7ca80eb97adcffed54ab91c2c4b67da865b894ea81e002f8d4213d3ea75545b83aecd38b82e319a21dbdb99ccc1513ac8c5136eafb95e97f7982d7615fca4f0c17ec8af61082b05128e378f5ab32b5adbbd71f895ffc8ea33171835f9313017941cb6ee884b1a6c0365e5fbe501a80ae70eb9e6d44ecefdda0637be495922d8aa8d4951114a30e222e59f9800cbb94c91eddead1dfebd3e8c7a694e84bb6238cee54855a53323dcb75a27972a5badce7f28097727b81b3d352b3fbb303d012d4bc0f7d44"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7c}, &(0x7f00000004c0)={0x20, 0x1, 0xef, "96e8de5be574c6e29ab7452bd934344518f7d57503a8381ed35ea6cba9d714c48f1a81593e65911a5013b127e244209b12bec00a38609ffd2a055514032cffd2f9ae7fe2c4ab2155afb74141ceecc695b8cb864d1769b2674d0b08041ea464909dc14518e8f557e6fee67701883a332333413f0df0b0348f0a6677596019dd0d0ab62324af9d6c2f08622a08497e016bf04f1dcfc0f3d1fb0262e4e7520f3ad894e498445595df7942eb2d82a417fb89b863fe3e419e5571338d0cced5cf26284f5c14627643f5425f1bf9e3c92cd312d25d49c8cf561109d8291085bc1c6b46dbd9fbee7a64f33fe4f01e8e756214"}, &(0x7f0000000280)={0x20, 0x3, 0x1, 0x24}}) 05:36:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000f21fdef400", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\t\x00\x00\x00./file0\x00']) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffffffff, 0x4, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:29 executing program 2: syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) 05:36:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000200)={@my=0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) 05:36:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001880)=""/121, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/69}) [ 1635.218719][ T3675] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1635.229482][ T3675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.242325][ T3675] usb 4-1: Product: syz [ 1635.249101][ T3675] usb 4-1: Manufacturer: syz [ 1635.256213][ T3675] usb 4-1: SerialNumber: syz [ 1635.277651][ T3675] usb 4-1: config 0 descriptor?? [ 1635.324269][ T3675] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1635.358514][T30029] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1635.638497][T30029] usb 6-1: Using ep0 maxpacket: 16 [ 1635.731432][ T5641] UDC core: couldn't find an available UDC or it's busy: -16 [ 1635.739032][ T5641] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1635.788512][ T3675] gspca_vc032x: reg_r err -32 [ 1635.793314][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.799241][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.804615][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.810360][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.815706][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.821481][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.826771][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.832524][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.837818][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.843408][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.849200][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.854515][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.860208][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.865503][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.871283][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.877056][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.883210][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.889002][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.894299][ T3675] gspca_vc032x: I2c Bus Busy Wait 00 [ 1635.899909][ T3675] gspca_vc032x: Unknown sensor... [ 1635.904968][ T3675] vc032x: probe of 4-1:0.0 failed with error -22 [ 1635.938655][T30029] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1635.947858][T30029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.956453][T30029] usb 6-1: Product: syz [ 1635.965213][T30029] usb 6-1: Manufacturer: syz [ 1635.970152][T30029] usb 6-1: SerialNumber: syz [ 1635.977358][T30029] usb 6-1: config 0 descriptor?? [ 1636.020739][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1636.678508][T30029] gspca_vc032x: reg_r err -32 [ 1636.683225][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.688948][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.695215][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.701192][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.706486][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.712195][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.717507][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.723185][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.728773][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.734062][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.739859][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.745149][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.750872][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.756168][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.761840][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.767129][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.772845][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.778137][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.783722][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1636.789330][T30029] gspca_vc032x: Unknown sensor... [ 1636.795516][T30029] vc032x: probe of 6-1:0.0 failed with error -22 05:36:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x19, {0x19, 0x9, "d0610eb479aabfc586124cb78ce46c7cdb9cdfe58ab3ec"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x8, "b84c3602"}, @local=@item_4={0x3, 0x2, 0x0, "3ff417cc"}, @local=@item_4={0x3, 0x2, 0x0, "b3a3ac24"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x10, 0x1, {0x22, 0x6af}}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0xde, "64a480e94629a15703e4edd98716ee0b1f19f45349dd75328971513b765da4fa4cf8d6b50ab4e3505f90f132a244a84887d5b7ba2f920a3d16f58d4e64044c44be665ae68880d7d9493e14402c5ec341bb8dc37d2298e49ac963b8ae66a3236abb34bd834c71fe65e53b5334308683ad7a4a1916da5f95e77d41ab23d6a444ec1dc1be42d3404959b7fb51b3632a7f0d92135f562c045c151f519d96559a78b46c9e1de970b0747b723e66ac8e27144cf2c7117b4378ccf56c7ee30dcc5254c262485d7e682744b8775f9f9fba219118862166d4e9de2ead47480bad70a5"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x1, 0x8f, "46e281bb17dcaae7ebc32454b60ba7dd9cd41a41cc3e4ce18d2eb9d56401761f436501b9189a46c669caf766f8a5078595f22a0ab3d5a9d7c3cd2584946cb98922a5950b18688cf39e56cb0abb87c30f90bafb5d109a1c3e05a7ad7ee4ffd02a85604b3023567eac29bc874e1cf9a4893d8e826241aa975bacf9e082037eefcf17b34219572d98e9c7c1c1ee50ef9b"}, &(0x7f0000000240)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) (rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x20, 0xf, 0x89, {0x89, 0x8, "0654f8fdc242d16124853f0fa7774fd28a4f2c65990d01cdd7fc13e4726b13bf88bb04bb4bce58c9fefb54b765efe73e8fa902baa9032520f9212b45a58d7a700fea775aa07f1a7868fb40960c1eceade5d1302f79a4346f7f9f7225121b2344f557b58de1f5818ff15964caf1fc42f94ce7f83427e5b570409681b40d8007fb557732b49e1808"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000440)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x8, "f5ab"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1f, 0x1, {0x22, 0x8ac}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0xe, 0x84, "784fdb5ef957a21b192485df7ca700d7342393573dfec1ad331c43d7dd117d3772348c30b5ac8167f8c8b818fd5867f1278b77a68369be9e1f7474043c8b3294a18b989a4cfb8d5c16f15416a2945efb9d4fc3afaae1b63808e13d8b8f6377a956bf7385c4f10d0c368f492127e08fb52f916f6fe68fc4d22f783b0f4f739ce7829fa975"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000800)={0x20, 0x1, 0x5a, "420d553b9db9a612744c653ec166019eba246af1262fd0057d6d020e4a339665aacdb4961d86ca0dd4a5bdb5e71040f3a88bd71ccb1ebae779436720231267dde01794f671f4ab9bea12a7a5db96552412fc346032e972203814"}, &(0x7f0000000880)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:31 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async, rerun: 64) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x6}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000200)={@my=0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) 05:36:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (rerun: 32) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/148, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001880)=""/121, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/69}) 05:36:31 executing program 2: syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) 05:36:31 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000f21fdef400", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\t\x00\x00\x00./file0\x00']) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffffffff, 0x4, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000f21fdef400", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\t\x00\x00\x00./file0\x00']) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffffffff, 0x4, r1}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1637.285085][T30029] usb 4-1: USB disconnect, device number 57 [ 1637.363765][ T5665] UDC core: couldn't find an available UDC or it's busy: -16 [ 1637.384586][ T5665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:36:31 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000f21fdef400", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\t\x00\x00\x00./file0\x00']) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffffffff, 0x4, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000f21fdef400", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\t\x00\x00\x00./file0\x00']) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffffffff, 0x4, r1}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:31 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x5228}, {r0, 0x24}], 0x4, &(0x7f0000001580), &(0x7f0000001600)={[0x10001]}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="f425c61c00db76e43dfc79d78b0d", @ANYRES32=r5, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESDEC=r2]) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) [ 1637.718372][T30029] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1637.970197][T30029] usb 4-1: Using ep0 maxpacket: 16 [ 1638.248571][T30029] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1638.257921][T30029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.266382][T30029] usb 4-1: Product: syz [ 1638.271145][T30029] usb 4-1: Manufacturer: syz [ 1638.275886][T30029] usb 4-1: SerialNumber: syz [ 1638.283522][T30029] usb 4-1: config 0 descriptor?? [ 1638.331980][T30029] gspca_main: vc032x-2.14.0 probing 0ac8:c301 05:36:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) (async) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x5228}, {r0, 0x24}], 0x4, &(0x7f0000001580), &(0x7f0000001600)={[0x10001]}, 0x8) (async) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="f425c61c00db76e43dfc79d78b0d", @ANYRES32=r5, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESDEC=r2]) r6 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) 05:36:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001880)=""/121, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/69}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/148, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001880)=""/121, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/69}) (async) 05:36:32 executing program 2: syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) 05:36:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0x3c, {0x3c, 0x24, "7d3c4a2ce7c34ee27ea8327482349fd31fa5701f35cec77c3bf00a9d75e4ba9d6bddffb26f790b3f61273043cee523969d1bfc693efd58556883"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000640)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x5, 0x7f, 0xecb}, @ssp_cap={0xc, 0x10, 0xa, 0x6a, 0x0, 0x3, 0xf, 0x13}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x81, 0x6, 0x2, "dd77c0ae", "53caa69a"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x5, 0x1f, 0x8, 0x9, 0xf29}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x40, 0x13, 0x57, "d7907d6ab339f05bf04eec516927206a9120f1d308207a78eef4dab04aa1ca1baf01be72c693b9329e058b6d72f56f8f422ffafc1f28ee3e46dea760ca06208e8865fc40d692f953518f16d010e58b72f93f76af6d2a96"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x220, 0x4}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x5f8}, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "c0a8"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "308c"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x20, 0x31, 0x4f, {0x4f, 0x4, "5cb286da774841ba5b0b70910e0a076dad5d475a894fffe5a503ed2000f5a3ad4affac564c0bc49ce4aa490f6f146cae121f35789bc04bed80048b7c1bdf4439729540178da44aa4babf68ab90"}}, &(0x7f00000000c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "ec624f972dbbe1d2ab2f046bb7814d8b0a7eea8173c7bedd996f2ce0d082c09676ffcd"}}, &(0x7f0000000100)={0x0, 0x22, 0x29, {[@main=@item_4={0x3, 0x0, 0xa, "d1ff8f14"}, @main=@item_4={0x3, 0x0, 0x9, "0c27e68b"}, @local=@item_4={0x3, 0x2, 0x7, "e92e7b65"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, "e3"}, @global=@item_4={0x3, 0x1, 0x0, "c769b584"}, @global=@item_012={0x2, 0x1, 0xb, "6919"}, @main=@item_4={0x3, 0x0, 0x9, "5e6b109a"}, @local=@item_4={0x3, 0x2, 0x3, "3b9e0d30"}, @local=@item_4={0x3, 0x2, 0x0, "687761ef"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x514}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x20, 0x14, 0xdf, "cf55476379c777e87a8f5df4602b4c6bfbdfe1b7b34f792955978f7ca80eb97adcffed54ab91c2c4b67da865b894ea81e002f8d4213d3ea75545b83aecd38b82e319a21dbdb99ccc1513ac8c5136eafb95e97f7982d7615fca4f0c17ec8af61082b05128e378f5ab32b5adbbd71f895ffc8ea33171835f9313017941cb6ee884b1a6c0365e5fbe501a80ae70eb9e6d44ecefdda0637be495922d8aa8d4951114a30e222e59f9800cbb94c91eddead1dfebd3e8c7a694e84bb6238cee54855a53323dcb75a27972a5badce7f28097727b81b3d352b3fbb303d012d4bc0f7d44"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7c}, &(0x7f00000004c0)={0x20, 0x1, 0xef, "96e8de5be574c6e29ab7452bd934344518f7d57503a8381ed35ea6cba9d714c48f1a81593e65911a5013b127e244209b12bec00a38609ffd2a055514032cffd2f9ae7fe2c4ab2155afb74141ceecc695b8cb864d1769b2674d0b08041ea464909dc14518e8f557e6fee67701883a332333413f0df0b0348f0a6677596019dd0d0ab62324af9d6c2f08622a08497e016bf04f1dcfc0f3d1fb0262e4e7520f3ad894e498445595df7942eb2d82a417fb89b863fe3e419e5571338d0cced5cf26284f5c14627643f5425f1bf9e3c92cd312d25d49c8cf561109d8291085bc1c6b46dbd9fbee7a64f33fe4f01e8e756214"}, &(0x7f0000000280)={0x20, 0x3, 0x1, 0x24}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0x3c, {0x3c, 0x24, "7d3c4a2ce7c34ee27ea8327482349fd31fa5701f35cec77c3bf00a9d75e4ba9d6bddffb26f790b3f61273043cee523969d1bfc693efd58556883"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000640)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x5, 0x7f, 0xecb}, @ssp_cap={0xc, 0x10, 0xa, 0x6a, 0x0, 0x3, 0xf, 0x13}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x81, 0x6, 0x2, "dd77c0ae", "53caa69a"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x5, 0x1f, 0x8, 0x9, 0xf29}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x40, 0x13, 0x57, "d7907d6ab339f05bf04eec516927206a9120f1d308207a78eef4dab04aa1ca1baf01be72c693b9329e058b6d72f56f8f422ffafc1f28ee3e46dea760ca06208e8865fc40d692f953518f16d010e58b72f93f76af6d2a96"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x220, 0x4}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x5f8}, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "c0a8"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "308c"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x20, 0x31, 0x4f, {0x4f, 0x4, "5cb286da774841ba5b0b70910e0a076dad5d475a894fffe5a503ed2000f5a3ad4affac564c0bc49ce4aa490f6f146cae121f35789bc04bed80048b7c1bdf4439729540178da44aa4babf68ab90"}}, &(0x7f00000000c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "ec624f972dbbe1d2ab2f046bb7814d8b0a7eea8173c7bedd996f2ce0d082c09676ffcd"}}, &(0x7f0000000100)={0x0, 0x22, 0x29, {[@main=@item_4={0x3, 0x0, 0xa, "d1ff8f14"}, @main=@item_4={0x3, 0x0, 0x9, "0c27e68b"}, @local=@item_4={0x3, 0x2, 0x7, "e92e7b65"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, "e3"}, @global=@item_4={0x3, 0x1, 0x0, "c769b584"}, @global=@item_012={0x2, 0x1, 0xb, "6919"}, @main=@item_4={0x3, 0x0, 0x9, "5e6b109a"}, @local=@item_4={0x3, 0x2, 0x3, "3b9e0d30"}, @local=@item_4={0x3, 0x2, 0x0, "687761ef"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x514}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x20, 0x14, 0xdf, "cf55476379c777e87a8f5df4602b4c6bfbdfe1b7b34f792955978f7ca80eb97adcffed54ab91c2c4b67da865b894ea81e002f8d4213d3ea75545b83aecd38b82e319a21dbdb99ccc1513ac8c5136eafb95e97f7982d7615fca4f0c17ec8af61082b05128e378f5ab32b5adbbd71f895ffc8ea33171835f9313017941cb6ee884b1a6c0365e5fbe501a80ae70eb9e6d44ecefdda0637be495922d8aa8d4951114a30e222e59f9800cbb94c91eddead1dfebd3e8c7a694e84bb6238cee54855a53323dcb75a27972a5badce7f28097727b81b3d352b3fbb303d012d4bc0f7d44"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7c}, &(0x7f00000004c0)={0x20, 0x1, 0xef, "96e8de5be574c6e29ab7452bd934344518f7d57503a8381ed35ea6cba9d714c48f1a81593e65911a5013b127e244209b12bec00a38609ffd2a055514032cffd2f9ae7fe2c4ab2155afb74141ceecc695b8cb864d1769b2674d0b08041ea464909dc14518e8f557e6fee67701883a332333413f0df0b0348f0a6677596019dd0d0ab62324af9d6c2f08622a08497e016bf04f1dcfc0f3d1fb0262e4e7520f3ad894e498445595df7942eb2d82a417fb89b863fe3e419e5571338d0cced5cf26284f5c14627643f5425f1bf9e3c92cd312d25d49c8cf561109d8291085bc1c6b46dbd9fbee7a64f33fe4f01e8e756214"}, &(0x7f0000000280)={0x20, 0x3, 0x1, 0x24}}) (async) 05:36:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x121000, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x3, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1638.454081][T27370] usb 6-1: USB disconnect, device number 117 [ 1638.779741][ T5730] UDC core: couldn't find an available UDC or it's busy: -16 [ 1638.787152][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1638.798535][T30029] gspca_vc032x: reg_r err -32 [ 1638.800669][ T5730] UDC core: couldn't find an available UDC or it's busy: -16 [ 1638.810751][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810768][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810779][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810791][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810802][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810812][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810823][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810834][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.810845][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.820983][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1638.866080][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.871922][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.877447][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.880989][ T5730] UDC core: couldn't find an available UDC or it's busy: -16 [ 1638.883678][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.895865][T27370] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1638.897309][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1638.903872][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.911545][ T5730] UDC core: couldn't find an available UDC or it's busy: -16 [ 1638.917109][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.929826][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.935272][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.936359][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1638.941135][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.954656][T30029] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.955366][ T5730] UDC core: couldn't find an available UDC or it's busy: -16 [ 1638.960478][T30029] gspca_vc032x: Unknown sensor... [ 1638.970128][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1638.973050][T30029] vc032x: probe of 4-1:0.0 failed with error -22 [ 1639.148410][T27370] usb 6-1: Using ep0 maxpacket: 16 [ 1639.428574][T27370] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= 0.31 [ 1639.438046][T27370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.446523][T27370] usb 6-1: Product: syz [ 1639.451101][T27370] usb 6-1: Manufacturer: syz [ 1639.456512][T27370] usb 6-1: SerialNumber: syz [ 1639.465422][T27370] usb 6-1: config 0 descriptor?? [ 1639.510070][T27370] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1640.168432][T27370] gspca_vc032x: reg_r err -32 [ 1640.173870][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.180198][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.185637][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.191100][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.196460][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.201905][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.207233][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.212652][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.217934][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.223359][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.228782][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.234076][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.239442][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.244733][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.250065][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.255352][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.260717][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.266008][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.271402][T27370] gspca_vc032x: I2c Bus Busy Wait 00 [ 1640.277473][T27370] gspca_vc032x: Unknown sensor... [ 1640.283497][T27370] vc032x: probe of 6-1:0.0 failed with error -22 05:36:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) (async) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x5228}, {r0, 0x24}], 0x4, &(0x7f0000001580), &(0x7f0000001600)={[0x10001]}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, 0x0}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYBLOB="ee4f465f97a9687188f6d6539d80637d693e19863448b6f73c29e63f9db3388db73064cb0f23e2cf883c82f3d7f9c69b0baef9ceb7d158d22f0f4ab7d0cd508ae707b6690e830eaec523a23e8b67017670315807e9e201ee8f0712169d458c8341a324a3da7ece62cd7cdc09b68fddb7439c77a83c11d4b4b3d91ae9f55f55587a3f2c50521fa89b076d0044e1e1ccccfb29c0e5cc63f02842059539b1c646137faa9976a82f9f8e4e5eb05220b9215be93ff077546efc3dc72a0d9c01ef7281359dd8de8a1adb7ac9e921214bc6fc0d1a87cec9ade69e69fcbb0f514a041b07405a76d5c670a83396163c0d2ac43209640702d49dc3bebb9cd57f2e38540b23610bb770159b58992406c30c16f83e7b1fedb55e3e844edbf0c7df535ded44dd86341d23a9ca7f8abd1d61120f0bc097c6b2d6a010661e7fe8dd62a4e53ccddc4f1c485e7c7c25f0289ba9eb24686ecf79664fb8eecd2ca22b52e87cf4c1d9cac798964623a0102b06de842a17e1e2eb76628db35ccc80cea31b64bf7705719c8f309f29cb0f146c0b92b0203485c9e366856bd0c8261a6f1910a5356d571b09b86283439ff29746d29c422155e3247312f7e3855cd6fdb33ce3f94729a39cf2905090204280924af78e5d6423b309b10ad72a5d0a3ea3923bf3bcb2ddf78e00de101bd6c8d8aa5e8de0e295dd47b874a8d83f5e3adcd162ed237e69570a3b62d808f77d9b66f26b4c1381bbf57459e052dfdd4a1fc1a6d85b14c9873463a330301e72546b3d8159e2d5f11a9d8c691bd00a81fb8fdf5d9c8a4892ec4d3bfdc4c4797d31d55fad191c140ef3645bbfe104167f686a8366507faef1e48d6ac45c1fbfc6e661573fb59801a586fc573e4208e11fca8ed9974c54ec1e22dd506e991cdb2e9cd73e9c090b250f3bb83da07d4b88ff57fb23e2447b554a80ee850fb1ea1def7a53d6d4df93bb4e309d6ece8b3b10696d26a1e0274de4b2df66e2676617369abe042b39cb3019edafd7065be08e08f9cc3117344524117852c4780b83f136277d7cb3daaaff3b389e94aac38a299ff6e73ab801ed64221a945b245b371e414fe88dda6a20c09e759e23786624a2c87f4ceb98a3ba955aaf82aa67f68e7e2abe6764fa3b70c17c35154e3171bdb8ffe81f3a09a67d14f2263c1fb994a97546e0486c3812f3b3c655bdb07f4561cbc74e1af4931a49ee9c434747707e20edbb879503c31d8a5743ba08ddcce6e34ad41e056ab0322f7c785503734035c5772605c9940e645569b5ff2e2d9ee8354cf27b3f02f6bd84e66ecaf578851af09a94e67bd321140bdf24406ee95c5488173ad5de478078ff327c3743f177399624d1578c0d36cce706d20fcac148cddec8a4eaf68a84f9dce694d864b548a3ea102e32c5dc45833fd7d431add78e5c71095d07efa39723f3bba571a5f6afb37becade296dad1fed489a74470777f976d2e02c7acbf8b8da703bae69f42bf6af67532e9c2cc7ee39b49f3bed236b3190165a988c9a6088c76637e2f130cdc3150ced3d5b0f8e567335ef6870484d72d3d82b5a51b243d9a00163130adc7ebe21d69c344ea81e7ff675c705738bba151d100ca05a656aa9b789e21cbef6b80fc1702bc298942ec0914046e92f290dd5b06cff92194a8f1abef9dfca14c692b62adafc924519eaf0fda99f5612f5037671e071afc51ff397294b9d009cdd9adb97348de20373586351101d802339a30ba4278439be666a58220d424f4ed1b2fe2eab9f740c134268d0402f6d091a256c6ef7310852ee8bf89fe9521551f32e73f478ef9d75ac67876b7ae0ad50f14c43bee8c551a0837baf94cb93c86ab52dfe5afa4c8c0cbd7f856bdc0f06abda69ea0f9ff6fff1bd901c307acc145834b41370b378d26057c80b38cb29c1cc3bdcf675befc5bb0f69f9d2cc56788ae228df0e4c7fd19e32f58f5d5b9f8cd053252e1084e6e90f308325a295c10cf302a0b12fcffcbe326aa1921a5df5d4361920dd3db516eadc6392e96a1e062aabb1ab2486d14db0418dcdbbe55eb6f3b952cbae8c2e74fde419e4b9f9fe76dc3ca9a0cf5854da8eaf00151cc4c9d774d8e699bf91044866e38be868b5b28957db7674d0f531687d0c30f4cafaecd6d352228b03642edc353643b7f2ab7372cdeb4817bd4760835a8b594ffdca6923d5903e7c8670578164d71edb3e77a933e54dc6864d5b5fc0e4e2283e04a1ff1fc80747f420beae538ebf4b50d1d53d52995520054a89b1283134db615c419adbdd6e1d12a8b341683f7dc99ca0736f3124411273704b5308d15b95e167cd5c739ae80262c04d3c4e467e5dbe83366115852c1313902486b6d0abdcae66c0eb8880df29b6bab295798588d8732e097edc24e743f6512d0c89ec9ad448fa1dc8158e2f2f89d8610986f2cb66cb67bcfc8fe6a0813eadccf6f1b8e86600e421566fce15f84af2a1591fe03506aab09462eba364446796d693c071f02677f27dba201c496b53d0d6c52b8912b5229fba98e8781fbc4deeb013f80086d5f3c7cc4468d4fc3c807edb4e7a7fab8a92c191833a2da369ec35fab835a19b0ca5105079813619e8f6408fd3a35bca49cdc125762413b52277d60a78a69350f372ddd5d834222bf876cc39fdc1ae5f1d9aeb5bd6bc31fda10451ef413a3f99434113572179073356d7ae5fd8a923da9350dbb48699fa463be2486ff1050f1255561541f7528042d3b1b38924f6b5eb85dd726d6cadce032b6beec6ea239f8a055826bbbb1af8e8a5125dac1dd144fc03cd1ac674409f70570f9725e1db2425c0f529c25b886039c6af4f32b2e001e96c8ba279e26262d0b6aa7ac19e18514ad799c50e893721bc8422a44bed7d9cd48210e11084e5cccef590daa123756d17df7107fe708ba2cbea6ada1d2411dc196b8fecc64321a57d9d0cd8d3b6dc2a80c0a7568b69f813143d287d39431f192d84755bc3dad05cac8eb8ec72f851af8cbe14c8adfb4977364125db05e7adddd608e61e5148a5206a42b5bd2cbd574d07af1a64547fac4c70792875a871a6125e7482b9bc8a07c6cdb9a4330d1fbc8c4b1897f2dbd34ea0423a5ba0f7c280c45a62272b539391a8a0481d3b64b1552a914ce11e0d494a1beb15d31e2f2e29a06827a5cc95eddf5c0b5c155eb1b5ee2cdade6b9b773a0f29a2d3185cd473275981e3432c8ad8e1b5734d56d4d5e9838bdd98d24c8e0163428c87705d103b23a02abe05a244eaae1f64b2d64fb0d4d918711d7c2daa251214fb57cdf2e4281540d3e2472d038e562c24099836d10fddfa421a4fb0423511369dc88fad31f29612312b713bb9760c5c577bd4ff10fab40f3fa576f215e3f61ac8005e8eb19d826365ae5ece61967468338430d6effde734b2c9cfb263ba1ca25ceac0910ba63c03d89a70abe88eac4fb55caf222ede13421f0485d2333dc120afc4fa3407b07b86d519d9bc68ffe704c3b91066189d56d0b8cd40fd0387b5bda016145738265fb5482b373df5c97a47bdf067c3606a6ec3e3aa3afced0ff413b3e30a74365ad8c9c02ab9202210345565851b884ed98339afd7f98424dd5824882400dff8cb9e6e11ba0a40b83bcf676df775364733daaea583e5c15d5fe396c47710836d8219d51c3f3743a1ebc5836c0aeef3d3bf4c3a00c90b09898cee90f2d358cae9b110c766cebdc893a598e2ec4843514b4a44e1e9caf080c5f198c8e179201fed8e97899250868676fab0c40f58da00b2260a9943d7b55d3eed393f539e5e4dfa01da019f42b696f584609a3f69c39347e8d1bdc37ff1fb15e0a1c18ddedae9654df740c6945f48ac039a6dae67b16c2c58600745e9e287b8b1761d45e895154dc67a2cd99eeb9245a9a720ff55d341148f73676463908cbca116ebc1e5651034067dcd386564f787f5d6c2cd57161894f3e724e1571c94f371b1768fc125124bce9edd9cd6034c18b685f86ca65f65914ef630bbf2d917890357ba7d4016a56571d343d64a4f7baf3dbbeef2d9d6c1385caff3b388daaf7db11468568567c366fb19ce1e44f696e26b4161dd48a82eb36d3cee5f391a4bc9f6e724695da5538c6fea6e9fef6c346b7310fd7bb7c9d0f4c6a608a60e7d30ac890fab1bdd4bbf29c867de7c8a04b9eb94195d49ecd5305cd8fc1c1ceef2f8cb07bbfd63ce16f586ddfa02e835bbaa72213df93c61deeae41a5d37e53c86742ca31e636d0df66209aebcc6b5a4b7431d2c19aaa275be851335fa2df6a8514e4c624b040ac0e6dfe751924c01d50f781b69f1cc47700893ee47489cd1be38973548158587c78b1dc90f7abc3dbb148494db75742fa0273eb0a19f56abdcd307d4cd73260f81fd988bf0043e5cf330cee1044a14abe4037710d435b7ed11473d8aa3516fd2fd4e0d1c11256f1e6da8fcbfb10679ed710db59ce934c8a618c91b743a8fca86dd27a1fa52db4da96a79d387995d541cde94ed87661d8ff284b1ca944e0ad4758c3b36530e9cc348de511f1b720c7bb60ad01e7e750268a788948e45d9250c31a1b6bfe16d9f62ebd9b7859e63e9a845a61f623fcabfe4ccd8b6809b0ae91e735c81cc797ba3ef876cc2fd6fdc672dbc480ea9891448009d6b01f530576c6d4801c3b986ed379a6fac3e47d3acfd8a6dce542dc7b90e56cbf2d12459bc2a7eaa215a6ee1e6870f303007e59bd0b6c4ed3833b7752a16bfa52042cc360af9bb5cc5b575042ace78f5976e19b07cee737be2c21227ff5868a1ec7fed70f7ef0cfa10f5387e8da26e1d5108cf3260661ec6e815e200033506c63a019c6e7027953a128458833bc7d19eaa64e1d1fa32fc70e643b9eff0839740828102d6de54da953383fa5f5ba9f3da41ff6008503dfdae4b4e73920201504b238dcfd130da62001dcd3719974421ad9e1f76f9873b0254d9d06a2c1e5bff9b0625817b85885205ebfaabd129395ed3390d21f4ab0865d53d2d7693208449fe059d6f867e88830a07073771f1f2c58aa225ec8a4ab4b5591d311f91820a538862a50a4e8eaa605984c3da0bc2bbf68c879c434596b667e0890c3e883f1d6d4bb7a53489b93324d2e49b3d6632f0cc645d6360f94fb49b311b4ac8aaff58c42146e6bb7bfc80f93362c2aa63ba4b593db0659a5761c3377d02a4e37fc729732c56e93e1848e6eee55106dff27ac073c2dbbf9577e3e55735625134fa239173ad71b139af4520427d6e7ecea9f32fdf8a7151620721f3ffbe99aa93ce94129704227f8a0459bf0ffafc586b84b7711fbdf3204d80d7aac7d30ed26a204e60eb3976b993b18952c1e07c7bcabd086c046915d9ad1ad8daa4319ad88112efb92be38404a16fff807df1107380842fe3cd275025b9e192f93e8ddb2686ad74599a4d1f306bc6af56e6570fdc128c31e5f52d40e7446e3836f00778e703a5caa688cf4207384e2eb529c3615585ba2c2fa4d90eb51411f0e6ef6ce18d2552ae328d38655394b765bcfd9cf4d5d0b5e199c871608eb9687986eec787908a637210174b0fd5bf5781e06e58d77085ca07d65aa4343b840ece0dd42619097c09083a669304a7f5a0719f411cebd7555ec89c870a1c8a62b59db89c244081a6cd015cd1cc0a5ec15af72ded10b4d1282170022fe80df1b2eb6a7885f810df596fbabe385abf908ebea86de5da576656a5e81ffe959e588a8ee485c2a723356abb409fac87eb18b08c6eb36fd7b59437dcbbe3936de3e40cf1adfc2ec84084068286802ef0b51ff6e9bbf5fa5c5a12401ef29506386c962af201b2abc0277a0930e8", @ANYRESDEC=r1, @ANYBLOB="f425c61c00db76e43dfc79d78b0d", @ANYRES32=r5, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESDEC=r2]) (async) r6 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) 05:36:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d5a3110c80a01c33100010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x6, 0x5c, {0x5c, 0x23, "5f4a66ae8bf4a7da2fb50037a845eaba72fcafaa1642e194608828ae5ccc67e86dd044198b4f35247cde1070e27ee88677c82a2fd9ac3dfa5c9095b7695546ad8ac40075a91509f7f540539469127f3bd90a5d1709d1bd8d3c52"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f0000000140)={0x0, 0x22, 0x13, {[@global=@item_012={0x1, 0x1, 0x1, "f5"}, @local=@item_4={0x3, 0x2, 0x0, "a4e0e84f"}, @main=@item_012={0x1, 0x0, 0x8, ','}, @global=@item_012={0x1, 0x1, 0x8, "84"}, @main=@item_012={0x2, 0x0, 0xb, '70'}, @global=@item_4={0x3, 0x1, 0x3, "bc2ec26c"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x81, 0x1, {0x22, 0xd76}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x1, 0x11, "6e33261277dce424c78cd9d9bb6376023d"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000f38b0000bdb3b5ad37cb70bb582f66363e5ab6a3dcd89f4230e5c03368"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:36:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x121000, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x3, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)) (async) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x121000, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x3, 0x7f}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) 05:36:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = dup2(0xffffffffffffffff, r2) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x7, 0xaf62, 0x0, 0x7, 0xffff}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:34 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r1], 0x0) [ 1640.310374][T27370] usb 4-1: USB disconnect, device number 58 05:36:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 05:36:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = dup2(0xffffffffffffffff, r2) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x7, 0xaf62, 0x0, 0x7, 0xffff}, 0x14) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) [ 1640.549780][ T5738] ------------[ cut here ]------------ [ 1640.557464][ T5738] kernel BUG at drivers/vhost/vhost.c:2335! [ 1640.564588][ T5738] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1640.570680][ T5738] CPU: 1 PID: 5738 Comm: vhost-5737 Not tainted 5.17.0-rc3-syzkaller-00020-g555f3d7be91a #0 [ 1640.580759][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.590829][ T5738] RIP: 0010:vhost_get_vq_desc+0x1d43/0x22c0 [ 1640.596852][ T5738] Code: 00 00 00 48 c7 c6 00 38 9d 8a 48 c7 c7 18 62 8e 8d 48 89 ca 48 c1 e1 04 48 01 d9 e8 a7 39 29 fd e9 74 ff ff ff e8 9d ed a3 fa <0f> 0b e8 96 ed a3 fa 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df [ 1640.616476][ T5738] RSP: 0018:ffffc9000443fb88 EFLAGS: 00010212 [ 1640.622562][ T5738] RAX: 000000000000137a RBX: 0000000000000001 RCX: ffffc9000ef0c000 [ 1640.630550][ T5738] RDX: 0000000000040000 RSI: ffffffff86d48af3 RDI: 0000000000000003 [ 1640.638534][ T5738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1640.646522][ T5738] R10: ffffffff86d47bec R11: 0000000000000000 R12: ffff888074354d68 [ 1640.654526][ T5738] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888074354bb0 [ 1640.662489][ T5738] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1640.671438][ T5738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1640.678012][ T5738] CR2: 00007fdcbc39f090 CR3: 0000000071539000 CR4: 00000000003506e0 [ 1640.685976][ T5738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1640.693933][ T5738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1640.701891][ T5738] Call Trace: [ 1640.705169][ T5738] [ 1640.708099][ T5738] ? mark_held_locks+0x9f/0xe0 [ 1640.712856][ T5738] ? vhost_signal+0xb0/0xb0 [ 1640.717367][ T5738] ? kasan_quarantine_put+0xf5/0x210 [ 1640.722706][ T5738] ? slab_free_freelist_hook+0x8b/0x1c0 [ 1640.728255][ T5738] ? vhost_vsock_handle_tx_kick+0x7db/0xa20 [ 1640.734218][ T5738] ? kfree+0xcb/0x280 [ 1640.738199][ T5738] vhost_vsock_handle_tx_kick+0x277/0xa20 [ 1640.743958][ T5738] ? vhost_vsock_chr_read_iter+0xb0/0xb0 [ 1640.749590][ T5738] ? rwlock_bug.part.0+0x90/0x90 [ 1640.754528][ T5738] ? lockdep_hardirqs_on+0x79/0x100 [ 1640.759725][ T5738] vhost_worker+0x23d/0x3d0 [ 1640.764220][ T5738] ? vhost_dev_reset_owner+0x160/0x160 [ 1640.769669][ T5738] kthread+0x2e9/0x3a0 [ 1640.773873][ T5738] ? kthread_complete_and_exit+0x40/0x40 [ 1640.779613][ T5738] ret_from_fork+0x1f/0x30 [ 1640.784074][ T5738] [ 1640.787084][ T5738] Modules linked in: [ 1640.807282][ T5738] ---[ end trace 0000000000000000 ]--- [ 1640.813173][ T5738] RIP: 0010:vhost_get_vq_desc+0x1d43/0x22c0 [ 1640.824143][ T5738] Code: 00 00 00 48 c7 c6 00 38 9d 8a 48 c7 c7 18 62 8e 8d 48 89 ca 48 c1 e1 04 48 01 d9 e8 a7 39 29 fd e9 74 ff ff ff e8 9d ed a3 fa <0f> 0b e8 96 ed a3 fa 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df [ 1640.847066][ T5738] RSP: 0018:ffffc9000443fb88 EFLAGS: 00010212 05:36:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r3 = dup2(0xffffffffffffffff, r2) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x7, 0xaf62, 0x0, 0x7, 0xffff}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) dup2(0xffffffffffffffff, r2) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x7, 0xaf62, 0x0, 0x7, 0xffff}, 0x14) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) [ 1640.854643][ T5771] UDC core: couldn't find an available UDC or it's busy: -16 [ 1640.858344][T30029] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1640.864693][ T5738] RAX: 000000000000137a RBX: 0000000000000001 RCX: ffffc9000ef0c000 [ 1640.877927][ T5771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1640.896960][ T5738] RDX: 0000000000040000 RSI: ffffffff86d48af3 RDI: 0000000000000003 [ 1640.905494][ T5738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1640.907715][ T5771] UDC core: couldn't find an available UDC or it's busy: -16 [ 1640.922251][ T5738] R10: ffffffff86d47bec R11: 0000000000000000 R12: ffff888074354d68 [ 1640.930832][ T5738] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888074354bb0 [ 1640.939381][ T5738] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1640.948851][ T5738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1640.955740][ T5738] CR2: 00007f1c89df4110 CR3: 0000000071539000 CR4: 00000000003506f0 [ 1640.964229][ T5771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1640.972364][ T5738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1640.980805][ T5738] DR3: 000000000000000b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1640.988835][T27370] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1641.005267][ T5738] Kernel panic - not syncing: Fatal exception [ 1641.011561][ T5738] Kernel Offset: disabled [ 1641.015879][ T5738] Rebooting in 86400 seconds..