7f32e787cae9 [ 2948.875785][ T1982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2948.895539][ T1982] RSP: 002b:00007f32e85500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2948.904195][ T1982] RAX: ffffffffffffffda RBX: 00007f32e799bf80 RCX: 00007f32e787cae9 [ 2948.912924][ T1982] RDX: 000000000000fdef RSI: 0000000020000800 RDI: 0000000000000003 [ 2948.920942][ T1982] RBP: 00007f32e8550120 R08: 0000000000000000 R09: 0000000000000000 [ 2948.929044][ T1982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2948.937069][ T1982] R13: 000000000000000b R14: 00007f32e799bf80 R15: 00007f32e7abfa48 [ 2948.945369][ T1982] 23:22:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000f, 0x4000010, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async, rerun: 32) r5 = accept4(r4, &(0x7f0000000140)=@caif=@util, &(0x7f00000002c0)=0x80, 0x80800) (rerun: 32) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00'}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x3f, "926042ffe80d24cdd7b2cf654a6e28c55c9937d09aea7946b3709a2b5643c388ca48714897b020cb380fbc0dd74eed5c521530fbf8622ece7994e61104f206"}, &(0x7f0000000300)=0x47) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) [ 2949.118532][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.131939][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2949.174061][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:22:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) (fail_nth: 23) [ 2949.259192][ T5541] usb 2-1: config 0 descriptor?? [ 2949.375644][ T2009] FAULT_INJECTION: forcing a failure. [ 2949.375644][ T2009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2949.394428][ T2009] CPU: 0 PID: 2009 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 2949.404612][ T2009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 2949.414805][ T2009] Call Trace: [ 2949.418131][ T2009] [ 2949.421109][ T2009] dump_stack_lvl+0x125/0x1b0 [ 2949.425869][ T2009] should_fail_ex+0x496/0x5b0 [ 2949.430628][ T2009] copyin+0x1b/0xa0 [ 2949.434515][ T2009] _copy_from_iter+0x1e5/0x1270 [ 2949.439444][ T2009] ? _copy_from_iter+0x256/0x1270 [ 2949.444551][ T2009] ? iov_iter_extract_pages+0x1870/0x1870 [ 2949.450354][ T2009] ? sock_alloc_send_pskb+0x72b/0x950 [ 2949.455785][ T2009] ? iov_iter_extract_pages+0x1870/0x1870 [ 2949.461639][ T2009] copy_page_from_iter+0xa5/0x120 [ 2949.466745][ T2009] skb_copy_datagram_from_iter+0x41d/0x6b0 [ 2949.472625][ T2009] tun_get_user+0x195b/0x3cd0 [ 2949.477377][ T2009] ? tun_build_skb.constprop.0+0x1240/0x1240 [ 2949.483414][ T2009] ? rcu_is_watching+0x12/0xb0 [ 2949.488329][ T2009] ? reacquire_held_locks+0x4b0/0x4b0 [ 2949.493789][ T2009] tun_chr_write_iter+0xe8/0x210 [ 2949.498792][ T2009] vfs_write+0x650/0xe40 [ 2949.503105][ T2009] ? kernel_write+0x6c0/0x6c0 [ 2949.507871][ T2009] ? __fget_files+0x279/0x410 [ 2949.512641][ T2009] ? __fget_light+0xe6/0x260 [ 2949.517295][ T2009] ksys_write+0x12f/0x250 [ 2949.521695][ T2009] ? __ia32_sys_read+0xb0/0xb0 [ 2949.526519][ T2009] ? rcu_is_watching+0x12/0xb0 [ 2949.531472][ T2009] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2949.537544][ T2009] do_syscall_64+0x38/0xb0 [ 2949.542035][ T2009] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2949.548092][ T2009] RIP: 0033:0x7f32e787cae9 [ 2949.552552][ T2009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2949.572504][ T2009] RSP: 002b:00007f32e85500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2949.581041][ T2009] RAX: ffffffffffffffda RBX: 00007f32e799bf80 RCX: 00007f32e787cae9 [ 2949.589066][ T2009] RDX: 000000000000fdef RSI: 0000000020000800 RDI: 0000000000000003 [ 2949.597082][ T2009] RBP: 00007f32e8550120 R08: 0000000000000000 R09: 0000000000000000 [ 2949.605093][ T2009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2949.613125][ T2009] R13: 000000000000000b R14: 00007f32e799bf80 R15: 00007f32e7abfa48 [ 2949.621153][ T2009] 23:22:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x2, 0x400, @status={[0x8, 0x1, 0x8, 0x80000001, 0xfc1, 0x6]}, [0x5, 0x8, 0x0, 0x1ff, 0x0, 0x2, 0x20, 0xad75, 0xfffffffffffff8c0, 0xc44, 0x8, 0x6, 0x9, 0x6, 0x7fffffffffffffff, 0x1f, 0x647, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0xfff, 0x8000000000000001, 0x8, 0x3, 0x7, 0x7, 0x8000, 0x80, 0x4, 0x1, 0x9, 0x1000, 0x0, 0x7, 0x9, 0x6, 0x5fbe, 0x4, 0x7fffffffffffffff, 0x5, 0x0, 0x8, 0x4, 0xfffffffffffffffb, 0x2, 0x8, 0x80, 0x5, 0x100000000, 0x2, 0x4, 0x9, 0x7, 0x0, 0x80000000, 0x2, 0x1ff, 0x100000000, 0x3, 0x0, 0x8]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x7fffffff, 0x2cd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e375df8d76d7b4c052e2d1c657cfe3bd1b6ea610e13c7a56c8d5eeedf5b9ec2a06384abb6a299cf91693b5613de936421d664e9859fe33"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) (fail_nth: 24) [ 2949.852147][ T2027] FAULT_INJECTION: forcing a failure. [ 2949.852147][ T2027] name failslab, interval 1, probability 0, space 0, times 0 [ 2949.864904][ T2027] CPU: 0 PID: 2027 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 2949.874949][ T2027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 2949.885057][ T2027] Call Trace: [ 2949.888384][ T2027] [ 2949.891348][ T2027] dump_stack_lvl+0x125/0x1b0 [ 2949.896136][ T2027] should_fail_ex+0x496/0x5b0 [ 2949.900894][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2949.905961][ T2027] should_failslab+0x9/0x20 [ 2949.910500][ T2027] kmem_cache_alloc+0x69/0x3b0 [ 2949.915309][ T2027] ? lock_sync+0x190/0x190 [ 2949.919776][ T2027] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 2949.925676][ T2027] dst_alloc+0x9d/0x1b0 [ 2949.929888][ T2027] ip6_dst_alloc+0x33/0xa0 [ 2949.934353][ T2027] ip6_pol_route+0x93f/0x1220 [ 2949.939072][ T2027] ? ip6_pol_route_lookup+0x1df0/0x1df0 [ 2949.944658][ T2027] ? debug_check_no_obj_freed+0x245/0x4c0 [ 2949.950445][ T2027] ? ip6t_do_table+0xcfa/0x1d20 [ 2949.955426][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2949.960233][ T2027] ? ip6_pol_route+0x1220/0x1220 [ 2949.965211][ T2027] fib6_rule_lookup+0x11e/0x5f0 [ 2949.970155][ T2027] ? fib6_lookup+0x2e0/0x2e0 [ 2949.974793][ T2027] ? ip6t_do_table+0xcfa/0x1d20 [ 2949.979771][ T2027] ? __local_bh_enable_ip+0xa4/0x120 [ 2949.985081][ T2027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2949.991025][ T2027] ip6_route_input+0x5d9/0xbb0 [ 2949.995827][ T2027] ? ip6_route_check_nh+0x6f0/0x6f0 [ 2950.001066][ T2027] ? reacquire_held_locks+0x4b0/0x4b0 [ 2950.006564][ T2027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2950.012592][ T2027] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 2950.018785][ T2027] ipv6_rcv+0x43b/0x6f0 [ 2950.023054][ T2027] ? ip6_rcv_core+0x1e10/0x1e10 [ 2950.028119][ T2027] ? ip6_list_rcv_finish.constprop.0+0xaf0/0xaf0 [ 2950.034565][ T2027] ? lock_release+0x4bf/0x680 [ 2950.039274][ T2027] ? lock_sync+0x190/0x190 [ 2950.043724][ T2027] ? netif_receive_skb+0x282/0x7b0 [ 2950.048869][ T2027] ? ip6_rcv_core+0x1e10/0x1e10 [ 2950.053859][ T2027] __netif_receive_skb_one_core+0x115/0x180 [ 2950.060356][ T2027] ? __netif_receive_skb_list_core+0x8a0/0x8a0 [ 2950.066561][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2950.071350][ T2027] ? read_tsc+0x9/0x20 [ 2950.075464][ T2027] ? ktime_get_with_offset+0x306/0x520 [ 2950.080968][ T2027] __netif_receive_skb+0x1f/0x1b0 [ 2950.086044][ T2027] netif_receive_skb+0x135/0x7b0 [ 2950.091017][ T2027] ? __netif_receive_skb+0x1b0/0x1b0 [ 2950.096340][ T2027] ? iov_iter_extract_pages+0x1870/0x1870 [ 2950.102109][ T2027] ? sock_alloc_send_pskb+0x72b/0x950 [ 2950.107516][ T2027] tun_rx_batched+0x4d8/0x7b0 [ 2950.112233][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2950.117022][ T2027] ? tun_flow_cleanup+0x310/0x310 [ 2950.122108][ T2027] ? tun_get_user+0x1d8e/0x3cd0 [ 2950.126980][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2950.131773][ T2027] tun_get_user+0x2a46/0x3cd0 [ 2950.136497][ T2027] ? tun_build_skb.constprop.0+0x1240/0x1240 [ 2950.142524][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2950.147331][ T2027] ? reacquire_held_locks+0x4b0/0x4b0 [ 2950.152863][ T2027] tun_chr_write_iter+0xe8/0x210 [ 2950.157841][ T2027] vfs_write+0x650/0xe40 [ 2950.162311][ T2027] ? kernel_write+0x6c0/0x6c0 [ 2950.167034][ T2027] ? __fget_files+0x279/0x410 [ 2950.171749][ T2027] ? __fget_light+0xe6/0x260 [ 2950.176393][ T2027] ksys_write+0x12f/0x250 [ 2950.180767][ T2027] ? __ia32_sys_read+0xb0/0xb0 [ 2950.185575][ T2027] ? rcu_is_watching+0x12/0xb0 [ 2950.190391][ T2027] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2950.196736][ T2027] do_syscall_64+0x38/0xb0 [ 2950.201213][ T2027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2950.207158][ T2027] RIP: 0033:0x7f32e787cae9 [ 2950.211600][ T2027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2950.231405][ T2027] RSP: 002b:00007f32e85500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2950.239884][ T2027] RAX: ffffffffffffffda RBX: 00007f32e799bf80 RCX: 00007f32e787cae9 [ 2950.247891][ T2027] RDX: 000000000000fdef RSI: 0000000020000800 RDI: 0000000000000003 [ 2950.255886][ T2027] RBP: 00007f32e8550120 R08: 0000000000000000 R09: 0000000000000000 [ 2950.263884][ T2027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.271877][ T2027] R13: 000000000000000b R14: 00007f32e799bf80 R15: 00007f32e7abfa48 [ 2950.279893][ T2027] [ 2950.335646][ T2031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.380592][ T2031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.429840][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.447096][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.478849][ T5541] keytouch 0003:0926:3333.00B5: fixing up Keytouch IEC report descriptor [ 2950.536464][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B5/input/input210 [ 2950.649319][ T5541] keytouch 0003:0926:3333.00B5: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2950.696766][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.705846][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.721885][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.735084][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.768176][ T5540] usb 2-1: USB disconnect, device number 89 23:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x780040}], 0x1, 0x0, 0x0, 0x0) 23:22:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) (fail_nth: 25) 23:22:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x2, 0x400, @status={[0x8, 0x1, 0x8, 0x80000001, 0xfc1, 0x6]}, [0x5, 0x8, 0x0, 0x1ff, 0x0, 0x2, 0x20, 0xad75, 0xfffffffffffff8c0, 0xc44, 0x8, 0x6, 0x9, 0x6, 0x7fffffffffffffff, 0x1f, 0x647, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0xfff, 0x8000000000000001, 0x8, 0x3, 0x7, 0x7, 0x8000, 0x80, 0x4, 0x1, 0x9, 0x1000, 0x0, 0x7, 0x9, 0x6, 0x5fbe, 0x4, 0x7fffffffffffffff, 0x5, 0x0, 0x8, 0x4, 0xfffffffffffffffb, 0x2, 0x8, 0x80, 0x5, 0x100000000, 0x2, 0x4, 0x9, 0x7, 0x0, 0x80000000, 0x2, 0x1ff, 0x100000000, 0x3, 0x0, 0x8]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x7fffffff, 0x2cd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e375df8d76d7b4c052e2d1c657cfe3bd1b6ea610e13c7a56c8d5eeedf5b9ec2a06384abb6a299cf91693b5613de936421d664e9859fe33"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x2, 0x400, @status={[0x8, 0x1, 0x8, 0x80000001, 0xfc1, 0x6]}, [0x5, 0x8, 0x0, 0x1ff, 0x0, 0x2, 0x20, 0xad75, 0xfffffffffffff8c0, 0xc44, 0x8, 0x6, 0x9, 0x6, 0x7fffffffffffffff, 0x1f, 0x647, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0xfff, 0x8000000000000001, 0x8, 0x3, 0x7, 0x7, 0x8000, 0x80, 0x4, 0x1, 0x9, 0x1000, 0x0, 0x7, 0x9, 0x6, 0x5fbe, 0x4, 0x7fffffffffffffff, 0x5, 0x0, 0x8, 0x4, 0xfffffffffffffffb, 0x2, 0x8, 0x80, 0x5, 0x100000000, 0x2, 0x4, 0x9, 0x7, 0x0, 0x80000000, 0x2, 0x1ff, 0x100000000, 0x3, 0x0, 0x8]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x7fffffff, 0x2cd}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e375df8d76d7b4c052e2d1c657cfe3bd1b6ea610e13c7a56c8d5eeedf5b9ec2a06384abb6a299cf91693b5613de936421d664e9859fe33"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:22:09 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x400, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x8], &(0x7f0000000280)=[r2, 0x0], &(0x7f00000002c0)=[0x3, 0x3, 0x7ff, 0x200, 0x2, 0x7fffffffffffffff, 0x7], 0x0, 0xef7}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffc6e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000002c40)={0x1, r2, r5, 0xeeeeeeee}) (async, rerun: 32) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x4, 0x111, &(0x7f0000001b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x7, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x5, 0x5, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x1, 0x3f, "8615e63973d7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x2, 0x2, 0x40, 0x5, 0xb2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x2fa, 0x5, 0x1, 0xa0}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x58, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0xf9, 0x1, 0x1, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x80, 0x3f, "590bce"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3f, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x5247, 0xcb, "0915c241927f249b44"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x40, 0x8, "f216", '8'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffb, 0xc96, 0x80, "0f7f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x8, 0x20, "3796ef33f0586a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x0, "4b44b8a9d7bab79416"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x9, 0xee5}}}}}}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x250, 0xe0, 0x5, 0x6, 0xff, 0xff}, 0x2d, &(0x7f0000001d00)=ANY=[@ANYBLOB="050f2d00030710020ca500001a1004e5bee22f106e663ade584ecac73b6c0b83803a822b041307100208200500"], 0x4, [{0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x41a}}, {0x30, &(0x7f0000001d80)=@string={0x30, 0x3, "e020dbc59c1d29760a96105e3a03315a2912ff2501e4c8108359c0c1869a0870ef4e46a8ebebc34a3aa2a5c1d975"}}, {0x2f, &(0x7f0000001dc0)=@string={0x2f, 0x3, "61b3b2645a42e60c531ad990c6546efee893d3baa28d7fbad86bd1145bd6ecdb0d3572496bba6f351edf5601a0"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_disconnect(r8) (async, rerun: 64) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) (rerun: 64) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000001940)={0x24, &(0x7f0000001800)={0x0, 0x21, 0x58, {0x58, 0xc, "5005bfb94517aec02522acbf51324df8bf7db9a6eb9b485cab5459f88305800568b2de2179569a169b6600d02ca0169c0a9342db74a58f6dc541edbe9e108d69677d6cb0d5cddd7948411d348d2050b46e97b6416121"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000018c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000001900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0x69c}}}}, &(0x7f0000001b40)={0x2c, &(0x7f0000001980)={0x0, 0xe, 0x69, "ab45b1c42dc1a330bf189311aa2853548858b2016f910e1fcf314bfdb83e78f8dce067735b8bc1e9152bc8a1414fd94e8c0df2bf45b5637d7e1ed6a652640185ee590ba235e0167b5bfd4cef4dcfb12a740d92ed6ad2bdd329c07cb3ec2e244c39efc508a532fc7341"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000001a80)={0x20, 0x1, 0x69, "fb1fa9c5a0ab96ddefff7cc311d0bc3e5e33b89e3564bf05d1fee14760130b8c1dbd0e4ed8850b1690b084de8ece61797e76fb4d0f5c01d731dd23416dccb40c74b82565205fff69f4ac8b76dede6778670132657462980bc2dda6a27419a6ecf33c2d5ef1e82ab2a1"}, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_connect(0x0, 0xbca, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2f, 0xfd, 0x8c, 0x8, 0x1bc7, 0x1062, 0x92c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x7, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x46, 0xff, 0x1, 0xff, 0xf2, 0x87, 0x7e, [], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xc5, 0x8, 0x4, [@generic={0xd7, 0x24, "2ef89cef58554ce1ff9782bc56185ebd69513b9ae54fca7172622fabdd244f729bf9624ff8d009d5bc08378313b97c2ed97100ba12a425b989d7d87163274fceeb2938f879ebcf0bdf0a8c32897189be966ed9688916d5aea90af638150b221b4276fe62d2cd8ed76848b67c898f2c15c4d2760bd3fdf2f5aad92f1381a3ab8d31fd02d3b0d1e265178a4cd3688fb743ae0fcf56de0a308438c4f58c7b25300e929e53259c460ebc01cb56a94deb7abd510618d94a0f4e5b2ad72961ec217c9f0a1087c3cc82521b3114ae4f42ae49ed0745b9b64f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x9}]}}]}}, {{0x9, 0x4, 0x2d, 0x5, 0xa, 0xff, 0x5d, 0x81, 0x40, [], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0xf8, 0x4, 0x0, [@generic={0xb6, 0x9, "54c7a0e7b66ad5475f323899405f82f3bca56d24ab12079923c7f22a174088b6e09af6b92e1e0916d6cd6285e824baa2516b5d48adbf9d0a8ec7669981f1ac8a09a37aba3de7925ab9feb129ccb4cc8baf3cfb73c01a18ab4d79d6296ac3e6d0be714adef43673e567cb1da40ede5e9268a38cb0b0fee90e225bc5521d4e714717bd1368117068653069b5a147c819cf59b8a289b837a42c1fa71f7b8036e0ae7f54c5f311773fe50c9de4ed64fcfccaabee7e64"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x5, 0xa9, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x80, 0x9, [@generic={0x84, 0x31, "5ff4414de69d7ff72aa97513663d72f91bd13497b5a5421943f00b3d9a5c6ffb2cddb993dc2ea2521d8d7b8facfec2718d129e1ce01e0b88d4a9d9f27b7f4583a0916c4582aa87d55ac0b304a0642d51837ba54212da1f15b0ca1d8ac4b61fdff7716a322a61d8799b9ff6c3a8b5e742ccfa22377f0248b3285a54a926fa60b4a3df"}, @generic={0x10, 0x8, "d490ca76593f886731c49ee5547f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7f, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x3f, 0xef, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xcc7}, @generic={0x78, 0x1, "c5e88fe85c35d5cd33c87e9850b7ef35b4a3040fb49edf351f72de8240f37961edcb49db1a51705506fc2a30be247179f08d36dc90d89e88a5e1b89117c3c607664163c537df6872411fe42bac6c89b43ed09d6ac4a138fc8e5c9b30cd61f94a651eea2aaa1a893cdf3bee9fdf297fbdbab64b3e25c9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x9, 0x7, [@generic={0x60, 0x9, "a953ce9f298e84c89ca84f1d7a721994a361c9b42707987b17cff93c26e77b05f73eab813bc35c86355cec6b78887b767a3b19e3b567384c4400ab4e1ae01d663d27b20684850b7c95323a0abf2a692289e0055af8dedb7c91a986528f9d"}, @generic={0xf1, 0x5, "f60535405f951100361e49931b1c02cd7d9111cf856f530f3456ecc84aac85fb66a1f49f494f3aa026bbcf0a5873c4098edca0ff77ea8a2478ef67e6b09ab98365bb3d74d35b880248fdb947f60411de983bfdf608085023597d7eb9419ba799666ed2accb0c16bfc5781e0899f33eee0ce981fe093533ef3216d1b66ee562c91029ff38f6c6fa240d35d013a51a65a79481d608d34a4c17104948e19d56bcc66a5893ffa11fe651ac0f235209b5e2f588a7001baa98d0a3cd6d3eca5b2968cbe61657b7b0220350075095c1b505c0c42a8d4bd44140eaab9cbf349ccc2a3ebc837ae188ea049befda33386a902672"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xd3, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20}, @generic={0xa7, 0xc, "959813d572f1bc82de3cd8aeaab2fb36f1bf105b8f9a7f052a186a879a9f7fd3e8a25cee4a98cc4214c31ab8aa823154bdd9c1d5a480cae5533ede1e5721fb1709f88adc4d0972e16169ec4bdf3856a1498c6ca0dcd7335d195ba688f52f4002749256dcb99e60dcc9ce6582caefed612a69e16c0ed6e59c40b3b2bf582f2e738d09e071053af5fec44357e3e008ab531f6aae2d5ba6922ac6c5210d83085cdeaa85a92585"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xed, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x8001}, @generic={0x86, 0x5, "ba69133add1709a6ae5066e777eb0822559273dc969fba4b5318b913211cb7ddf03ea6ec7925352614330ebc7d904f31cc1a6f191e1e520824f68d9e6642d133930090ea9eebd721430658b9b5e64fbbb58ea3a4a452f480d82cd826c351d6f4164c71c0a63f66b64f4f55a64e137544ea46c38ff4f07e41a9bb309c0a1207ae42af140d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x9, 0x7d, [@generic={0xc0, 0x9, "cceea591d60b3dd6e86f0f34a246dfd7e7c00bda031d5bfe1044465e59ba16dda59c60f9b4542354bfcac30c4eba4f85d6585cd79e7ebaed8d369d3a81b21d2e295ac058bf975fb19a44c336628d84b1585b47dcf2bdc572d790bbedaf3c9e6a8b8ddd776129c4557d16937b05c42d615e5f736a387f3b9de40a9733a0c12c051f9459a4bebddbec7abd68e5a9fc9f16aeff38a9ab57c4879c5d40e1bbf258479167dfca21759b7193a7d70f792dcb2f4b0496c8bce1fd36ad5661e6d8ba"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x3, 0x7, [@generic={0xeb, 0x31, "b12b1abef730fe93f81d5f53643a27f7510a7c30b1d7f4bc2711ecfa72f2202c83af2e2d38edf2689910f05052b9492af726e255b29f59d1b3ff36924a3abef70781a9836357345d1ae90858b0619f27c259696da74fb89f7fa68f8802cb6a0d721817c68d25274ea3a867c87ab01c9f9fbfd3c670c5f7fa6a1b0ae331955152fe84e4322033279b3ca18a618ff73adae3ef55f9cc20b9e3b5cff9e2b37b2b3ce0b927778258f3598b12c7555a3ea3a0495ffbdc4b8da716f4d825623a8c37253b21392856dba6e1b42683d37a80b1ec0db3c40453c92132f78592069d398887e8941e05f6395e3ad7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1f}]}}]}}, {{0x9, 0x4, 0xf6, 0x0, 0x4, 0xff, 0xff, 0xff, 0x5e, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0xff, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @generic={0xdd, 0x9, "d580ff6ce498f1f86fd9eca48bb5f4e7f84e9c55f070fbe47e55eeaffd345cf1ea883faf3bbbf7a2bc1bd1d6b50c55542531e788cdf54a0653a739f2ebf734eaf7f11037e854127862a9438602bef36568ec270c0d3c84fb7718d811c71c2abc199679adb586809307246db3db4994c6317790eec86aae8765e58ea66c6f21e77854e431d9f31c258cef62e85d6054d3b8b2982631932c46a6700a7fb4a244e4d423f55c675a2d5ac11e6610e137fe54ef4ffeff6e0f1c48d4e88e7c00da84983adb6f92dc9aa2775a96b184cae6ba7bf29532aea0578bb4e2a8dc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x15, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe7, 0x9e79}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0xe0, 0xed, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1708778773df3c9b, 0x7, 0x5}, @generic={0x92, 0xb, "1df250a171d70f166be2cf51923ea23d9af5f0eff2761bae9d133ea6fe3915bfd224e11129ca55254066cd9533aad6b4afd014a925401a68326b9806c2cd07acc372dae4db6cb3d70b7a85bb83a2411523cc9a6613516e73e66d1df363730e2d56ab297d34ff08a48c559d6af4b7f82cd77a528a8a37934b3d81fd3e6a22e28eab1b0e55ef44c8a7563b5fe97aa5fddd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0xf7, 0x20}}]}}, {{0x9, 0x4, 0x1f, 0xfe, 0x7, 0xc9, 0x5e, 0xfb, 0x1f, [@generic={0x97, 0x5, "754ce1978ddce5e6880c4daa447d773d84d63c998ad085c30d8d24c258fc1435e8e2df9bbe4b16ab2e2598ef6dd13d2271a3aa3c23c5b6705f8489bce79df2bc8609c8088544ce74dc48328936e89146e06371ff2df201eea3329606aa5a63914ce5c1f7e25b37a44a3fff2ad9e1b79d761a8b20bcdaa58af2b902f1a3b48211cc307e2c3ab5bd0cbe4196a67d10f4a6734fd669eb"}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x31, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0xd4}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0xff, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0xce, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x57f1}, @generic={0x84, 0x8, "710a8e11822c5062f3c47d25cf920d2425385d29aa20bcfe561d12d980dd91080003e7e5355c8bb199df7cf529a9d4d2ff54b5925dd9e53b1857d193e535b13bcb1fe4f356f4e8dc46ea0e0a07504b607f309b6effe71d8ffe737d2aa54469cf3f70ee29fe4da188dfc0017846f6fb1cf2fb8e72f82f816c5e18864929d271b28507"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x6b, 0x2, [@generic={0xb1, 0x9, "f49386569b78f591f8ac5c14ff9d5825697554a273376646720b9b1b9e261a70abbfbf08d8ec4c3490213a06c30a0030981e0cf76961d5cd954a18dfe92e236b2c644c54c987abcbe38bc696a7b838be546254165d59b8ae7863dce87a52cac783b35ca23f34622bf94366a99c4167f77832f981a0620b589f5bcf6ab5d5672ef7f997e0ed979c8e6bb5cb5900fc1b1d3f6a4d572a92a058cf6dc26c25f2b4cf7d8f773c1c870444ba3bf7b3bdd6af"}, @generic={0x6d, 0x5, "e3987deab6192db4e04a8f8e2b667e194877ffd5e9cb51bb4a336280c21c391d9135fb47ccdd46106f4a0c8d1af22bd41c8c73a429bcbff2af0b2c0ff52126c7bf62802f6e2c91d8cd09473c5e4921323ebf782c2d0f83080021752f32085ec93bcf446aba630adeaa1a4f"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x20, 0x3}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc, 0x2, 0x1, 0x8, 0x91}, 0xfc, &(0x7f00000001c0)={0x5, 0xf, 0xfc, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x9, 0xffff, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1f1857ced5401c706541f953c74445d2"}, @generic={0xce, 0x10, 0x4, "02003ef17661f1fe6f8b08beb648e0c34d70dea1aca005e75caa517803bdce00ae46fccc41fdb746e2f164354ffd5e3b20f6aa62635eadd86186575893891c12b3db8b52161eff2876121fe2b1cbdc2c78f55c07bbb989ef669b0dfee81a560ed1a989013630aa4f55c458c240f92d5b3a5f1779681750ef564cc4a6be1283fe79142d0f7816ae4e971f1c00a58e0253229a37a14767f50b87a38b6a835c51fa821843d44d46a0d5f8c20a583410afbc68548f1c5dc8c5a6801bed5704851bc86b65809e3e28d5512eafa8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0xc3, &(0x7f00000002c0)=@string={0xc3, 0x3, "82c018670a55845d36602cd82c9f55977b33b64f93e738e9f455f60678a8fd6f50f2d5e1c82c387b32377216c4fd570ee6d7296b1d47f2456975829938a275c75f1cd103baea1dedb049246c8f589eb25e26a275f0120a9d85229f7fe6b11c1bc14f0b515fcceeb18d701e46fb7d0c0f900998caf8910cc384eb332138a238de9ae3e8b36c1159040b0ac45369c7e08abfa08e1e3f3dcb846ba4935b43240ce3c069cf7ad276ae85413d05993c750df99f4b6ed21fda212ce2730091892749471b"}}, {0xda, &(0x7f0000001080)=@string={0xda, 0x3, "faa48e720655a56911c7077512971a8e6783a42022234ca0b7a1d2c3f91f238212c0712e918d9e0ae53e389994c025acddc03908c4cf789db5ac67ce755f0bb73d5287f0d614bd3ec3864092d27ca9f56f4c178bee6b12d58110816128634a4da8171f453efc00972f852f496a4c426b8afdccfbaa296f35849461ed3c930482285425f7633b5976996f491f6eefc9c2be2a032a1c0a12af70f5803466bfe5565403f14c67e4515cbea84606d5d09162cc2da303d110456b0914ce4651788e4601eb64308c3808944d89579ea0b7b31a5856d04d077b994c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x3001}}]}) (async, rerun: 32) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r6, 0x4004550d, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001ec0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffbe7, 0x0, 0x0, 0x0, 0x4fcb03d7}, @generic={0x4, 0x2, 0x4, 0xa0f, 0x8}, @alu={0x4, 0x0, 0x3, 0x1, 0x9, 0x8, 0x10}, @generic={0x1, 0x2, 0x5, 0x9, 0xffffffff}, @alu={0x7, 0x1, 0x1, 0x6206ae2774710073, 0x8, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0xfffffffffffffffe, 0x10}], &(0x7f0000001f00)='GPL\x00', 0x4, 0xa9, &(0x7f0000001f40)=""/169, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xf, 0x15, 0x117f}, 0x10, 0x251f1, 0xffffffffffffffff, 0x0, &(0x7f0000002080)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x90) fstat(r10, &(0x7f0000002180)) syz_usb_control_io$hid(r9, &(0x7f0000002340)={0x24, &(0x7f0000002200)={0x0, 0x23, 0x75, {0x75, 0x3, "d45bed2ea4c5571fd07498de588eaef7166b28cf1c8839975bfa08a3f87b2c41d575bfac5012f2e472ad825d27450ed3f2f3ff3d0c5831f52f299a186d0717c837e96bfa87b4b8e54ceb12a3b677af66a0444ec30f04586209f404c7124a0da212e66576b0dd36e4a7edcf76d6fc23f54df41c"}}, &(0x7f0000002280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f00000022c0)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xa, "8a24dfd0"}, @local=@item_4={0x3, 0x2, 0x7, "a871ca73"}, @main=@item_012={0x1, 0x0, 0x9, "8a"}, @global=@item_4={0x3, 0x1, 0xa, "5d686e06"}]}}, &(0x7f0000002300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xbaa}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002380)={0x20, 0x15, 0xf0, "5648595cee5c5b9f6cf68eed9bc1099a0c85bc8ffa8141d8aeb199e1c95fccb7f481e4708c3ef9defe4d7e9b32b553a45263574c9451b9c8f3e91ff0a0d86be0b70721e15adeba3f4a1d8fa2144e06f157d803f59ad549087d86afdccb3472836ec3f234e4db864c1f99fb7eb23919c314acc71211e7ed65267f06bf4b26a72cc2d24890706a441132cfcb3c27c419490ada02d79251f3a0f39fe3e0bbfb1d34e383212ba523809ad35214d0571335e42384aa8cb6505e70d1285420467bb9090e85b6eb8932d03236f3b923b361341db50979ec02a978b50540513a437dea1ebbc034259f39d2efed255c92a6d80bb6"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002500)={0x20, 0x1, 0xea, "3dc6ce016ab7534b4797e2920a16a485a366d30966a5e9c90d050f94cf1bd0969b588b34c0ed417b963a9304ba5414493b3894be5286bd513278b680ea422ffceeb6b46fb1811b828677b7a8eee19ce07f7167fe8321dfdfb9dde264d0a12519647b17150154a4a4a0be25c9a3129114771ce6a1f43c5109507a3b5ecb86a11e8b59c401c1f7ddfba58813123ac3bb3ca5f3bd9079fa38186d1ffd6f017ee4eabea2b85b6640480a0c1c6f0069f592792fec2619a7d165551093fe64e24af7a792a5e1d2d1c4245163d16560797871e832a89d24f2a0fb081ca2ed41d86b468109c7ac3064b10f19f953"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x5}}) (async, rerun: 64) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x97, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x99, 0x3f, 0x5}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x0, 0xa2, 0x2, 0x40, 0x1f}, 0xdb, &(0x7f0000001300)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x4, "cf132c7eb5963b55ea93ddd02108136e035a4ed8a0e4971c2f618678454d20f48a2f0349aa6747eb293684f9a61e3f4959e853e08c4fcc0e9a1be89dfcc9defe65161a960d9c7af0ebf7b16ec0808c6b60e6cac4da7e5cada628a15ba1d10808a0f4b996d437fe186a62858dff64fdb998864ee9f250bf6cb247a651b77b37dfaaf69e5782cfc31736741b0fdc0c5b556967bf652cb9ce5d3b2eb73e00fbb40f8e6a170c798585ee0a1766ae7dbed959238f687b971f86aee5160ba8f3cc23d87cd58380b5e930c94daeb14871367529886212"}]}, 0x6, [{0x6, &(0x7f0000001400)=@string={0x6, 0x3, "af7d0a21"}}, {0x22, &(0x7f0000001440)=@string={0x22, 0x3, "2adde0fb7d0743f20cbd0fa194ee208b989f54c934c43261a60ac53d77245747"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x424}}, {0xe6, &(0x7f0000001500)=@string={0xe6, 0x3, "a51c6b43a2235ff3e9875f5b9b5eda6e0b16636bd8af01de2f6db59a387f799b151e2b78c84d529acf464e365e8e97e45378bcd5fb5704682b0986c7aaf90f3f89cb9230dbdd288bb6f1e8d4b163c322233a74eda6cc15186a1d5ffb0b33bdffcc45442d7f4dd1216be35368ef06ff6ba045b0f80673881738b484a9dbe27c06e3c28ce4915d88eda956def7bf85f5a0c8fa794325fcdce56b595851855d95e6b15933ca45fda804c00eb134c02825d09c1f4283c302d702972e4506fb30d8da46343c170c1a65f9b0e042b5a9c6b6ec93e9a47c8c60c99d1fba25d9d92395dfcfd80e65"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "11fd1f90fb57feab4242467c5508dec4a75d7d470d9b88c7424735ac5e9973cc74e0b7f6627f4dbea45cab5a8c4e274d7758e08270965158c116314a4d51831841b7b503add32dada9109adf4e3495c686f977ecbcfbab3282bf931ef25df12dffb18d96be268ef52006e71a6fbbf8acbe0556d80bb19bc207d1901c08538e5db83e54863b3606a9348d3057b6d1cac889239cc1d759dff8ef12bf92225b26140292820ef1fd12147f3d7cd0880ff7ad29e2"}}]}) (rerun: 64) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r11, 0x8018456f, &(0x7f0000001780)=""/97) (async) r12 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000002680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x80, 0x4d}}, [{{0x9, 0x5, 0x82, 0x2, 0x7a77c32409b8305e, 0x5, 0x83}}]}}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x201, 0xe1, 0x3f, 0x8, 0x0, 0x7}, 0x1a, &(0x7f0000002700)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xa, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0xac1}]}, 0x3, [{0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x445}}, {0xcd, &(0x7f00000027c0)=@string={0xcd, 0x3, "b9dd33bf5c5cd0c37835eb2e6af046b037ea23f31fa5c1e0374d06b39f50a247ba21579f46a4f441622b92e921cd7d13b78c1f04ceec079b202428a27e3cbc7115c2b91200afe255c559a60ddb023b90e7988075bd6997d0f729a04d7218af40eadcf6895a0caff123259ee000c16e09980667ccef4470ae5afde234fb43a8ce51e5dd9999f770d78a2955cb00d8bfc48cea3e5b423eb906be2b1adef99d3f4dc80d4f00b0421a19aa365258da6efd46489d6c6895888723e3abc558394f13f360186193b3e321d4b7dad7"}}]}) syz_usb_control_io$printer(r12, &(0x7f0000002980)={0x14, &(0x7f0000002900)={0x40, 0x22, 0x32, {0x32, 0x3ffa9ef0a5752540, "4746376efe2a69dd383f1a9965195b7aea97bacfd3e37ccb75425d4a27780bb208c74f204dd556e093ebdc74f3146706"}}, &(0x7f0000002940)=ANY=[@ANYBLOB="00032a0000002a0328d160b5efd500af9e4e93ffcf465643354f053d164d53861920d877c3a106181f82d017b88d26ea"]}, &(0x7f0000002c00)={0x34, &(0x7f00000029c0)={0x0, 0x6, 0x31, "6f156e1063cc548c548e55b5c41923f8aee0a3f6154ea016b9b7e711e383a5f0527a1c3b4bf477927fe7aa7c7843a6e174"}, &(0x7f0000002a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002a80)={0x20, 0x0, 0xbc, {0xba, "1fb6d65b1ae9fad3a63b6718194d2067a15d33fc9558f8cb8516a29bfbb25cd09c3c68b06ab0fd1cedb51f9bc349543ec032649f72b6207ec07b9c6f211b0a760c53a07bb0fcb1011f37fa9be93b2b96876def14bff6c2ec6edcd527ab2325a4ae0b184c864ca996a30362968f3d14997cfc63339b7c0b72aef5aa67a0944c98687119b5a111fd907be6424b851c0fe715e903279e358a6899b5c790f319186313792ef01222d0a943c11e54356255e7ed014b22a1ad3e0cd997"}}, &(0x7f0000002b80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000002bc0)={0x20, 0x0, 0x1, 0x60}}) 23:22:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) (fail_nth: 26) 23:22:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2951.836816][ T2076] FAULT_INJECTION: forcing a failure. [ 2951.836816][ T2076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2951.882091][ T2076] CPU: 0 PID: 2076 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 2951.892163][ T2076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 2951.902272][ T2076] Call Trace: [ 2951.905602][ T2076] [ 2951.908571][ T2076] dump_stack_lvl+0x125/0x1b0 [ 2951.913336][ T2076] should_fail_ex+0x496/0x5b0 [ 2951.918097][ T2076] _copy_to_user+0x30/0xb0 [ 2951.922576][ T2076] simple_read_from_buffer+0xd0/0x150 [ 2951.928014][ T2076] proc_fail_nth_read+0x1b0/0x290 [ 2951.933128][ T2076] ? proc_sessionid_read+0x290/0x290 [ 2951.938496][ T2076] ? security_file_permission+0xdc/0x100 [ 2951.944201][ T2076] ? proc_sessionid_read+0x290/0x290 [ 2951.948047][ T9866] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2951.949527][ T2076] vfs_read+0x1ce/0x930 [ 2951.949573][ T2076] ? kernel_read+0x1b0/0x1b0 [ 2951.965899][ T2076] ? __fget_files+0x279/0x410 [ 2951.970633][ T2076] ksys_read+0x12f/0x250 [ 2951.974935][ T2076] ? vfs_write+0xe40/0xe40 [ 2951.979406][ T2076] ? rcu_is_watching+0x12/0xb0 [ 2951.984230][ T2076] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2951.990272][ T2076] do_syscall_64+0x38/0xb0 [ 2951.994757][ T2076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2952.000755][ T2076] RIP: 0033:0x7f32e787b78c [ 2952.005212][ T2076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 23:22:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x2, 0x400, @status={[0x8, 0x1, 0x8, 0x80000001, 0xfc1, 0x6]}, [0x5, 0x8, 0x0, 0x1ff, 0x0, 0x2, 0x20, 0xad75, 0xfffffffffffff8c0, 0xc44, 0x8, 0x6, 0x9, 0x6, 0x7fffffffffffffff, 0x1f, 0x647, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0xfff, 0x8000000000000001, 0x8, 0x3, 0x7, 0x7, 0x8000, 0x80, 0x4, 0x1, 0x9, 0x1000, 0x0, 0x7, 0x9, 0x6, 0x5fbe, 0x4, 0x7fffffffffffffff, 0x5, 0x0, 0x8, 0x4, 0xfffffffffffffffb, 0x2, 0x8, 0x80, 0x5, 0x100000000, 0x2, 0x4, 0x9, 0x7, 0x0, 0x80000000, 0x2, 0x1ff, 0x100000000, 0x3, 0x0, 0x8]}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x7fffffff, 0x2cd}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e375df8d76d7b4c052e2d1c657cfe3bd1b6ea610e13c7a56c8d5eeedf5b9ec2a06384abb6a299cf91693b5613de936421d664e9859fe33"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2952.024880][ T2076] RSP: 002b:00007f32e85500c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2952.033347][ T2076] RAX: ffffffffffffffda RBX: 00007f32e799bf80 RCX: 00007f32e787b78c [ 2952.041363][ T2076] RDX: 000000000000000f RSI: 00007f32e8550130 RDI: 0000000000000005 [ 2952.049385][ T2076] RBP: 00007f32e8550120 R08: 0000000000000000 R09: 0000000000000000 [ 2952.057420][ T2076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.065426][ T2076] R13: 000000000000000b R14: 00007f32e799bf80 R15: 00007f32e7abfa48 [ 2952.073422][ T2076] [ 2952.076523][ C0] vkms_vblank_simulate: vblank timer overrun 23:22:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x790040}], 0x1, 0x0, 0x0, 0x0) 23:22:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2952.337656][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:22:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="44482369b8acea06a3a12042a201edb474520b2d5a6b1adde0a3eb03c7de390e87"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2952.384336][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2952.416743][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.446529][ T9866] usb 2-1: config 0 descriptor?? 23:22:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="44482369b8acea06a3a12042a201edb474520b2d5a6b1adde0a3eb03c7de390e87"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x2, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:11 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x400, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x8], &(0x7f0000000280)=[r2, 0x0], &(0x7f00000002c0)=[0x3, 0x3, 0x7ff, 0x200, 0x2, 0x7fffffffffffffff, 0x7], 0x0, 0xef7}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffc6e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000002c40)={0x1, r2, r5, 0xeeeeeeee}) (async) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r6) (async, rerun: 64) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x4, 0x111, &(0x7f0000001b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x7, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x5, 0x5, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x1, 0x3f, "8615e63973d7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x2, 0x2, 0x40, 0x5, 0xb2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x2fa, 0x5, 0x1, 0xa0}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x58, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0xf9, 0x1, 0x1, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x80, 0x3f, "590bce"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3f, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x5247, 0xcb, "0915c241927f249b44"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x40, 0x8, "f216", '8'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffb, 0xc96, 0x80, "0f7f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x8, 0x20, "3796ef33f0586a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x0, "4b44b8a9d7bab79416"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x9, 0xee5}}}}}}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x250, 0xe0, 0x5, 0x6, 0xff, 0xff}, 0x2d, &(0x7f0000001d00)=ANY=[@ANYBLOB="050f2d00030710020ca500001a1004e5bee22f106e663ade584ecac73b6c0b83803a822b041307100208200500"], 0x4, [{0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x41a}}, {0x30, &(0x7f0000001d80)=@string={0x30, 0x3, "e020dbc59c1d29760a96105e3a03315a2912ff2501e4c8108359c0c1869a0870ef4e46a8ebebc34a3aa2a5c1d975"}}, {0x2f, &(0x7f0000001dc0)=@string={0x2f, 0x3, "61b3b2645a42e60c531ad990c6546efee893d3baa28d7fbad86bd1145bd6ecdb0d3572496bba6f351edf5601a0"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_disconnect(r8) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000001940)={0x24, &(0x7f0000001800)={0x0, 0x21, 0x58, {0x58, 0xc, "5005bfb94517aec02522acbf51324df8bf7db9a6eb9b485cab5459f88305800568b2de2179569a169b6600d02ca0169c0a9342db74a58f6dc541edbe9e108d69677d6cb0d5cddd7948411d348d2050b46e97b6416121"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000018c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000001900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0x69c}}}}, &(0x7f0000001b40)={0x2c, &(0x7f0000001980)={0x0, 0xe, 0x69, "ab45b1c42dc1a330bf189311aa2853548858b2016f910e1fcf314bfdb83e78f8dce067735b8bc1e9152bc8a1414fd94e8c0df2bf45b5637d7e1ed6a652640185ee590ba235e0167b5bfd4cef4dcfb12a740d92ed6ad2bdd329c07cb3ec2e244c39efc508a532fc7341"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000001a80)={0x20, 0x1, 0x69, "fb1fa9c5a0ab96ddefff7cc311d0bc3e5e33b89e3564bf05d1fee14760130b8c1dbd0e4ed8850b1690b084de8ece61797e76fb4d0f5c01d731dd23416dccb40c74b82565205fff69f4ac8b76dede6778670132657462980bc2dda6a27419a6ecf33c2d5ef1e82ab2a1"}, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_connect(0x0, 0xbca, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2f, 0xfd, 0x8c, 0x8, 0x1bc7, 0x1062, 0x92c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x7, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x46, 0xff, 0x1, 0xff, 0xf2, 0x87, 0x7e, [], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xc5, 0x8, 0x4, [@generic={0xd7, 0x24, "2ef89cef58554ce1ff9782bc56185ebd69513b9ae54fca7172622fabdd244f729bf9624ff8d009d5bc08378313b97c2ed97100ba12a425b989d7d87163274fceeb2938f879ebcf0bdf0a8c32897189be966ed9688916d5aea90af638150b221b4276fe62d2cd8ed76848b67c898f2c15c4d2760bd3fdf2f5aad92f1381a3ab8d31fd02d3b0d1e265178a4cd3688fb743ae0fcf56de0a308438c4f58c7b25300e929e53259c460ebc01cb56a94deb7abd510618d94a0f4e5b2ad72961ec217c9f0a1087c3cc82521b3114ae4f42ae49ed0745b9b64f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x9}]}}]}}, {{0x9, 0x4, 0x2d, 0x5, 0xa, 0xff, 0x5d, 0x81, 0x40, [], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0xf8, 0x4, 0x0, [@generic={0xb6, 0x9, "54c7a0e7b66ad5475f323899405f82f3bca56d24ab12079923c7f22a174088b6e09af6b92e1e0916d6cd6285e824baa2516b5d48adbf9d0a8ec7669981f1ac8a09a37aba3de7925ab9feb129ccb4cc8baf3cfb73c01a18ab4d79d6296ac3e6d0be714adef43673e567cb1da40ede5e9268a38cb0b0fee90e225bc5521d4e714717bd1368117068653069b5a147c819cf59b8a289b837a42c1fa71f7b8036e0ae7f54c5f311773fe50c9de4ed64fcfccaabee7e64"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x5, 0xa9, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x80, 0x9, [@generic={0x84, 0x31, "5ff4414de69d7ff72aa97513663d72f91bd13497b5a5421943f00b3d9a5c6ffb2cddb993dc2ea2521d8d7b8facfec2718d129e1ce01e0b88d4a9d9f27b7f4583a0916c4582aa87d55ac0b304a0642d51837ba54212da1f15b0ca1d8ac4b61fdff7716a322a61d8799b9ff6c3a8b5e742ccfa22377f0248b3285a54a926fa60b4a3df"}, @generic={0x10, 0x8, "d490ca76593f886731c49ee5547f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7f, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x3f, 0xef, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xcc7}, @generic={0x78, 0x1, "c5e88fe85c35d5cd33c87e9850b7ef35b4a3040fb49edf351f72de8240f37961edcb49db1a51705506fc2a30be247179f08d36dc90d89e88a5e1b89117c3c607664163c537df6872411fe42bac6c89b43ed09d6ac4a138fc8e5c9b30cd61f94a651eea2aaa1a893cdf3bee9fdf297fbdbab64b3e25c9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x9, 0x7, [@generic={0x60, 0x9, "a953ce9f298e84c89ca84f1d7a721994a361c9b42707987b17cff93c26e77b05f73eab813bc35c86355cec6b78887b767a3b19e3b567384c4400ab4e1ae01d663d27b20684850b7c95323a0abf2a692289e0055af8dedb7c91a986528f9d"}, @generic={0xf1, 0x5, "f60535405f951100361e49931b1c02cd7d9111cf856f530f3456ecc84aac85fb66a1f49f494f3aa026bbcf0a5873c4098edca0ff77ea8a2478ef67e6b09ab98365bb3d74d35b880248fdb947f60411de983bfdf608085023597d7eb9419ba799666ed2accb0c16bfc5781e0899f33eee0ce981fe093533ef3216d1b66ee562c91029ff38f6c6fa240d35d013a51a65a79481d608d34a4c17104948e19d56bcc66a5893ffa11fe651ac0f235209b5e2f588a7001baa98d0a3cd6d3eca5b2968cbe61657b7b0220350075095c1b505c0c42a8d4bd44140eaab9cbf349ccc2a3ebc837ae188ea049befda33386a902672"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xd3, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20}, @generic={0xa7, 0xc, "959813d572f1bc82de3cd8aeaab2fb36f1bf105b8f9a7f052a186a879a9f7fd3e8a25cee4a98cc4214c31ab8aa823154bdd9c1d5a480cae5533ede1e5721fb1709f88adc4d0972e16169ec4bdf3856a1498c6ca0dcd7335d195ba688f52f4002749256dcb99e60dcc9ce6582caefed612a69e16c0ed6e59c40b3b2bf582f2e738d09e071053af5fec44357e3e008ab531f6aae2d5ba6922ac6c5210d83085cdeaa85a92585"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xed, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x8001}, @generic={0x86, 0x5, "ba69133add1709a6ae5066e777eb0822559273dc969fba4b5318b913211cb7ddf03ea6ec7925352614330ebc7d904f31cc1a6f191e1e520824f68d9e6642d133930090ea9eebd721430658b9b5e64fbbb58ea3a4a452f480d82cd826c351d6f4164c71c0a63f66b64f4f55a64e137544ea46c38ff4f07e41a9bb309c0a1207ae42af140d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x9, 0x7d, [@generic={0xc0, 0x9, "cceea591d60b3dd6e86f0f34a246dfd7e7c00bda031d5bfe1044465e59ba16dda59c60f9b4542354bfcac30c4eba4f85d6585cd79e7ebaed8d369d3a81b21d2e295ac058bf975fb19a44c336628d84b1585b47dcf2bdc572d790bbedaf3c9e6a8b8ddd776129c4557d16937b05c42d615e5f736a387f3b9de40a9733a0c12c051f9459a4bebddbec7abd68e5a9fc9f16aeff38a9ab57c4879c5d40e1bbf258479167dfca21759b7193a7d70f792dcb2f4b0496c8bce1fd36ad5661e6d8ba"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x3, 0x7, [@generic={0xeb, 0x31, "b12b1abef730fe93f81d5f53643a27f7510a7c30b1d7f4bc2711ecfa72f2202c83af2e2d38edf2689910f05052b9492af726e255b29f59d1b3ff36924a3abef70781a9836357345d1ae90858b0619f27c259696da74fb89f7fa68f8802cb6a0d721817c68d25274ea3a867c87ab01c9f9fbfd3c670c5f7fa6a1b0ae331955152fe84e4322033279b3ca18a618ff73adae3ef55f9cc20b9e3b5cff9e2b37b2b3ce0b927778258f3598b12c7555a3ea3a0495ffbdc4b8da716f4d825623a8c37253b21392856dba6e1b42683d37a80b1ec0db3c40453c92132f78592069d398887e8941e05f6395e3ad7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1f}]}}]}}, {{0x9, 0x4, 0xf6, 0x0, 0x4, 0xff, 0xff, 0xff, 0x5e, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0xff, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @generic={0xdd, 0x9, "d580ff6ce498f1f86fd9eca48bb5f4e7f84e9c55f070fbe47e55eeaffd345cf1ea883faf3bbbf7a2bc1bd1d6b50c55542531e788cdf54a0653a739f2ebf734eaf7f11037e854127862a9438602bef36568ec270c0d3c84fb7718d811c71c2abc199679adb586809307246db3db4994c6317790eec86aae8765e58ea66c6f21e77854e431d9f31c258cef62e85d6054d3b8b2982631932c46a6700a7fb4a244e4d423f55c675a2d5ac11e6610e137fe54ef4ffeff6e0f1c48d4e88e7c00da84983adb6f92dc9aa2775a96b184cae6ba7bf29532aea0578bb4e2a8dc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x15, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe7, 0x9e79}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0xe0, 0xed, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1708778773df3c9b, 0x7, 0x5}, @generic={0x92, 0xb, "1df250a171d70f166be2cf51923ea23d9af5f0eff2761bae9d133ea6fe3915bfd224e11129ca55254066cd9533aad6b4afd014a925401a68326b9806c2cd07acc372dae4db6cb3d70b7a85bb83a2411523cc9a6613516e73e66d1df363730e2d56ab297d34ff08a48c559d6af4b7f82cd77a528a8a37934b3d81fd3e6a22e28eab1b0e55ef44c8a7563b5fe97aa5fddd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0xf7, 0x20}}]}}, {{0x9, 0x4, 0x1f, 0xfe, 0x7, 0xc9, 0x5e, 0xfb, 0x1f, [@generic={0x97, 0x5, "754ce1978ddce5e6880c4daa447d773d84d63c998ad085c30d8d24c258fc1435e8e2df9bbe4b16ab2e2598ef6dd13d2271a3aa3c23c5b6705f8489bce79df2bc8609c8088544ce74dc48328936e89146e06371ff2df201eea3329606aa5a63914ce5c1f7e25b37a44a3fff2ad9e1b79d761a8b20bcdaa58af2b902f1a3b48211cc307e2c3ab5bd0cbe4196a67d10f4a6734fd669eb"}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x31, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0xd4}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0xff, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0xce, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x57f1}, @generic={0x84, 0x8, "710a8e11822c5062f3c47d25cf920d2425385d29aa20bcfe561d12d980dd91080003e7e5355c8bb199df7cf529a9d4d2ff54b5925dd9e53b1857d193e535b13bcb1fe4f356f4e8dc46ea0e0a07504b607f309b6effe71d8ffe737d2aa54469cf3f70ee29fe4da188dfc0017846f6fb1cf2fb8e72f82f816c5e18864929d271b28507"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x6b, 0x2, [@generic={0xb1, 0x9, "f49386569b78f591f8ac5c14ff9d5825697554a273376646720b9b1b9e261a70abbfbf08d8ec4c3490213a06c30a0030981e0cf76961d5cd954a18dfe92e236b2c644c54c987abcbe38bc696a7b838be546254165d59b8ae7863dce87a52cac783b35ca23f34622bf94366a99c4167f77832f981a0620b589f5bcf6ab5d5672ef7f997e0ed979c8e6bb5cb5900fc1b1d3f6a4d572a92a058cf6dc26c25f2b4cf7d8f773c1c870444ba3bf7b3bdd6af"}, @generic={0x6d, 0x5, "e3987deab6192db4e04a8f8e2b667e194877ffd5e9cb51bb4a336280c21c391d9135fb47ccdd46106f4a0c8d1af22bd41c8c73a429bcbff2af0b2c0ff52126c7bf62802f6e2c91d8cd09473c5e4921323ebf782c2d0f83080021752f32085ec93bcf446aba630adeaa1a4f"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x20, 0x3}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc, 0x2, 0x1, 0x8, 0x91}, 0xfc, &(0x7f00000001c0)={0x5, 0xf, 0xfc, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x9, 0xffff, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1f1857ced5401c706541f953c74445d2"}, @generic={0xce, 0x10, 0x4, "02003ef17661f1fe6f8b08beb648e0c34d70dea1aca005e75caa517803bdce00ae46fccc41fdb746e2f164354ffd5e3b20f6aa62635eadd86186575893891c12b3db8b52161eff2876121fe2b1cbdc2c78f55c07bbb989ef669b0dfee81a560ed1a989013630aa4f55c458c240f92d5b3a5f1779681750ef564cc4a6be1283fe79142d0f7816ae4e971f1c00a58e0253229a37a14767f50b87a38b6a835c51fa821843d44d46a0d5f8c20a583410afbc68548f1c5dc8c5a6801bed5704851bc86b65809e3e28d5512eafa8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0xc3, &(0x7f00000002c0)=@string={0xc3, 0x3, "82c018670a55845d36602cd82c9f55977b33b64f93e738e9f455f60678a8fd6f50f2d5e1c82c387b32377216c4fd570ee6d7296b1d47f2456975829938a275c75f1cd103baea1dedb049246c8f589eb25e26a275f0120a9d85229f7fe6b11c1bc14f0b515fcceeb18d701e46fb7d0c0f900998caf8910cc384eb332138a238de9ae3e8b36c1159040b0ac45369c7e08abfa08e1e3f3dcb846ba4935b43240ce3c069cf7ad276ae85413d05993c750df99f4b6ed21fda212ce2730091892749471b"}}, {0xda, &(0x7f0000001080)=@string={0xda, 0x3, "faa48e720655a56911c7077512971a8e6783a42022234ca0b7a1d2c3f91f238212c0712e918d9e0ae53e389994c025acddc03908c4cf789db5ac67ce755f0bb73d5287f0d614bd3ec3864092d27ca9f56f4c178bee6b12d58110816128634a4da8171f453efc00972f852f496a4c426b8afdccfbaa296f35849461ed3c930482285425f7633b5976996f491f6eefc9c2be2a032a1c0a12af70f5803466bfe5565403f14c67e4515cbea84606d5d09162cc2da303d110456b0914ce4651788e4601eb64308c3808944d89579ea0b7b31a5856d04d077b994c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x3001}}]}) (async) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r6, 0x4004550d, 0x0) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001ec0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffbe7, 0x0, 0x0, 0x0, 0x4fcb03d7}, @generic={0x4, 0x2, 0x4, 0xa0f, 0x8}, @alu={0x4, 0x0, 0x3, 0x1, 0x9, 0x8, 0x10}, @generic={0x1, 0x2, 0x5, 0x9, 0xffffffff}, @alu={0x7, 0x1, 0x1, 0x6206ae2774710073, 0x8, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0xfffffffffffffffe, 0x10}], &(0x7f0000001f00)='GPL\x00', 0x4, 0xa9, &(0x7f0000001f40)=""/169, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xf, 0x15, 0x117f}, 0x10, 0x251f1, 0xffffffffffffffff, 0x0, &(0x7f0000002080)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x90) fstat(r10, &(0x7f0000002180)) (async) syz_usb_control_io$hid(r9, &(0x7f0000002340)={0x24, &(0x7f0000002200)={0x0, 0x23, 0x75, {0x75, 0x3, "d45bed2ea4c5571fd07498de588eaef7166b28cf1c8839975bfa08a3f87b2c41d575bfac5012f2e472ad825d27450ed3f2f3ff3d0c5831f52f299a186d0717c837e96bfa87b4b8e54ceb12a3b677af66a0444ec30f04586209f404c7124a0da212e66576b0dd36e4a7edcf76d6fc23f54df41c"}}, &(0x7f0000002280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f00000022c0)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xa, "8a24dfd0"}, @local=@item_4={0x3, 0x2, 0x7, "a871ca73"}, @main=@item_012={0x1, 0x0, 0x9, "8a"}, @global=@item_4={0x3, 0x1, 0xa, "5d686e06"}]}}, &(0x7f0000002300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xbaa}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002380)={0x20, 0x15, 0xf0, "5648595cee5c5b9f6cf68eed9bc1099a0c85bc8ffa8141d8aeb199e1c95fccb7f481e4708c3ef9defe4d7e9b32b553a45263574c9451b9c8f3e91ff0a0d86be0b70721e15adeba3f4a1d8fa2144e06f157d803f59ad549087d86afdccb3472836ec3f234e4db864c1f99fb7eb23919c314acc71211e7ed65267f06bf4b26a72cc2d24890706a441132cfcb3c27c419490ada02d79251f3a0f39fe3e0bbfb1d34e383212ba523809ad35214d0571335e42384aa8cb6505e70d1285420467bb9090e85b6eb8932d03236f3b923b361341db50979ec02a978b50540513a437dea1ebbc034259f39d2efed255c92a6d80bb6"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002500)={0x20, 0x1, 0xea, "3dc6ce016ab7534b4797e2920a16a485a366d30966a5e9c90d050f94cf1bd0969b588b34c0ed417b963a9304ba5414493b3894be5286bd513278b680ea422ffceeb6b46fb1811b828677b7a8eee19ce07f7167fe8321dfdfb9dde264d0a12519647b17150154a4a4a0be25c9a3129114771ce6a1f43c5109507a3b5ecb86a11e8b59c401c1f7ddfba58813123ac3bb3ca5f3bd9079fa38186d1ffd6f017ee4eabea2b85b6640480a0c1c6f0069f592792fec2619a7d165551093fe64e24af7a792a5e1d2d1c4245163d16560797871e832a89d24f2a0fb081ca2ed41d86b468109c7ac3064b10f19f953"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x97, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x99, 0x3f, 0x5}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x0, 0xa2, 0x2, 0x40, 0x1f}, 0xdb, &(0x7f0000001300)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x4, "cf132c7eb5963b55ea93ddd02108136e035a4ed8a0e4971c2f618678454d20f48a2f0349aa6747eb293684f9a61e3f4959e853e08c4fcc0e9a1be89dfcc9defe65161a960d9c7af0ebf7b16ec0808c6b60e6cac4da7e5cada628a15ba1d10808a0f4b996d437fe186a62858dff64fdb998864ee9f250bf6cb247a651b77b37dfaaf69e5782cfc31736741b0fdc0c5b556967bf652cb9ce5d3b2eb73e00fbb40f8e6a170c798585ee0a1766ae7dbed959238f687b971f86aee5160ba8f3cc23d87cd58380b5e930c94daeb14871367529886212"}]}, 0x6, [{0x6, &(0x7f0000001400)=@string={0x6, 0x3, "af7d0a21"}}, {0x22, &(0x7f0000001440)=@string={0x22, 0x3, "2adde0fb7d0743f20cbd0fa194ee208b989f54c934c43261a60ac53d77245747"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x424}}, {0xe6, &(0x7f0000001500)=@string={0xe6, 0x3, "a51c6b43a2235ff3e9875f5b9b5eda6e0b16636bd8af01de2f6db59a387f799b151e2b78c84d529acf464e365e8e97e45378bcd5fb5704682b0986c7aaf90f3f89cb9230dbdd288bb6f1e8d4b163c322233a74eda6cc15186a1d5ffb0b33bdffcc45442d7f4dd1216be35368ef06ff6ba045b0f80673881738b484a9dbe27c06e3c28ce4915d88eda956def7bf85f5a0c8fa794325fcdce56b595851855d95e6b15933ca45fda804c00eb134c02825d09c1f4283c302d702972e4506fb30d8da46343c170c1a65f9b0e042b5a9c6b6ec93e9a47c8c60c99d1fba25d9d92395dfcfd80e65"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "11fd1f90fb57feab4242467c5508dec4a75d7d470d9b88c7424735ac5e9973cc74e0b7f6627f4dbea45cab5a8c4e274d7758e08270965158c116314a4d51831841b7b503add32dada9109adf4e3495c686f977ecbcfbab3282bf931ef25df12dffb18d96be268ef52006e71a6fbbf8acbe0556d80bb19bc207d1901c08538e5db83e54863b3606a9348d3057b6d1cac889239cc1d759dff8ef12bf92225b26140292820ef1fd12147f3d7cd0880ff7ad29e2"}}]}) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r11, 0x8018456f, &(0x7f0000001780)=""/97) r12 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000002680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x80, 0x4d}}, [{{0x9, 0x5, 0x82, 0x2, 0x7a77c32409b8305e, 0x5, 0x83}}]}}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x201, 0xe1, 0x3f, 0x8, 0x0, 0x7}, 0x1a, &(0x7f0000002700)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xa, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0xac1}]}, 0x3, [{0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x445}}, {0xcd, &(0x7f00000027c0)=@string={0xcd, 0x3, "b9dd33bf5c5cd0c37835eb2e6af046b037ea23f31fa5c1e0374d06b39f50a247ba21579f46a4f441622b92e921cd7d13b78c1f04ceec079b202428a27e3cbc7115c2b91200afe255c559a60ddb023b90e7988075bd6997d0f729a04d7218af40eadcf6895a0caff123259ee000c16e09980667ccef4470ae5afde234fb43a8ce51e5dd9999f770d78a2955cb00d8bfc48cea3e5b423eb906be2b1adef99d3f4dc80d4f00b0421a19aa365258da6efd46489d6c6895888723e3abc558394f13f360186193b3e321d4b7dad7"}}]}) syz_usb_control_io$printer(r12, &(0x7f0000002980)={0x14, &(0x7f0000002900)={0x40, 0x22, 0x32, {0x32, 0x3ffa9ef0a5752540, "4746376efe2a69dd383f1a9965195b7aea97bacfd3e37ccb75425d4a27780bb208c74f204dd556e093ebdc74f3146706"}}, &(0x7f0000002940)=ANY=[@ANYBLOB="00032a0000002a0328d160b5efd500af9e4e93ffcf465643354f053d164d53861920d877c3a106181f82d017b88d26ea"]}, &(0x7f0000002c00)={0x34, &(0x7f00000029c0)={0x0, 0x6, 0x31, "6f156e1063cc548c548e55b5c41923f8aee0a3f6154ea016b9b7e711e383a5f0527a1c3b4bf477927fe7aa7c7843a6e174"}, &(0x7f0000002a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002a80)={0x20, 0x0, 0xbc, {0xba, "1fb6d65b1ae9fad3a63b6718194d2067a15d33fc9558f8cb8516a29bfbb25cd09c3c68b06ab0fd1cedb51f9bc349543ec032649f72b6207ec07b9c6f211b0a760c53a07bb0fcb1011f37fa9be93b2b96876def14bff6c2ec6edcd527ab2325a4ae0b184c864ca996a30362968f3d14997cfc63339b7c0b72aef5aa67a0944c98687119b5a111fd907be6424b851c0fe715e903279e358a6899b5c790f319186313792ef01222d0a943c11e54356255e7ed014b22a1ad3e0cd997"}}, &(0x7f0000002b80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000002bc0)={0x20, 0x0, 0x1, 0x60}}) [ 2953.041413][ T9866] usbhid 2-1:0.0: can't add hid device: -71 [ 2953.060453][ T9866] usbhid: probe of 2-1:0.0 failed with error -71 [ 2953.111933][ T9866] usb 2-1: USB disconnect, device number 90 23:22:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="44482369b8acea06a3a12042a201edb474520b2d5a6b1adde0a3eb03c7de390e87"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2953.537949][ T9866] usb 2-1: new high-speed USB device number 91 using dummy_hcd 23:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7a0040}], 0x1, 0x0, 0x0, 0x0) 23:22:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x4, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2953.957234][ T9866] usb 2-1: device descriptor read/64, error -71 23:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x5, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2954.257236][ T9866] usb 2-1: new high-speed USB device number 92 using dummy_hcd 23:22:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:22:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x6, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2954.687276][ T9866] usb 2-1: device descriptor read/64, error -71 [ 2954.820807][ T9866] usb usb2-port1: attempt power cycle [ 2955.227561][ T9866] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2955.317625][ T9866] usb 2-1: device descriptor read/8, error -71 [ 2955.807274][ T9866] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2955.897387][ T9866] usb 2-1: device descriptor read/8, error -71 [ 2956.017732][ T9866] usb usb2-port1: unable to enumerate USB device 23:22:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2179, 0x77, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x20, 0x3f, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x6, 0xc2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xfd, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8, 0x6, 0xfa, 0x10, 0xb8}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x1c, &(0x7f0000000040)=@string={0x1c, 0x3, "fc5cca8f5089e2e8233e32bd772ead0cc344a4bf3ea8085a7a10"}}]}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2004370000003723f31bef1b9416f8ce62e8c0ba7a70febf70155cca9f6afd3d5f2d1540c8313b55f5577c709ac9fc0ee200000000"], &(0x7f0000000280)={0x0, 0x3, 0x38, @string={0x38, 0x3, "a21b12b81d1fd4d77e7cd6288009d0addc34cca22ad9a671dd34e576b377453595dc08bd8f2d6645bab1f7ce40235c0f58234012c126"}}, &(0x7f0000000480)={0x0, 0xf, 0x234, {0x5, 0xf, 0x234, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4c, 0x1, 0x400}, @generic={0xcf, 0x10, 0x3, "56d48e0efbc7a1abde0619a754e165ad673b061c8e3d38947c9465e4fd8465ce68012b0faa65781dab6eec9907c9d5a186df7a4d71d032806d323a84d5e4fd34dfad5778b78d09871ab10a2f8ade8ffc1b1dad58bd95491ec8245a8acf379f3f3a607e63781de90e14b4e82d3a5b4a2e74644aed31a4c53aef9b1896e7a1bba708dfa5a85f7829e2ba12a1c11ca78fffe8ad6dd18fdaecb213a23938d3af46b1fb49a47eeddd64fd15e2487be878bad5aa280fb213c1ae7f6ba7957f515cdd83a116e0f1c8a5eef0c841b3aa"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1c, 0x40, 0x9, 0x1, 0x80}, @generic={0xe3, 0x10, 0x4, "a9e900c05af70d9a6d031e586852d9aa00876109f03eb9d0e6f6a217681c72e79b2e113e92a2595c26eddf04394b5098526e2c90d5848b8332c1cd33900165dd1e82d4821f2207c1688ef40abb2d78c927d96387d75b53a9f0b09cbf4412972967f5de1a5e49a758bc533669478836f495047f2b95e69f419ec96f9bf4021237414d382182e26774df9ca4cac725edd509f889f9b28b1498a15956ba582d662c61d2004fd3576df57c2a2708c7c3b26de0546c73b33c41d2d7c966afea9ad4fa8481e865722d52f33bed9e487efdfd899a5560310690317407c17451c02c9a3a"}, @generic={0x5d, 0x10, 0xa, "17496d4f182580eca016d7544c55ab87be50ff1966b8c21f61488bc1f1693b50d94387a89581b7c0ce2865d6e8db01dd484a37eafa922c801bdebc4780a3b6ff067bd3aad5f849d82d55e0080dd2c6b56b7e102016fa71d965c2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x7, 0x9, 0x5f}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x1, "0bcda345", "3596f4e7"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x8, 0x1, 0x20, 0x3, 0x4e46}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0x14, 0xb6, "625cf00bf1cf1b6c81b02a8ac649ef2d224e82a58093a7d3329fbaf0c0d87a64d2c70f56ceaf5dcabd1b839700278ee39694e42a56fd6811ab3991ed31a42f6362eeb6e2994fe6c5c7fa038604fb80f1525d549be7c7d39df1d39964224e14fcaf33aa971b1d35e9011c4f1188c2f3502a00091cacac07ecc9ccc983373a002bae3db61d63502401b24a00ace57f9b60212e6272626c2073cd60db5f8f8d4c719b93bd55459ef441b27375ed81bd0808f754021715cd"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000880)={0x40, 0xb, 0x2, '\vt'}, &(0x7f00000008c0)={0x40, 0xf, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "d73e"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xe0}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x7, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7b0040}], 0x1, 0x0, 0x0, 0x0) 23:22:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x8, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x3, 0x2, 0x401, 0x3, 0x3], [0x2, 0x4ccd1ba9, 0x4, 0x5, 0x16, 0x2, 0x1f, 0x7fff, 0xfffffffffffffffd, 0xffffffffffffffec, 0x2, 0x9, 0xb78, 0x0, 0x8, 0x6, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x2, 0x8, 0x1000, 0x6e6, 0x3, 0x6, 0x3, 0x1, 0x6, 0x5, 0xffff, 0xfd, 0x2, 0x7, 0x80, 0x0, 0x6114, 0x7fffffff, 0x5, 0x7, 0x8, 0x2e5c, 0x6, 0x0, 0x6, 0xb94, 0x6, 0x0, 0x79, 0x3, 0x9, 0x3, 0x0, 0x4, 0x1, 0x3ff800000, 0x0, 0x1ff, 0x7, 0x49, 0x6, 0x8, 0x2, 0x7, 0x80000001, 0xe01, 0x0, 0xfffffffffffffffe, 0x8000000000000001, 0x2, 0x0, 0x6, 0xc62, 0x8000000000000000, 0x1f, 0x3ff, 0x80000000, 0xfffffffffffff801, 0x1, 0x8000, 0x5, 0x1, 0x8000000000000000, 0x1, 0x1, 0xbb69, 0x80000001, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0xffffffffffffffff, 0x5, 0x8, 0xa10, 0x3, 0x200, 0x7, 0x101, 0xab, 0x8, 0x0, 0x4d9e1cc, 0x502, 0x7fff, 0x2c4c000000000000, 0x7, 0x7, 0x40, 0x4, 0x5, 0xb234, 0x8, 0x40, 0x7, 0x7f, 0x8000000000000001, 0x100000001, 0x21380534, 0x0, 0x2, 0xff, 0x2]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000e1000/0x3000)=nil, 0x3000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x10, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2956.687372][ T5541] usb 2-1: new high-speed USB device number 95 using dummy_hcd 23:22:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x2b, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2957.047622][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2957.062646][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2957.071941][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.106076][ T5541] usb 2-1: config 0 descriptor?? 23:22:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7c0040}], 0x1, 0x0, 0x0, 0x0) [ 2957.612472][ T5541] keytouch 0003:0926:3333.00B6: fixing up Keytouch IEC report descriptor [ 2957.655981][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B6/input/input211 [ 2957.798875][ T5541] keytouch 0003:0926:3333.00B6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2957.816544][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2957.846487][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2957.872230][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2957.887561][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2957.897878][ T5540] usb 2-1: USB disconnect, device number 95 23:22:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (rerun: 64) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2179, 0x77, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x20, 0x3f, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x6, 0xc2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xfd, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8, 0x6, 0xfa, 0x10, 0xb8}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x1c, &(0x7f0000000040)=@string={0x1c, 0x3, "fc5cca8f5089e2e8233e32bd772ead0cc344a4bf3ea8085a7a10"}}]}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2004370000003723f31bef1b9416f8ce62e8c0ba7a70febf70155cca9f6afd3d5f2d1540c8313b55f5577c709ac9fc0ee200000000"], &(0x7f0000000280)={0x0, 0x3, 0x38, @string={0x38, 0x3, "a21b12b81d1fd4d77e7cd6288009d0addc34cca22ad9a671dd34e576b377453595dc08bd8f2d6645bab1f7ce40235c0f58234012c126"}}, &(0x7f0000000480)={0x0, 0xf, 0x234, {0x5, 0xf, 0x234, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4c, 0x1, 0x400}, @generic={0xcf, 0x10, 0x3, "56d48e0efbc7a1abde0619a754e165ad673b061c8e3d38947c9465e4fd8465ce68012b0faa65781dab6eec9907c9d5a186df7a4d71d032806d323a84d5e4fd34dfad5778b78d09871ab10a2f8ade8ffc1b1dad58bd95491ec8245a8acf379f3f3a607e63781de90e14b4e82d3a5b4a2e74644aed31a4c53aef9b1896e7a1bba708dfa5a85f7829e2ba12a1c11ca78fffe8ad6dd18fdaecb213a23938d3af46b1fb49a47eeddd64fd15e2487be878bad5aa280fb213c1ae7f6ba7957f515cdd83a116e0f1c8a5eef0c841b3aa"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1c, 0x40, 0x9, 0x1, 0x80}, @generic={0xe3, 0x10, 0x4, "a9e900c05af70d9a6d031e586852d9aa00876109f03eb9d0e6f6a217681c72e79b2e113e92a2595c26eddf04394b5098526e2c90d5848b8332c1cd33900165dd1e82d4821f2207c1688ef40abb2d78c927d96387d75b53a9f0b09cbf4412972967f5de1a5e49a758bc533669478836f495047f2b95e69f419ec96f9bf4021237414d382182e26774df9ca4cac725edd509f889f9b28b1498a15956ba582d662c61d2004fd3576df57c2a2708c7c3b26de0546c73b33c41d2d7c966afea9ad4fa8481e865722d52f33bed9e487efdfd899a5560310690317407c17451c02c9a3a"}, @generic={0x5d, 0x10, 0xa, "17496d4f182580eca016d7544c55ab87be50ff1966b8c21f61488bc1f1693b50d94387a89581b7c0ce2865d6e8db01dd484a37eafa922c801bdebc4780a3b6ff067bd3aad5f849d82d55e0080dd2c6b56b7e102016fa71d965c2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x7, 0x9, 0x5f}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x1, "0bcda345", "3596f4e7"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x8, 0x1, 0x20, 0x3, 0x4e46}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0x14, 0xb6, "625cf00bf1cf1b6c81b02a8ac649ef2d224e82a58093a7d3329fbaf0c0d87a64d2c70f56ceaf5dcabd1b839700278ee39694e42a56fd6811ab3991ed31a42f6362eeb6e2994fe6c5c7fa038604fb80f1525d549be7c7d39df1d39964224e14fcaf33aa971b1d35e9011c4f1188c2f3502a00091cacac07ecc9ccc983373a002bae3db61d63502401b24a00ace57f9b60212e6272626c2073cd60db5f8f8d4c719b93bd55459ef441b27375ed81bd0808f754021715cd"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000880)={0x40, 0xb, 0x2, '\vt'}, &(0x7f00000008c0)={0x40, 0xf, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "d73e"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xe0}}) (async, rerun: 64) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (rerun: 64) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x2c, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x3, 0x2, 0x401, 0x3, 0x3], [0x2, 0x4ccd1ba9, 0x4, 0x5, 0x16, 0x2, 0x1f, 0x7fff, 0xfffffffffffffffd, 0xffffffffffffffec, 0x2, 0x9, 0xb78, 0x0, 0x8, 0x6, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x2, 0x8, 0x1000, 0x6e6, 0x3, 0x6, 0x3, 0x1, 0x6, 0x5, 0xffff, 0xfd, 0x2, 0x7, 0x80, 0x0, 0x6114, 0x7fffffff, 0x5, 0x7, 0x8, 0x2e5c, 0x6, 0x0, 0x6, 0xb94, 0x6, 0x0, 0x79, 0x3, 0x9, 0x3, 0x0, 0x4, 0x1, 0x3ff800000, 0x0, 0x1ff, 0x7, 0x49, 0x6, 0x8, 0x2, 0x7, 0x80000001, 0xe01, 0x0, 0xfffffffffffffffe, 0x8000000000000001, 0x2, 0x0, 0x6, 0xc62, 0x8000000000000000, 0x1f, 0x3ff, 0x80000000, 0xfffffffffffff801, 0x1, 0x8000, 0x5, 0x1, 0x8000000000000000, 0x1, 0x1, 0xbb69, 0x80000001, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0xffffffffffffffff, 0x5, 0x8, 0xa10, 0x3, 0x200, 0x7, 0x101, 0xab, 0x8, 0x0, 0x4d9e1cc, 0x502, 0x7fff, 0x2c4c000000000000, 0x7, 0x7, 0x40, 0x4, 0x5, 0xb234, 0x8, 0x40, 0x7, 0x7f, 0x8000000000000001, 0x100000001, 0x21380534, 0x0, 0x2, 0xff, 0x2]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f00000e1000/0x3000)=nil, 0x3000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7d0040}], 0x1, 0x0, 0x0, 0x0) 23:22:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x33, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2958.808493][T30850] usb 2-1: new high-speed USB device number 96 using dummy_hcd 23:22:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3b, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3c, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2959.257734][T30850] usb 2-1: device descriptor read/64, error -71 23:22:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7e0040}], 0x1, 0x0, 0x0, 0x0) 23:22:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x3, 0x2, 0x401, 0x3, 0x3], [0x2, 0x4ccd1ba9, 0x4, 0x5, 0x16, 0x2, 0x1f, 0x7fff, 0xfffffffffffffffd, 0xffffffffffffffec, 0x2, 0x9, 0xb78, 0x0, 0x8, 0x6, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x2, 0x8, 0x1000, 0x6e6, 0x3, 0x6, 0x3, 0x1, 0x6, 0x5, 0xffff, 0xfd, 0x2, 0x7, 0x80, 0x0, 0x6114, 0x7fffffff, 0x5, 0x7, 0x8, 0x2e5c, 0x6, 0x0, 0x6, 0xb94, 0x6, 0x0, 0x79, 0x3, 0x9, 0x3, 0x0, 0x4, 0x1, 0x3ff800000, 0x0, 0x1ff, 0x7, 0x49, 0x6, 0x8, 0x2, 0x7, 0x80000001, 0xe01, 0x0, 0xfffffffffffffffe, 0x8000000000000001, 0x2, 0x0, 0x6, 0xc62, 0x8000000000000000, 0x1f, 0x3ff, 0x80000000, 0xfffffffffffff801, 0x1, 0x8000, 0x5, 0x1, 0x8000000000000000, 0x1, 0x1, 0xbb69, 0x80000001, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0xffffffffffffffff, 0x5, 0x8, 0xa10, 0x3, 0x200, 0x7, 0x101, 0xab, 0x8, 0x0, 0x4d9e1cc, 0x502, 0x7fff, 0x2c4c000000000000, 0x7, 0x7, 0x40, 0x4, 0x5, 0xb234, 0x8, 0x40, 0x7, 0x7f, 0x8000000000000001, 0x100000001, 0x21380534, 0x0, 0x2, 0xff, 0x2]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000e1000/0x3000)=nil, 0x3000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2959.547253][T30850] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2960.008359][T30850] usb 2-1: device descriptor read/64, error -71 [ 2960.138957][T30850] usb usb2-port1: attempt power cycle [ 2960.577267][T30850] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2960.697380][T30850] usb 2-1: device descriptor read/8, error -71 [ 2961.190407][T30850] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2961.287572][T30850] usb 2-1: device descriptor read/8, error -71 [ 2961.408112][T30850] usb usb2-port1: unable to enumerate USB device 23:22:19 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2179, 0x77, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x20, 0x3f, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x6, 0xc2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xfd, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8, 0x6, 0xfa, 0x10, 0xb8}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x1c, &(0x7f0000000040)=@string={0x1c, 0x3, "fc5cca8f5089e2e8233e32bd772ead0cc344a4bf3ea8085a7a10"}}]}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2004370000003723f31bef1b9416f8ce62e8c0ba7a70febf70155cca9f6afd3d5f2d1540c8313b55f5577c709ac9fc0ee200000000"], &(0x7f0000000280)={0x0, 0x3, 0x38, @string={0x38, 0x3, "a21b12b81d1fd4d77e7cd6288009d0addc34cca22ad9a671dd34e576b377453595dc08bd8f2d6645bab1f7ce40235c0f58234012c126"}}, &(0x7f0000000480)={0x0, 0xf, 0x234, {0x5, 0xf, 0x234, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4c, 0x1, 0x400}, @generic={0xcf, 0x10, 0x3, "56d48e0efbc7a1abde0619a754e165ad673b061c8e3d38947c9465e4fd8465ce68012b0faa65781dab6eec9907c9d5a186df7a4d71d032806d323a84d5e4fd34dfad5778b78d09871ab10a2f8ade8ffc1b1dad58bd95491ec8245a8acf379f3f3a607e63781de90e14b4e82d3a5b4a2e74644aed31a4c53aef9b1896e7a1bba708dfa5a85f7829e2ba12a1c11ca78fffe8ad6dd18fdaecb213a23938d3af46b1fb49a47eeddd64fd15e2487be878bad5aa280fb213c1ae7f6ba7957f515cdd83a116e0f1c8a5eef0c841b3aa"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1c, 0x40, 0x9, 0x1, 0x80}, @generic={0xe3, 0x10, 0x4, "a9e900c05af70d9a6d031e586852d9aa00876109f03eb9d0e6f6a217681c72e79b2e113e92a2595c26eddf04394b5098526e2c90d5848b8332c1cd33900165dd1e82d4821f2207c1688ef40abb2d78c927d96387d75b53a9f0b09cbf4412972967f5de1a5e49a758bc533669478836f495047f2b95e69f419ec96f9bf4021237414d382182e26774df9ca4cac725edd509f889f9b28b1498a15956ba582d662c61d2004fd3576df57c2a2708c7c3b26de0546c73b33c41d2d7c966afea9ad4fa8481e865722d52f33bed9e487efdfd899a5560310690317407c17451c02c9a3a"}, @generic={0x5d, 0x10, 0xa, "17496d4f182580eca016d7544c55ab87be50ff1966b8c21f61488bc1f1693b50d94387a89581b7c0ce2865d6e8db01dd484a37eafa922c801bdebc4780a3b6ff067bd3aad5f849d82d55e0080dd2c6b56b7e102016fa71d965c2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x7, 0x9, 0x5f}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x1, "0bcda345", "3596f4e7"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x8, 0x1, 0x20, 0x3, 0x4e46}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0x14, 0xb6, "625cf00bf1cf1b6c81b02a8ac649ef2d224e82a58093a7d3329fbaf0c0d87a64d2c70f56ceaf5dcabd1b839700278ee39694e42a56fd6811ab3991ed31a42f6362eeb6e2994fe6c5c7fa038604fb80f1525d549be7c7d39df1d39964224e14fcaf33aa971b1d35e9011c4f1188c2f3502a00091cacac07ecc9ccc983373a002bae3db61d63502401b24a00ace57f9b60212e6272626c2073cd60db5f8f8d4c719b93bd55459ef441b27375ed81bd0808f754021715cd"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000880)={0x40, 0xb, 0x2, '\vt'}, &(0x7f00000008c0)={0x40, 0xf, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "d73e"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xe0}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x44, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e840b438ae647ff806bd13937a292237e4986271bf8a42092db8de9b6ec59c886516d61943ef943f036880ee3d10d80f08410ec94e53df08842606c6e2d97a6dd23861e934000eacfa1cbe73"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x7f0040}], 0x1, 0x0, 0x0, 0x0) 23:22:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x300, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x500, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e840b438ae647ff806bd13937a292237e4986271bf8a42092db8de9b6ec59c886516d61943ef943f036880ee3d10d80f08410ec94e53df08842606c6e2d97a6dd23861e934000eacfa1cbe73"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2962.089249][T30850] usb 2-1: new high-speed USB device number 100 using dummy_hcd 23:22:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x600, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2962.478172][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2962.489421][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2962.511974][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.534708][T30850] usb 2-1: config 0 descriptor?? [ 2963.021872][T30850] keytouch 0003:0926:3333.00B7: fixing up Keytouch IEC report descriptor [ 2963.036120][T30850] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B7/input/input212 [ 2963.141849][T30850] keytouch 0003:0926:3333.00B7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2963.219746][ T2387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.229162][ T2387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.241176][ T2389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.250856][ T2387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.251146][ T2389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.265078][ T2387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.276846][T23375] usb 2-1: USB disconnect, device number 100 23:22:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f000301000000090400004d755e614a193497c1e00dce00010100000a24010000000201020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209"], 0x0) 23:22:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="e840b438ae647ff806bd13937a292237e4986271bf8a42092db8de9b6ec59c886516d61943ef943f036880ee3d10d80f08410ec94e53df08842606c6e2d97a6dd23861e934000eacfa1cbe73"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x700, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x800040}], 0x1, 0x0, 0x0, 0x0) 23:22:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x810, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2964.367244][T30850] usb 2-1: new high-speed USB device number 101 using dummy_hcd 23:22:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x1008, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2964.495558][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.503930][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 23:22:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) 23:22:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x80ffff}], 0x1, 0x0, 0x0, 0x0) [ 2964.737523][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2964.781631][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2964.840765][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.905522][T30850] usb 2-1: config 0 descriptor?? [ 2965.405032][T30850] keytouch 0003:0926:3333.00B8: fixing up Keytouch IEC report descriptor [ 2965.472036][T30850] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B8/input/input213 [ 2965.600644][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2965.637676][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.657214][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2965.690348][T30850] keytouch 0003:0926:3333.00B8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2965.727219][T30850] usb 2-1: USB disconnect, device number 101 23:22:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x1f00, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x810040}], 0x1, 0x0, 0x0, 0x0) 23:22:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f000301000000090400004d755e614a193497c1e00dce00010100000a24010000000201020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209"], 0x0) (rerun: 64) 23:22:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x2b00, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x2c00, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2966.748263][T23375] usb 2-1: new high-speed USB device number 102 using dummy_hcd 23:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3300, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2967.128004][T23375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2967.152816][T23375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2967.168539][T23375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:22:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x820040}], 0x1, 0x0, 0x0, 0x0) [ 2967.195992][T23375] usb 2-1: config 0 descriptor?? 23:22:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3b00, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) 23:22:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3c00, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2967.672948][ T2543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.690472][T23375] keytouch 0003:0926:3333.00B9: fixing up Keytouch IEC report descriptor [ 2967.726785][ T2543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.727738][T23375] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B9/input/input214 [ 2967.764792][ T2543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.774105][ T2543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.783245][ T2543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.792615][ T2543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.801814][ T2543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.813207][ T2543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.822718][ T2543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.837627][ T2543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.863452][T23375] keytouch 0003:0926:3333.00B9: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2967.945588][T23375] usb 2-1: USB disconnect, device number 102 23:22:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f000301000000090400004d755e614a193497c1e00dce00010100000a24010000000201020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209"], 0x0) 23:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x4400, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x830040}], 0x1, 0x0, 0x0, 0x0) 23:22:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x1, 0x7fffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2968.847849][T23375] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2968.909183][ T28] audit: type=1326 audit(1693956146.909:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2584 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2969.217405][T23375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2969.233787][T23375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2969.244791][T23375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.258702][T23375] usb 2-1: config 0 descriptor?? 23:22:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2969.749032][ T2568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2969.760027][ T2568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2969.772913][T23375] keytouch 0003:0926:3333.00BA: fixing up Keytouch IEC report descriptor [ 2969.807640][T23375] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BA/input/input215 [ 2969.905936][T23375] keytouch 0003:0926:3333.00BA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2969.969567][T23375] usb 2-1: USB disconnect, device number 103 23:22:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x840040}], 0x1, 0x0, 0x0, 0x0) 23:22:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x1, 0x7fffffff}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/182) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 2970.564977][ T28] audit: type=1326 audit(1693956148.559:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2613 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x1, 0x7fffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2970.839689][ T28] audit: type=1326 audit(1693956148.839:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2637 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2971.077253][ T9866] usb 2-1: new high-speed USB device number 104 using dummy_hcd 23:22:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:22:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x850040}], 0x1, 0x0, 0x0, 0x0) 23:22:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2971.449475][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2971.487020][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2971.534812][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2971.579570][ T9866] usb 2-1: config 0 descriptor?? 23:22:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2972.060361][ T9866] keytouch 0003:0926:3333.00BB: fixing up Keytouch IEC report descriptor [ 2972.093968][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BB/input/input216 [ 2972.264345][ T2624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2972.278358][ T9866] keytouch 0003:0926:3333.00BB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2972.287972][ T2624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.354435][T23375] usb 2-1: USB disconnect, device number 104 23:22:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/182) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 23:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x860040}], 0x1, 0x0, 0x0, 0x0) 23:22:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e45e3cc"], 0x208e24b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000001c0)={[{0xff, 0x2, 0x20, 0x9, 0xfa, 0x81, 0x20, 0xf7, 0x9, 0x3, 0xff, 0x40}, {0x400, 0xffff, 0x9d, 0x2, 0x0, 0x1f, 0x40, 0x0, 0x80, 0x1f, 0x1, 0x6, 0x3ff}, {0x5, 0x400, 0x80, 0x7, 0x4b, 0x6, 0x5, 0x2, 0x6, 0x6, 0x1, 0x9, 0x8}], 0x5}) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000080)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80, 0x17d080) dup(r6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x7}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2973.407345][ T9866] usb 2-1: new high-speed USB device number 105 using dummy_hcd 23:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2973.799908][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:22:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2973.841370][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2973.880646][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.923508][ T9866] usb 2-1: config 0 descriptor?? [ 2974.399972][ T9866] keytouch 0003:0926:3333.00BC: fixing up Keytouch IEC report descriptor [ 2974.418403][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BC/input/input217 [ 2974.525346][ T9866] keytouch 0003:0926:3333.00BC: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2974.599435][ T2703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.608323][ T2703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.616399][ T2698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.626208][ T2698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.634979][ T5140] usb 2-1: USB disconnect, device number 105 23:22:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async, rerun: 64) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/182) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x40}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e45e3cc"], 0x208e24b) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000001c0)={[{0xff, 0x2, 0x20, 0x9, 0xfa, 0x81, 0x20, 0xf7, 0x9, 0x3, 0xff, 0x40}, {0x400, 0xffff, 0x9d, 0x2, 0x0, 0x1f, 0x40, 0x0, 0x80, 0x1f, 0x1, 0x6, 0x3ff}, {0x5, 0x400, 0x80, 0x7, 0x4b, 0x6, 0x5, 0x2, 0x6, 0x6, 0x1, 0x9, 0x8}], 0x5}) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000080)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80, 0x17d080) dup(r6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x870040}], 0x1, 0x0, 0x0, 0x0) 23:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x2b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "b0e555d4"}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 23:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x40}) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e45e3cc"], 0x208e24b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000001c0)={[{0xff, 0x2, 0x20, 0x9, 0xfa, 0x81, 0x20, 0xf7, 0x9, 0x3, 0xff, 0x40}, {0x400, 0xffff, 0x9d, 0x2, 0x0, 0x1f, 0x40, 0x0, 0x80, 0x1f, 0x1, 0x6, 0x3ff}, {0x5, 0x400, 0x80, 0x7, 0x4b, 0x6, 0x5, 0x2, 0x6, 0x6, 0x1, 0x9, 0x8}], 0x5}) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000080)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80, 0x17d080) dup(r6) (async) dup(r6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x3b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2975.917251][ T5540] usb 2-1: new high-speed USB device number 106 using dummy_hcd 23:22:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x3c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x880040}], 0x1, 0x0, 0x0, 0x0) 23:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2976.308302][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2976.358747][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2976.405992][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2976.440199][ T5540] usb 2-1: config 0 descriptor?? [ 2976.954910][ T5540] keytouch 0003:0926:3333.00BD: fixing up Keytouch IEC report descriptor [ 2976.970615][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BD/input/input218 [ 2977.069692][ T5540] keytouch 0003:0926:3333.00BD: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2977.161449][ T9866] usb 2-1: USB disconnect, device number 106 23:22:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "b0e555d4"}]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 23:22:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x44}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x890040}], 0x1, 0x0, 0x0, 0x0) 23:22:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2978.237474][ T5140] usb 2-1: new high-speed USB device number 107 using dummy_hcd 23:22:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8a0040}], 0x1, 0x0, 0x0, 0x0) [ 2978.637843][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2978.656475][ T5140] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2978.681249][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.703120][ T5140] usb 2-1: config 0 descriptor?? [ 2979.210784][ T5140] keytouch 0003:0926:3333.00BE: fixing up Keytouch IEC report descriptor [ 2979.232626][ T5140] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BE/input/input219 [ 2979.342875][ T5140] keytouch 0003:0926:3333.00BE: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2979.411330][ T5541] usb 2-1: USB disconnect, device number 107 23:22:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "b0e555d4"}]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 23:22:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8b0040}], 0x1, 0x0, 0x0, 0x0) 23:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b826"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b826"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2980.308898][T16381] usb 2-1: new high-speed USB device number 108 using dummy_hcd 23:22:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b826"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2980.708440][T16381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.722803][T16381] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 23:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2980.749007][T16381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.779207][T16381] usb 2-1: config 0 descriptor?? [ 2981.262615][T16381] keytouch 0003:0926:3333.00BF: fixing up Keytouch IEC report descriptor [ 2981.280313][T16381] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00BF/input/input220 [ 2981.385141][T16381] keytouch 0003:0926:3333.00BF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2981.467057][ T5540] usb 2-1: USB disconnect, device number 108 23:22:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8c0040}], 0x1, 0x0, 0x0, 0x0) 23:22:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b826"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = accept4(r4, &(0x7f0000000140)=@caif=@util, &(0x7f00000002c0)=0x80, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f000048f000/0x2000)=nil, 0x2000, 0x2, 0x50, r5, 0x3000) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000017021d07002e2f6669816c653000000000000000"], 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x3f, "926042ffe80d24cdd7b2cf654a6e28c55c9937d09aea7946b3709a2b5643c388ca48714897b020cb380fbc0dd74eed5c521530fbf8622ece7994e61104f206"}, &(0x7f0000000300)=0x47) sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv4_getaddr={0x44, 0x16, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x12, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x710, 0x5bc, 0x5, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40884}, 0x1) write$6lowpan_enable(r3, &(0x7f00000006c0)='0', 0xfffffeeb) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x2, 0xd0}], 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) r7 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f0003010000000904000000010100000a24010000000201020904010000010200613e5e12f943e0b2243d000904010101010200000905010900000000000725010000000009040200000201010102000009058209000000000007250100"/123], 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0xdf, {0xdf, 0xd, "1cea22eab7bc222c2147bd834f8bd2734a8dd4e5dab95d0df8915a74092c55b2f117ff5450815d015a9c3084654e0ac00226b986ea2d0a4d6e5028a4cd585f30e2c56b5d9bf460d47d3211d4a557441f79896b333965cd85c418fce985a2ef44cae5a33ae69221aff604f6e02cf8d9047a8320b89ddf324ecc48409043a29d8038223ad3e89f262277d51dff21da372010be29bc159c2495030399623514c5d291f3c6667fe0d510957d7de837a4b85084dcdd0499c36f1a5878a5c3a944092e0d785f800d6c4427c1a0545b455fcd5e194299d670a9b109585582de20"}}, &(0x7f00000002c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "90ac13f0edc3029b165063b2e711f16cdf106e631880df30c0e9d833c1fcd271159dd507b3db1d607d07f62fa0df04deaf046c5ef60fe26fd97156c0b05e7a2d40ae39d3c66d9bbbf129dc73789ec85a1d0a38e792"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000480)={0x40, 0xc, 0xec, "6d00fc0d84ac39ac1abad7ccfe113eb3ed94bd18320a3c9af8ce7da45c6032eee4cbdd374b81d0d7d258915e56a00b4ee528eafcfbcb5593cd256ca1bc4be138b7a70a3b8b542d6300b4fc8d65cda45d3a4ca92fbf207b08d1896b41874d6986b60732d92ba855c687b68429e953fa5eb9bad2bef2c571834c86f7f0bdb279a422c2193aecb328cd7d7b6b19056ff45cd23f97c5bdd4749c92c2b8b49e6f57e91ca84ef6d251dc28f685d9c0ec32d7357280abb8bbc6c6cbcf955e27a662308bb2c6cbc02f1eb8e5a084d11c38bc90342aa82cec699b1b680c8585f97b983511c435c30c0b1e2d34f4af6a22"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x1, ';'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000580)={0x20, 0x83, 0x3, "04d390"}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "c034bc"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "882023"}}) 23:22:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r4}, {@void, @max}}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x7}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2982.427389][ T28] audit: type=1326 audit(1693956160.419:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2960 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2982.667645][T30850] usb 2-1: new high-speed USB device number 109 using dummy_hcd 23:22:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8d0040}], 0x1, 0x0, 0x0, 0x0) 23:22:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2983.067821][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:22:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2983.114417][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2983.142247][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.175044][T30850] usb 2-1: config 0 descriptor?? 23:22:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2983.947523][T30850] usbhid 2-1:0.0: can't add hid device: -71 [ 2983.953537][T30850] usbhid: probe of 2-1:0.0 failed with error -71 [ 2983.976981][T30850] usb 2-1: USB disconnect, device number 109 23:22:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = accept4(r4, &(0x7f0000000140)=@caif=@util, &(0x7f00000002c0)=0x80, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f000048f000/0x2000)=nil, 0x2000, 0x2, 0x50, r5, 0x3000) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000017021d07002e2f6669816c653000000000000000"], 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x3f, "926042ffe80d24cdd7b2cf654a6e28c55c9937d09aea7946b3709a2b5643c388ca48714897b020cb380fbc0dd74eed5c521530fbf8622ece7994e61104f206"}, &(0x7f0000000300)=0x47) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x3f, "926042ffe80d24cdd7b2cf654a6e28c55c9937d09aea7946b3709a2b5643c388ca48714897b020cb380fbc0dd74eed5c521530fbf8622ece7994e61104f206"}, &(0x7f0000000300)=0x47) sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv4_getaddr={0x44, 0x16, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x12, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x710, 0x5bc, 0x5, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40884}, 0x1) write$6lowpan_enable(r3, &(0x7f00000006c0)='0', 0xfffffeeb) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x2, 0xd0}], 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) r7 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f0003010000000904000000010100000a24010000000201020904010000010200613e5e12f943e0b2243d000904010101010200000905010900000000000725010000000009040200000201010102000009058209000000000007250100"/123], 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0xdf, {0xdf, 0xd, "1cea22eab7bc222c2147bd834f8bd2734a8dd4e5dab95d0df8915a74092c55b2f117ff5450815d015a9c3084654e0ac00226b986ea2d0a4d6e5028a4cd585f30e2c56b5d9bf460d47d3211d4a557441f79896b333965cd85c418fce985a2ef44cae5a33ae69221aff604f6e02cf8d9047a8320b89ddf324ecc48409043a29d8038223ad3e89f262277d51dff21da372010be29bc159c2495030399623514c5d291f3c6667fe0d510957d7de837a4b85084dcdd0499c36f1a5878a5c3a944092e0d785f800d6c4427c1a0545b455fcd5e194299d670a9b109585582de20"}}, &(0x7f00000002c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "90ac13f0edc3029b165063b2e711f16cdf106e631880df30c0e9d833c1fcd271159dd507b3db1d607d07f62fa0df04deaf046c5ef60fe26fd97156c0b05e7a2d40ae39d3c66d9bbbf129dc73789ec85a1d0a38e792"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000480)={0x40, 0xc, 0xec, "6d00fc0d84ac39ac1abad7ccfe113eb3ed94bd18320a3c9af8ce7da45c6032eee4cbdd374b81d0d7d258915e56a00b4ee528eafcfbcb5593cd256ca1bc4be138b7a70a3b8b542d6300b4fc8d65cda45d3a4ca92fbf207b08d1896b41874d6986b60732d92ba855c687b68429e953fa5eb9bad2bef2c571834c86f7f0bdb279a422c2193aecb328cd7d7b6b19056ff45cd23f97c5bdd4749c92c2b8b49e6f57e91ca84ef6d251dc28f685d9c0ec32d7357280abb8bbc6c6cbcf955e27a662308bb2c6cbc02f1eb8e5a084d11c38bc90342aa82cec699b1b680c8585f97b983511c435c30c0b1e2d34f4af6a22"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x1, ';'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000580)={0x20, 0x83, 0x3, "04d390"}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "c034bc"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "882023"}}) 23:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8e0040}], 0x1, 0x0, 0x0, 0x0) 23:22:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r4}, {@void, @max}}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2984.567110][ T28] audit: type=1326 audit(1693956162.569:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3009 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2984.691652][ T3032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2984.730180][ T3032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:22:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r5 = accept4(r4, &(0x7f0000000140)=@caif=@util, &(0x7f00000002c0)=0x80, 0x80800) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) mmap(&(0x7f000048f000/0x2000)=nil, 0x2000, 0x2, 0x50, r5, 0x3000) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) write$P9_RREADLINK(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000017021d07002e2f6669816c653000000000000000"], 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x3f, "926042ffe80d24cdd7b2cf654a6e28c55c9937d09aea7946b3709a2b5643c388ca48714897b020cb380fbc0dd74eed5c521530fbf8622ece7994e61104f206"}, &(0x7f0000000300)=0x47) (async) sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv4_getaddr={0x44, 0x16, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x12, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x710, 0x5bc, 0x5, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40884}, 0x1) (async) write$6lowpan_enable(r3, &(0x7f00000006c0)='0', 0xfffffeeb) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x2, 0xd0}], 0x18) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) r7 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f0003010000000904000000010100000a24010000000201020904010000010200613e5e12f943e0b2243d000904010101010200000905010900000000000725010000000009040200000201010102000009058209000000000007250100"/123], 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0xdf, {0xdf, 0xd, "1cea22eab7bc222c2147bd834f8bd2734a8dd4e5dab95d0df8915a74092c55b2f117ff5450815d015a9c3084654e0ac00226b986ea2d0a4d6e5028a4cd585f30e2c56b5d9bf460d47d3211d4a557441f79896b333965cd85c418fce985a2ef44cae5a33ae69221aff604f6e02cf8d9047a8320b89ddf324ecc48409043a29d8038223ad3e89f262277d51dff21da372010be29bc159c2495030399623514c5d291f3c6667fe0d510957d7de837a4b85084dcdd0499c36f1a5878a5c3a944092e0d785f800d6c4427c1a0545b455fcd5e194299d670a9b109585582de20"}}, &(0x7f00000002c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "90ac13f0edc3029b165063b2e711f16cdf106e631880df30c0e9d833c1fcd271159dd507b3db1d607d07f62fa0df04deaf046c5ef60fe26fd97156c0b05e7a2d40ae39d3c66d9bbbf129dc73789ec85a1d0a38e792"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000480)={0x40, 0xc, 0xec, "6d00fc0d84ac39ac1abad7ccfe113eb3ed94bd18320a3c9af8ce7da45c6032eee4cbdd374b81d0d7d258915e56a00b4ee528eafcfbcb5593cd256ca1bc4be138b7a70a3b8b542d6300b4fc8d65cda45d3a4ca92fbf207b08d1896b41874d6986b60732d92ba855c687b68429e953fa5eb9bad2bef2c571834c86f7f0bdb279a422c2193aecb328cd7d7b6b19056ff45cd23f97c5bdd4749c92c2b8b49e6f57e91ca84ef6d251dc28f685d9c0ec32d7357280abb8bbc6c6cbcf955e27a662308bb2c6cbc02f1eb8e5a084d11c38bc90342aa82cec699b1b680c8585f97b983511c435c30c0b1e2d34f4af6a22"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x1, ';'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000580)={0x20, 0x83, 0x3, "04d390"}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "c034bc"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "882023"}}) 23:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8f0040}], 0x1, 0x0, 0x0, 0x0) 23:22:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x44}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2985.247384][T23375] usb 2-1: new high-speed USB device number 110 using dummy_hcd 23:22:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r4}, {@void, @max}}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2985.604673][ T28] audit: type=1326 audit(1693956163.609:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3053 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 2985.607711][T23375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:22:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2985.763806][T23375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 23:22:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2985.821998][T23375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2985.884947][T23375] usb 2-1: config 0 descriptor?? 23:22:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x500}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2986.012255][ T28] audit: type=1326 audit(1693956164.019:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000006b1d010140000102030109025f0003010000000904000000010100000a24010000000201020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209000000000007250100000000805afba10fc6c452a44d084da5c53d7e9f37f20117308888e89c78776ccefa4f53fb04760d1e820bf185190fbd34116f627b76123599d7199b17f0f79b0eba02c5e85efdf7f6ec32364992f45db4c15ba716fd491c59a91b8d20370bc52df9fb774c4504dcc32f026227be7527f2fa64f65a7c590e50bd05efff034f317c8d1f141290a2f5776458ffcfc81a29869e99628aff909000827b93f2277ddb429587ff3fe0c96cbe7b9b740bd0c6179b2a3842f878b8fa661d81fa2b8aff1148437ef5eeba99b566f17d5b13e6f8c3445f0dcdf240bf7eaad40d43c67f94a568e08ad2b515ef5c58950b16571967514b"], 0x0) 23:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x600}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x900040}], 0x1, 0x0, 0x0, 0x0) [ 2986.359498][T23375] usbhid 2-1:0.0: can't add hid device: -71 [ 2986.365589][T23375] usbhid: probe of 2-1:0.0 failed with error -71 [ 2986.395990][T23375] usb 2-1: USB disconnect, device number 110 23:22:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8f0040}], 0x1, 0x0, 0x0, 0x0) 23:22:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x700}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x810}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2986.907282][ T9866] usb 2-1: new high-speed USB device number 111 using dummy_hcd 23:22:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:22:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x1008}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2987.357290][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2987.391433][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 23:22:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x1f00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2987.429629][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2987.469423][ T9866] usb 2-1: config 0 descriptor?? [ 2987.612068][ T28] audit: type=1326 audit(1693956165.619:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3117 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2987.783226][ T3127] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 2987.950876][ T9866] keytouch 0003:0926:3333.00C0: fixing up Keytouch IEC report descriptor [ 2988.021467][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C0/input/input221 [ 2988.149735][ T3092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2988.168070][ T3092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2988.222957][ T9866] keytouch 0003:0926:3333.00C0: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2988.273237][ T9866] usb 2-1: USB disconnect, device number 111 23:22:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 23:22:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x8f0040}], 0x1, 0x0, 0x0, 0x0) 23:22:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x2c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x910040}], 0x1, 0x0, 0x0, 0x0) [ 2988.829986][ T28] audit: type=1326 audit(1693956166.839:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3133 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2989.060323][ T5540] usb 2-1: new high-speed USB device number 112 using dummy_hcd 23:22:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/21, 0x15}], 0xa, &(0x7f00000019c0)=""/118, 0x76}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/4, 0x4}, {&(0x7f0000001a80)=""/244, 0xf4}, {&(0x7f0000001b80)=""/110, 0x6e}], 0x3, &(0x7f0000001c40)=""/98, 0x62}, 0x80000000}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/54, 0x36}, {&(0x7f0000001d80)=""/187, 0xbb}, {&(0x7f0000001e40)=""/210, 0xd2}], 0x3, &(0x7f0000001f80)=""/134, 0x86}, 0x7f}, {{&(0x7f0000002040)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/64, 0x40}, {&(0x7f0000002140)=""/216, 0xd8}, {&(0x7f0000002240)=""/204, 0xcc}, {&(0x7f0000002340)=""/176, 0xb0}], 0x5, &(0x7f0000002480)=""/158, 0x9e}, 0xff}, {{&(0x7f0000002540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000025c0)=""/93, 0x5d}, {&(0x7f0000002640)=""/30, 0x1e}, {&(0x7f0000002680)=""/220, 0xdc}, {&(0x7f0000002780)=""/126, 0x7e}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/205, 0xcd}, {&(0x7f0000003980)=""/223, 0xdf}, {&(0x7f0000003a80)=""/200, 0xc8}], 0x9, &(0x7f0000003c40)=""/4096, 0x1000}, 0x213e}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/213, 0xd5}, {&(0x7f0000005d40)=""/87, 0x57}, {&(0x7f0000005dc0)=""/112, 0x70}, {&(0x7f0000005e40)=""/105, 0x69}, {&(0x7f0000005ec0)=""/157, 0x9d}, {&(0x7f0000005f80)=""/149, 0x95}, {&(0x7f0000006040)=""/15, 0xf}, {&(0x7f0000006080)=""/114, 0x72}, {&(0x7f0000006100)=""/101, 0x65}], 0xa, &(0x7f0000006240)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/198, 0xc6}, {&(0x7f0000006440)=""/148, 0x94}, {&(0x7f0000006500)=""/157, 0x9d}, {&(0x7f00000065c0)=""/106, 0x6a}, {&(0x7f0000006640)=""/150, 0x96}, {&(0x7f0000006700)=""/224, 0xe0}, {&(0x7f0000006800)=""/164, 0xa4}], 0x8, &(0x7f0000006940)=""/68, 0x44}, 0x9}, {{&(0x7f00000069c0)=@alg, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a40)=""/60, 0x3c}, {&(0x7f0000006a80)=""/150, 0x96}], 0x2}, 0x7}], 0x8, 0x2142, &(0x7f0000006d80)={0x0, 0x3938700}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(cast5),vmac(sm4-generic))\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3ff, 0x1, 0xffffffffffffffff, 0x3ff, 0x1e, 0x3f}, {0x0, 0x1000, 0x40, 0x3, 0xffffffff, 0x100000001}], ['\x00', '\x00', '\x00']}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2989.447615][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2989.469206][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2989.512933][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.575281][ T5540] usb 2-1: config 0 descriptor?? 23:22:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x3c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2989.751285][ T28] audit: type=1326 audit(1693956167.759:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3175 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 2990.050900][ T3187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2990.079842][ T3187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.090471][ T5540] keytouch 0003:0926:3333.00C1: fixing up Keytouch IEC report descriptor [ 2990.122412][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C1/input/input222 [ 2990.295530][ T5540] keytouch 0003:0926:3333.00C1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2990.376707][ T5540] usb 2-1: USB disconnect, device number 112 23:22:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x920040}], 0x1, 0x0, 0x0, 0x0) 23:22:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x4400}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/21, 0x15}], 0xa, &(0x7f00000019c0)=""/118, 0x76}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/4, 0x4}, {&(0x7f0000001a80)=""/244, 0xf4}, {&(0x7f0000001b80)=""/110, 0x6e}], 0x3, &(0x7f0000001c40)=""/98, 0x62}, 0x80000000}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/54, 0x36}, {&(0x7f0000001d80)=""/187, 0xbb}, {&(0x7f0000001e40)=""/210, 0xd2}], 0x3, &(0x7f0000001f80)=""/134, 0x86}, 0x7f}, {{&(0x7f0000002040)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/64, 0x40}, {&(0x7f0000002140)=""/216, 0xd8}, {&(0x7f0000002240)=""/204, 0xcc}, {&(0x7f0000002340)=""/176, 0xb0}], 0x5, &(0x7f0000002480)=""/158, 0x9e}, 0xff}, {{&(0x7f0000002540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000025c0)=""/93, 0x5d}, {&(0x7f0000002640)=""/30, 0x1e}, {&(0x7f0000002680)=""/220, 0xdc}, {&(0x7f0000002780)=""/126, 0x7e}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/205, 0xcd}, {&(0x7f0000003980)=""/223, 0xdf}, {&(0x7f0000003a80)=""/200, 0xc8}], 0x9, &(0x7f0000003c40)=""/4096, 0x1000}, 0x213e}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/213, 0xd5}, {&(0x7f0000005d40)=""/87, 0x57}, {&(0x7f0000005dc0)=""/112, 0x70}, {&(0x7f0000005e40)=""/105, 0x69}, {&(0x7f0000005ec0)=""/157, 0x9d}, {&(0x7f0000005f80)=""/149, 0x95}, {&(0x7f0000006040)=""/15, 0xf}, {&(0x7f0000006080)=""/114, 0x72}, {&(0x7f0000006100)=""/101, 0x65}], 0xa, &(0x7f0000006240)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/198, 0xc6}, {&(0x7f0000006440)=""/148, 0x94}, {&(0x7f0000006500)=""/157, 0x9d}, {&(0x7f00000065c0)=""/106, 0x6a}, {&(0x7f0000006640)=""/150, 0x96}, {&(0x7f0000006700)=""/224, 0xe0}, {&(0x7f0000006800)=""/164, 0xa4}], 0x8, &(0x7f0000006940)=""/68, 0x44}, 0x9}, {{&(0x7f00000069c0)=@alg, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a40)=""/60, 0x3c}, {&(0x7f0000006a80)=""/150, 0x96}], 0x2}, 0x7}], 0x8, 0x2142, &(0x7f0000006d80)={0x0, 0x3938700}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(cast5),vmac(sm4-generic))\x00'}, 0x58) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3ff, 0x1, 0xffffffffffffffff, 0x3ff, 0x1e, 0x3f}, {0x0, 0x1000, 0x40, 0x3, 0xffffffff, 0x100000001}], ['\x00', '\x00', '\x00']}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) [ 2990.928516][ T28] audit: type=1326 audit(1693956168.939:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3190 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2991.387214][ T5540] usb 2-1: new high-speed USB device number 113 using dummy_hcd 23:22:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x930040}], 0x1, 0x0, 0x0, 0x0) 23:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2991.757408][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2991.785969][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 23:22:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/21, 0x15}], 0xa, &(0x7f00000019c0)=""/118, 0x76}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/4, 0x4}, {&(0x7f0000001a80)=""/244, 0xf4}, {&(0x7f0000001b80)=""/110, 0x6e}], 0x3, &(0x7f0000001c40)=""/98, 0x62}, 0x80000000}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/54, 0x36}, {&(0x7f0000001d80)=""/187, 0xbb}, {&(0x7f0000001e40)=""/210, 0xd2}], 0x3, &(0x7f0000001f80)=""/134, 0x86}, 0x7f}, {{&(0x7f0000002040)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/64, 0x40}, {&(0x7f0000002140)=""/216, 0xd8}, {&(0x7f0000002240)=""/204, 0xcc}, {&(0x7f0000002340)=""/176, 0xb0}], 0x5, &(0x7f0000002480)=""/158, 0x9e}, 0xff}, {{&(0x7f0000002540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000025c0)=""/93, 0x5d}, {&(0x7f0000002640)=""/30, 0x1e}, {&(0x7f0000002680)=""/220, 0xdc}, {&(0x7f0000002780)=""/126, 0x7e}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/205, 0xcd}, {&(0x7f0000003980)=""/223, 0xdf}, {&(0x7f0000003a80)=""/200, 0xc8}], 0x9, &(0x7f0000003c40)=""/4096, 0x1000}, 0x213e}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/213, 0xd5}, {&(0x7f0000005d40)=""/87, 0x57}, {&(0x7f0000005dc0)=""/112, 0x70}, {&(0x7f0000005e40)=""/105, 0x69}, {&(0x7f0000005ec0)=""/157, 0x9d}, {&(0x7f0000005f80)=""/149, 0x95}, {&(0x7f0000006040)=""/15, 0xf}, {&(0x7f0000006080)=""/114, 0x72}, {&(0x7f0000006100)=""/101, 0x65}], 0xa, &(0x7f0000006240)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/198, 0xc6}, {&(0x7f0000006440)=""/148, 0x94}, {&(0x7f0000006500)=""/157, 0x9d}, {&(0x7f00000065c0)=""/106, 0x6a}, {&(0x7f0000006640)=""/150, 0x96}, {&(0x7f0000006700)=""/224, 0xe0}, {&(0x7f0000006800)=""/164, 0xa4}], 0x8, &(0x7f0000006940)=""/68, 0x44}, 0x9}, {{&(0x7f00000069c0)=@alg, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a40)=""/60, 0x3c}, {&(0x7f0000006a80)=""/150, 0x96}], 0x2}, 0x7}], 0x8, 0x2142, &(0x7f0000006d80)={0x0, 0x3938700}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(cast5),vmac(sm4-generic))\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3ff, 0x1, 0xffffffffffffffff, 0x3ff, 0x1e, 0x3f}, {0x0, 0x1000, 0x40, 0x3, 0xffffffff, 0x100000001}], ['\x00', '\x00', '\x00']}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/21, 0x15}], 0xa, &(0x7f00000019c0)=""/118, 0x76}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/4, 0x4}, {&(0x7f0000001a80)=""/244, 0xf4}, {&(0x7f0000001b80)=""/110, 0x6e}], 0x3, &(0x7f0000001c40)=""/98, 0x62}, 0x80000000}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/54, 0x36}, {&(0x7f0000001d80)=""/187, 0xbb}, {&(0x7f0000001e40)=""/210, 0xd2}], 0x3, &(0x7f0000001f80)=""/134, 0x86}, 0x7f}, {{&(0x7f0000002040)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/64, 0x40}, {&(0x7f0000002140)=""/216, 0xd8}, {&(0x7f0000002240)=""/204, 0xcc}, {&(0x7f0000002340)=""/176, 0xb0}], 0x5, &(0x7f0000002480)=""/158, 0x9e}, 0xff}, {{&(0x7f0000002540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000025c0)=""/93, 0x5d}, {&(0x7f0000002640)=""/30, 0x1e}, {&(0x7f0000002680)=""/220, 0xdc}, {&(0x7f0000002780)=""/126, 0x7e}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/205, 0xcd}, {&(0x7f0000003980)=""/223, 0xdf}, {&(0x7f0000003a80)=""/200, 0xc8}], 0x9, &(0x7f0000003c40)=""/4096, 0x1000}, 0x213e}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/213, 0xd5}, {&(0x7f0000005d40)=""/87, 0x57}, {&(0x7f0000005dc0)=""/112, 0x70}, {&(0x7f0000005e40)=""/105, 0x69}, {&(0x7f0000005ec0)=""/157, 0x9d}, {&(0x7f0000005f80)=""/149, 0x95}, {&(0x7f0000006040)=""/15, 0xf}, {&(0x7f0000006080)=""/114, 0x72}, {&(0x7f0000006100)=""/101, 0x65}], 0xa, &(0x7f0000006240)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/198, 0xc6}, {&(0x7f0000006440)=""/148, 0x94}, {&(0x7f0000006500)=""/157, 0x9d}, {&(0x7f00000065c0)=""/106, 0x6a}, {&(0x7f0000006640)=""/150, 0x96}, {&(0x7f0000006700)=""/224, 0xe0}, {&(0x7f0000006800)=""/164, 0xa4}], 0x8, &(0x7f0000006940)=""/68, 0x44}, 0x9}, {{&(0x7f00000069c0)=@alg, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a40)=""/60, 0x3c}, {&(0x7f0000006a80)=""/150, 0x96}], 0x2}, 0x7}], 0x8, 0x2142, &(0x7f0000006d80)={0x0, 0x3938700}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(cast5),vmac(sm4-generic))\x00'}, 0x58) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3ff, 0x1, 0xffffffffffffffff, 0x3ff, 0x1e, 0x3f}, {0x0, 0x1000, 0x40, 0x3, 0xffffffff, 0x100000001}], ['\x00', '\x00', '\x00']}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 2991.805895][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2991.848276][ T5540] usb 2-1: config 0 descriptor?? 23:22:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2992.098488][ T28] audit: type=1326 audit(1693956170.109:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3231 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:22:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2992.187815][ T5540] keytouch 0003:0926:3333.00C2: fixing up Keytouch IEC report descriptor [ 2992.206164][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C2/input/input223 [ 2992.364238][ T5540] keytouch 0003:0926:3333.00C2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2992.385079][ T3204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2992.472266][ T3204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2992.486799][ T5540] usb 2-1: USB disconnect, device number 113 23:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:22:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3b486df2f3ed6a7b240507a10c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x940040}], 0x1, 0x0, 0x0, 0x0) 23:22:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = signalfd(r0, &(0x7f0000000300)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000980)=[{{0x0, 0x2710}, 0x17, 0x3ff, 0xb8}, {{0x77359400}, 0x2c, 0x2, 0x1}, {{0x0, 0x2710}, 0x15, 0x200, 0x7fffffff}, {{r2, r3/1000+10000}, 0x11, 0x3, 0x2}, {{0x0, 0x2710}, 0x17, 0x9, 0x328}, {{0x0, 0xea60}, 0x18, 0x2d3, 0x5}, {{0x77359400}, 0x1f, 0x2, 0x8000}, {{r4, r5/1000+60000}}, {{r6, r7/1000+10000}, 0x3, 0x0, 0x7f}], 0xd8) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x13, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x20, 0xfa, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x98, 0x20, 0x8}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x80, 0x20, 0x8, 0x20, 0x9}, 0x198, &(0x7f0000000bc0)={0x5, 0xf, 0x198, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5, 0xff, 0x0, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3f, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x80}, @generic={0xf8, 0x10, 0x2, "110a20f3d4d73a7064e804699cf93405bb9ab5c483abcfee92970a9a9a79d464d84b46ec8a5297587d1774c1fe36bbdfe392691987d32b5f120f3bbf48a3baa44e4ce96f6f972e11f7982b99d84d0a56e849abc19af04f9bcaaecb5e0d5b5f84fdd7977f43543b75fa848cf987f385e1981d4c6071f5592a1cf52788b7a986b1194c9e84667e58edf566ecb8fb7df93fcae11d20bd8286d09b1ccf17827d1491525d9754421d08a6389a12d5831942c3ce834c75b89029b20c9d9a79977ec90e3f7fcaf2504064a81b4a0f82fdd0123f4b0c4bc7f522bee9bbcbe924e0fd0d7d91564bd0b74ff5ce0e889417285c166dc2ad854c14"}, @generic={0x78, 0x10, 0xb, "ac8427e717f952fbd898d94c171adbb20212fe148ee663885cd679512e54c3e4386e40d682b251efbbeec8664a9170b71b74ffeed85d8e2f0947861317cddbb27c91cec6db55ad7894a11ea0d18ee59355e68123e3f1524ff969e326e7f4842ee364626f509bf6131778e16ac4fe1f5912d16c6cd7"}]}, 0x7, [{0xb4, &(0x7f0000000480)=@string={0xb4, 0x3, "da2305af2c923a93cd3cff699c03ab9e1abc5b70b3a85fbbb4711645f7dcebb6891cde9174a8f8aac442adaa666302673c84f44699dcf4cd0b311ff64bef6eb94d0a01b8ac02a86956a003b4db7ccbc38214fb485d3ad1505a1f9841fd98718d16330e9a7a246a6bd4832d54d65aa0573102385b47ec355b58b087f976e2117dab4a3394bdd439a21e28ab13b0df75db9baf5e54a784590e9425a6df0f8df599cc756acf61d2161484ae8a0da925d29d86b2"}}, {0x8c, &(0x7f00000007c0)=ANY=[@ANYBLOB="8c034f64b43f9d50634e1d4e2db5e89625d9d254be5f05b614a45797b17121600a9c8f9f923894e2c7e127a87b011465a042f78c44d6c629896acecc2b50917e63e920fd25141fa2e3050a78745f98982e76a9b7b3c3f22266a360d44144f9cc00000000e403e5e7711e263655873dc863bdad557ba3136e4dad089ee086dc25ede34fb5b6b7df7ffee0f46f03489bb6fecc16"]}, {0x54, &(0x7f0000000380)=@string={0x54, 0x3, "61f2a4a3b0624b8765693dd90489ab31e34186a30174a934a6e8b9aa9cb2f2e4eceb9df8a4ffc0558667f303eb09177363344cf2a4ead65c2a3c740019bbd85c7e87b8f004ca177f884918bd1fb7ae009707"}}, {0x9d, &(0x7f0000000600)=@string={0x9d, 0x3, "d99182793628f6d37193998e5f17f71f743610e3dcf8689f74116120cf767f2f680e8e696fd7bf4c7cb79ba6af84f6ec45315ca5e345dd44ac929b7fd90b74cdf10cd00b9fc630cee43283a699e5336c7ba02d3ec257b416789e578672a85e230003bbfc20ef35c9eda3bfa2af7604db91ab6c540ae416b30d2d65811542f2fb40535642fb2a978077b637f97be4ce1bdee7038f3b3b0ff9faf071"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000b80)=0xfffffff9) syz_usb_connect(0x1, 0x298, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0xfa, 0x4, 0x8, 0x5}, 0x12, &(0x7f0000000200)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180a}}]}) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000880)=""/223) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x7}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3b486df2f3ed6a7b240507a10c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3b486df2f3ed6a7b240507a10c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:22:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2993.748202][T30850] usb 2-1: new high-speed USB device number 114 using dummy_hcd 23:22:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2993.971018][T30850] usb 2-1: device descriptor read/64, error -71 23:22:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x950040}], 0x1, 0x0, 0x0, 0x0) 23:22:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3b486df2f3ed6a7b240507a10c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x2b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2994.267912][T30850] usb 2-1: new high-speed USB device number 115 using dummy_hcd 23:22:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2994.487994][T30850] usb 2-1: device descriptor read/64, error -71 [ 2994.613239][T30850] usb usb2-port1: attempt power cycle [ 2995.047235][T30850] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2995.147709][T30850] usb 2-1: device descriptor read/8, error -71 [ 2995.417297][T30850] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2995.511246][T30850] usb 2-1: device descriptor read/8, error -71 [ 2995.637889][T30850] usb usb2-port1: unable to enumerate USB device 23:22:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = signalfd(r0, &(0x7f0000000300)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000980)=[{{0x0, 0x2710}, 0x17, 0x3ff, 0xb8}, {{0x77359400}, 0x2c, 0x2, 0x1}, {{0x0, 0x2710}, 0x15, 0x200, 0x7fffffff}, {{r2, r3/1000+10000}, 0x11, 0x3, 0x2}, {{0x0, 0x2710}, 0x17, 0x9, 0x328}, {{0x0, 0xea60}, 0x18, 0x2d3, 0x5}, {{0x77359400}, 0x1f, 0x2, 0x8000}, {{r4, r5/1000+60000}}, {{r6, r7/1000+10000}, 0x3, 0x0, 0x7f}], 0xd8) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x13, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x20, 0xfa, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x98, 0x20, 0x8}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x80, 0x20, 0x8, 0x20, 0x9}, 0x198, &(0x7f0000000bc0)={0x5, 0xf, 0x198, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5, 0xff, 0x0, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3f, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x80}, @generic={0xf8, 0x10, 0x2, "110a20f3d4d73a7064e804699cf93405bb9ab5c483abcfee92970a9a9a79d464d84b46ec8a5297587d1774c1fe36bbdfe392691987d32b5f120f3bbf48a3baa44e4ce96f6f972e11f7982b99d84d0a56e849abc19af04f9bcaaecb5e0d5b5f84fdd7977f43543b75fa848cf987f385e1981d4c6071f5592a1cf52788b7a986b1194c9e84667e58edf566ecb8fb7df93fcae11d20bd8286d09b1ccf17827d1491525d9754421d08a6389a12d5831942c3ce834c75b89029b20c9d9a79977ec90e3f7fcaf2504064a81b4a0f82fdd0123f4b0c4bc7f522bee9bbcbe924e0fd0d7d91564bd0b74ff5ce0e889417285c166dc2ad854c14"}, @generic={0x78, 0x10, 0xb, "ac8427e717f952fbd898d94c171adbb20212fe148ee663885cd679512e54c3e4386e40d682b251efbbeec8664a9170b71b74ffeed85d8e2f0947861317cddbb27c91cec6db55ad7894a11ea0d18ee59355e68123e3f1524ff969e326e7f4842ee364626f509bf6131778e16ac4fe1f5912d16c6cd7"}]}, 0x7, [{0xb4, &(0x7f0000000480)=@string={0xb4, 0x3, "da2305af2c923a93cd3cff699c03ab9e1abc5b70b3a85fbbb4711645f7dcebb6891cde9174a8f8aac442adaa666302673c84f44699dcf4cd0b311ff64bef6eb94d0a01b8ac02a86956a003b4db7ccbc38214fb485d3ad1505a1f9841fd98718d16330e9a7a246a6bd4832d54d65aa0573102385b47ec355b58b087f976e2117dab4a3394bdd439a21e28ab13b0df75db9baf5e54a784590e9425a6df0f8df599cc756acf61d2161484ae8a0da925d29d86b2"}}, {0x8c, &(0x7f00000007c0)=ANY=[@ANYBLOB="8c034f64b43f9d50634e1d4e2db5e89625d9d254be5f05b614a45797b17121600a9c8f9f923894e2c7e127a87b011465a042f78c44d6c629896acecc2b50917e63e920fd25141fa2e3050a78745f98982e76a9b7b3c3f22266a360d44144f9cc00000000e403e5e7711e263655873dc863bdad557ba3136e4dad089ee086dc25ede34fb5b6b7df7ffee0f46f03489bb6fecc16"]}, {0x54, &(0x7f0000000380)=@string={0x54, 0x3, "61f2a4a3b0624b8765693dd90489ab31e34186a30174a934a6e8b9aa9cb2f2e4eceb9df8a4ffc0558667f303eb09177363344cf2a4ead65c2a3c740019bbd85c7e87b8f004ca177f884918bd1fb7ae009707"}}, {0x9d, &(0x7f0000000600)=@string={0x9d, 0x3, "d99182793628f6d37193998e5f17f71f743610e3dcf8689f74116120cf767f2f680e8e696fd7bf4c7cb79ba6af84f6ec45315ca5e345dd44ac929b7fd90b74cdf10cd00b9fc630cee43283a699e5336c7ba02d3ec257b416789e578672a85e230003bbfc20ef35c9eda3bfa2af7604db91ab6c540ae416b30d2d65811542f2fb40535642fb2a978077b637f97be4ce1bdee7038f3b3b0ff9faf071"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000b80)=0xfffffff9) syz_usb_connect(0x1, 0x298, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0xfa, 0x4, 0x8, 0x5}, 0x12, &(0x7f0000000200)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180a}}]}) (async, rerun: 32) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000880)=""/223) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f56c3965021dee"], 0x208e24b) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x42000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000093c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="670f01c5c4e2e5abcbb8010000000f01d9660f6ded0f21f866b80e000f00d80f0866ba6100ecf26d0f015f15", 0x2c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 23:22:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x960040}], 0x1, 0x0, 0x0, 0x0) 23:22:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f56c3965021dee"], 0x208e24b) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x42000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000093c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="670f01c5c4e2e5abcbb8010000000f01d9660f6ded0f21f866b80e000f00d80f0866ba6100ecf26d0f015f15", 0x2c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 23:22:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2996.737836][T25112] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2996.957409][T25112] usb 2-1: device descriptor read/64, error -71 23:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x970040}], 0x1, 0x0, 0x0, 0x0) 23:22:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x44}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 2997.232969][T25112] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2997.437620][T25112] usb 2-1: device descriptor read/64, error -71 [ 2997.567968][T25112] usb usb2-port1: attempt power cycle [ 2997.997255][T25112] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2998.087871][T25112] usb 2-1: device descriptor read/8, error -71 [ 2998.367567][T25112] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2998.458031][T25112] usb 2-1: device descriptor read/8, error -71 [ 2998.583926][T25112] usb usb2-port1: unable to enumerate USB device 23:22:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = signalfd(r0, &(0x7f0000000300)={[0x8]}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000980)=[{{0x0, 0x2710}, 0x17, 0x3ff, 0xb8}, {{0x77359400}, 0x2c, 0x2, 0x1}, {{0x0, 0x2710}, 0x15, 0x200, 0x7fffffff}, {{r2, r3/1000+10000}, 0x11, 0x3, 0x2}, {{0x0, 0x2710}, 0x17, 0x9, 0x328}, {{0x0, 0xea60}, 0x18, 0x2d3, 0x5}, {{0x77359400}, 0x1f, 0x2, 0x8000}, {{r4, r5/1000+60000}}, {{r6, r7/1000+10000}, 0x3, 0x0, 0x7f}], 0xd8) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x13, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x20, 0xfa, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x98, 0x20, 0x8}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x80, 0x20, 0x8, 0x20, 0x9}, 0x198, &(0x7f0000000bc0)={0x5, 0xf, 0x198, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5, 0xff, 0x0, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3f, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x80}, @generic={0xf8, 0x10, 0x2, "110a20f3d4d73a7064e804699cf93405bb9ab5c483abcfee92970a9a9a79d464d84b46ec8a5297587d1774c1fe36bbdfe392691987d32b5f120f3bbf48a3baa44e4ce96f6f972e11f7982b99d84d0a56e849abc19af04f9bcaaecb5e0d5b5f84fdd7977f43543b75fa848cf987f385e1981d4c6071f5592a1cf52788b7a986b1194c9e84667e58edf566ecb8fb7df93fcae11d20bd8286d09b1ccf17827d1491525d9754421d08a6389a12d5831942c3ce834c75b89029b20c9d9a79977ec90e3f7fcaf2504064a81b4a0f82fdd0123f4b0c4bc7f522bee9bbcbe924e0fd0d7d91564bd0b74ff5ce0e889417285c166dc2ad854c14"}, @generic={0x78, 0x10, 0xb, "ac8427e717f952fbd898d94c171adbb20212fe148ee663885cd679512e54c3e4386e40d682b251efbbeec8664a9170b71b74ffeed85d8e2f0947861317cddbb27c91cec6db55ad7894a11ea0d18ee59355e68123e3f1524ff969e326e7f4842ee364626f509bf6131778e16ac4fe1f5912d16c6cd7"}]}, 0x7, [{0xb4, &(0x7f0000000480)=@string={0xb4, 0x3, "da2305af2c923a93cd3cff699c03ab9e1abc5b70b3a85fbbb4711645f7dcebb6891cde9174a8f8aac442adaa666302673c84f44699dcf4cd0b311ff64bef6eb94d0a01b8ac02a86956a003b4db7ccbc38214fb485d3ad1505a1f9841fd98718d16330e9a7a246a6bd4832d54d65aa0573102385b47ec355b58b087f976e2117dab4a3394bdd439a21e28ab13b0df75db9baf5e54a784590e9425a6df0f8df599cc756acf61d2161484ae8a0da925d29d86b2"}}, {0x8c, &(0x7f00000007c0)=ANY=[@ANYBLOB="8c034f64b43f9d50634e1d4e2db5e89625d9d254be5f05b614a45797b17121600a9c8f9f923894e2c7e127a87b011465a042f78c44d6c629896acecc2b50917e63e920fd25141fa2e3050a78745f98982e76a9b7b3c3f22266a360d44144f9cc00000000e403e5e7711e263655873dc863bdad557ba3136e4dad089ee086dc25ede34fb5b6b7df7ffee0f46f03489bb6fecc16"]}, {0x54, &(0x7f0000000380)=@string={0x54, 0x3, "61f2a4a3b0624b8765693dd90489ab31e34186a30174a934a6e8b9aa9cb2f2e4eceb9df8a4ffc0558667f303eb09177363344cf2a4ead65c2a3c740019bbd85c7e87b8f004ca177f884918bd1fb7ae009707"}}, {0x9d, &(0x7f0000000600)=@string={0x9d, 0x3, "d99182793628f6d37193998e5f17f71f743610e3dcf8689f74116120cf767f2f680e8e696fd7bf4c7cb79ba6af84f6ec45315ca5e345dd44ac929b7fd90b74cdf10cd00b9fc630cee43283a699e5336c7ba02d3ec257b416789e578672a85e230003bbfc20ef35c9eda3bfa2af7604db91ab6c540ae416b30d2d65811542f2fb40535642fb2a978077b637f97be4ce1bdee7038f3b3b0ff9faf071"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000b80)=0xfffffff9) syz_usb_connect(0x1, 0x298, &(0x7f0000000d80)=ANY=[@ANYBLOB="120100036f2e7110ac05818228940102030109028602010102506c0904548107f8c8fb0665007fb2eef778fd2d82442ab7b5a63dbec3cc1f023e96474463a4398e19fcb8d0973ecabccd43be401badf91e1ca37b65baeccf586731cef5466e0d852d322fc5f52b1b532c80ca1dfabced6e84abc952bd4250b86ad800f1b1db24a2d315ca370c87f7690524060001052400e9040d240f0104000000800007003f06241a4000000c241b000104003b4080000909050001000207079ca8310200b134226b926cd762b9514fd16f3625c923d9f0a590e10403d29021b747c4850d53719d00622e7c578f3c729543de13f1ca55a35e9e2009035922fd2448af97804b1f7e961af29d604bb79e2089334012b72b2e7a46a58a88ef0918ed3c7bd9bef04c40d4d52c11e3b7fa3a0a6b963cbd8ecf0ce847cce9de68471843e57feb796b5c5e2b1f14e6d8820e1938452ad83913bc212a97836c88744db5bf9bb79ccd052de03a07250183090900090506002000090305090200004000e5ff0209050004ff032009f86f0ff1afc16af8ddebfef60a3fb805a6a402ae4da8fc022e1fb1642c7cceba33d6120f2cab4d7c2470cda5cdd9d96b1d178e671ffa0ab726ed65c8a87795f892b7c5fa7ba78c2b33d834ccfcb0bba024b8b4a7a8a30f2fe1841e4914ad48cde0c0e1698556062bcb448a6364c72be8072501020501ff09050f080002070947072501820500020725010302080009050300000200068e66021e4b4ff97593c7faa1af1eecc8302daddeccded3a327dead3d2e3cee8b6abcf9cd76257f6a0ed817316e64f0d911d4dc918f1063f08c2b01b53137d102af658022524fae01b0ea1a570eab78462cb42358665209457c82aaa4022179df7a155e4589ada7072501020402000905000140007f000707250181040900"], &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0xfa, 0x4, 0x8, 0x5}, 0x12, &(0x7f0000000200)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180a}}]}) (async) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000880)=""/223) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:22:57 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f56c3965021dee"], 0x208e24b) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x42000) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x42000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000093c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="670f01c5c4e2e5abcbb8010000000f01d9660f6ded0f21f866b80e000f00d80f0866ba6100ecf26d0f015f15", 0x2c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) (async) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000093c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="670f01c5c4e2e5abcbb8010000000f01d9660f6ded0f21f866b80e000f00d80f0866ba6100ecf26d0f015f15", 0x2c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 23:22:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:22:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x3300, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x980040}], 0x1, 0x0, 0x0, 0x0) 23:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:22:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x500}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:22:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="2f17576e5ab03ab020967afd02bb225dbb7a6cdbd0abcea1c81ceaad5c2b8b5b8234a41a6d0fb202e0342f7dc4d46405f848c54b9104c3b01467dff4cb83dc4ef29133061a98c4b45bd8b40591a2a2e5e5bedad82b059d7d530852c45e2a2661bf71540fc65a3b05bf7166efde8f6b656c6c2015e3c6f950e4dc3c10c7e5c8c89ac018bfd52f42276a4c5faf46cc5672391ccf9b6d2f94914a277dc63acbe8c308f997643a332481f5908913ffdb55104aa7c0e8f045f9c5d2da37018d51815caacd440699"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) lseek(r4, 0x9, 0x0) [ 2999.797645][T25112] usb 2-1: new high-speed USB device number 122 using dummy_hcd 23:22:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x600}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3000.007874][T25112] usb 2-1: device descriptor read/64, error -71 23:22:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x990040}], 0x1, 0x0, 0x0, 0x0) 23:22:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3000.179473][ T28] audit: type=1326 audit(1693956178.189:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3000.277492][T25112] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3000.477557][T25112] usb 2-1: device descriptor read/64, error -71 [ 3000.627843][T25112] usb usb2-port1: attempt power cycle [ 3001.047591][T25112] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3001.157687][T25112] usb 2-1: device descriptor read/8, error -71 [ 3001.430926][T25112] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3001.537625][T25112] usb 2-1: device descriptor read/8, error -71 [ 3001.657472][T25112] usb usb2-port1: unable to enumerate USB device 23:23:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x358, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xeb, 0x11, 0x8b, 0x10, 0x3f0, 0x311d, 0x1e58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x346, 0x2, 0x2e, 0x4, 0x50, 0x33, [{{0x9, 0x4, 0x70, 0xc0, 0x7, 0xce, 0xe7, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0xf0, 0x1, {0x22, 0x267}}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x1, 0x61, 0xc1, [@generic={0x71, 0x9, "6dcd527bb3a2fd7644b4de1c93b342de667f3222b144ab33d804df22c908bff90abae3144ab30b1cc5909531c841753da715a1e58b3d33f15c874bef52f1a305426d018b049ed7e0b6f5588977a2a809c8345b972c154a892da0bf11b606a0102c5f663313b85aa238b20479586059"}]}}, {{0x9, 0x5, 0x8, 0xda74ef40ddc28909, 0x10, 0x80, 0x1f, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x20, 0xf, [@generic={0x74, 0x21, "581718410509e183c8d66a744901f7bd8b95d35c1f69aa263eeb064a7185bc7eafd13f78a851c9d74af040579e547fa4653e97bfabaf8b13933b3559f6c7f2a3849997a5fa1f51b3145bbc38fa85a93359eb5cf9ff72c00f47ac0c099062a63620de8bf0e3b9038d18091eebc0b3921a1d28"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xa4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0xa8, 0xff, [@generic={0x35, 0x10, "741363fb1687ccede4cda2ea16c75c42f8bd55c14ebcf94053e716072258a062269b1f2d959cbfe9af6a08e254887a300748d9"}, @generic={0x6b, 0x8, "c5c406f161f25d13334ca48cc28c160f3cfa419deeb307264b9c1eccb855df61b735a88dba32446c864215462c0530fb1ea86bf84d1126b4068065032875274206a38eda8397184fe1979b7f724588beced0ea9fbda12dcb111a5d5e0d3069063d8c095dcc0ea241b4"}]}}, {{0x9, 0x5, 0x9, 0x1a, 0x420, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0xe0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8ee5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0x3, 0x1, [@generic={0x66, 0x1, "fd2783fa88b2ab444430a6d9ba0c64c5a2ed2a3af60e4c921773270db1eb1dbdd5c8335e24241256103580fdc5d5f165579406166ed58456913ce57769f89be78c3ef4f124f54147aed4a6b3fc5c7637b15db9641d7ebecd8886967bf0f3c32e6b09bc05"}, @generic={0x7a, 0x2, "2783debd978d1aa7ef71e9e374330bcbfcca4e84141712428207570a96b764262dafbd5bc2d369f7d3f5ce225f9b6c753ce3ab7600a6a21107c20e47f2cbe940c1b7f53a044db3cd9e2dadf3599538db11a8a811f4f6fae0b98d045b65e158e34ff8e73ef2c67e1b942e45fbcd1a0a4dc027f666b74931ab"}]}}]}}, {{0x9, 0x4, 0x9e, 0x4, 0x0, 0x8, 0x33, 0x91, 0x1c, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x80, 0x1, 0x8, 0x5, "ae7f282c0a5f14"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x86, 0x2, 'n', "9862"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "644cb1d9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1f, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x3e}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x8, 0x2}, @acm={0x4, 0x24, 0x2, 0xd}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @obex={0x5, 0x24, 0x15, 0x7f}, @obex={0x5, 0x24, 0x15, 0x120e}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x3, [0x8, 0x2, 0x2, 0x1a7, 0x45e4, 0x1]}]}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x6, 0x3, 0x7, 0xff, 0x7f}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}, {0x98, &(0x7f00000001c0)=@string={0x98, 0x3, "7d11755657b0f1e35184854b2488905009e98f3fd5256e43b7e482e1dc575e612d1b9027ea21b6f5d4b03b5dfba82571addc56a7e1413921878e22bea68698316619090c0590e76ff7f64c0c520463441c68ea2533b24170a5ba391b9fc6888773f4464c561ba4004065ee3642bc6911067bfd67c9baf17ff3a22793cdd4b60b0f2378ea90e95402ac406126f57b2c0d625420e883e4"}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "0deed6466b5d6ef8b6c480be0b877de1d64701452db40ff313513fc48b3573c20d2a06ecc48c064e"}}, {0x3c, &(0x7f00000002c0)=@string={0x3c, 0x3, "51d1fb7f5c7dc5644413522082c9eff515452db41887b58ddc285fc0d43aceaeb14edad7bdce61d860f93c526348ede62fc17b13e3cceb382ac3"}}, {0xc2, &(0x7f0000000300)=@string={0xc2, 0x3, "36160594c3bd31f8e4380b16d0bc3909d5334a6bc43eeb07abe5382f8a0df030bc04dedbe898258809ba7f29c9f6419a867fb52c3280a58e9488ab6b9c779fcdc8b19d2bc336ec1b0a89ef4e0dca25fd18f285ad4d4a01848b7126c7ff6607f543e88c8659534fd5f1ca2881eea7831d20f087c03f4f44a2d7ff6a8e96ca5eb9fc0a58eed86d38ccb83804c6ea24f0c82391dc953e063f0fe14c4342a3831acfb4fe6b75ab6b3b532c6517ac9f33b70f37dc01ebd50cfbe49c18c5c77885d36d"}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000880)=[0x6, 0x9]) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x700}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="2f17576e5ab03ab020967afd02bb225dbb7a6cdbd0abcea1c81ceaad5c2b8b5b8234a41a6d0fb202e0342f7dc4d46405f848c54b9104c3b01467dff4cb83dc4ef29133061a98c4b45bd8b40591a2a2e5e5bedad82b059d7d530852c45e2a2661bf71540fc65a3b05bf7166efde8f6b656c6c2015e3c6f950e4dc3c10c7e5c8c89ac018bfd52f42276a4c5faf46cc5672391ccf9b6d2f94914a277dc63acbe8c308f997643a332481f5908913ffdb55104aa7c0e8f045f9c5d2da37018d51815caacd440699"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) lseek(r4, 0x9, 0x0) 23:23:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9a0040}], 0x1, 0x0, 0x0, 0x0) [ 3002.526497][ T28] audit: type=1326 audit(1693956180.529:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3440 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x810}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="2f17576e5ab03ab020967afd02bb225dbb7a6cdbd0abcea1c81ceaad5c2b8b5b8234a41a6d0fb202e0342f7dc4d46405f848c54b9104c3b01467dff4cb83dc4ef29133061a98c4b45bd8b40591a2a2e5e5bedad82b059d7d530852c45e2a2661bf71540fc65a3b05bf7166efde8f6b656c6c2015e3c6f950e4dc3c10c7e5c8c89ac018bfd52f42276a4c5faf46cc5672391ccf9b6d2f94914a277dc63acbe8c308f997643a332481f5908913ffdb55104aa7c0e8f045f9c5d2da37018d51815caacd440699"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) lseek(r4, 0x9, 0x0) (async) lseek(r4, 0x9, 0x0) 23:23:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x1008}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3002.867231][ T5540] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3003.003329][ T28] audit: type=1326 audit(1693956181.009:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3468 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3003.108620][ T5540] usb 2-1: Using ep0 maxpacket: 16 23:23:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x1f00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3003.307333][ T5540] usb 2-1: config 46 has an invalid interface number: 112 but max is 1 [ 3003.325522][ T5540] usb 2-1: config 46 contains an unexpected descriptor of type 0x1, skipping [ 3003.352481][ T5540] usb 2-1: config 46 contains an unexpected descriptor of type 0x2, skipping 23:23:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9b0040}], 0x1, 0x0, 0x0, 0x0) [ 3003.386039][ T5540] usb 2-1: config 46 has an invalid interface number: 158 but max is 1 [ 3003.417566][ T5540] usb 2-1: config 46 has no interface number 0 [ 3003.423807][ T5540] usb 2-1: config 46 has no interface number 1 [ 3003.445576][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x8 has an invalid bInterval 128, changing to 7 [ 3003.474685][ T5540] usb 2-1: config 46 interface 112 altsetting 192 has a duplicate endpoint with address 0x5, skipping 23:23:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x2b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3003.503439][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x9 has invalid maxpacket 1056, setting to 1024 [ 3003.537652][ T5540] usb 2-1: config 46 interface 112 altsetting 192 bulk endpoint 0x9 has invalid maxpacket 1024 [ 3003.569341][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 3003.601410][ T5540] usb 2-1: config 46 interface 112 altsetting 192 has an invalid endpoint with address 0x0, skipping [ 3003.630637][ T5540] usb 2-1: config 46 interface 112 has no altsetting 0 [ 3003.645841][ T5540] usb 2-1: config 46 interface 158 has no altsetting 0 [ 3003.837840][ T5540] usb 2-1: New USB device found, idVendor=03f0, idProduct=311d, bcdDevice=1e.58 [ 3003.855299][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3003.898459][ T5540] usb 2-1: Product: 䛖嵫쒶뺀蜋䟖䔁됭儓쐿㖋쉳⨍賄丆 [ 3003.921304][ T5540] usb 2-1: Manufacturer: ᅽ噵끗葑䮅蠤傐㾏◕䍮埜慞ᬭ➐⇪냔崻ꣻ焥Ꝗ䇡ℹ躇븢蚦㆘ᥦఉ逅濧ౌђ䑣栜◪눳灁몥ᬹ욟螈䱆᭖¤敀㛮뱂ᅩ笆柽뫉翱ꋳ錧퓍ஶ⌏ɔ䂬♡篵ബ呢 [ 3003.975589][ T5540] usb 2-1: SerialNumber: 텑翻絜擅ፄ⁒즂䔕됭蜘趵⣜쁟㫔껎亱ퟚ캽怒刼䡣섯፻쳣㣫쌪 [ 3004.018522][ T3445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3004.259114][ T3445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3004.296589][ T3445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.324899][ T3445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3004.347652][ T3445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.463309][ T5540] usb 2-1: USB disconnect, device number 126 23:23:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x2c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x700}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x358, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xeb, 0x11, 0x8b, 0x10, 0x3f0, 0x311d, 0x1e58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x346, 0x2, 0x2e, 0x4, 0x50, 0x33, [{{0x9, 0x4, 0x70, 0xc0, 0x7, 0xce, 0xe7, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0xf0, 0x1, {0x22, 0x267}}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x1, 0x61, 0xc1, [@generic={0x71, 0x9, "6dcd527bb3a2fd7644b4de1c93b342de667f3222b144ab33d804df22c908bff90abae3144ab30b1cc5909531c841753da715a1e58b3d33f15c874bef52f1a305426d018b049ed7e0b6f5588977a2a809c8345b972c154a892da0bf11b606a0102c5f663313b85aa238b20479586059"}]}}, {{0x9, 0x5, 0x8, 0xda74ef40ddc28909, 0x10, 0x80, 0x1f, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x20, 0xf, [@generic={0x74, 0x21, "581718410509e183c8d66a744901f7bd8b95d35c1f69aa263eeb064a7185bc7eafd13f78a851c9d74af040579e547fa4653e97bfabaf8b13933b3559f6c7f2a3849997a5fa1f51b3145bbc38fa85a93359eb5cf9ff72c00f47ac0c099062a63620de8bf0e3b9038d18091eebc0b3921a1d28"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xa4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0xa8, 0xff, [@generic={0x35, 0x10, "741363fb1687ccede4cda2ea16c75c42f8bd55c14ebcf94053e716072258a062269b1f2d959cbfe9af6a08e254887a300748d9"}, @generic={0x6b, 0x8, "c5c406f161f25d13334ca48cc28c160f3cfa419deeb307264b9c1eccb855df61b735a88dba32446c864215462c0530fb1ea86bf84d1126b4068065032875274206a38eda8397184fe1979b7f724588beced0ea9fbda12dcb111a5d5e0d3069063d8c095dcc0ea241b4"}]}}, {{0x9, 0x5, 0x9, 0x1a, 0x420, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0xe0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8ee5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0x3, 0x1, [@generic={0x66, 0x1, "fd2783fa88b2ab444430a6d9ba0c64c5a2ed2a3af60e4c921773270db1eb1dbdd5c8335e24241256103580fdc5d5f165579406166ed58456913ce57769f89be78c3ef4f124f54147aed4a6b3fc5c7637b15db9641d7ebecd8886967bf0f3c32e6b09bc05"}, @generic={0x7a, 0x2, "2783debd978d1aa7ef71e9e374330bcbfcca4e84141712428207570a96b764262dafbd5bc2d369f7d3f5ce225f9b6c753ce3ab7600a6a21107c20e47f2cbe940c1b7f53a044db3cd9e2dadf3599538db11a8a811f4f6fae0b98d045b65e158e34ff8e73ef2c67e1b942e45fbcd1a0a4dc027f666b74931ab"}]}}]}}, {{0x9, 0x4, 0x9e, 0x4, 0x0, 0x8, 0x33, 0x91, 0x1c, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x80, 0x1, 0x8, 0x5, "ae7f282c0a5f14"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x86, 0x2, 'n', "9862"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "644cb1d9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1f, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x3e}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x8, 0x2}, @acm={0x4, 0x24, 0x2, 0xd}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @obex={0x5, 0x24, 0x15, 0x7f}, @obex={0x5, 0x24, 0x15, 0x120e}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x3, [0x8, 0x2, 0x2, 0x1a7, 0x45e4, 0x1]}]}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x6, 0x3, 0x7, 0xff, 0x7f}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}, {0x98, &(0x7f00000001c0)=@string={0x98, 0x3, "7d11755657b0f1e35184854b2488905009e98f3fd5256e43b7e482e1dc575e612d1b9027ea21b6f5d4b03b5dfba82571addc56a7e1413921878e22bea68698316619090c0590e76ff7f64c0c520463441c68ea2533b24170a5ba391b9fc6888773f4464c561ba4004065ee3642bc6911067bfd67c9baf17ff3a22793cdd4b60b0f2378ea90e95402ac406126f57b2c0d625420e883e4"}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "0deed6466b5d6ef8b6c480be0b877de1d64701452db40ff313513fc48b3573c20d2a06ecc48c064e"}}, {0x3c, &(0x7f00000002c0)=@string={0x3c, 0x3, "51d1fb7f5c7dc5644413522082c9eff515452db41887b58ddc285fc0d43aceaeb14edad7bdce61d860f93c526348ede62fc17b13e3cceb382ac3"}}, {0xc2, &(0x7f0000000300)=@string={0xc2, 0x3, "36160594c3bd31f8e4380b16d0bc3909d5334a6bc43eeb07abe5382f8a0df030bc04dedbe898258809ba7f29c9f6419a867fb52c3280a58e9488ab6b9c779fcdc8b19d2bc336ec1b0a89ef4e0dca25fd18f285ad4d4a01848b7126c7ff6607f543e88c8659534fd5f1ca2881eea7831d20f087c03f4f44a2d7ff6a8e96ca5eb9fc0a58eed86d38ccb83804c6ea24f0c82391dc953e063f0fe14c4342a3831acfb4fe6b75ab6b3b532c6517ac9f33b70f37dc01ebd50cfbe49c18c5c77885d36d"}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000880)=[0x6, 0x9]) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9c0040}], 0x1, 0x0, 0x0, 0x0) 23:23:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3005.287980][ T5540] usb 2-1: new high-speed USB device number 127 using dummy_hcd 23:23:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async, rerun: 64) r4 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3005.527553][ T5540] usb 2-1: Using ep0 maxpacket: 16 23:23:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9d0040}], 0x1, 0x0, 0x0, 0x0) [ 3005.728515][ T5540] usb 2-1: config 46 has an invalid interface number: 112 but max is 1 [ 3005.736858][ T5540] usb 2-1: config 46 contains an unexpected descriptor of type 0x1, skipping 23:23:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3005.800635][ T5540] usb 2-1: config 46 contains an unexpected descriptor of type 0x2, skipping 23:23:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3005.842537][ T5540] usb 2-1: config 46 has an invalid interface number: 158 but max is 1 [ 3005.879830][ T5540] usb 2-1: config 46 has no interface number 0 [ 3005.894508][ T5540] usb 2-1: config 46 has no interface number 1 [ 3005.915755][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x8 has an invalid bInterval 128, changing to 7 [ 3005.994688][ T5540] usb 2-1: config 46 interface 112 altsetting 192 has a duplicate endpoint with address 0x5, skipping [ 3006.059000][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x9 has invalid maxpacket 1056, setting to 1024 [ 3006.097341][ T5540] usb 2-1: config 46 interface 112 altsetting 192 bulk endpoint 0x9 has invalid maxpacket 1024 23:23:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x4400}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3006.150674][ T5540] usb 2-1: config 46 interface 112 altsetting 192 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 3006.194304][ T5540] usb 2-1: config 46 interface 112 altsetting 192 has an invalid endpoint with address 0x0, skipping [ 3006.229537][ T5540] usb 2-1: config 46 interface 112 has no altsetting 0 23:23:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x3300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3006.245605][ T5540] usb 2-1: config 46 interface 158 has no altsetting 0 [ 3006.447653][ T5540] usb 2-1: New USB device found, idVendor=03f0, idProduct=311d, bcdDevice=1e.58 [ 3006.456766][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.483806][ T5540] usb 2-1: Product: 䛖嵫쒶뺀蜋䟖䔁됭儓쐿㖋쉳⨍賄丆 [ 3006.500747][ T5540] usb 2-1: Manufacturer: ᅽ噵끗葑䮅蠤傐㾏◕䍮埜慞ᬭ➐⇪냔崻ꣻ焥Ꝗ䇡ℹ躇븢蚦㆘ᥦఉ逅濧ౌђ䑣栜◪눳灁몥ᬹ욟螈䱆᭖¤敀㛮뱂ᅩ笆柽뫉翱ꋳ錧퓍ஶ⌏ɔ䂬♡篵ബ呢 [ 3006.547202][ T5540] usb 2-1: SerialNumber: 텑翻絜擅ፄ⁒즂䔕됭蜘趵⣜쁟㫔껎亱ퟚ캽怒刼䡣섯፻쳣㣫쌪 [ 3006.588514][ T3508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3006.825191][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3006.848723][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.877946][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3006.891112][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3007.025497][ T5540] usb 2-1: USB disconnect, device number 127 23:23:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x358, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xeb, 0x11, 0x8b, 0x10, 0x3f0, 0x311d, 0x1e58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x346, 0x2, 0x2e, 0x4, 0x50, 0x33, [{{0x9, 0x4, 0x70, 0xc0, 0x7, 0xce, 0xe7, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0xf0, 0x1, {0x22, 0x267}}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x1, 0x61, 0xc1, [@generic={0x71, 0x9, "6dcd527bb3a2fd7644b4de1c93b342de667f3222b144ab33d804df22c908bff90abae3144ab30b1cc5909531c841753da715a1e58b3d33f15c874bef52f1a305426d018b049ed7e0b6f5588977a2a809c8345b972c154a892da0bf11b606a0102c5f663313b85aa238b20479586059"}]}}, {{0x9, 0x5, 0x8, 0xda74ef40ddc28909, 0x10, 0x80, 0x1f, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x20, 0xf, [@generic={0x74, 0x21, "581718410509e183c8d66a744901f7bd8b95d35c1f69aa263eeb064a7185bc7eafd13f78a851c9d74af040579e547fa4653e97bfabaf8b13933b3559f6c7f2a3849997a5fa1f51b3145bbc38fa85a93359eb5cf9ff72c00f47ac0c099062a63620de8bf0e3b9038d18091eebc0b3921a1d28"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xa4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0xa8, 0xff, [@generic={0x35, 0x10, "741363fb1687ccede4cda2ea16c75c42f8bd55c14ebcf94053e716072258a062269b1f2d959cbfe9af6a08e254887a300748d9"}, @generic={0x6b, 0x8, "c5c406f161f25d13334ca48cc28c160f3cfa419deeb307264b9c1eccb855df61b735a88dba32446c864215462c0530fb1ea86bf84d1126b4068065032875274206a38eda8397184fe1979b7f724588beced0ea9fbda12dcb111a5d5e0d3069063d8c095dcc0ea241b4"}]}}, {{0x9, 0x5, 0x9, 0x1a, 0x420, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0xe0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8ee5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0x3, 0x1, [@generic={0x66, 0x1, "fd2783fa88b2ab444430a6d9ba0c64c5a2ed2a3af60e4c921773270db1eb1dbdd5c8335e24241256103580fdc5d5f165579406166ed58456913ce57769f89be78c3ef4f124f54147aed4a6b3fc5c7637b15db9641d7ebecd8886967bf0f3c32e6b09bc05"}, @generic={0x7a, 0x2, "2783debd978d1aa7ef71e9e374330bcbfcca4e84141712428207570a96b764262dafbd5bc2d369f7d3f5ce225f9b6c753ce3ab7600a6a21107c20e47f2cbe940c1b7f53a044db3cd9e2dadf3599538db11a8a811f4f6fae0b98d045b65e158e34ff8e73ef2c67e1b942e45fbcd1a0a4dc027f666b74931ab"}]}}]}}, {{0x9, 0x4, 0x9e, 0x4, 0x0, 0x8, 0x33, 0x91, 0x1c, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x80, 0x1, 0x8, 0x5, "ae7f282c0a5f14"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x86, 0x2, 'n', "9862"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "644cb1d9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1f, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x3e}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x8, 0x2}, @acm={0x4, 0x24, 0x2, 0xd}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @obex={0x5, 0x24, 0x15, 0x7f}, @obex={0x5, 0x24, 0x15, 0x120e}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x3, [0x8, 0x2, 0x2, 0x1a7, 0x45e4, 0x1]}]}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x6, 0x3, 0x7, 0xff, 0x7f}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}, {0x98, &(0x7f00000001c0)=@string={0x98, 0x3, "7d11755657b0f1e35184854b2488905009e98f3fd5256e43b7e482e1dc575e612d1b9027ea21b6f5d4b03b5dfba82571addc56a7e1413921878e22bea68698316619090c0590e76ff7f64c0c520463441c68ea2533b24170a5ba391b9fc6888773f4464c561ba4004065ee3642bc6911067bfd67c9baf17ff3a22793cdd4b60b0f2378ea90e95402ac406126f57b2c0d625420e883e4"}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "0deed6466b5d6ef8b6c480be0b877de1d64701452db40ff313513fc48b3573c20d2a06ecc48c064e"}}, {0x3c, &(0x7f00000002c0)=@string={0x3c, 0x3, "51d1fb7f5c7dc5644413522082c9eff515452db41887b58ddc285fc0d43aceaeb14edad7bdce61d860f93c526348ede62fc17b13e3cceb382ac3"}}, {0xc2, &(0x7f0000000300)=@string={0xc2, 0x3, "36160594c3bd31f8e4380b16d0bc3909d5334a6bc43eeb07abe5382f8a0df030bc04dedbe898258809ba7f29c9f6419a867fb52c3280a58e9488ab6b9c779fcdc8b19d2bc336ec1b0a89ef4e0dca25fd18f285ad4d4a01848b7126c7ff6607f543e88c8659534fd5f1ca2881eea7831d20f087c03f4f44a2d7ff6a8e96ca5eb9fc0a58eed86d38ccb83804c6ea24f0c82391dc953e063f0fe14c4342a3831acfb4fe6b75ab6b3b532c6517ac9f33b70f37dc01ebd50cfbe49c18c5c77885d36d"}}]}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000880)=[0x6, 0x9]) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9e0040}], 0x1, 0x0, 0x0, 0x0) [ 3007.554193][ T3570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3007.564039][ T3570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:23:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x23, 0xaa, {0xaa, 0x31, "cc9dafa30c5794ab6aea322401c1c41774d1a52ab5636767c13b6b981bff46a6bdbb094f9d77d1d2d6da528e7500669c24d54bac276a6d62b0b2b0030c5a4f6b105e79f1d12ce5bbe774b54fb455126fd70380408b2c16955f056933d14111cc7b0c60bf1adee9e84369842b4937697656c48a746f38861472f4c3c721ab6403bad7b8509cca382e92760dea18152c913277526133e8f7b6d7752bb75e310a96e4e1af42ced5b62e"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00030500004004030934"], &(0x7f0000000280)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x8001, 0xf, 0x7, [0xff0000, 0x3fde, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x6, 0x0, 0x1, 0xcc}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7, 0xf, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x80, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0xff, 0x5, 'eav\t', "f2890fa4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x6f, 0x5, 0x7f, 0x80, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x58, "a9d85c098772344e0c55a6abf6efeb735cb922c164eea42d64bb241c2f86ac05401e6313bc6ec2c6d261bb085285163b1f62f9cf64acd0b4f13cc15fb0e1ebdd4b5ac2823c6db8412aa2e2d666e42165c9ef3a914a9da10b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9d05"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "c2bb"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x17}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xdd}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x1008, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 23:23:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3008.347346][ T5541] usb 2-1: new high-speed USB device number 2 using dummy_hcd 23:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000013e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c21dbe66adb8010000000f01d90fc7ae00000100c4e3050d05060000000466ba6100ed66baf80cb8041bfa8cef66bafc0cb068eef4660f388077002665f30f1efa0f01b9ecc69819", 0x49}], 0x1, 0x25, &(0x7f00000001c0)=[@efer={0x2, 0x4000}, @dstype0={0x6, 0xf}], 0x2) 23:23:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x9f0040}], 0x1, 0x0, 0x0, 0x0) [ 3008.717341][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3008.731626][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3008.743332][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.754649][ T5541] usb 2-1: config 0 descriptor?? [ 3009.246898][ T5541] keytouch 0003:0926:3333.00C3: fixing up Keytouch IEC report descriptor [ 3009.273483][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C3/input/input224 [ 3009.391451][ T5541] keytouch 0003:0926:3333.00C3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3009.445153][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3009.461265][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.473751][T23375] usb 2-1: USB disconnect, device number 2 23:23:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x23, 0xaa, {0xaa, 0x31, "cc9dafa30c5794ab6aea322401c1c41774d1a52ab5636767c13b6b981bff46a6bdbb094f9d77d1d2d6da528e7500669c24d54bac276a6d62b0b2b0030c5a4f6b105e79f1d12ce5bbe774b54fb455126fd70380408b2c16955f056933d14111cc7b0c60bf1adee9e84369842b4937697656c48a746f38861472f4c3c721ab6403bad7b8509cca382e92760dea18152c913277526133e8f7b6d7752bb75e310a96e4e1af42ced5b62e"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00030500004004030934"], &(0x7f0000000280)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x8001, 0xf, 0x7, [0xff0000, 0x3fde, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x6, 0x0, 0x1, 0xcc}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7, 0xf, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x80, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0xff, 0x5, 'eav\t', "f2890fa4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x6f, 0x5, 0x7f, 0x80, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x58, "a9d85c098772344e0c55a6abf6efeb735cb922c164eea42d64bb241c2f86ac05401e6313bc6ec2c6d261bb085285163b1f62f9cf64acd0b4f13cc15fb0e1ebdd4b5ac2823c6db8412aa2e2d666e42165c9ef3a914a9da10b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9d05"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "c2bb"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x17}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xdd}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x23, 0xaa, {0xaa, 0x31, "cc9dafa30c5794ab6aea322401c1c41774d1a52ab5636767c13b6b981bff46a6bdbb094f9d77d1d2d6da528e7500669c24d54bac276a6d62b0b2b0030c5a4f6b105e79f1d12ce5bbe774b54fb455126fd70380408b2c16955f056933d14111cc7b0c60bf1adee9e84369842b4937697656c48a746f38861472f4c3c721ab6403bad7b8509cca382e92760dea18152c913277526133e8f7b6d7752bb75e310a96e4e1af42ced5b62e"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00030500004004030934"], &(0x7f0000000280)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x8001, 0xf, 0x7, [0xff0000, 0x3fde, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x6, 0x0, 0x1, 0xcc}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7, 0xf, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x80, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0xff, 0x5, 'eav\t', "f2890fa4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x6f, 0x5, 0x7f, 0x80, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x58, "a9d85c098772344e0c55a6abf6efeb735cb922c164eea42d64bb241c2f86ac05401e6313bc6ec2c6d261bb085285163b1f62f9cf64acd0b4f13cc15fb0e1ebdd4b5ac2823c6db8412aa2e2d666e42165c9ef3a914a9da10b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9d05"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "c2bb"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x17}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xdd}}) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) 23:23:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000013e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c21dbe66adb8010000000f01d90fc7ae00000100c4e3050d05060000000466ba6100ed66baf80cb8041bfa8cef66bafc0cb068eef4660f388077002665f30f1efa0f01b9ecc69819", 0x49}], 0x1, 0x25, &(0x7f00000001c0)=[@efer={0x2, 0x4000}, @dstype0={0x6, 0xf}], 0x2) 23:23:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000013e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c21dbe66adb8010000000f01d90fc7ae00000100c4e3050d05060000000466ba6100ed66baf80cb8041bfa8cef66bafc0cb068eef4660f388077002665f30f1efa0f01b9ecc69819", 0x49}], 0x1, 0x25, &(0x7f00000001c0)=[@efer={0x2, 0x4000}, @dstype0={0x6, 0xf}], 0x2) 23:23:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa00040}], 0x1, 0x0, 0x0, 0x0) 23:23:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000013e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c21dbe66adb8010000000f01d90fc7ae00000100c4e3050d05060000000466ba6100ed66baf80cb8041bfa8cef66bafc0cb068eef4660f388077002665f30f1efa0f01b9ecc69819", 0x49}], 0x1, 0x25, &(0x7f00000001c0)=[@efer={0x2, 0x4000}, @dstype0={0x6, 0xf}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) dup(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000013e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c21dbe66adb8010000000f01d90fc7ae00000100c4e3050d05060000000466ba6100ed66baf80cb8041bfa8cef66bafc0cb068eef4660f388077002665f30f1efa0f01b9ecc69819", 0x49}], 0x1, 0x25, &(0x7f00000001c0)=[@efer={0x2, 0x4000}, @dstype0={0x6, 0xf}], 0x2) (async) 23:23:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x7}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3010.697402][ T9866] usb 2-1: new high-speed USB device number 3 using dummy_hcd 23:23:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x5, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3011.077661][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3011.117631][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3011.144941][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3011.174266][ T9866] usb 2-1: config 0 descriptor?? [ 3011.680756][ T9866] keytouch 0003:0926:3333.00C4: fixing up Keytouch IEC report descriptor [ 3011.717588][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C4/input/input225 [ 3011.848366][ T9866] keytouch 0003:0926:3333.00C4: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3011.880580][ T3648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3011.898184][ T3648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.921635][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3011.941059][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:23:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="23003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r4], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="238008021100000408021100000150505050505000"/32, @ANYRES8=r7], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f535"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r2, &(0x7f00008eb000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000340)="f30f7bc736f2222261b50f01d1baf80c66b84229118566efbafc0ced666c0f090f326635004000000f300f00d5da66b844b15c8f66efbafc0cb80000ef1010b8399700000f23c80f21f866b90608000066b84e93000066ba000000000f300f23f8", 0x61}], 0x1, 0x14, &(0x7f0000000300)=[@cr0, @cstype0={0x4, 0x8}], 0x2) 23:23:10 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x23, 0xaa, {0xaa, 0x31, "cc9dafa30c5794ab6aea322401c1c41774d1a52ab5636767c13b6b981bff46a6bdbb094f9d77d1d2d6da528e7500669c24d54bac276a6d62b0b2b0030c5a4f6b105e79f1d12ce5bbe774b54fb455126fd70380408b2c16955f056933d14111cc7b0c60bf1adee9e84369842b4937697656c48a746f38861472f4c3c721ab6403bad7b8509cca382e92760dea18152c913277526133e8f7b6d7752bb75e310a96e4e1af42ced5b62e"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00030500004004030934"], &(0x7f0000000280)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x8001, 0xf, 0x7, [0xff0000, 0x3fde, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x6, 0x0, 0x1, 0xcc}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7, 0xf, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x80, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0xff, 0x5, 'eav\t', "f2890fa4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x6f, 0x5, 0x7f, 0x80, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x58, "a9d85c098772344e0c55a6abf6efeb735cb922c164eea42d64bb241c2f86ac05401e6313bc6ec2c6d261bb085285163b1f62f9cf64acd0b4f13cc15fb0e1ebdd4b5ac2823c6db8412aa2e2d666e42165c9ef3a914a9da10b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9d05"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "c2bb"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x17}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xdd}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa10040}], 0x1, 0x0, 0x0, 0x0) 23:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3011.972594][ T5140] usb 2-1: USB disconnect, device number 3 [ 3012.168128][ T3690] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 23:23:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3012.333435][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3012.354049][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:23:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3012.587640][T30850] usb 2-1: new high-speed USB device number 4 using dummy_hcd 23:23:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="23003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r4], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="238008021100000408021100000150505050505000"/32, @ANYRES8=r7], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="238008021100000408021100000150505050505000"/32, @ANYRES8=r7], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f535"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f535"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r2, &(0x7f00008eb000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000340)="f30f7bc736f2222261b50f01d1baf80c66b84229118566efbafc0ced666c0f090f326635004000000f300f00d5da66b844b15c8f66efbafc0cb80000ef1010b8399700000f23c80f21f866b90608000066b84e93000066ba000000000f300f23f8", 0x61}], 0x1, 0x14, &(0x7f0000000300)=[@cr0, @cstype0={0x4, 0x8}], 0x2) (async) syz_kvm_setup_cpu$x86(r14, r2, &(0x7f00008eb000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000340)="f30f7bc736f2222261b50f01d1baf80c66b84229118566efbafc0ced666c0f090f326635004000000f300f00d5da66b844b15c8f66efbafc0cb80000ef1010b8399700000f23c80f21f866b90608000066b84e93000066ba000000000f300f23f8", 0x61}], 0x1, 0x14, &(0x7f0000000300)=[@cr0, @cstype0={0x4, 0x8}], 0x2) 23:23:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3012.893517][ T3713] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3012.949001][ T3717] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3012.997548][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3013.031445][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3013.052426][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.088406][T30850] usb 2-1: config 0 descriptor?? 23:23:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="23003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r4], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="238008021100000408021100000150505050505000"/32, @ANYRES8=r7], 0x40}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f535"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r2, &(0x7f00008eb000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000340)="f30f7bc736f2222261b50f01d1baf80c66b84229118566efbafc0ced666c0f090f326635004000000f300f00d5da66b844b15c8f66efbafc0cb80000ef1010b8399700000f23c80f21f866b90608000066b84e93000066ba000000000f300f23f8", 0x61}], 0x1, 0x14, &(0x7f0000000300)=[@cr0, @cstype0={0x4, 0x8}], 0x2) 23:23:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa20040}], 0x1, 0x0, 0x0, 0x0) 23:23:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3013.584239][T30850] keytouch 0003:0926:3333.00C5: fixing up Keytouch IEC report descriptor [ 3013.614402][T30850] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C5/input/input226 [ 3013.759769][T30850] keytouch 0003:0926:3333.00C5: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3013.780082][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3013.823885][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.874337][ T5541] usb 2-1: USB disconnect, device number 4 23:23:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x6, 0xfff, 0x8, 0x0, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x2, 0x2010, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa30040}], 0x1, 0x0, 0x0, 0x0) 23:23:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, ' j'}]}}, 0x0}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) socket$caif_stream(0x25, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0x73770000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x8000, 0x6, 0x1, {0x22, 0xbf9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x5, 0x7, 0xff, 0x1f}, 0x22, &(0x7f0000000140)={0x5, 0xf, 0x22, 0x2, [@generic={0x5, 0x10, 0xa, "e7b2"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x100, 0xff00, 0xfffd, [0xc03f, 0xc0, 0xc000]}]}, 0x1, [{0x9c, &(0x7f00000001c0)=@string={0x9c, 0x3, "791d399a7a4bfa1ef5a9e2106139b0e84a3b361e1ae84121409bafa91f838c9fe9c372893efd877836ac4bf27f4213d71f1a62490187f900ebc563f451943bbb724cdf0ced2c158eca4faa78f62e83695ee8be8df37bb493f53ff1f0b2b22cd3c57e8366be56cd4146c3d4bdae9f8facefddf227847b7a10d6f56fbc60a2be216e35d2172dbbebeb9352240434ff48a4dfaa4af139d2e5d6c453"}}]}) 23:23:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x44}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x6, 0xfff, 0x8, 0x0, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x2, 0x2010, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:13 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x400, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x8], &(0x7f0000000280)=[r2, 0x0], &(0x7f00000002c0)=[0x3, 0x3, 0x7ff, 0x200, 0x2, 0x7fffffffffffffff, 0x7], 0x0, 0xef7}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffc6e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000002c40)={0x1, r2, r5, 0xeeeeeeee}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x4, 0x111, &(0x7f0000001b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x7, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x5, 0x5, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x1, 0x3f, "8615e63973d7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x2, 0x2, 0x40, 0x5, 0xb2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x2fa, 0x5, 0x1, 0xa0}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x58, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0xf9, 0x1, 0x1, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x80, 0x3f, "590bce"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3f, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x5247, 0xcb, "0915c241927f249b44"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x40, 0x8, "f216", '8'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffb, 0xc96, 0x80, "0f7f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x8, 0x20, "3796ef33f0586a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x0, "4b44b8a9d7bab79416"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x9, 0xee5}}}}}}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x250, 0xe0, 0x5, 0x6, 0xff, 0xff}, 0x2d, &(0x7f0000001d00)=ANY=[@ANYBLOB="050f2d00030710020ca500001a1004e5bee22f106e663ade584ecac73b6c0b83803a822b041307100208200500"], 0x4, [{0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x41a}}, {0x30, &(0x7f0000001d80)=@string={0x30, 0x3, "e020dbc59c1d29760a96105e3a03315a2912ff2501e4c8108359c0c1869a0870ef4e46a8ebebc34a3aa2a5c1d975"}}, {0x2f, &(0x7f0000001dc0)=@string={0x2f, 0x3, "61b3b2645a42e60c531ad990c6546efee893d3baa28d7fbad86bd1145bd6ecdb0d3572496bba6f351edf5601a0"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_disconnect(r8) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000001940)={0x24, &(0x7f0000001800)={0x0, 0x21, 0x58, {0x58, 0xc, "5005bfb94517aec02522acbf51324df8bf7db9a6eb9b485cab5459f88305800568b2de2179569a169b6600d02ca0169c0a9342db74a58f6dc541edbe9e108d69677d6cb0d5cddd7948411d348d2050b46e97b6416121"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000018c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000001900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0x69c}}}}, &(0x7f0000001b40)={0x2c, &(0x7f0000001980)={0x0, 0xe, 0x69, "ab45b1c42dc1a330bf189311aa2853548858b2016f910e1fcf314bfdb83e78f8dce067735b8bc1e9152bc8a1414fd94e8c0df2bf45b5637d7e1ed6a652640185ee590ba235e0167b5bfd4cef4dcfb12a740d92ed6ad2bdd329c07cb3ec2e244c39efc508a532fc7341"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000001a80)={0x20, 0x1, 0x69, "fb1fa9c5a0ab96ddefff7cc311d0bc3e5e33b89e3564bf05d1fee14760130b8c1dbd0e4ed8850b1690b084de8ece61797e76fb4d0f5c01d731dd23416dccb40c74b82565205fff69f4ac8b76dede6778670132657462980bc2dda6a27419a6ecf33c2d5ef1e82ab2a1"}, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect(0x0, 0xbca, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2f, 0xfd, 0x8c, 0x8, 0x1bc7, 0x1062, 0x92c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x7, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x46, 0xff, 0x1, 0xff, 0xf2, 0x87, 0x7e, [], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xc5, 0x8, 0x4, [@generic={0xd7, 0x24, "2ef89cef58554ce1ff9782bc56185ebd69513b9ae54fca7172622fabdd244f729bf9624ff8d009d5bc08378313b97c2ed97100ba12a425b989d7d87163274fceeb2938f879ebcf0bdf0a8c32897189be966ed9688916d5aea90af638150b221b4276fe62d2cd8ed76848b67c898f2c15c4d2760bd3fdf2f5aad92f1381a3ab8d31fd02d3b0d1e265178a4cd3688fb743ae0fcf56de0a308438c4f58c7b25300e929e53259c460ebc01cb56a94deb7abd510618d94a0f4e5b2ad72961ec217c9f0a1087c3cc82521b3114ae4f42ae49ed0745b9b64f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x9}]}}]}}, {{0x9, 0x4, 0x2d, 0x5, 0xa, 0xff, 0x5d, 0x81, 0x40, [], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0xf8, 0x4, 0x0, [@generic={0xb6, 0x9, "54c7a0e7b66ad5475f323899405f82f3bca56d24ab12079923c7f22a174088b6e09af6b92e1e0916d6cd6285e824baa2516b5d48adbf9d0a8ec7669981f1ac8a09a37aba3de7925ab9feb129ccb4cc8baf3cfb73c01a18ab4d79d6296ac3e6d0be714adef43673e567cb1da40ede5e9268a38cb0b0fee90e225bc5521d4e714717bd1368117068653069b5a147c819cf59b8a289b837a42c1fa71f7b8036e0ae7f54c5f311773fe50c9de4ed64fcfccaabee7e64"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x5, 0xa9, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x80, 0x9, [@generic={0x84, 0x31, "5ff4414de69d7ff72aa97513663d72f91bd13497b5a5421943f00b3d9a5c6ffb2cddb993dc2ea2521d8d7b8facfec2718d129e1ce01e0b88d4a9d9f27b7f4583a0916c4582aa87d55ac0b304a0642d51837ba54212da1f15b0ca1d8ac4b61fdff7716a322a61d8799b9ff6c3a8b5e742ccfa22377f0248b3285a54a926fa60b4a3df"}, @generic={0x10, 0x8, "d490ca76593f886731c49ee5547f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7f, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x3f, 0xef, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xcc7}, @generic={0x78, 0x1, "c5e88fe85c35d5cd33c87e9850b7ef35b4a3040fb49edf351f72de8240f37961edcb49db1a51705506fc2a30be247179f08d36dc90d89e88a5e1b89117c3c607664163c537df6872411fe42bac6c89b43ed09d6ac4a138fc8e5c9b30cd61f94a651eea2aaa1a893cdf3bee9fdf297fbdbab64b3e25c9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x9, 0x7, [@generic={0x60, 0x9, "a953ce9f298e84c89ca84f1d7a721994a361c9b42707987b17cff93c26e77b05f73eab813bc35c86355cec6b78887b767a3b19e3b567384c4400ab4e1ae01d663d27b20684850b7c95323a0abf2a692289e0055af8dedb7c91a986528f9d"}, @generic={0xf1, 0x5, "f60535405f951100361e49931b1c02cd7d9111cf856f530f3456ecc84aac85fb66a1f49f494f3aa026bbcf0a5873c4098edca0ff77ea8a2478ef67e6b09ab98365bb3d74d35b880248fdb947f60411de983bfdf608085023597d7eb9419ba799666ed2accb0c16bfc5781e0899f33eee0ce981fe093533ef3216d1b66ee562c91029ff38f6c6fa240d35d013a51a65a79481d608d34a4c17104948e19d56bcc66a5893ffa11fe651ac0f235209b5e2f588a7001baa98d0a3cd6d3eca5b2968cbe61657b7b0220350075095c1b505c0c42a8d4bd44140eaab9cbf349ccc2a3ebc837ae188ea049befda33386a902672"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xd3, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20}, @generic={0xa7, 0xc, "959813d572f1bc82de3cd8aeaab2fb36f1bf105b8f9a7f052a186a879a9f7fd3e8a25cee4a98cc4214c31ab8aa823154bdd9c1d5a480cae5533ede1e5721fb1709f88adc4d0972e16169ec4bdf3856a1498c6ca0dcd7335d195ba688f52f4002749256dcb99e60dcc9ce6582caefed612a69e16c0ed6e59c40b3b2bf582f2e738d09e071053af5fec44357e3e008ab531f6aae2d5ba6922ac6c5210d83085cdeaa85a92585"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xed, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x8001}, @generic={0x86, 0x5, "ba69133add1709a6ae5066e777eb0822559273dc969fba4b5318b913211cb7ddf03ea6ec7925352614330ebc7d904f31cc1a6f191e1e520824f68d9e6642d133930090ea9eebd721430658b9b5e64fbbb58ea3a4a452f480d82cd826c351d6f4164c71c0a63f66b64f4f55a64e137544ea46c38ff4f07e41a9bb309c0a1207ae42af140d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x9, 0x7d, [@generic={0xc0, 0x9, "cceea591d60b3dd6e86f0f34a246dfd7e7c00bda031d5bfe1044465e59ba16dda59c60f9b4542354bfcac30c4eba4f85d6585cd79e7ebaed8d369d3a81b21d2e295ac058bf975fb19a44c336628d84b1585b47dcf2bdc572d790bbedaf3c9e6a8b8ddd776129c4557d16937b05c42d615e5f736a387f3b9de40a9733a0c12c051f9459a4bebddbec7abd68e5a9fc9f16aeff38a9ab57c4879c5d40e1bbf258479167dfca21759b7193a7d70f792dcb2f4b0496c8bce1fd36ad5661e6d8ba"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x3, 0x7, [@generic={0xeb, 0x31, "b12b1abef730fe93f81d5f53643a27f7510a7c30b1d7f4bc2711ecfa72f2202c83af2e2d38edf2689910f05052b9492af726e255b29f59d1b3ff36924a3abef70781a9836357345d1ae90858b0619f27c259696da74fb89f7fa68f8802cb6a0d721817c68d25274ea3a867c87ab01c9f9fbfd3c670c5f7fa6a1b0ae331955152fe84e4322033279b3ca18a618ff73adae3ef55f9cc20b9e3b5cff9e2b37b2b3ce0b927778258f3598b12c7555a3ea3a0495ffbdc4b8da716f4d825623a8c37253b21392856dba6e1b42683d37a80b1ec0db3c40453c92132f78592069d398887e8941e05f6395e3ad7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1f}]}}]}}, {{0x9, 0x4, 0xf6, 0x0, 0x4, 0xff, 0xff, 0xff, 0x5e, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0xff, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @generic={0xdd, 0x9, "d580ff6ce498f1f86fd9eca48bb5f4e7f84e9c55f070fbe47e55eeaffd345cf1ea883faf3bbbf7a2bc1bd1d6b50c55542531e788cdf54a0653a739f2ebf734eaf7f11037e854127862a9438602bef36568ec270c0d3c84fb7718d811c71c2abc199679adb586809307246db3db4994c6317790eec86aae8765e58ea66c6f21e77854e431d9f31c258cef62e85d6054d3b8b2982631932c46a6700a7fb4a244e4d423f55c675a2d5ac11e6610e137fe54ef4ffeff6e0f1c48d4e88e7c00da84983adb6f92dc9aa2775a96b184cae6ba7bf29532aea0578bb4e2a8dc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x15, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe7, 0x9e79}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0xe0, 0xed, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1708778773df3c9b, 0x7, 0x5}, @generic={0x92, 0xb, "1df250a171d70f166be2cf51923ea23d9af5f0eff2761bae9d133ea6fe3915bfd224e11129ca55254066cd9533aad6b4afd014a925401a68326b9806c2cd07acc372dae4db6cb3d70b7a85bb83a2411523cc9a6613516e73e66d1df363730e2d56ab297d34ff08a48c559d6af4b7f82cd77a528a8a37934b3d81fd3e6a22e28eab1b0e55ef44c8a7563b5fe97aa5fddd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0xf7, 0x20}}]}}, {{0x9, 0x4, 0x1f, 0xfe, 0x7, 0xc9, 0x5e, 0xfb, 0x1f, [@generic={0x97, 0x5, "754ce1978ddce5e6880c4daa447d773d84d63c998ad085c30d8d24c258fc1435e8e2df9bbe4b16ab2e2598ef6dd13d2271a3aa3c23c5b6705f8489bce79df2bc8609c8088544ce74dc48328936e89146e06371ff2df201eea3329606aa5a63914ce5c1f7e25b37a44a3fff2ad9e1b79d761a8b20bcdaa58af2b902f1a3b48211cc307e2c3ab5bd0cbe4196a67d10f4a6734fd669eb"}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x31, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0xd4}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0xff, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0xce, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x57f1}, @generic={0x84, 0x8, "710a8e11822c5062f3c47d25cf920d2425385d29aa20bcfe561d12d980dd91080003e7e5355c8bb199df7cf529a9d4d2ff54b5925dd9e53b1857d193e535b13bcb1fe4f356f4e8dc46ea0e0a07504b607f309b6effe71d8ffe737d2aa54469cf3f70ee29fe4da188dfc0017846f6fb1cf2fb8e72f82f816c5e18864929d271b28507"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x6b, 0x2, [@generic={0xb1, 0x9, "f49386569b78f591f8ac5c14ff9d5825697554a273376646720b9b1b9e261a70abbfbf08d8ec4c3490213a06c30a0030981e0cf76961d5cd954a18dfe92e236b2c644c54c987abcbe38bc696a7b838be546254165d59b8ae7863dce87a52cac783b35ca23f34622bf94366a99c4167f77832f981a0620b589f5bcf6ab5d5672ef7f997e0ed979c8e6bb5cb5900fc1b1d3f6a4d572a92a058cf6dc26c25f2b4cf7d8f773c1c870444ba3bf7b3bdd6af"}, @generic={0x6d, 0x5, "e3987deab6192db4e04a8f8e2b667e194877ffd5e9cb51bb4a336280c21c391d9135fb47ccdd46106f4a0c8d1af22bd41c8c73a429bcbff2af0b2c0ff52126c7bf62802f6e2c91d8cd09473c5e4921323ebf782c2d0f83080021752f32085ec93bcf446aba630adeaa1a4f"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x20, 0x3}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc, 0x2, 0x1, 0x8, 0x91}, 0xfc, &(0x7f00000001c0)={0x5, 0xf, 0xfc, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x9, 0xffff, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1f1857ced5401c706541f953c74445d2"}, @generic={0xce, 0x10, 0x4, "02003ef17661f1fe6f8b08beb648e0c34d70dea1aca005e75caa517803bdce00ae46fccc41fdb746e2f164354ffd5e3b20f6aa62635eadd86186575893891c12b3db8b52161eff2876121fe2b1cbdc2c78f55c07bbb989ef669b0dfee81a560ed1a989013630aa4f55c458c240f92d5b3a5f1779681750ef564cc4a6be1283fe79142d0f7816ae4e971f1c00a58e0253229a37a14767f50b87a38b6a835c51fa821843d44d46a0d5f8c20a583410afbc68548f1c5dc8c5a6801bed5704851bc86b65809e3e28d5512eafa8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0xc3, &(0x7f00000002c0)=@string={0xc3, 0x3, "82c018670a55845d36602cd82c9f55977b33b64f93e738e9f455f60678a8fd6f50f2d5e1c82c387b32377216c4fd570ee6d7296b1d47f2456975829938a275c75f1cd103baea1dedb049246c8f589eb25e26a275f0120a9d85229f7fe6b11c1bc14f0b515fcceeb18d701e46fb7d0c0f900998caf8910cc384eb332138a238de9ae3e8b36c1159040b0ac45369c7e08abfa08e1e3f3dcb846ba4935b43240ce3c069cf7ad276ae85413d05993c750df99f4b6ed21fda212ce2730091892749471b"}}, {0xda, &(0x7f0000001080)=@string={0xda, 0x3, "faa48e720655a56911c7077512971a8e6783a42022234ca0b7a1d2c3f91f238212c0712e918d9e0ae53e389994c025acddc03908c4cf789db5ac67ce755f0bb73d5287f0d614bd3ec3864092d27ca9f56f4c178bee6b12d58110816128634a4da8171f453efc00972f852f496a4c426b8afdccfbaa296f35849461ed3c930482285425f7633b5976996f491f6eefc9c2be2a032a1c0a12af70f5803466bfe5565403f14c67e4515cbea84606d5d09162cc2da303d110456b0914ce4651788e4601eb64308c3808944d89579ea0b7b31a5856d04d077b994c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550d, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001ec0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffbe7, 0x0, 0x0, 0x0, 0x4fcb03d7}, @generic={0x4, 0x2, 0x4, 0xa0f, 0x8}, @alu={0x4, 0x0, 0x3, 0x1, 0x9, 0x8, 0x10}, @generic={0x1, 0x2, 0x5, 0x9, 0xffffffff}, @alu={0x7, 0x1, 0x1, 0x6206ae2774710073, 0x8, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0xfffffffffffffffe, 0x10}], &(0x7f0000001f00)='GPL\x00', 0x4, 0xa9, &(0x7f0000001f40)=""/169, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xf, 0x15, 0x117f}, 0x10, 0x251f1, 0xffffffffffffffff, 0x0, &(0x7f0000002080)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x90) fstat(r10, &(0x7f0000002180)) syz_usb_control_io$hid(r9, &(0x7f0000002340)={0x24, &(0x7f0000002200)={0x0, 0x23, 0x75, {0x75, 0x3, "d45bed2ea4c5571fd07498de588eaef7166b28cf1c8839975bfa08a3f87b2c41d575bfac5012f2e472ad825d27450ed3f2f3ff3d0c5831f52f299a186d0717c837e96bfa87b4b8e54ceb12a3b677af66a0444ec30f04586209f404c7124a0da212e66576b0dd36e4a7edcf76d6fc23f54df41c"}}, &(0x7f0000002280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f00000022c0)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xa, "8a24dfd0"}, @local=@item_4={0x3, 0x2, 0x7, "a871ca73"}, @main=@item_012={0x1, 0x0, 0x9, "8a"}, @global=@item_4={0x3, 0x1, 0xa, "5d686e06"}]}}, &(0x7f0000002300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xbaa}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002380)={0x20, 0x15, 0xf0, "5648595cee5c5b9f6cf68eed9bc1099a0c85bc8ffa8141d8aeb199e1c95fccb7f481e4708c3ef9defe4d7e9b32b553a45263574c9451b9c8f3e91ff0a0d86be0b70721e15adeba3f4a1d8fa2144e06f157d803f59ad549087d86afdccb3472836ec3f234e4db864c1f99fb7eb23919c314acc71211e7ed65267f06bf4b26a72cc2d24890706a441132cfcb3c27c419490ada02d79251f3a0f39fe3e0bbfb1d34e383212ba523809ad35214d0571335e42384aa8cb6505e70d1285420467bb9090e85b6eb8932d03236f3b923b361341db50979ec02a978b50540513a437dea1ebbc034259f39d2efed255c92a6d80bb6"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002500)={0x20, 0x1, 0xea, "3dc6ce016ab7534b4797e2920a16a485a366d30966a5e9c90d050f94cf1bd0969b588b34c0ed417b963a9304ba5414493b3894be5286bd513278b680ea422ffceeb6b46fb1811b828677b7a8eee19ce07f7167fe8321dfdfb9dde264d0a12519647b17150154a4a4a0be25c9a3129114771ce6a1f43c5109507a3b5ecb86a11e8b59c401c1f7ddfba58813123ac3bb3ca5f3bd9079fa38186d1ffd6f017ee4eabea2b85b6640480a0c1c6f0069f592792fec2619a7d165551093fe64e24af7a792a5e1d2d1c4245163d16560797871e832a89d24f2a0fb081ca2ed41d86b468109c7ac3064b10f19f953"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x97, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x99, 0x3f, 0x5}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x0, 0xa2, 0x2, 0x40, 0x1f}, 0xdb, &(0x7f0000001300)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x4, "cf132c7eb5963b55ea93ddd02108136e035a4ed8a0e4971c2f618678454d20f48a2f0349aa6747eb293684f9a61e3f4959e853e08c4fcc0e9a1be89dfcc9defe65161a960d9c7af0ebf7b16ec0808c6b60e6cac4da7e5cada628a15ba1d10808a0f4b996d437fe186a62858dff64fdb998864ee9f250bf6cb247a651b77b37dfaaf69e5782cfc31736741b0fdc0c5b556967bf652cb9ce5d3b2eb73e00fbb40f8e6a170c798585ee0a1766ae7dbed959238f687b971f86aee5160ba8f3cc23d87cd58380b5e930c94daeb14871367529886212"}]}, 0x6, [{0x6, &(0x7f0000001400)=@string={0x6, 0x3, "af7d0a21"}}, {0x22, &(0x7f0000001440)=@string={0x22, 0x3, "2adde0fb7d0743f20cbd0fa194ee208b989f54c934c43261a60ac53d77245747"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x424}}, {0xe6, &(0x7f0000001500)=@string={0xe6, 0x3, "a51c6b43a2235ff3e9875f5b9b5eda6e0b16636bd8af01de2f6db59a387f799b151e2b78c84d529acf464e365e8e97e45378bcd5fb5704682b0986c7aaf90f3f89cb9230dbdd288bb6f1e8d4b163c322233a74eda6cc15186a1d5ffb0b33bdffcc45442d7f4dd1216be35368ef06ff6ba045b0f80673881738b484a9dbe27c06e3c28ce4915d88eda956def7bf85f5a0c8fa794325fcdce56b595851855d95e6b15933ca45fda804c00eb134c02825d09c1f4283c302d702972e4506fb30d8da46343c170c1a65f9b0e042b5a9c6b6ec93e9a47c8c60c99d1fba25d9d92395dfcfd80e65"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "11fd1f90fb57feab4242467c5508dec4a75d7d470d9b88c7424735ac5e9973cc74e0b7f6627f4dbea45cab5a8c4e274d7758e08270965158c116314a4d51831841b7b503add32dada9109adf4e3495c686f977ecbcfbab3282bf931ef25df12dffb18d96be268ef52006e71a6fbbf8acbe0556d80bb19bc207d1901c08538e5db83e54863b3606a9348d3057b6d1cac889239cc1d759dff8ef12bf92225b26140292820ef1fd12147f3d7cd0880ff7ad29e2"}}]}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r11, 0x8018456f, &(0x7f0000001780)=""/97) r12 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000002680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x80, 0x4d}}, [{{0x9, 0x5, 0x82, 0x2, 0x7a77c32409b8305e, 0x5, 0x83}}]}}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x201, 0xe1, 0x3f, 0x8, 0x0, 0x7}, 0x1a, &(0x7f0000002700)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xa, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0xac1}]}, 0x3, [{0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x445}}, {0xcd, &(0x7f00000027c0)=@string={0xcd, 0x3, "b9dd33bf5c5cd0c37835eb2e6af046b037ea23f31fa5c1e0374d06b39f50a247ba21579f46a4f441622b92e921cd7d13b78c1f04ceec079b202428a27e3cbc7115c2b91200afe255c559a60ddb023b90e7988075bd6997d0f729a04d7218af40eadcf6895a0caff123259ee000c16e09980667ccef4470ae5afde234fb43a8ce51e5dd9999f770d78a2955cb00d8bfc48cea3e5b423eb906be2b1adef99d3f4dc80d4f00b0421a19aa365258da6efd46489d6c6895888723e3abc558394f13f360186193b3e321d4b7dad7"}}]}) syz_usb_control_io$printer(r12, &(0x7f0000002980)={0x14, &(0x7f0000002900)={0x40, 0x22, 0x32, {0x32, 0x3ffa9ef0a5752540, "4746376efe2a69dd383f1a9965195b7aea97bacfd3e37ccb75425d4a27780bb208c74f204dd556e093ebdc74f3146706"}}, &(0x7f0000002940)=ANY=[@ANYBLOB="00032a0000002a0328d160b5efd500af9e4e93ffcf465643354f053d164d53861920d877c3a106181f82d017b88d26ea"]}, &(0x7f0000002c00)={0x34, &(0x7f00000029c0)={0x0, 0x6, 0x31, "6f156e1063cc548c548e55b5c41923f8aee0a3f6154ea016b9b7e711e383a5f0527a1c3b4bf477927fe7aa7c7843a6e174"}, &(0x7f0000002a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002a80)={0x20, 0x0, 0xbc, {0xba, "1fb6d65b1ae9fad3a63b6718194d2067a15d33fc9558f8cb8516a29bfbb25cd09c3c68b06ab0fd1cedb51f9bc349543ec032649f72b6207ec07b9c6f211b0a760c53a07bb0fcb1011f37fa9be93b2b96876def14bff6c2ec6edcd527ab2325a4ae0b184c864ca996a30362968f3d14997cfc63339b7c0b72aef5aa67a0944c98687119b5a111fd907be6424b851c0fe715e903279e358a6899b5c790f319186313792ef01222d0a943c11e54356255e7ed014b22a1ad3e0cd997"}}, &(0x7f0000002b80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000002bc0)={0x20, 0x0, 0x1, 0x60}}) [ 3014.987266][T30850] usb 2-1: new high-speed USB device number 5 using dummy_hcd 23:23:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3015.189051][T30850] usb 2-1: device descriptor read/64, error -71 23:23:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x6, 0xfff, 0x8, 0x0, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x2, 0x2010, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x6, 0xfff, 0x8, 0x0, 0x9}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x2, 0x2010, r1, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:23:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa40040}], 0x1, 0x0, 0x0, 0x0) 23:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x500}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3015.467506][T30850] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3015.637514][ T9866] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3015.677322][T30850] usb 2-1: device descriptor read/64, error -71 23:23:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x600}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3015.798014][T30850] usb usb2-port1: attempt power cycle 23:23:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x79) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3015.997610][ T9866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3016.029537][ T9866] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3016.068443][ T9866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3016.099829][ T9866] usb 5-1: config 0 descriptor?? [ 3016.227266][T30850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3016.320414][T30850] usb 2-1: device descriptor read/8, error -71 [ 3016.607231][T30850] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3016.698021][T30850] usb 2-1: device descriptor read/8, error -71 [ 3016.783834][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.792791][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.808316][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.817868][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.818300][T30850] usb usb2-port1: unable to enumerate USB device [ 3016.866342][ T9866] keytouch 0003:0926:3333.00C6: fixing up Keytouch IEC report descriptor [ 3016.887799][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00C6/input/input227 [ 3016.984509][ T9866] keytouch 0003:0926:3333.00C6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 3017.074969][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3017.088347][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.102464][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3017.116225][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.152307][T23375] usb 5-1: USB disconnect, device number 50 23:23:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, ' j'}]}}, 0x0}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async, rerun: 32) socket$caif_stream(0x25, 0x1, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0x73770000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x8000, 0x6, 0x1, {0x22, 0xbf9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x5, 0x7, 0xff, 0x1f}, 0x22, &(0x7f0000000140)={0x5, 0xf, 0x22, 0x2, [@generic={0x5, 0x10, 0xa, "e7b2"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x100, 0xff00, 0xfffd, [0xc03f, 0xc0, 0xc000]}]}, 0x1, [{0x9c, &(0x7f00000001c0)=@string={0x9c, 0x3, "791d399a7a4bfa1ef5a9e2106139b0e84a3b361e1ae84121409bafa91f838c9fe9c372893efd877836ac4bf27f4213d71f1a62490187f900ebc563f451943bbb724cdf0ced2c158eca4faa78f62e83695ee8be8df37bb493f53ff1f0b2b22cd3c57e8366be56cd4146c3d4bdae9f8facefddf227847b7a10d6f56fbc60a2be216e35d2172dbbebeb9352240434ff48a4dfaa4af139d2e5d6c453"}}]}) (rerun: 32) 23:23:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa50040}], 0x1, 0x0, 0x0, 0x0) 23:23:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x79) (async) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x79) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23:23:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x700}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x79) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x79) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) 23:23:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x810}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3018.027592][T23375] usb 2-1: new high-speed USB device number 9 using dummy_hcd 23:23:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x1008}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa60040}], 0x1, 0x0, 0x0, 0x0) [ 3018.251510][T23375] usb 2-1: device descriptor read/64, error -71 23:23:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x1f00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3018.538535][T23375] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3018.747555][T23375] usb 2-1: device descriptor read/64, error -71 [ 3018.867571][T23375] usb usb2-port1: attempt power cycle [ 3019.277714][T23375] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3019.382615][T23375] usb 2-1: device descriptor read/8, error -71 [ 3019.667460][T23375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3019.760679][T23375] usb 2-1: device descriptor read/8, error -71 [ 3019.889722][T23375] usb usb2-port1: unable to enumerate USB device 23:23:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, ' j'}]}}, 0x0}, 0x0) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) socket$caif_stream(0x25, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0x73770000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x8000, 0x6, 0x1, {0x22, 0xbf9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x5, 0x7, 0xff, 0x1f}, 0x22, &(0x7f0000000140)={0x5, 0xf, 0x22, 0x2, [@generic={0x5, 0x10, 0xa, "e7b2"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x100, 0xff00, 0xfffd, [0xc03f, 0xc0, 0xc000]}]}, 0x1, [{0x9c, &(0x7f00000001c0)=@string={0x9c, 0x3, "791d399a7a4bfa1ef5a9e2106139b0e84a3b361e1ae84121409bafa91f838c9fe9c372893efd877836ac4bf27f4213d71f1a62490187f900ebc563f451943bbb724cdf0ced2c158eca4faa78f62e83695ee8be8df37bb493f53ff1f0b2b22cd3c57e8366be56cd4146c3d4bdae9f8facefddf227847b7a10d6f56fbc60a2be216e35d2172dbbebeb9352240434ff48a4dfaa4af139d2e5d6c453"}}]}) 23:23:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e300b18c84e259e4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x1f00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa70040}], 0x1, 0x0, 0x0, 0x0) 23:23:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e300b18c84e259e4"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3020.980483][T23375] usb 2-1: new high-speed USB device number 13 using dummy_hcd 23:23:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3021.187295][T23375] usb 2-1: device descriptor read/64, error -71 23:23:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa80040}], 0x1, 0x0, 0x0, 0x0) 23:23:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3021.458935][T23375] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3021.467288][T30850] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3021.647778][T23375] usb 2-1: device descriptor read/64, error -71 [ 3021.777564][T23375] usb usb2-port1: attempt power cycle [ 3021.907392][T30850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3021.936858][T30850] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3021.959793][T30850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.993787][T30850] usb 6-1: config 0 descriptor?? [ 3022.207549][T23375] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3022.307731][T23375] usb 2-1: device descriptor read/8, error -71 [ 3022.534363][T30850] keytouch 0003:0926:3333.00C7: fixing up Keytouch IEC report descriptor [ 3022.555006][T30850] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00C7/input/input228 [ 3022.579693][T23375] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3022.674194][T30850] keytouch 0003:0926:3333.00C7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 3022.677840][T23375] usb 2-1: device descriptor read/8, error -71 [ 3022.754195][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3022.764512][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3022.778294][ T5540] usb 6-1: USB disconnect, device number 41 [ 3022.838712][T23375] usb usb2-port1: unable to enumerate USB device 23:23:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x74, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "8257"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x40, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x8, 0x3, 0x8, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x100, 0x83, 0x5d, 0x3f, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x2, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x88}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x8f, 0xf8, 0x8, 0x1}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40b}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "6ccff62e10892b1472572bcf27a627b8b01c5bea7e9cde6972ea229bb7eeeebf5830b689bf2ac1afd353b7214ba3ccac05b00d440e04199c1420775127eba35e7f136e1eadbc073655017ee57d4d24e3ae194adb89c724707784fab93950ff3e42f7300a92de379b1451ae785d52f84710cd"}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "73a0108eacd03ce0204770271818100b40fb70ff1aeadd9986e3552d8f63526d3bf79130843425623c99c3c4b1646e6987a245abfc81dd58f456caa943ca016b1c59ae461dc10fc8de47b89b4a55e015d6f03e8ce5243f4a4a2d9fd96a4bceff6d83f4632cc154a48144475d97a71ff5e6cca6a0330165e03ab216e14606d5db64dc633c40682efb930cfe16b0c34b65"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x3c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e300b18c84e259e4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa90040}], 0x1, 0x0, 0x0, 0x0) 23:23:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xa80040}], 0x1, 0x0, 0x0, 0x0) 23:23:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x4400}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x3}, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x101) 23:23:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x2b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3024.187198][ T5540] usb 2-1: new high-speed USB device number 17 using dummy_hcd 23:23:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x3}, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x101) 23:23:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b47"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3024.558132][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3024.576256][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3024.592778][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.605001][ T5540] usb 2-1: config 0 descriptor?? [ 3025.106666][ T5540] keytouch 0003:0926:3333.00C8: fixing up Keytouch IEC report descriptor [ 3025.129069][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C8/input/input229 [ 3025.231215][ T5540] keytouch 0003:0926:3333.00C8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3025.302071][ T3935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.310912][ T3935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.322005][T30850] usb 2-1: USB disconnect, device number 17 23:23:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x4, 0x74, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "8257"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x40, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x8, 0x3, 0x8, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x100, 0x83, 0x5d, 0x3f, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x2, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x88}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x8f, 0xf8, 0x8, 0x1}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40b}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "6ccff62e10892b1472572bcf27a627b8b01c5bea7e9cde6972ea229bb7eeeebf5830b689bf2ac1afd353b7214ba3ccac05b00d440e04199c1420775127eba35e7f136e1eadbc073655017ee57d4d24e3ae194adb89c724707784fab93950ff3e42f7300a92de379b1451ae785d52f84710cd"}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "73a0108eacd03ce0204770271818100b40fb70ff1aeadd9986e3552d8f63526d3bf79130843425623c99c3c4b1646e6987a245abfc81dd58f456caa943ca016b1c59ae461dc10fc8de47b89b4a55e015d6f03e8ce5243f4a4a2d9fd96a4bceff6d83f4632cc154a48144475d97a71ff5e6cca6a0330165e03ab216e14606d5db64dc633c40682efb930cfe16b0c34b65"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x3}, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x101) 23:23:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xaa0040}], 0x1, 0x0, 0x0, 0x0) 23:23:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3025.932147][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.940965][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 23:23:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3026.167980][T30850] usb 2-1: new high-speed USB device number 18 using dummy_hcd 23:23:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f00002b6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f0636db1ce366b84e000f00d0e48ac4e109f42966baf80cb800e76e80ef66bafc0c66b8305e66ef0f01cf0f01cf0f350f07", 0x32}], 0x1, 0x74, &(0x7f0000000100), 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000ace000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="f3af66b8000000000f23c00f21f86635010002000f23f8f20f2dca360f30670f38c88827000000360f22c4f0810edb650c000f005d01f20f59be057f66b91801000066b8d932000066ba000000000f30", 0x50}], 0x1, 0x26, &(0x7f00000002c0)=[@flags={0x3, 0x10}, @dstype3], 0x2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1516"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3026.547894][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3026.577544][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3026.586660][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.646867][T30850] usb 2-1: config 0 descriptor?? 23:23:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xab0040}], 0x1, 0x0, 0x0, 0x0) 23:23:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f00002b6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f0636db1ce366b84e000f00d0e48ac4e109f42966baf80cb800e76e80ef66bafc0c66b8305e66ef0f01cf0f01cf0f350f07", 0x32}], 0x1, 0x74, &(0x7f0000000100), 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000ace000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="f3af66b8000000000f23c00f21f86635010002000f23f8f20f2dca360f30670f38c88827000000360f22c4f0810edb650c000f005d01f20f59be057f66b91801000066b8d932000066ba000000000f30", 0x50}], 0x1, 0x26, &(0x7f00000002c0)=[@flags={0x3, 0x10}, @dstype3], 0x2) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1516"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x4, 0x74, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "8257"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x40, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x8, 0x3, 0x8, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x100, 0x83, 0x5d, 0x3f, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x2, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x88}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x8f, 0xf8, 0x8, 0x1}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40b}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "6ccff62e10892b1472572bcf27a627b8b01c5bea7e9cde6972ea229bb7eeeebf5830b689bf2ac1afd353b7214ba3ccac05b00d440e04199c1420775127eba35e7f136e1eadbc073655017ee57d4d24e3ae194adb89c724707784fab93950ff3e42f7300a92de379b1451ae785d52f84710cd"}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "73a0108eacd03ce0204770271818100b40fb70ff1aeadd9986e3552d8f63526d3bf79130843425623c99c3c4b1646e6987a245abfc81dd58f456caa943ca016b1c59ae461dc10fc8de47b89b4a55e015d6f03e8ce5243f4a4a2d9fd96a4bceff6d83f4632cc154a48144475d97a71ff5e6cca6a0330165e03ab216e14606d5db64dc633c40682efb930cfe16b0c34b65"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3027.247962][T30850] usbhid 2-1:0.0: can't add hid device: -71 [ 3027.254222][T30850] usbhid: probe of 2-1:0.0 failed with error -71 23:23:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3027.315133][T30850] usb 2-1: USB disconnect, device number 18 23:23:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f00002b6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f0636db1ce366b84e000f00d0e48ac4e109f42966baf80cb800e76e80ef66bafc0c66b8305e66ef0f01cf0f01cf0f350f07", 0x32}], 0x1, 0x74, &(0x7f0000000100), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000ace000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="f3af66b8000000000f23c00f21f86635010002000f23f8f20f2dca360f30670f38c88827000000360f22c4f0810edb650c000f005d01f20f59be057f66b91801000066b8d932000066ba000000000f30", 0x50}], 0x1, 0x26, &(0x7f00000002c0)=[@flags={0x3, 0x10}, @dstype3], 0x2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1516"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3027.887642][T30850] usb 2-1: new high-speed USB device number 19 using dummy_hcd 23:23:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3028.247465][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3028.291825][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3028.344730][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.425788][T30850] usb 2-1: config 0 descriptor?? [ 3028.461497][ T28] audit: type=1326 audit(1693956206.469:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x2b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3028.588716][ T28] audit: type=1326 audit(1693956206.599:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3028.739615][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:23:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xac0040}], 0x1, 0x0, 0x0, 0x0) 23:23:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3028.789350][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.057702][T30850] usbhid 2-1:0.0: can't add hid device: -71 [ 3029.063804][T30850] usbhid: probe of 2-1:0.0 failed with error -71 [ 3029.103313][T30850] usb 2-1: USB disconnect, device number 19 23:23:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) (async) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) (async) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "31d96f90"}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa6, 0x4, 0xdb, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x52, "e709536b7430fd66"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x74c4, 0x0, 0x81, "690822b8b7daa2b4d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x3b, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x2, 0x5, 0x40, 0x58}, 0x10c, &(0x7f0000000240)={0x5, 0xf, 0x10c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x3, 0x6}, @ptm_cap={0x3}, @generic={0xe2, 0x10, 0xb, "ce51dc1cc12c2cb2ffab9c3e64b7233cf92ef331e48e28495141d79d9a1cca65f123154e98546fe10cf3aca94b3ff555304d1380b8e5041c720bddc064ad4a69cedcd7bb9cd6447f90e659f7394e4fbe1acaf08b114aeff438818d5f98508ea1949ff3125fa22b124e09343ecd29448a6490fa109e43f9a360d804993800db61c5bfcc0bae599bda58736ae725884e6439de2db543b4206562138bbe7daab71384f272f43102d05f8a4280602bb1b544124e7f318cbc399ac9fced40f35723b1c53cd9b7e01bf2d4f7d339992627ca1d71ad0a6009ebde5dd2aa4ef8c72262"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ceb0df3f3dc632677c5664b78ac8dedc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x6}]}, 0x3, [{0x53, &(0x7f0000000380)=@string={0x53, 0x3, "d8ebd42611087b83c3e3f7f086f03e4ea2cf7ae7248ea31ae02f5c170a081c43c3a12d047fd8e0fb4071dc3f9f82dd0fb016f77c262a6231fe6b3ec27fcdcb316ea51234b8184e686b276b1f50c5d1c739"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}]}) 23:23:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3b}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3030.083516][ T5540] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3030.115360][ T28] audit: type=1326 audit(1693956208.109:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4091 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3030.228414][ T28] audit: type=1326 audit(1693956208.219:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4091 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3030.488819][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3030.508189][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 23:23:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xad0040}], 0x1, 0x0, 0x0, 0x0) 23:23:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x9) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000040)) (async) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3030.534704][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3030.578400][ T5540] usb 2-1: config 0 descriptor?? [ 3030.739011][ T28] audit: type=1326 audit(1693956208.739:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x44}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3030.926869][ T28] audit: type=1326 audit(1693956208.929:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3031.069310][ T5540] keytouch 0003:0926:3333.00C9: fixing up Keytouch IEC report descriptor [ 3031.106957][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C9/input/input230 [ 3031.256051][ T5540] keytouch 0003:0926:3333.00C9: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3031.281225][ T4088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:23:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x208e24b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16, 0x0, 0x0, 0x1000}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) sync_file_range(r4, 0xa92c, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000001c0)={[{0x9b, 0x2, 0x9, 0x79, 0x9c, 0x8, 0x0, 0x6, 0x27, 0x3, 0x7, 0x81, 0x1}, {0x8b, 0x81, 0x9, 0x0, 0x20, 0x2, 0x7, 0x1, 0x40, 0x3, 0xff, 0x2, 0x800}, {0xfff, 0x55, 0xee, 0x1f, 0xc0, 0x3f, 0xfa, 0x20, 0x8, 0x81, 0x8, 0x1, 0x8000}], 0x8}) [ 3031.328208][ T4088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3031.396382][ T4088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3031.463378][ T4088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3031.509176][T30850] usb 2-1: USB disconnect, device number 20 [ 3031.929945][ T28] audit: type=1326 audit(1693956209.939:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "31d96f90"}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa6, 0x4, 0xdb, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x52, "e709536b7430fd66"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x74c4, 0x0, 0x81, "690822b8b7daa2b4d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x3b, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x2, 0x5, 0x40, 0x58}, 0x10c, &(0x7f0000000240)={0x5, 0xf, 0x10c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x3, 0x6}, @ptm_cap={0x3}, @generic={0xe2, 0x10, 0xb, "ce51dc1cc12c2cb2ffab9c3e64b7233cf92ef331e48e28495141d79d9a1cca65f123154e98546fe10cf3aca94b3ff555304d1380b8e5041c720bddc064ad4a69cedcd7bb9cd6447f90e659f7394e4fbe1acaf08b114aeff438818d5f98508ea1949ff3125fa22b124e09343ecd29448a6490fa109e43f9a360d804993800db61c5bfcc0bae599bda58736ae725884e6439de2db543b4206562138bbe7daab71384f272f43102d05f8a4280602bb1b544124e7f318cbc399ac9fced40f35723b1c53cd9b7e01bf2d4f7d339992627ca1d71ad0a6009ebde5dd2aa4ef8c72262"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ceb0df3f3dc632677c5664b78ac8dedc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x6}]}, 0x3, [{0x53, &(0x7f0000000380)=@string={0x53, 0x3, "d8ebd42611087b83c3e3f7f086f03e4ea2cf7ae7248ea31ae02f5c170a081c43c3a12d047fd8e0fb4071dc3f9f82dd0fb016f77c262a6231fe6b3ec27fcdcb316ea51234b8184e686b276b1f50c5d1c739"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}]}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "31d96f90"}]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa6, 0x4, 0xdb, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x52, "e709536b7430fd66"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x74c4, 0x0, 0x81, "690822b8b7daa2b4d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x3b, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x2, 0x5, 0x40, 0x58}, 0x10c, &(0x7f0000000240)={0x5, 0xf, 0x10c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x3, 0x6}, @ptm_cap={0x3}, @generic={0xe2, 0x10, 0xb, "ce51dc1cc12c2cb2ffab9c3e64b7233cf92ef331e48e28495141d79d9a1cca65f123154e98546fe10cf3aca94b3ff555304d1380b8e5041c720bddc064ad4a69cedcd7bb9cd6447f90e659f7394e4fbe1acaf08b114aeff438818d5f98508ea1949ff3125fa22b124e09343ecd29448a6490fa109e43f9a360d804993800db61c5bfcc0bae599bda58736ae725884e6439de2db543b4206562138bbe7daab71384f272f43102d05f8a4280602bb1b544124e7f318cbc399ac9fced40f35723b1c53cd9b7e01bf2d4f7d339992627ca1d71ad0a6009ebde5dd2aa4ef8c72262"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ceb0df3f3dc632677c5664b78ac8dedc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x6}]}, 0x3, [{0x53, &(0x7f0000000380)=@string={0x53, 0x3, "d8ebd42611087b83c3e3f7f086f03e4ea2cf7ae7248ea31ae02f5c170a081c43c3a12d047fd8e0fb4071dc3f9f82dd0fb016f77c262a6231fe6b3ec27fcdcb316ea51234b8184e686b276b1f50c5d1c739"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}]}) (async) 23:23:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xae0040}], 0x1, 0x0, 0x0, 0x0) 23:23:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x500}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$'}, {0x20, 'devices.list\x00'}, {0x20, '##,G&'}, {0x20, 'devices.list\x00'}], 0xa, "4e470ea2d24c3ebcc5fb568cdc9a1005983bbe8978b0d3ce3a2c13b5fc5c34b32dcde8d04b6d6a933b7f3a29f63502e8e653536d33d0e4452156858134b8d3f279ef95d934f8e06ad1de6dbd94cb1057b46062e4f6c31d95982d54743c6a1af3deb4652fab60ac17b00994f63e"}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0xb, 0x80152, r5, 0x43065000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x600}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3032.437510][ T28] audit: type=1326 audit(1693956210.439:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4146 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa550c7cae9 code=0x0 23:23:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x700}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3032.548005][ T28] audit: type=1326 audit(1693956210.549:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4146 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa550c7cae9 code=0x0 [ 3032.607384][T30850] usb 2-1: new high-speed USB device number 21 using dummy_hcd 23:23:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x810}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x208e24b) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16, 0x0, 0x0, 0x1000}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) sync_file_range(r4, 0xa92c, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000001c0)={[{0x9b, 0x2, 0x9, 0x79, 0x9c, 0x8, 0x0, 0x6, 0x27, 0x3, 0x7, 0x81, 0x1}, {0x8b, 0x81, 0x9, 0x0, 0x20, 0x2, 0x7, 0x1, 0x40, 0x3, 0xff, 0x2, 0x800}, {0xfff, 0x55, 0xee, 0x1f, 0xc0, 0x3f, 0xfa, 0x20, 0x8, 0x81, 0x8, 0x1, 0x8000}], 0x8}) 23:23:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x1008}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3032.977717][T30850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3033.019582][T30850] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3033.044448][T30850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3033.065718][T30850] usb 2-1: config 0 descriptor?? 23:23:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x600}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xaf0040}], 0x1, 0x0, 0x0, 0x0) [ 3033.566297][T30850] keytouch 0003:0926:3333.00CA: fixing up Keytouch IEC report descriptor [ 3033.615425][T30850] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CA/input/input231 [ 3033.751511][ T4151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3033.764412][T30850] keytouch 0003:0926:3333.00CA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3033.789657][ T4151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.820029][ T4151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3033.840999][ T4151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.868267][ T9866] usb 2-1: USB disconnect, device number 21 [ 3033.872901][ T4195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:23:31 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "31d96f90"}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa6, 0x4, 0xdb, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x52, "e709536b7430fd66"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x74c4, 0x0, 0x81, "690822b8b7daa2b4d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa6, 0x4, 0xdb, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x52, "e709536b7430fd66"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x74c4, 0x0, 0x81, "690822b8b7daa2b4d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x3b, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x2, 0x5, 0x40, 0x58}, 0x10c, &(0x7f0000000240)={0x5, 0xf, 0x10c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x3, 0x6}, @ptm_cap={0x3}, @generic={0xe2, 0x10, 0xb, "ce51dc1cc12c2cb2ffab9c3e64b7233cf92ef331e48e28495141d79d9a1cca65f123154e98546fe10cf3aca94b3ff555304d1380b8e5041c720bddc064ad4a69cedcd7bb9cd6447f90e659f7394e4fbe1acaf08b114aeff438818d5f98508ea1949ff3125fa22b124e09343ecd29448a6490fa109e43f9a360d804993800db61c5bfcc0bae599bda58736ae725884e6439de2db543b4206562138bbe7daab71384f272f43102d05f8a4280602bb1b544124e7f318cbc399ac9fced40f35723b1c53cd9b7e01bf2d4f7d339992627ca1d71ad0a6009ebde5dd2aa4ef8c72262"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ceb0df3f3dc632677c5664b78ac8dedc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x6}]}, 0x3, [{0x53, &(0x7f0000000380)=@string={0x53, 0x3, "d8ebd42611087b83c3e3f7f086f03e4ea2cf7ae7248ea31ae02f5c170a081c43c3a12d047fd8e0fb4071dc3f9f82dd0fb016f77c262a6231fe6b3ec27fcdcb316ea51234b8184e686b276b1f50c5d1c739"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}]}) 23:23:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x1f00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x208e24b) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16, 0x0, 0x0, 0x1000}]}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (rerun: 32) sync_file_range(r4, 0xa92c, 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r6, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000001c0)={[{0x9b, 0x2, 0x9, 0x79, 0x9c, 0x8, 0x0, 0x6, 0x27, 0x3, 0x7, 0x81, 0x1}, {0x8b, 0x81, 0x9, 0x0, 0x20, 0x2, 0x7, 0x1, 0x40, 0x3, 0xff, 0x2, 0x800}, {0xfff, 0x55, 0xee, 0x1f, 0xc0, 0x3f, 0xfa, 0x20, 0x8, 0x81, 0x8, 0x1, 0x8000}], 0x8}) [ 3033.916076][ T4195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:23:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x2b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="9e6d1f8a6c2db05f8b987e73df20f9aaa1f0853910a9882fb9d205b6000000000000342ecd24c993695fe8813b0dd04a9a89aff632096ad15024c1ff20e58bfa79542bbe35f101fe59747a9c3514e352398e5407da0519274dc8b987fd637df19ce67a2d006e0a8204a073ec1cb1b30b29d7fb621deb10ebf2f6d27981a33e412e4c1fbda942f7b1b5b9bc61b56497db2d75fdfc9c58ffd4ee190528c4c8054a1d45ddb15958985f4360e0dd7afd2e933170b0983b5bf19b38fd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb00040}], 0x1, 0x0, 0x0, 0x0) 23:23:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 23:23:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 23:23:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x2c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3034.567319][ T9866] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3034.764000][ T4228] FAULT_INJECTION: forcing a failure. [ 3034.764000][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 3034.781796][ T4228] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3034.792043][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3034.802145][ T4228] Call Trace: [ 3034.805470][ T4228] [ 3034.808441][ T4228] dump_stack_lvl+0x125/0x1b0 [ 3034.813205][ T4228] should_fail_ex+0x496/0x5b0 [ 3034.817974][ T4228] should_failslab+0x9/0x20 [ 3034.822590][ T4228] __kmem_cache_alloc_node+0x2fd/0x350 [ 3034.828472][ T4228] ? tomoyo_realpath_from_path+0xb9/0x710 [ 3034.834286][ T4228] ? tomoyo_realpath_from_path+0xb9/0x710 [ 3034.840070][ T4228] __kmalloc+0x4f/0x100 [ 3034.844296][ T4228] tomoyo_realpath_from_path+0xb9/0x710 [ 3034.849926][ T4228] ? lock_release+0x4bf/0x680 [ 3034.854685][ T4228] ? tomoyo_profile+0x47/0x60 [ 3034.859433][ T4228] tomoyo_path_number_perm+0x243/0x590 [ 3034.865052][ T4228] ? tomoyo_path_number_perm+0x1eb/0x590 [ 3034.870776][ T4228] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3034.876660][ T4228] ? lock_release+0x4bf/0x680 [ 3034.881544][ T4228] ? reacquire_held_locks+0x4b0/0x4b0 [ 3034.885159][ T4245] FAULT_INJECTION: forcing a failure. [ 3034.885159][ T4245] name failslab, interval 1, probability 0, space 0, times 0 [ 3034.886975][ T4228] ? bit_wait_timeout+0x160/0x160 [ 3034.887023][ T4228] ? __fget_files+0x279/0x410 [ 3034.909398][ T4228] ? __fget_files+0x279/0x410 [ 3034.914142][ T4228] security_file_ioctl+0x72/0xb0 [ 3034.919149][ T4228] __x64_sys_ioctl+0xbb/0x210 [ 3034.923883][ T4228] do_syscall_64+0x38/0xb0 [ 3034.928456][ T4228] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3034.934414][ T4228] RIP: 0033:0x7fa550c7cae9 [ 3034.938866][ T4228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3034.958535][ T4228] RSP: 002b:00007fa55193d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3034.967011][ T4228] RAX: ffffffffffffffda RBX: 00007fa550d9bf80 RCX: 00007fa550c7cae9 [ 3034.975029][ T4228] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3034.983400][ T4228] RBP: 00007fa55193d120 R08: 0000000000000000 R09: 0000000000000000 [ 3034.991418][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3034.997400][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3034.999408][ T4228] R13: 000000000000000b R14: 00007fa550d9bf80 R15: 00007fa550ebfa48 [ 3034.999447][ T4228] [ 3035.031619][ T4245] CPU: 1 PID: 4245 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3035.038276][ T4228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3035.041657][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3035.041680][ T4245] Call Trace: [ 3035.041691][ T4245] [ 3035.064709][ T4245] dump_stack_lvl+0x125/0x1b0 [ 3035.069505][ T4245] should_fail_ex+0x496/0x5b0 [ 3035.074255][ T4245] should_failslab+0x9/0x20 [ 3035.078818][ T4245] __kmem_cache_alloc_node+0x2fd/0x350 [ 3035.084350][ T4245] ? tomoyo_realpath_from_path+0xb9/0x710 [ 3035.090145][ T4245] ? tomoyo_realpath_from_path+0xb9/0x710 [ 3035.096199][ T4245] __kmalloc+0x4f/0x100 [ 3035.100414][ T4245] tomoyo_realpath_from_path+0xb9/0x710 [ 3035.106215][ T4245] ? lock_release+0x4bf/0x680 [ 3035.110977][ T4245] ? tomoyo_profile+0x47/0x60 [ 3035.115719][ T4245] tomoyo_path_number_perm+0x243/0x590 [ 3035.121264][ T4245] ? tomoyo_path_number_perm+0x1eb/0x590 [ 3035.126972][ T4245] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3035.132844][ T4245] ? lock_release+0x4bf/0x680 [ 3035.137608][ T4245] ? reacquire_held_locks+0x4b0/0x4b0 [ 3035.143020][ T4245] ? bit_wait_timeout+0x160/0x160 [ 3035.148076][ T4245] ? __fget_files+0x279/0x410 [ 3035.152871][ T4245] ? __fget_files+0x279/0x410 [ 3035.157663][ T4245] security_file_ioctl+0x72/0xb0 [ 3035.162629][ T4245] __x64_sys_ioctl+0xbb/0x210 [ 3035.167336][ T4245] do_syscall_64+0x38/0xb0 [ 3035.171798][ T4245] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3035.177739][ T4245] RIP: 0033:0x7f947ea7cae9 [ 3035.182179][ T4245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3035.202251][ T4245] RSP: 002b:00007f947f7900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3035.210693][ T4245] RAX: ffffffffffffffda RBX: 00007f947eb9c050 RCX: 00007f947ea7cae9 [ 3035.218776][ T4245] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3035.226946][ T4245] RBP: 00007f947f790120 R08: 0000000000000000 R09: 0000000000000000 [ 3035.235112][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3035.243276][ T4245] R13: 000000000000006e R14: 00007f947eb9c050 R15: 00007f947ecbfa48 [ 3035.251279][ T4245] 23:23:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="9e6d1f8a6c2db05f8b987e73df20f9aaa1f0853910a9882fb9d205b6000000000000342ecd24c993695fe8813b0dd04a9a89aff632096ad15024c1ff20e58bfa79542bbe35f101fe59747a9c3514e352398e5407da0519274dc8b987fd637df19ce67a2d006e0a8204a073ec1cb1b30b29d7fb621deb10ebf2f6d27981a33e412e4c1fbda942f7b1b5b9bc61b56497db2d75fdfc9c58ffd4ee190528c4c8054a1d45ddb15958985f4360e0dd7afd2e933170b0983b5bf19b38fd"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) [ 3035.263224][ T4245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3035.276773][ T9866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3035.297650][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.347539][ T9866] usb 2-1: config 0 descriptor?? [ 3035.830092][ T9866] keytouch 0003:0926:3333.00CB: fixing up Keytouch IEC report descriptor [ 3035.846033][ T9866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CB/input/input232 [ 3035.947309][ T9866] keytouch 0003:0926:3333.00CB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3036.030173][ T4213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.040159][ T4213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.052268][ T4217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.062407][ T4217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.074660][ T4213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.083413][ T4213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.101693][T30850] usb 2-1: USB disconnect, device number 22 23:23:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022010000000427c585a0ce981dc9551d9b573607969acc9a4e487ac51d385a57db8a7ceaeba6e54fd44ed9c164adf8d151a104941b04d6cabe90e118e98b1489e343a1438cbe916004b373514916b1d8310aa669376dda36d25bb5c75f277da7198d46de211951de20feaed880baa5"], 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) 23:23:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) 23:23:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3300}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="9e6d1f8a6c2db05f8b987e73df20f9aaa1f0853910a9882fb9d205b6000000000000342ecd24c993695fe8813b0dd04a9a89aff632096ad15024c1ff20e58bfa79542bbe35f101fe59747a9c3514e352398e5407da0519274dc8b987fd637df19ce67a2d006e0a8204a073ec1cb1b30b29d7fb621deb10ebf2f6d27981a33e412e4c1fbda942f7b1b5b9bc61b56497db2d75fdfc9c58ffd4ee190528c4c8054a1d45ddb15958985f4360e0dd7afd2e933170b0983b5bf19b38fd"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="9e6d1f8a6c2db05f8b987e73df20f9aaa1f0853910a9882fb9d205b6000000000000342ecd24c993695fe8813b0dd04a9a89aff632096ad15024c1ff20e58bfa79542bbe35f101fe59747a9c3514e352398e5407da0519274dc8b987fd637df19ce67a2d006e0a8204a073ec1cb1b30b29d7fb621deb10ebf2f6d27981a33e412e4c1fbda942f7b1b5b9bc61b56497db2d75fdfc9c58ffd4ee190528c4c8054a1d45ddb15958985f4360e0dd7afd2e933170b0983b5bf19b38fd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb10040}], 0x1, 0x0, 0x0, 0x0) 23:23:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3b00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3036.895001][ T4277] FAULT_INJECTION: forcing a failure. [ 3036.895001][ T4277] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.901502][ T4255] FAULT_INJECTION: forcing a failure. [ 3036.901502][ T4255] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.934015][ T4255] CPU: 1 PID: 4255 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3036.944085][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3036.954171][ T4255] Call Trace: [ 3036.957495][ T4255] [ 3036.960447][ T4255] dump_stack_lvl+0x125/0x1b0 [ 3036.965173][ T4255] should_fail_ex+0x496/0x5b0 [ 3036.969895][ T4255] should_failslab+0x9/0x20 [ 3036.974436][ T4255] __kmem_cache_alloc_node+0x2fd/0x350 [ 3036.979947][ T4255] ? tomoyo_encode2+0x100/0x3d0 [ 3036.984837][ T4255] ? tomoyo_encode2+0x100/0x3d0 [ 3036.989727][ T4255] __kmalloc+0x4f/0x100 [ 3036.993907][ T4255] tomoyo_encode2+0x100/0x3d0 [ 3036.998716][ T4255] tomoyo_encode+0x29/0x50 [ 3037.003164][ T4255] tomoyo_realpath_from_path+0x196/0x710 [ 3037.008837][ T4255] ? tomoyo_profile+0x47/0x60 [ 3037.013543][ T4255] tomoyo_path_number_perm+0x243/0x590 [ 3037.019040][ T4255] ? tomoyo_path_number_perm+0x1eb/0x590 [ 3037.024819][ T4255] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3037.030683][ T4255] ? lock_release+0x4bf/0x680 [ 3037.035432][ T4255] ? reacquire_held_locks+0x4b0/0x4b0 [ 3037.040929][ T4255] ? bit_wait_timeout+0x160/0x160 [ 3037.045987][ T4255] ? __fget_files+0x279/0x410 [ 3037.050701][ T4255] ? __fget_files+0x279/0x410 [ 3037.055409][ T4255] security_file_ioctl+0x72/0xb0 [ 3037.060375][ T4255] __x64_sys_ioctl+0xbb/0x210 [ 3037.065079][ T4255] do_syscall_64+0x38/0xb0 [ 3037.069556][ T4255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3037.075497][ T4255] RIP: 0033:0x7f947ea7cae9 [ 3037.080106][ T4255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3037.099747][ T4255] RSP: 002b:00007f947f7b10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3037.108188][ T4255] RAX: ffffffffffffffda RBX: 00007f947eb9bf80 RCX: 00007f947ea7cae9 [ 3037.116178][ T4255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3037.124186][ T4255] RBP: 00007f947f7b1120 R08: 0000000000000000 R09: 0000000000000000 [ 3037.132266][ T4255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.140270][ T4255] R13: 000000000000000b R14: 00007f947eb9bf80 R15: 00007f947ecbfa48 [ 3037.148282][ T4255] [ 3037.153880][ T4277] CPU: 0 PID: 4277 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3037.163940][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3037.174043][ T4277] Call Trace: [ 3037.177350][ T4277] [ 3037.180302][ T4277] dump_stack_lvl+0x125/0x1b0 [ 3037.185041][ T4277] should_fail_ex+0x496/0x5b0 [ 3037.189803][ T4277] should_failslab+0x9/0x20 [ 3037.194338][ T4277] __kmem_cache_alloc_node+0x2fd/0x350 [ 3037.199942][ T4277] ? tomoyo_encode2+0x100/0x3d0 [ 3037.204834][ T4277] ? tomoyo_encode2+0x100/0x3d0 [ 3037.209725][ T4277] __kmalloc+0x4f/0x100 [ 3037.213907][ T4277] tomoyo_encode2+0x100/0x3d0 [ 3037.218624][ T4277] tomoyo_encode+0x29/0x50 [ 3037.223074][ T4277] tomoyo_realpath_from_path+0x196/0x710 [ 3037.228749][ T4277] ? tomoyo_profile+0x47/0x60 [ 3037.233456][ T4277] tomoyo_path_number_perm+0x243/0x590 [ 3037.238954][ T4277] ? tomoyo_path_number_perm+0x1eb/0x590 [ 3037.244633][ T4277] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3037.250477][ T4277] ? lock_release+0x4bf/0x680 [ 3037.255229][ T4277] ? reacquire_held_locks+0x4b0/0x4b0 [ 3037.260676][ T4277] ? bit_wait_timeout+0x160/0x160 [ 3037.265823][ T4277] ? __fget_files+0x279/0x410 [ 3037.270625][ T4277] ? __fget_files+0x279/0x410 [ 3037.275332][ T4277] security_file_ioctl+0x72/0xb0 [ 3037.280304][ T4277] __x64_sys_ioctl+0xbb/0x210 [ 3037.285043][ T4277] do_syscall_64+0x38/0xb0 [ 3037.289505][ T4277] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3037.295441][ T4277] RIP: 0033:0x7fa550c7cae9 [ 3037.299876][ T4277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3037.319510][ T4277] RSP: 002b:00007fa55191c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3037.327970][ T4277] RAX: ffffffffffffffda RBX: 00007fa550d9c050 RCX: 00007fa550c7cae9 [ 3037.336046][ T4277] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3037.344122][ T4277] RBP: 00007fa55191c120 R08: 0000000000000000 R09: 0000000000000000 [ 3037.352110][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.360104][ T4277] R13: 000000000000006e R14: 00007fa550d9c050 R15: 00007fa550ebfa48 [ 3037.368216][ T4277] [ 3037.384644][ T4255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3037.435607][ T4277] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3037.477477][ T5541] usb 2-1: new high-speed USB device number 23 using dummy_hcd 23:23:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000c9d779df15c8154dc007ba5b5876efec34e7a2b73aeb5d29ae9428d01d962304c98e628f78845c903b90628df443b8da10f8f36c2a97b77f58e6c8031afe0a125f2a716d7a5600a9662eeca20213eb97ce67ddd531a8711cc5b346b38e195f89a6ce35424602c06e95b4d5d81df0d8ef84fc8bcdc5fc3e2bf0f1fb92f75475553551369ba985def8f23954e2ef9bdd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x3c00}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 23:23:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 23:23:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x4400}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3037.847390][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3037.868536][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3037.877901][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.891929][ T5541] usb 2-1: config 0 descriptor?? [ 3037.963091][ T4292] FAULT_INJECTION: forcing a failure. [ 3037.963091][ T4292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3037.987262][ T4292] CPU: 0 PID: 4292 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3037.997327][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3038.007603][ T4292] Call Trace: [ 3038.010918][ T4292] [ 3038.013869][ T4292] dump_stack_lvl+0x125/0x1b0 [ 3038.018600][ T4292] should_fail_ex+0x496/0x5b0 [ 3038.023324][ T4292] __kvm_read_guest_page+0x146/0x1e0 [ 3038.028642][ T4292] kvm_fetch_guest_virt+0x123/0x190 [ 3038.033877][ T4292] __do_insn_fetch_bytes+0x2f8/0x720 [ 3038.039204][ T4292] ? em_jmp_abs+0x50/0x50 [ 3038.043564][ T4292] ? is_bpf_text_address+0x79/0x1a0 [ 3038.048794][ T4292] ? __lock_acquire+0x870/0x5de0 [ 3038.053774][ T4292] ? __read_once_word_nocheck+0x9/0x10 [ 3038.059362][ T4292] ? unwind_next_frame+0x51/0x2390 [ 3038.064531][ T4292] ? __orc_find+0x104/0x130 [ 3038.069078][ T4292] ? stack_access_ok+0xf9/0x270 [ 3038.073999][ T4292] x86_decode_insn+0x1f8e/0x6240 [ 3038.078996][ T4292] ? is_bpf_text_address+0x9b/0x1a0 [ 3038.084227][ T4292] ? unwind_get_return_address+0x45/0xe0 [ 3038.089913][ T4292] ? emulator_task_switch+0x2ae0/0x2ae0 [ 3038.095596][ T4292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3038.101885][ T4292] ? vmx_cache_reg+0x28d/0x660 [ 3038.106683][ T4292] ? init_decode_cache+0xd/0x200 [ 3038.111693][ T4292] ? init_emulate_ctxt+0x3a1/0x590 [ 3038.116856][ T4292] ? trace_event_raw_event_kvm_nested_vmexit+0x340/0x340 [ 3038.124040][ T4292] ? filter_irq_stacks+0x90/0x90 [ 3038.129020][ T4292] ? tomoyo_realpath_from_path+0x1a6/0x710 [ 3038.134872][ T4292] x86_decode_emulated_instruction+0x5f/0x240 [ 3038.140992][ T4292] x86_emulate_instruction+0x86e/0x1d10 [ 3038.146673][ T4292] handle_ud+0xfe/0x3b0 [ 3038.150864][ T4292] ? kvm_emulate_instruction+0x30/0x30 [ 3038.156364][ T4292] ? nested_vmx_reflect_vmexit+0xe38/0x3700 [ 3038.162295][ T4292] ? nested_vmx_check_io_bitmaps+0x2d0/0x2d0 [ 3038.168314][ T4292] handle_exception_nmi+0x8d7/0x11c0 [ 3038.173714][ T4292] ? trace_seq_path+0x2c0/0x2e0 [ 3038.178596][ T4292] ? vmx_guest_inject_ac+0x170/0x170 [ 3038.183908][ T4292] vmx_handle_exit+0x63f/0x1ac0 [ 3038.188793][ T4292] vcpu_run+0x39c2/0x60b0 [ 3038.193166][ T4292] ? kvm_arch_vcpu_runnable+0x6d0/0x6d0 [ 3038.198747][ T4292] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.204156][ T4292] ? rcu_is_watching+0x12/0xb0 [ 3038.208947][ T4292] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.214444][ T4292] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3038.220457][ T4292] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.225869][ T4292] ? __local_bh_enable_ip+0xa4/0x120 [ 3038.231185][ T4292] ? kvm_arch_vcpu_ioctl_run+0x4db/0x19b0 [ 3038.236939][ T4292] kvm_arch_vcpu_ioctl_run+0x4db/0x19b0 [ 3038.242528][ T4292] kvm_vcpu_ioctl+0x59f/0x1040 [ 3038.247321][ T4292] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 3038.252116][ T4292] ? reacquire_held_locks+0x4b0/0x4b0 [ 3038.257533][ T4292] ? bit_wait_timeout+0x160/0x160 [ 3038.262590][ T4292] ? __fget_files+0x279/0x410 [ 3038.267388][ T4292] ? __fget_files+0x279/0x410 [ 3038.272125][ T4292] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3038.277096][ T4292] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 3038.281888][ T4292] __x64_sys_ioctl+0x18f/0x210 [ 3038.286698][ T4292] do_syscall_64+0x38/0xb0 [ 3038.291158][ T4292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3038.297100][ T4292] RIP: 0033:0x7f947ea7cae9 [ 3038.301543][ T4292] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3038.321186][ T4292] RSP: 002b:00007f947f7b10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3038.329628][ T4292] RAX: ffffffffffffffda RBX: 00007f947eb9bf80 RCX: 00007f947ea7cae9 [ 3038.337704][ T4292] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3038.345692][ T4292] RBP: 00007f947f7b1120 R08: 0000000000000000 R09: 0000000000000000 [ 3038.353862][ T4292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.361939][ T4292] R13: 000000000000000b R14: 00007f947eb9bf80 R15: 00007f947ecbfa48 [ 3038.369949][ T4292] [ 3038.424290][ T4295] FAULT_INJECTION: forcing a failure. [ 3038.424290][ T4295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3038.454069][ T4295] CPU: 0 PID: 4295 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3038.464134][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3038.474237][ T4295] Call Trace: [ 3038.477553][ T4295] [ 3038.480520][ T4295] dump_stack_lvl+0x125/0x1b0 [ 3038.485284][ T4295] should_fail_ex+0x496/0x5b0 [ 3038.490054][ T4295] __kvm_read_guest_page+0x146/0x1e0 [ 3038.495401][ T4295] kvm_fetch_guest_virt+0x123/0x190 [ 3038.500670][ T4295] __do_insn_fetch_bytes+0x2f8/0x720 [ 3038.506032][ T4295] ? em_jmp_abs+0x50/0x50 [ 3038.510453][ T4295] ? is_bpf_text_address+0x79/0x1a0 [ 3038.515896][ T4295] x86_decode_insn+0x1f8e/0x6240 [ 3038.520963][ T4295] ? vmx_vcpu_load_vmcs+0x26b/0x840 [ 3038.526222][ T4295] ? vmx_prepare_switch_to_guest+0x790/0x790 [ 3038.532235][ T4295] ? emulator_task_switch+0x2ae0/0x2ae0 [ 3038.537825][ T4295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3038.543779][ T4295] ? vmx_cache_reg+0x28d/0x660 [ 3038.548570][ T4295] ? init_decode_cache+0xd/0x200 [ 3038.553548][ T4295] ? init_emulate_ctxt+0x3a1/0x590 [ 3038.558707][ T4295] ? trace_event_raw_event_kvm_nested_vmexit+0x340/0x340 [ 3038.565794][ T4295] ? finish_task_switch.isra.0+0x4d6/0xc90 [ 3038.571639][ T4295] ? __switch_to+0x73d/0x1340 [ 3038.576443][ T4295] x86_decode_emulated_instruction+0x5f/0x240 [ 3038.582568][ T4295] x86_emulate_instruction+0x86e/0x1d10 [ 3038.588153][ T4295] ? generic_exec_single+0xb4/0x380 [ 3038.593390][ T4295] ? trace_ipi_send_cpu.constprop.0+0x185/0x1d0 [ 3038.599683][ T4295] handle_ud+0xfe/0x3b0 [ 3038.603870][ T4295] ? kvm_emulate_instruction+0x30/0x30 [ 3038.609381][ T4295] ? nested_vmx_reflect_vmexit+0xe38/0x3700 [ 3038.615501][ T4295] ? nested_vmx_check_io_bitmaps+0x2d0/0x2d0 [ 3038.621523][ T4295] handle_exception_nmi+0x8d7/0x11c0 [ 3038.626832][ T4295] ? kernel_fpu_begin_mask+0x270/0x270 [ 3038.632338][ T4295] ? vmx_guest_inject_ac+0x170/0x170 [ 3038.637663][ T4295] vmx_handle_exit+0x63f/0x1ac0 [ 3038.642553][ T4295] vcpu_run+0x39c2/0x60b0 [ 3038.646929][ T4295] ? kvm_arch_vcpu_runnable+0x6d0/0x6d0 [ 3038.652509][ T4295] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.657917][ T4295] ? rcu_is_watching+0x12/0xb0 [ 3038.662703][ T4295] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.668108][ T4295] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3038.674115][ T4295] ? fpu_swap_kvm_fpstate+0x1b8/0x430 [ 3038.679522][ T4295] ? __local_bh_enable_ip+0xa4/0x120 [ 3038.684833][ T4295] ? kvm_arch_vcpu_ioctl_run+0x4db/0x19b0 [ 3038.690590][ T4295] kvm_arch_vcpu_ioctl_run+0x4db/0x19b0 [ 3038.696264][ T4295] kvm_vcpu_ioctl+0x59f/0x1040 [ 3038.701053][ T4295] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 3038.705867][ T4295] ? reacquire_held_locks+0x4b0/0x4b0 [ 3038.711273][ T4295] ? bit_wait_timeout+0x160/0x160 [ 3038.716323][ T4295] ? __fget_files+0x279/0x410 [ 3038.721048][ T4295] ? __fget_files+0x279/0x410 [ 3038.725783][ T4295] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3038.730790][ T4295] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 3038.735947][ T4295] __x64_sys_ioctl+0x18f/0x210 [ 3038.740765][ T4295] do_syscall_64+0x38/0xb0 [ 3038.745243][ T4295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3038.751220][ T4295] RIP: 0033:0x7fa550c7cae9 [ 3038.755674][ T4295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3038.775324][ T4295] RSP: 002b:00007fa55193d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3038.783854][ T4295] RAX: ffffffffffffffda RBX: 00007fa550d9bf80 RCX: 00007fa550c7cae9 [ 3038.791848][ T4295] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 3038.799838][ T4295] RBP: 00007fa55193d120 R08: 0000000000000000 R09: 0000000000000000 [ 3038.807828][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.815821][ T4295] R13: 000000000000000b R14: 00007fa550d9bf80 R15: 00007fa550ebfa48 [ 3038.823828][ T4295] [ 3038.885550][ T5541] keytouch 0003:0926:3333.00CC: fixing up Keytouch IEC report descriptor [ 3038.925942][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CC/input/input233 [ 3039.066115][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3039.090119][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.098839][ T5541] keytouch 0003:0926:3333.00CC: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3039.141456][ T5541] usb 2-1: USB disconnect, device number 23 23:23:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 4) 23:23:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb20040}], 0x1, 0x0, 0x0, 0x0) 23:23:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000c9d779df15c8154dc007ba5b5876efec34e7a2b73aeb5d29ae9428d01d962304c98e628f78845c903b90628df443b8da10f8f36c2a97b77f58e6c8031afe0a125f2a716d7a5600a9662eeca20213eb97ce67ddd531a8711cc5b346b38e195f89a6ce35424602c06e95b4d5d81df0d8ef84fc8bcdc5fc3e2bf0f1fb92f75475553551369ba985def8f23954e2ef9bdd"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022010000000427c585a0ce981dc9551d9b573607969acc9a4e487ac51d385a57db8a7ceaeba6e54fd44ed9c164adf8d151a104941b04d6cabe90e118e98b1489e343a1438cbe916004b373514916b1d8310aa669376dda36d25bb5c75f277da7198d46de211951de20feaed880baa5"], 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (rerun: 32) 23:23:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 4) [ 3039.897703][ T4305] FAULT_INJECTION: forcing a failure. [ 3039.897703][ T4305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3039.931071][ T4326] FAULT_INJECTION: forcing a failure. [ 3039.931071][ T4326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3039.951636][ T4326] CPU: 0 PID: 4326 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3039.961689][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3039.971783][ T4326] Call Trace: [ 3039.975079][ T4326] [ 3039.978027][ T4326] dump_stack_lvl+0x125/0x1b0 [ 3039.982752][ T4326] should_fail_ex+0x496/0x5b0 [ 3039.987475][ T4326] _copy_to_user+0x30/0xb0 [ 3039.991919][ T4326] simple_read_from_buffer+0xd0/0x150 [ 3039.997327][ T4326] proc_fail_nth_read+0x1b0/0x290 [ 3040.002401][ T4326] ? proc_sessionid_read+0x290/0x290 [ 3040.007742][ T4326] ? security_file_permission+0xdc/0x100 [ 3040.013432][ T4326] ? proc_sessionid_read+0x290/0x290 [ 3040.018762][ T4326] vfs_read+0x1ce/0x930 [ 3040.022946][ T4326] ? kernel_read+0x1b0/0x1b0 [ 3040.027568][ T4326] ? __fget_files+0x279/0x410 [ 3040.032280][ T4326] ksys_read+0x12f/0x250 [ 3040.036584][ T4326] ? vfs_write+0xe40/0xe40 [ 3040.041027][ T4326] ? rcu_is_watching+0x12/0xb0 [ 3040.045825][ T4326] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3040.051840][ T4326] do_syscall_64+0x38/0xb0 [ 3040.056297][ T4326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3040.062238][ T4326] RIP: 0033:0x7fa550c7b78c [ 3040.066692][ T4326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3040.086419][ T4326] RSP: 002b:00007fa55191c0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 23:23:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x2, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3040.094858][ T4326] RAX: ffffffffffffffda RBX: 00007fa550d9c050 RCX: 00007fa550c7b78c [ 3040.102853][ T4326] RDX: 000000000000000f RSI: 00007fa55191c130 RDI: 0000000000000007 [ 3040.110852][ T4326] RBP: 00007fa55191c120 R08: 0000000000000000 R09: 0000000000000000 [ 3040.118929][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3040.126946][ T4326] R13: 000000000000006e R14: 00007fa550d9c050 R15: 00007fa550ebfa48 [ 3040.134948][ T4326] [ 3040.158746][ T4305] CPU: 0 PID: 4305 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3040.168816][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3040.179006][ T4305] Call Trace: [ 3040.182322][ T4305] [ 3040.185293][ T4305] dump_stack_lvl+0x125/0x1b0 [ 3040.190059][ T4305] should_fail_ex+0x496/0x5b0 [ 3040.194819][ T4305] _copy_from_user+0x30/0xf0 [ 3040.199480][ T4305] kstrtouint_from_user+0xd7/0x1b0 [ 3040.204674][ T4305] ? kstrtouint+0x130/0x130 [ 3040.209237][ T4305] ? lock_acquire+0x464/0x510 [ 3040.213988][ T4305] ? 0xffffffff81000000 [ 3040.218189][ T4305] ? lock_acquire+0x464/0x510 [ 3040.222947][ T4305] ? simple_read_from_buffer+0x112/0x150 [ 3040.228652][ T4305] ? lock_sync+0x190/0x190 [ 3040.233148][ T4305] proc_fail_nth_write+0x84/0x270 [ 3040.238344][ T4305] ? proc_task_getattr+0x240/0x240 [ 3040.243564][ T4305] ? preempt_count_sub+0x150/0x150 [ 3040.248760][ T4305] vfs_write+0x2a4/0xe40 [ 3040.253064][ T4305] ? proc_task_getattr+0x240/0x240 [ 3040.258260][ T4305] ? kernel_write+0x6c0/0x6c0 [ 3040.263016][ T4305] ? __fget_files+0x279/0x410 [ 3040.267756][ T4305] ksys_write+0x12f/0x250 [ 3040.272145][ T4305] ? __ia32_sys_read+0xb0/0xb0 [ 3040.276976][ T4305] ? rcu_is_watching+0x12/0xb0 [ 3040.281886][ T4305] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3040.287934][ T4305] do_syscall_64+0x38/0xb0 [ 3040.292515][ T4305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3040.298572][ T4305] RIP: 0033:0x7f947ea7b82f [ 3040.303119][ T4305] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 3040.322782][ T4305] RSP: 002b:00007f947f7b10c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3040.331252][ T4305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f947ea7b82f [ 3040.339272][ T4305] RDX: 0000000000000001 RSI: 00007f947f7b1130 RDI: 0000000000000007 [ 3040.347285][ T4305] RBP: 00007f947f7b1120 R08: 0000000000000000 R09: 0000000000000000 23:23:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000c9d779df15c8154dc007ba5b5876efec34e7a2b73aeb5d29ae9428d01d962304c98e628f78845c903b90628df443b8da10f8f36c2a97b77f58e6c8031afe0a125f2a716d7a5600a9662eeca20213eb97ce67ddd531a8711cc5b346b38e195f89a6ce35424602c06e95b4d5d81df0d8ef84fc8bcdc5fc3e2bf0f1fb92f75475553551369ba985def8f23954e2ef9bdd"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3040.355304][ T4305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3040.363439][ T4305] R13: 000000000000000b R14: 00007f947eb9bf80 R15: 00007f947ecbfa48 [ 3040.371536][ T4305] [ 3040.387196][ T5540] usb 2-1: new high-speed USB device number 24 using dummy_hcd 23:23:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x3, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:23:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb30040}], 0x1, 0x0, 0x0, 0x0) [ 3040.757376][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3040.769881][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3040.779083][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.790546][ T5540] usb 2-1: config 0 descriptor?? [ 3041.021741][ T28] audit: type=1326 audit(1693956219.029:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022010000000427c585a0ce981dc9551d9b573607969acc9a4e487ac51d385a57db8a7ceaeba6e54fd44ed9c164adf8d151a104941b04d6cabe90e118e98b1489e343a1438cbe916004b373514916b1d8310aa669376dda36d25bb5c75f277da7198d46de211951de20feaed880baa5"], 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:23:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x5, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3041.187957][ T5540] usbhid 2-1:0.0: can't add hid device: -71 [ 3041.211124][ T5540] usbhid: probe of 2-1:0.0 failed with error -71 [ 3041.237201][ T5540] usb 2-1: USB disconnect, device number 24 23:23:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x2, 0x0) 23:23:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x6, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x2, 0x0) [ 3041.617240][ T5540] usb 2-1: new high-speed USB device number 25 using dummy_hcd 23:23:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x7, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x10, 0x0) 23:23:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x800) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:23:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb40040}], 0x1, 0x0, 0x0, 0x0) 23:23:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x10, 0x0) [ 3042.008324][ T5540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3042.026670][ T5540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3042.036954][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:23:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x8, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3042.064587][ T28] audit: type=1326 audit(1693956220.069:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3042.073404][ T5540] usb 2-1: config 0 descriptor?? 23:23:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x800) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3042.426988][ T5540] keytouch 0003:0926:3333.00CD: fixing up Keytouch IEC report descriptor [ 3042.481995][ T5540] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CD/input/input234 [ 3042.593523][ T28] audit: type=1326 audit(1693956220.599:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3042.620190][ T4363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3042.648111][ T4363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.670391][ T5540] keytouch 0003:0926:3333.00CD: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3042.699809][ T4420] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 3042.701950][ T5540] usb 2-1: USB disconnect, device number 25 23:23:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x30, {0x30, 0xc, "5352a2dc487b088ba947a31452a620baa4c87a21bb27bf52bb58ca2d3a5b12eabd51f65f12a81228b46293bf6ab0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0xa9, "e9f9976047197dffbf822ef6e545006817c4aa8408e90ec0685d20fb65bdae07a5fcd381c58e82f924b64f8a961b4757360764604bfa7df6d3b44e5003cd728fa735f76c44e435692b1f3561f37cdae8c2e473233af6a46a9f3e64d3af9dec09d22f632c6c93785e5d84f3788bb726d7ed78df10b5031bc594ae83f08c105439090f40a237493cfc9127c076b8c357ff8df72d04a968b617fe2c631c34db0bf9a77ebf3b731fca00d7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) 23:23:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x541b, 0x0) 23:23:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x2, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x101000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="02c5"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x541b, 0x0) 23:23:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb50040}], 0x1, 0x0, 0x0, 0x0) 23:23:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x3, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5421, 0x0) 23:23:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x101000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x101000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="02c5"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5421, 0x0) 23:23:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x4, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3043.747549][ T5541] usb 2-1: new high-speed USB device number 26 using dummy_hcd 23:23:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x5, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3044.117369][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3044.149299][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3044.166202][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3044.183721][ T5541] usb 2-1: config 0 descriptor?? [ 3044.664657][ T5541] keytouch 0003:0926:3333.00CE: fixing up Keytouch IEC report descriptor [ 3044.682258][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CE/input/input235 [ 3044.798842][ T5541] keytouch 0003:0926:3333.00CE: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3044.863661][ T4432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3044.873436][ T4432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.884983][T16381] usb 2-1: USB disconnect, device number 26 23:23:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x101000}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="02c5"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb60040}], 0x1, 0x0, 0x0, 0x0) 23:23:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) 23:23:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x30, {0x30, 0xc, "5352a2dc487b088ba947a31452a620baa4c87a21bb27bf52bb58ca2d3a5b12eabd51f65f12a81228b46293bf6ab0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0xa9, "e9f9976047197dffbf822ef6e545006817c4aa8408e90ec0685d20fb65bdae07a5fcd381c58e82f924b64f8a961b4757360764604bfa7df6d3b44e5003cd728fa735f76c44e435692b1f3561f37cdae8c2e473233af6a46a9f3e64d3af9dec09d22f632c6c93785e5d84f3788bb726d7ed78df10b5031bc594ae83f08c105439090f40a237493cfc9127c076b8c357ff8df72d04a968b617fe2c631c34db0bf9a77ebf3b731fca00d7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) 23:23:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x8, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) 23:23:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "03fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000380)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="ff980db5b9177963ceef4c1f2c960e1b773b65ba8a7227b297f0a608012c797b212e6f434d8a2ff550854d6d0a08700ebc97a1330cdb92ba398c3cd4a233418d62543293022d390f86a3a5fe21a0a9f22fdc56cabd4f67e3a565c520e19b1fdda80bf5fdcb99c6e20000000015c9a13dd67bc6d958d0cbd61c03608396093cbc3b3aa1266954d00902abc9e723d24afd81ee4693f9885de6586d7d71a422eed9a52364b3a4b58be1d470a9a8ff397b7db444a288"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000200, 0x0, 0x0, 0x20000290, 0x20000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000"]}, 0x138) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000340)=0xffffff2c, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) [ 3045.867204][ T5140] usb 2-1: new high-speed USB device number 27 using dummy_hcd 23:23:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5451, 0x0) 23:23:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5451, 0x0) 23:23:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "04fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb70040}], 0x1, 0x0, 0x0, 0x0) [ 3046.298063][ T5140] usb 2-1: device descriptor read/64, error -71 23:23:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "05fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) 23:23:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) [ 3046.601066][ T5140] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3047.057234][ T5140] usb 2-1: device descriptor read/64, error -71 [ 3047.179588][ T5140] usb usb2-port1: attempt power cycle [ 3047.597225][ T5140] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 3047.687767][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3048.177283][ T5140] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3048.267543][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3048.387578][ T5140] usb usb2-port1: unable to enumerate USB device 23:23:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (rerun: 32) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x30, {0x30, 0xc, "5352a2dc487b088ba947a31452a620baa4c87a21bb27bf52bb58ca2d3a5b12eabd51f65f12a81228b46293bf6ab0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0xa9, "e9f9976047197dffbf822ef6e545006817c4aa8408e90ec0685d20fb65bdae07a5fcd381c58e82f924b64f8a961b4757360764604bfa7df6d3b44e5003cd728fa735f76c44e435692b1f3561f37cdae8c2e473233af6a46a9f3e64d3af9dec09d22f632c6c93785e5d84f3788bb726d7ed78df10b5031bc594ae83f08c105439090f40a237493cfc9127c076b8c357ff8df72d04a968b617fe2c631c34db0bf9a77ebf3b731fca00d7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) 23:23:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000380)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="ff980db5b9177963ceef4c1f2c960e1b773b65ba8a7227b297f0a608012c797b212e6f434d8a2ff550854d6d0a08700ebc97a1330cdb92ba398c3cd4a233418d62543293022d390f86a3a5fe21a0a9f22fdc56cabd4f67e3a565c520e19b1fdda80bf5fdcb99c6e20000000015c9a13dd67bc6d958d0cbd61c03608396093cbc3b3aa1266954d00902abc9e723d24afd81ee4693f9885de6586d7d71a422eed9a52364b3a4b58be1d470a9a8ff397b7db444a288"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="ff980db5b9177963ceef4c1f2c960e1b773b65ba8a7227b297f0a608012c797b212e6f434d8a2ff550854d6d0a08700ebc97a1330cdb92ba398c3cd4a233418d62543293022d390f86a3a5fe21a0a9f22fdc56cabd4f67e3a565c520e19b1fdda80bf5fdcb99c6e20000000015c9a13dd67bc6d958d0cbd61c03608396093cbc3b3aa1266954d00902abc9e723d24afd81ee4693f9885de6586d7d71a422eed9a52364b3a4b58be1d470a9a8ff397b7db444a288"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000200, 0x0, 0x0, 0x20000290, 0x20000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000"]}, 0x138) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000200, 0x0, 0x0, 0x20000290, 0x20000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000"]}, 0x138) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000340)=0xffffff2c, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) 23:23:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "06fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5460, 0x0) 23:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x5460, 0x0) 23:23:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb80040}], 0x1, 0x0, 0x0, 0x0) 23:23:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8933, 0x0) 23:23:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "08fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8933, 0x0) 23:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000380)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) (async, rerun: 64) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000040)) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="ff980db5b9177963ceef4c1f2c960e1b773b65ba8a7227b297f0a608012c797b212e6f434d8a2ff550854d6d0a08700ebc97a1330cdb92ba398c3cd4a233418d62543293022d390f86a3a5fe21a0a9f22fdc56cabd4f67e3a565c520e19b1fdda80bf5fdcb99c6e20000000015c9a13dd67bc6d958d0cbd61c03608396093cbc3b3aa1266954d00902abc9e723d24afd81ee4693f9885de6586d7d71a422eed9a52364b3a4b58be1d470a9a8ff397b7db444a288"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000200, 0x0, 0x0, 0x20000290, 0x20000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000"]}, 0x138) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000340)=0xffffff2c, 0x4) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) [ 3048.997755][ T5140] usb 2-1: new high-speed USB device number 31 using dummy_hcd 23:23:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "0efd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xaece, 0x0) [ 3049.373858][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3049.399921][ T5140] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3049.423193][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3049.444753][ T5140] usb 2-1: config 0 descriptor?? [ 3049.699831][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3049.717692][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.730545][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3049.739445][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.749776][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3049.760506][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.770251][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3049.781345][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.791685][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3049.801029][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.881097][ T5140] keytouch 0003:0926:3333.00CF: fixing up Keytouch IEC report descriptor [ 3049.899905][ T5140] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CF/input/input236 [ 3050.002199][ T5140] keytouch 0003:0926:3333.00CF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 23:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, 0x24}}, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r4, 0x100) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4000}, 0x4000084) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) syz_clone3(&(0x7f0000004b40)={0x100000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x39}, &(0x7f00000008c0)=""/186, 0xba, &(0x7f0000000980)=""/68, &(0x7f0000004b00)=[0x0, 0x0], 0x2, {r5}}, 0x58) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000040)={0xd6bb, 0x0, 0x4, 0x4c51000, 0x14, "25eb55e211930000ba00"}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000009c00)=ANY=[@ANYBLOB="39ca1999", @ANYRES16, @ANYBLOB="080025bd7000fbdbdf2500000000080002000000000e060006000100cca27e25f254105b72918e990706afd7c6510e17c1a39eef888d2670ba78fdf3e8262fbff130d07989f6d709a3719f423349c4c4b2c75cde73f0560c053815a210c4de5267f1f0267b27e14f51d57d7184c1d5", @ANYRES32=r5, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x24002054) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000a00)={'erspan0\x00', r3, 0x8007, 0x80, 0x8001, 0xffffffff, {{0x33, 0x4, 0x1, 0x3b, 0xcc, 0x66, 0x0, 0x4, 0x1e6ffb8cf5cd0562, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0x73, 0x0, 0x6, [0xfffff568, 0x9, 0x5, 0xfff, 0x81, 0x5c, 0x0]}, @ssrr={0x89, 0x23, 0xa7, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @cipso={0x86, 0x36, 0x0, [{0x1, 0x12, "a133be12ebaf8b5d74de31845a430d61"}, {0x7, 0xe, "390d15c329ee771a67005e97"}, {0x5, 0x10, "55e17615f213794a5fa4009b32b3"}]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x6, [{@rand_addr=0x64010102, 0x7}, {@multicast2, 0x80000000}, {@multicast1, 0xfffff4c3}]}, @cipso={0x86, 0x23, 0x3, [{0x1, 0xe, "1291be7e422041c923c285a6"}, {0x2, 0xf, "c35e4acc2a1a2bec8fbc541079"}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7b170ee13902000000000000071f00e508000604000a41bd627d47fa2a9b435607f68d3c20512ec9350b5694e2329a437d02cba963e55da265754e506398e99e534f9c1b1d79b77972249eaab49aad857c74f7379aa456a34785c9600ea108f68197f8da4b7987", @ANYRESOCT=r1], 0x120) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x19) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r9, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r10, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYBLOB="4afdafafb89dadecf7738484f99876c43e90c80cfe618f698ed7865027412d18a20a1b3357fa14a0e3fbc365bd46e0e4a2dcc2904ce87a7c372eeeb6cf17a300969b7790d7bfc04c8786ff1a47013dd4e80a9691ecefbbb22f69d5c31d4445551e4234662b620042979b50260ca0f85ef75ea4c411968b11ce74f99670e88098932b5ad474e187f2cae78fce3db1af4b7adbfda5cad337b9429a46d5f03e2507835e6d1f724162520a05f9d3ad7a2975548a234a32d89bdd5b5c9ed04d3141e7b324f38c7d04c7906b0a92e1c10f351a952e8aefa8c91391f654eb1694a25c1a42b2f0b9e66ea4bc1d01ae9c9bc5b93f4fb3855f2f279f65456105085de2183e33acadaabaa57ec63c22848d", @ANYRES64=r10], 0x208e24b) sendmsg$nl_route(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0000001a0d08002530ead5b26f661978e4848f87bd70ee0d09a8a9ddd1a3f8fac02037f2e5ef2452c5fadb0640000003"], 0x1c}, 0x1, 0x0, 0x0, 0x14040090}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23:23:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xb90040}], 0x1, 0x0, 0x0, 0x0) 23:23:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xaece, 0x0) 23:23:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400448c9, 0x0) 23:23:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "27fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3050.195427][T23375] usb 2-1: USB disconnect, device number 31 23:23:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000029dafaaea67146be334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0xe68, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x70, 0x56, 0xa3, 0x8, 0xd96, 0x5200, 0x1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe56, 0x4, 0x4, 0x2, 0x10, 0xe4, [{{0x9, 0x4, 0xf2, 0x8, 0xc, 0xb6, 0x1a, 0x94, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x101, 0xcc}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@acm={0x4}]}], [{{0x9, 0x5, 0xd, 0x2, 0x30, 0x9, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf6, 0xff4f}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x75, 0xd344}, @generic={0xc2, 0xa, "8c388b8f5b537c9a8cc7ecf273493985df1dc96bc5f107a946ba0a0bc2c0ada65bc832af9b21a1f0cdf567334b8d9ab108e1fd5b9d7c4564f418c31ed0cfd3740324601008a573cef14f0e15c99d738e00ed822f3bf5a950087723dae7c7ee09d5a2c885ba80ec6f1f021a4bf1e812ac6b12e002799ca4ab6de348a2ed3e772621f5cf5cd96ac7806053dcc5fcf7f06fc01176d5778b5f431e984b4224e2a68b5695731fa420a35972fd8fc3922fdee1c208819015f981028d322e7971618f45"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x96, 0x3, 0x4, [@generic={0x57, 0x24, "8d8d337d404496686f2812c97ed09820e0cc5c2b903b831eaefd43620624000a36f0a9b4814331521df63cfc43b9e5c2abf7effca3b32bc411f31e04436e71ce4a4580abbc15aae46b4e50df05fcc807a2504b2d0f"}, @generic={0xe3, 0x1, "ed40b875e5f5cc248ea77e8ef6f49ea1c3ca2a4571fb34f43d31755ea379e7d9eefca01a0e88610580a799945c02492b04a7d30097c18cbf68fe8a837b670f2f1a407f45fb837724ad0fb0c1f6639abd11825de864af46523eea83daa6a00d96f87f8a51bfca6e1a8e735bc05fe8bf52407366f1590c6501fbdcd724c4226a4273de5ff1c35257f291f5ba00810d7ca34059bf8acc63194a7c271515ad4e5226aafe6ab35ca08d1604d9f0f8a2a37e3c71acba9aee886efb21ba83f95c4e970db92577e1411c74f69474f4d3d2cdf837b7ca3d204d2d1ee43f199d4802f4efd5e1"}]}}, {{0x9, 0x5, 0x8e, 0x2, 0x3ff, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xae}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x81, 0x5, [@generic={0xf2, 0x6, "a3024bff19c3870b2db7f60f791f05856d60c9fb228acaf67b39d95829bb9784f838f25b15cc5df46185febfb4e961db1f57199ecf1ef9e3cf4ea36f06d683198922a62bc690fb68b5a7ea7c07d8ab59d9e4996a95a5b3fa692df80bddb758ebad9cabb71c37da579cdbc07a3f92ac9c3809a5a97db5b756096e6c0522839aa5f671fc0c4782f8382d24d76dd3ab097b64c6e610f2ca1697dca1764caac26ecee8c6052113fe342770105815f6afb5971bbdc744e2421abf1e7321713da86e7735fc364d432ca3ba75142ae3c10cd478d59b4bc5f85e99ccec4a3c86dd662b704f807b8b654e82bc03cdc2398e0a974d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x400}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xae, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x8, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7d4}, @generic={0x8, 0x2, "9d2e28c74a67"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x0, 0x3, 0x0, [@generic={0xc6, 0xc, "cfa354e87b9a801d416c2b199c2edb20f8efa078f60e9f3cd95041398255d2a4464eb195b8f6007358a5ffcc6ae4a03e96900d30ed008d4bae07ffc52e790d13d7ff6ede06a1d6454f188e3b2ff81fecefcce22b2c0afca5c39aeeeb064989da65235198618cca77241cbb2e2df62eba7e34a6e8fd698abb6c3221c98cbdba1611d7f78a3d87feb34f09cb23745a16679e7ad8af6fa081a9ddb892a7b671015e1280da565ecc5b2efb93e02d7dc3725c8a16780f9c3197a2f25a74fab1229f3f7d8d61d8"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xdb3}]}}]}}, {{0x9, 0x4, 0x74, 0x81, 0xd, 0x38, 0x9a, 0x5c, 0x1, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xec3}}, @hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x146}}], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x3f, 0x0, 0x1, [@generic={0xc0, 0x10, "2dad3483e85784d4b5576d610ddfd21d7213df0a63ee5368d47974dbbfd03c2e32ec4450794e34596d61434cbf6881278c8ffba6c8712cc56495fb0bedaeac2fda407719de9a3019471f4bc6af99fbcf70e52b55d7f25687dfe0d38a3d061e6ce8e688746764899d9ff7f0ef5ca7ae8a7feba8ad0a0b59a3eff73d34f7b3bd80256b34a41254ae8d46a8139d9eadc3082b4a3905ea6b9fef8912e35b701d44e154cb657c87010699100f0da50ced434540b5a45185f1541f884fb1218672"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x80, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffe1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x49, 0x26, 0x9, [@generic={0x94, 0x7, "e462081152c41cf9529101d73292010f072b5ae1b9e94c8bd265c8cb268bb3f95e2c53af44030bb2dc263ced177688bda0d2ef8d6f6354eac9f4ee5cd5f837021f618485a36d79280c67f6c24cacc500c51667171b0dab8ad4a4b83969dd53f309c32dab646f55c03f7b3a3b7d0c9c9d91358bf9f71d69c2221d1f92e9b3de9ada3f7033f09bee18d4b5e3b2dee657de60d3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xb2, 0x9e, 0x0, [@generic={0x2c, 0xb, "9619a958432c760c959f7fa1c60f360ddb6a9874f31ca2ae9c25bb626cdcb85b42a37138e1e1f999e2ea"}]}}, {{0x9, 0x5, 0x98, 0x0, 0x3f7, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x80}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x81, 0x9, [@generic={0xfd, 0x22, "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"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x7, 0xf8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3f, 0x4, 0x20, [@generic={0x26, 0x21, "883f346d94c53133466ecea00ce1cf1adbf8091546acc095879944a8705b0a723e4326c4"}]}}, {{0x9, 0x5, 0x0, 0x3c, 0x400, 0xe4, 0x4, 0x1, [@generic={0xb8, 0x5, "d1eb3d6444929066e9227d927e525a0bacdcb952627392dd1a889611fea2b12cf4170ca682a7445728e7d63e10ffa6e406794c22f306729637567884efc883915b52a523dc618d112e8c87c6628c2af8bf49c9cfe7d7e82765c12385354c6d508acf0a0b0db150f17a12bad0a102bc48bb00563cef8e04fc9e79d3f7e9ac9cc80454417f3c9abb614d57102aa92eb9709f9f27f0edadefc9b592ae13e5a0446e8e7bc16906a37e0d30048f8d1df63e3e8fe03381b6ea"}, @generic={0x3d, 0xf, "2d3c7b96c5da701988cd88043c95184dd3744fcd1a4436b1ceb6a6eaee3e0e0cf3751301b9df62198bab03f6af3efb3b48ad5d04a2c26e97bdf889"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1b, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x878fb6d738dc26f2, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8af28c1d91a0e1bb, 0x20, 0xf1, 0x7, [@generic={0x18, 0xc, "e83a157cd34f8e548148eb7b469bab698632e7bd4e0c"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x81, 0xa3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0x21, 0x1, 0x7, 0x49, 0xcc, 0x9, 0x9, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x62c4, 0xff, 0x7, "5da7904d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x20, 0x40, "29e9d3dd1568de9ffc"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x50f4, 0x5, '|'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0xf4, 0x1, '8'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc3, 0x6, 0x7, "93dbc628bcd3d4"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x69, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x3e, 0xf9, [@generic={0xc, 0x31, "5c695c6bc87408dccf84"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x3f, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xb}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x1f, 0x1b, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x2, 0x2, 0x1, [@generic={0x6f, 0x21, "68ce00b29f759c7d8ceda18ee69338cd12fcb5643d257a06dcefdd93e86d4c39e91ad088da262548479b448845904689ebd701aaa160895b0d0816907edf102fc64bdf5b6f29228960de1e4979a54ff94123ed977ed83e17025c5d186fd626c65698bf0cea48e6c9901a324c3b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xae, 0x7c}]}}, {{0x9, 0x5, 0xd, 0x19a6cc8b34181b43, 0x3ff, 0x0, 0x5, 0x9, [@generic={0xa5, 0xe, "d7a00a1f11e26ef760ec499d92a995bee5da35390a9a3a33dd590191c4a055b0edac80e0f60164b2eefe38ab74ad803865ba469473ea2d4ae45c48469c7e1b4c8b0da972cba43262b192aa189759e6f48509b376110a232c41aeb0166be3636a29271755b8e097a413fcb4e1b0eae232ad43a7253478295395fa5a4a27d0bc52c172e66777b5e03ecb0c11c48ccc0f6d02eb71036f18ebfc8b314df508f6f30d9bbf04"}, @generic={0x9f, 0x5, "f0c87a5a355a0c7a18667c8eae74904b8eacb3ed1beb236532620b55725e14e4aa469d67b9dc73e5fc9a0ee0f928ce761d7f814d89f0080e44c45c4dc2f62b99c6d159d158c12d57319e77c2d0100c95e6da8aeabdcfd6da217705d37f9ab335b91ff8c0177218dbc91623a1cb29597f101e6e5f2ff1f47bfe1c462b57cea2d76a481433770a75fd3fe80284d8b6def7b1997ff8d606425ae48fc34aff"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x6, 0x5, 0x71, [@generic={0x54, 0x4, "d273675abc8336e58ecf8a11bf2ecc9ec985e27c8ad5c0fd895cb834aabda261b405a0125f607631fbc7764187d08b626b5f55f967b7f03ca4415b16f0a5b9db5015c343f5bb45f5aed01b82be648ba268ef"}, @generic={0x68, 0x22, "c67c868c01f2e9d96722c71343c54a78a2ab482fb53220c48c01240f2a85e09e278214a577c820e2d7e4fe1024d4423b5ef2bc7779224183f4e1220c767b181d12ca512f827d586329d5d1333739e7dbf945f14cf5c50a40a7e002320d15519bd63b4e5dbefe"}]}}]}}, {{0x9, 0x4, 0x12, 0x8, 0x7, 0x4e, 0x20, 0xab, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0x1}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7, 0x4, "699e7b50d3"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0x9, 0x8, [@generic={0x4c, 0x30, "384a40bd884a6aa27a1e02ea9cc21e49aa2ad440147cf059207d0191adbcd22c1b635e7909eca067e44860e45fadddc8fa5fd18309c607109c3eba3feb5a4b73258c52e31837a0147685"}, @generic={0x35, 0x22, "a0a5c1d7d0b3d1af3b9bd9082f8af8a58944aebc0cbb82428ec67773277e4370dd2959cf0aae6dbb2e7d96e97a133f580f92f4"}]}}, {{0x9, 0x5, 0x9, 0xb, 0x60, 0x6, 0x20, 0x80, [@generic={0x1a, 0x21, "1541e39bde5aba915d6280bb6fff252ab01b4ba99dae79ae"}]}}, {{0x9, 0x5, 0xf, 0x34, 0x610, 0x20, 0xc9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3f, 0x1ff}, @generic={0x59, 0x30, "c44129f084aeba1dccd84a2834fd2223678715bfe0a5ca087bc09b5538bb9835c4bdead036a97a744a0d9f82a3821445217ad1e6b396e7a4aa3fce275f93d7e2474809ad85f725e4fa5761a6cc86e042df6d9f919d9400"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xcf}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x4}]}}, {{0x9, 0x5, 0x2, 0x2, 0x7ef, 0x0, 0x20, 0x6, [@generic={0xb0, 0x2, "2524b9c36accbec554fc14f28cc9f16e7fd4427fae84d1270cb161a9911ae8e2e88200abab9f46eb776e6a00dfc28ffa610f411e313769a833f48be4779ce3f896f02c9fb9500228fe39b45cfdf96ddb49b532773520f85dc340700c1660ed7bb90df662925c7e672942ef21b3d5da60ba8d56f4fd0d47d6c97b41e988acc33ee618096a467a7a0120471d03a39a4f423c7b1fd26ecbd25b541bb7e28f8d5b155748dea5d878db120829f80f4558"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x100, 0x1, 0x5, 0x1, 0xff, 0x3f}, 0x1a, &(0x7f0000001dc0)=ANY=[@ANYBLOB="050f1a000300071002043401803d07100200000f0ab25ecf1e73aee5823549947e9b649be79ee3118e69b7b559fbe399e8948d885341dd2a8536d78d57ced8e96db705511c339c4741b4dffec97f254cb01c7dc1aff3332c661108d826f871711b3fd7c1e755449a67e52dfe08ecfb753a6728701443855238c291d6f23464886814be5aee2bdb46c64443b5937fbcfb299255a50d7492d365eb2975b1a45d70ff02f1a354bc3c04c03c4e398d7d8731da23538b52b1e8762d028af5dfacaf84dee83177f2d4b8f6b193fe0be723fc0e47aadfca"], 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x808}}, {0x1f, &(0x7f0000000240)=@string={0x1f, 0x3, "7f72ea0ead46ae5601bd832c295d3c2f98d91ec710b4244577c03fc9df"}}]}) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1ff, 0x2, 0x1, {0x22, 0x12d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1f, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x9, 0xff, 0x32, 0x8, 0x6}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050b19000114100403503ca630a56fba7d118bb625380c6f5b"], 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x306a}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x6}}, {0x6f, &(0x7f0000001340)=@string={0x6f, 0x3, "28ce58734bb86c5572afea374337b5a90a9e005859f98fbfc0953b20864aeeb0deda6bd2d1d36eff013a0f9fc48192c6abd7e20e57a58b7f70a2cf0d27604240758a2cbfdf52b6b2e553b834eb16b755307753a0cf31c010670faaa5cc6be969a8f6c1f48438945a474c92311a"}}, {0x60, &(0x7f00000013c0)=ANY=[@ANYBLOB="6003e70589b6604975dca662ddaac80c8fce205b9f1088d19810827829743a3c6b467b7ab371002daf18b5bc45dabbdffd9fba45d78da575ba4643fe12cf3c5c4fdf6e17dd106d37baca4f1e2083ac0594278c00288139c2dc653b41f3"]}, {0x9c, &(0x7f0000001440)=@string={0x9c, 0x3, "fe3359c4756c241da68a0c458d0b6ad1990b47c21d3a4a2612996b6b8151f152c67d24af0c424ad3d4b6c73edf17773cb3e3801d6ecaf1bcaa5f9ccf1abb92cdaa96c7b8110cf724cad0866fbe9f2e96a52a05f2ece522f8c8ed7a80b97e9fb2cac2991d8178970dddcf11fcce20539681e936a3c5b66ab263287220138e1c6f4a66508a41e7b1b1c3320d5a5e1f7cd7ee6c9aea81906686d06e"}}, {0xd8, &(0x7f0000001500)=@string={0xd8, 0x3, "bb0241676f4742a0f5a394ef9e65678d89169e62d4275a2a00ecda9eea92eb1c471436e6596d458eb5732dd0884c82877d8df15100fe4c7fc2008411f2c5814bad3a37fa612f26266ab4abce41d4c3b3cdb5ece872e76d125e66cac9e78aad83cdaef3b634eff72588d65c1550935ddf98a86a3762706879c19af4d35b5dde102f24f6287ae8943e314be9a949d55a055e041588d6af5639b1859aac5bce6bfb63f034b26ca99af2e0aa8417bb0037cf068d35ad0436c7fe5439c0b9badabffb465e3c15e58204789c4731d55cd5283f3cfa73f32ea3"}}, {0xc9, &(0x7f0000001600)=@string={0xc9, 0x3, "ca2a5c3f5e0f5341aee5f9a0d49e3fa39a91f32648e2e78fbb03d3a6fcf0d1e8f4fae8b665fc20d531e8fc5aaa17cb870c1a5c736433748dd315d56e487cb09567158164113e70986e43ed5498fdf90e143ae02a08754807f3899d0c539947e95f4488de7cfada1d5c221210655c2a67cceffb5c6d770da2bf708fbb7773b99bcee40c7121aab8566b4c31e8c314753b1192d67658cddf6cbf7b88cd00799db14a9652bcd9c3d11d24e5ebd3719628da50b0183519bd0dcfde3c00088e0af8788ee8bc1812b755"}}]}) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001ec0)={0x40, 0x6, 0x77, {0x77, 0x22, "815b9f0e38670a9be4aedf521c6f1518b3cf1842b1aebab9aef1b057a1e8fda5f316d715777872f4113b030b8bdc72e66c2b5850b0361ffad1c64188ecdcf01701e3e09deabc910176ddc63c285707f8e898dbdb397b9f51a38437897e29802dbb5e4ba508c72b193781d60b92acaf6d6a2e1bf334"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe8a6}}, &(0x7f0000001f40)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x80, 0xffff}, @generic={0x1d, 0x10, 0xb, "8441be1d2964c68ae22052479209fd91bcc53acf2d8d9a352058"}, @generic={0xb2, 0x10, 0x1, "8c793cfbf08b3567b7e61675e56d7104ddd708a532bab61b10984d168b45beb2f36cd36c99fd6d99d374a025ddc94983cae2c30df92f5529afe6bb2f650b3840183dade9b48255354887857f05bd065603c39fdd30f0b3bfdcb2d4cf26a59a84f6aac14568668ea5f8ecc4dbc1d84051846c7a65532e9a2ccc2c78b1cb1c7698ac0d6bec7000464b27a415a1e4fdf7f81d25ff7f7a868aa903025456fd2c0f036304f3c9406c6313b81a9264754a61"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "023a0abf959c96063f44c4b09a978277"}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2d, 0x0, 0x60, 0x1, "b302ced0", "cc7c37cf"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x9, 0x0, 0x9, 0x81, 0x6}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x0, 0x15, 0xa0, "610fe222a93a4707a8245d0ad84decba93e898709b6999d5f78fdd19485753885654bb1e3cc093560c05167826be2e660e30bf1323c8bd591d5c02a36ed6040db1dfe1597ca1c8843ed7ab226b564b4ab3f4df28f5882f7c4730dd3feeefca33f3c692d588084b5401bc25108923ec001390f0f8f34b1ca4547a9c2afa07f63210fa16aac83567b02d353f399ab45af63efbd102193a196a42b260754fbb251d"}, &(0x7f00000021c0)={0x0, 0xa, 0x1}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000002340)={0x40, 0xb, 0x2, "bb4a"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000002400)={0x40, 0x17, 0x6, @random="fcd32e761046"}, &(0x7f0000002440)={0x40, 0x19, 0x2, "ba90"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0xfe01}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x3, "c9f39941"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000018c0)={0x2c, &(0x7f00000000c0)={0x20, 0x7, 0xf, {0xf, 0x7, "f182a4e7b30a02af5c37865af4"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000001800)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x7, 0x9}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x8, 0xcf, "ca82d3e2", "51c36f24"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf6, 0x18, 0x6, 0x11, 0x20, 0xd97, 0x4}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001900)={0x20, 0x18, 0x3d, "2b5c36596894f3e3f23b2400dbf3658610ce1f2bdd59164ec208e46c6b41ee9988582a739be3851ea88b4e47fa7497e9a1224c60d536b9c680b890d99e"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001b00)={0x40, 0xb, 0x2, 'QJ'}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @random="04e31ece03b2"}, &(0x7f0000001c00)={0x40, 0x19, 0x2, 'mS'}, &(0x7f0000001c40)={0x40, 0x1a, 0x2}, 0xfffffffffffffffe, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x80}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000040)=""/21) 23:23:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "28fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3050.459577][ T28] audit: type=1326 audit(1693956228.449:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400448c9, 0x0) 23:23:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400448dd, 0x0) 23:23:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x6, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3050.999489][T23375] usb 2-1: new high-speed USB device number 32 using dummy_hcd 23:23:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400448dd, 0x0) 23:23:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket(0x200000100000011, 0x803, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x4) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, 0x24}}, 0x0) (async) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r4, 0x100) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4000}, 0x4000084) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) syz_clone3(&(0x7f0000004b40)={0x100000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x39}, &(0x7f00000008c0)=""/186, 0xba, &(0x7f0000000980)=""/68, &(0x7f0000004b00)=[0x0, 0x0], 0x2, {r5}}, 0x58) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000040)={0xd6bb, 0x0, 0x4, 0x4c51000, 0x14, "25eb55e211930000ba00"}) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000009c00)=ANY=[@ANYBLOB="39ca1999", @ANYRES16, @ANYBLOB="080025bd7000fbdbdf2500000000080002000000000e060006000100cca27e25f254105b72918e990706afd7c6510e17c1a39eef888d2670ba78fdf3e8262fbff130d07989f6d709a3719f423349c4c4b2c75cde73f0560c053815a210c4de5267f1f0267b27e14f51d57d7184c1d5", @ANYRES32=r5, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x24002054) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000a00)={'erspan0\x00', r3, 0x8007, 0x80, 0x8001, 0xffffffff, {{0x33, 0x4, 0x1, 0x3b, 0xcc, 0x66, 0x0, 0x4, 0x1e6ffb8cf5cd0562, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0x73, 0x0, 0x6, [0xfffff568, 0x9, 0x5, 0xfff, 0x81, 0x5c, 0x0]}, @ssrr={0x89, 0x23, 0xa7, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @cipso={0x86, 0x36, 0x0, [{0x1, 0x12, "a133be12ebaf8b5d74de31845a430d61"}, {0x7, 0xe, "390d15c329ee771a67005e97"}, {0x5, 0x10, "55e17615f213794a5fa4009b32b3"}]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x6, [{@rand_addr=0x64010102, 0x7}, {@multicast2, 0x80000000}, {@multicast1, 0xfffff4c3}]}, @cipso={0x86, 0x23, 0x3, [{0x1, 0xe, "1291be7e422041c923c285a6"}, {0x2, 0xf, "c35e4acc2a1a2bec8fbc541079"}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7b170ee13902000000000000071f00e508000604000a41bd627d47fa2a9b435607f68d3c20512ec9350b5694e2329a437d02cba963e55da265754e506398e99e534f9c1b1d79b77972249eaab49aad857c74f7379aa456a34785c9600ea108f68197f8da4b7987", @ANYRESOCT=r1], 0x120) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x19) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f0000000040)) (async) write$binfmt_script(r9, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r10, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r10], 0x208e24b) sendmsg$nl_route(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0000001a0d08002530ead5b26f661978e4848f87bd70ee0d09a8a9ddd1a3f8fac02037f2e5ef2452c5fadb0640000003"], 0x1c}, 0x1, 0x0, 0x0, 0x14040090}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23:23:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xba0040}], 0x1, 0x0, 0x0, 0x0) 23:23:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x11, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3051.227629][T23375] usb 2-1: device descriptor read/64, error -71 23:23:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400454ca, 0x0) 23:23:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) (async) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, 0x24}}, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) (async) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r4, 0x100) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4000}, 0x4000084) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) syz_clone3(&(0x7f0000004b40)={0x100000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x39}, &(0x7f00000008c0)=""/186, 0xba, &(0x7f0000000980)=""/68, &(0x7f0000004b00)=[0x0, 0x0], 0x2, {r5}}, 0x58) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000040)={0xd6bb, 0x0, 0x4, 0x4c51000, 0x14, "25eb55e211930000ba00"}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000009c00)=ANY=[@ANYBLOB="39ca1999", @ANYRES16, @ANYBLOB="080025bd7000fbdbdf2500000000080002000000000e060006000100cca27e25f254105b72918e990706afd7c6510e17c1a39eef888d2670ba78fdf3e8262fbff130d07989f6d709a3719f423349c4c4b2c75cde73f0560c053815a210c4de5267f1f0267b27e14f51d57d7184c1d5", @ANYRES32=r5, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000009c00)=ANY=[@ANYBLOB="39ca1999", @ANYRES16, @ANYBLOB="080025bd7000fbdbdf2500000000080002000000000e060006000100cca27e25f254105b72918e990706afd7c6510e17c1a39eef888d2670ba78fdf3e8262fbff130d07989f6d709a3719f423349c4c4b2c75cde73f0560c053815a210c4de5267f1f0267b27e14f51d57d7184c1d5", @ANYRES32=r5, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x24002054) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x24002054) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000a00)={'erspan0\x00', r3, 0x8007, 0x80, 0x8001, 0xffffffff, {{0x33, 0x4, 0x1, 0x3b, 0xcc, 0x66, 0x0, 0x4, 0x1e6ffb8cf5cd0562, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0x73, 0x0, 0x6, [0xfffff568, 0x9, 0x5, 0xfff, 0x81, 0x5c, 0x0]}, @ssrr={0x89, 0x23, 0xa7, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @cipso={0x86, 0x36, 0x0, [{0x1, 0x12, "a133be12ebaf8b5d74de31845a430d61"}, {0x7, 0xe, "390d15c329ee771a67005e97"}, {0x5, 0x10, "55e17615f213794a5fa4009b32b3"}]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x6, [{@rand_addr=0x64010102, 0x7}, {@multicast2, 0x80000000}, {@multicast1, 0xfffff4c3}]}, @cipso={0x86, 0x23, 0x3, [{0x1, 0xe, "1291be7e422041c923c285a6"}, {0x2, 0xf, "c35e4acc2a1a2bec8fbc541079"}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7b170ee13902000000000000071f00e508000604000a41bd627d47fa2a9b435607f68d3c20512ec9350b5694e2329a437d02cba963e55da265754e506398e99e534f9c1b1d79b77972249eaab49aad857c74f7379aa456a34785c9600ea108f68197f8da4b7987", @ANYRESOCT=r1], 0x120) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x19) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r9, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r10, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYBLOB="4afdafafb89dadecf7738484f99876c43e90c80cfe618f698ed7865027412d18a20a1b3357fa14a0e3fbc365bd46e0e4a2dcc2904ce87a7c372eeeb6cf17a300969b7790d7bfc04c8786ff1a47013dd4e80a9691ecefbbb22f69d5c31d4445551e4234662b620042979b50260ca0f85ef75ea4c411968b11ce74f99670e88098932b5ad474e187f2cae78fce3db1af4b7adbfda5cad337b9429a46d5f03e2507835e6d1f724162520a05f9d3ad7a2975548a234a32d89bdd5b5c9ed04d3141e7b324f38c7d04c7906b0a92e1c10f351a952e8aefa8c91391f654eb1694a25c1a42b2f0b9e66ea4bc1d01ae9c9bc5b93f4fb3855f2f279f65456105085de2183e33acadaabaa57ec63c22848d", @ANYRES64=r10], 0x208e24b) sendmsg$nl_route(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0000001a0d08002530ead5b26f661978e4848f87bd70ee0d09a8a9ddd1a3f8fac02037f2e5ef2452c5fadb0640000003"], 0x1c}, 0x1, 0x0, 0x0, 0x14040090}, 0x40000) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0000001a0d08002530ead5b26f661978e4848f87bd70ee0d09a8a9ddd1a3f8fac02037f2e5ef2452c5fadb0640000003"], 0x1c}, 0x1, 0x0, 0x0, 0x14040090}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 3051.497577][T23375] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3051.707418][T23375] usb 2-1: device descriptor read/64, error -71 [ 3051.765844][ T28] audit: type=1326 audit(1693956229.769:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3051.837776][T23375] usb usb2-port1: attempt power cycle [ 3052.247514][T23375] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3052.358856][T23375] usb 2-1: device descriptor read/8, error -71 [ 3052.647264][T23375] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3052.737330][T23375] usb 2-1: device descriptor read/8, error -71 [ 3052.857499][T23375] usb usb2-port1: unable to enumerate USB device 23:23:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000029dafaaea67146be334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = syz_usb_connect(0x2, 0xe68, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x70, 0x56, 0xa3, 0x8, 0xd96, 0x5200, 0x1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe56, 0x4, 0x4, 0x2, 0x10, 0xe4, [{{0x9, 0x4, 0xf2, 0x8, 0xc, 0xb6, 0x1a, 0x94, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x101, 0xcc}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@acm={0x4}]}], [{{0x9, 0x5, 0xd, 0x2, 0x30, 0x9, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf6, 0xff4f}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x75, 0xd344}, @generic={0xc2, 0xa, "8c388b8f5b537c9a8cc7ecf273493985df1dc96bc5f107a946ba0a0bc2c0ada65bc832af9b21a1f0cdf567334b8d9ab108e1fd5b9d7c4564f418c31ed0cfd3740324601008a573cef14f0e15c99d738e00ed822f3bf5a950087723dae7c7ee09d5a2c885ba80ec6f1f021a4bf1e812ac6b12e002799ca4ab6de348a2ed3e772621f5cf5cd96ac7806053dcc5fcf7f06fc01176d5778b5f431e984b4224e2a68b5695731fa420a35972fd8fc3922fdee1c208819015f981028d322e7971618f45"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x96, 0x3, 0x4, [@generic={0x57, 0x24, "8d8d337d404496686f2812c97ed09820e0cc5c2b903b831eaefd43620624000a36f0a9b4814331521df63cfc43b9e5c2abf7effca3b32bc411f31e04436e71ce4a4580abbc15aae46b4e50df05fcc807a2504b2d0f"}, @generic={0xe3, 0x1, "ed40b875e5f5cc248ea77e8ef6f49ea1c3ca2a4571fb34f43d31755ea379e7d9eefca01a0e88610580a799945c02492b04a7d30097c18cbf68fe8a837b670f2f1a407f45fb837724ad0fb0c1f6639abd11825de864af46523eea83daa6a00d96f87f8a51bfca6e1a8e735bc05fe8bf52407366f1590c6501fbdcd724c4226a4273de5ff1c35257f291f5ba00810d7ca34059bf8acc63194a7c271515ad4e5226aafe6ab35ca08d1604d9f0f8a2a37e3c71acba9aee886efb21ba83f95c4e970db92577e1411c74f69474f4d3d2cdf837b7ca3d204d2d1ee43f199d4802f4efd5e1"}]}}, {{0x9, 0x5, 0x8e, 0x2, 0x3ff, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xae}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x81, 0x5, [@generic={0xf2, 0x6, "a3024bff19c3870b2db7f60f791f05856d60c9fb228acaf67b39d95829bb9784f838f25b15cc5df46185febfb4e961db1f57199ecf1ef9e3cf4ea36f06d683198922a62bc690fb68b5a7ea7c07d8ab59d9e4996a95a5b3fa692df80bddb758ebad9cabb71c37da579cdbc07a3f92ac9c3809a5a97db5b756096e6c0522839aa5f671fc0c4782f8382d24d76dd3ab097b64c6e610f2ca1697dca1764caac26ecee8c6052113fe342770105815f6afb5971bbdc744e2421abf1e7321713da86e7735fc364d432ca3ba75142ae3c10cd478d59b4bc5f85e99ccec4a3c86dd662b704f807b8b654e82bc03cdc2398e0a974d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x400}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xae, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x8, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7d4}, @generic={0x8, 0x2, "9d2e28c74a67"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x0, 0x3, 0x0, [@generic={0xc6, 0xc, "cfa354e87b9a801d416c2b199c2edb20f8efa078f60e9f3cd95041398255d2a4464eb195b8f6007358a5ffcc6ae4a03e96900d30ed008d4bae07ffc52e790d13d7ff6ede06a1d6454f188e3b2ff81fecefcce22b2c0afca5c39aeeeb064989da65235198618cca77241cbb2e2df62eba7e34a6e8fd698abb6c3221c98cbdba1611d7f78a3d87feb34f09cb23745a16679e7ad8af6fa081a9ddb892a7b671015e1280da565ecc5b2efb93e02d7dc3725c8a16780f9c3197a2f25a74fab1229f3f7d8d61d8"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xdb3}]}}]}}, {{0x9, 0x4, 0x74, 0x81, 0xd, 0x38, 0x9a, 0x5c, 0x1, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xec3}}, @hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x146}}], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x3f, 0x0, 0x1, [@generic={0xc0, 0x10, "2dad3483e85784d4b5576d610ddfd21d7213df0a63ee5368d47974dbbfd03c2e32ec4450794e34596d61434cbf6881278c8ffba6c8712cc56495fb0bedaeac2fda407719de9a3019471f4bc6af99fbcf70e52b55d7f25687dfe0d38a3d061e6ce8e688746764899d9ff7f0ef5ca7ae8a7feba8ad0a0b59a3eff73d34f7b3bd80256b34a41254ae8d46a8139d9eadc3082b4a3905ea6b9fef8912e35b701d44e154cb657c87010699100f0da50ced434540b5a45185f1541f884fb1218672"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x80, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffe1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x49, 0x26, 0x9, [@generic={0x94, 0x7, "e462081152c41cf9529101d73292010f072b5ae1b9e94c8bd265c8cb268bb3f95e2c53af44030bb2dc263ced177688bda0d2ef8d6f6354eac9f4ee5cd5f837021f618485a36d79280c67f6c24cacc500c51667171b0dab8ad4a4b83969dd53f309c32dab646f55c03f7b3a3b7d0c9c9d91358bf9f71d69c2221d1f92e9b3de9ada3f7033f09bee18d4b5e3b2dee657de60d3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xb2, 0x9e, 0x0, [@generic={0x2c, 0xb, "9619a958432c760c959f7fa1c60f360ddb6a9874f31ca2ae9c25bb626cdcb85b42a37138e1e1f999e2ea"}]}}, {{0x9, 0x5, 0x98, 0x0, 0x3f7, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x80}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x81, 0x9, [@generic={0xfd, 0x22, "b6649193024ae8c0a63522b92044be2ea20c84bc9c6c26454ae07b00cae52e664833c4eaf2604a4ac623387d7df35e39bf530149294e6a91f609a8739da7c7712450af0d222df18001b898e25510d27db3e361f59275b394dd703185032a47bb8a6800a3218109e133f890c031921a1f54862f8de8f1a193dcd0171c1ed0ab51ed1b06aab286f254cf19735adfa8c5c4f1c956b315a128e6dd66ef0a2e1c2da6102601622c546e8d6acf4bfb7d2abccca15d798096cbd4f9b208558b881cbb119bcdbc9953504948d0a12be829c1377ba3c02902ce139c1214cbed73052cbd7d5d9047581787cc14d40224b4153195b06648917a2c5b3e942cadac"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x7, 0xf8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3f, 0x4, 0x20, [@generic={0x26, 0x21, "883f346d94c53133466ecea00ce1cf1adbf8091546acc095879944a8705b0a723e4326c4"}]}}, {{0x9, 0x5, 0x0, 0x3c, 0x400, 0xe4, 0x4, 0x1, [@generic={0xb8, 0x5, "d1eb3d6444929066e9227d927e525a0bacdcb952627392dd1a889611fea2b12cf4170ca682a7445728e7d63e10ffa6e406794c22f306729637567884efc883915b52a523dc618d112e8c87c6628c2af8bf49c9cfe7d7e82765c12385354c6d508acf0a0b0db150f17a12bad0a102bc48bb00563cef8e04fc9e79d3f7e9ac9cc80454417f3c9abb614d57102aa92eb9709f9f27f0edadefc9b592ae13e5a0446e8e7bc16906a37e0d30048f8d1df63e3e8fe03381b6ea"}, @generic={0x3d, 0xf, "2d3c7b96c5da701988cd88043c95184dd3744fcd1a4436b1ceb6a6eaee3e0e0cf3751301b9df62198bab03f6af3efb3b48ad5d04a2c26e97bdf889"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1b, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x878fb6d738dc26f2, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8af28c1d91a0e1bb, 0x20, 0xf1, 0x7, [@generic={0x18, 0xc, "e83a157cd34f8e548148eb7b469bab698632e7bd4e0c"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x81, 0xa3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0x21, 0x1, 0x7, 0x49, 0xcc, 0x9, 0x9, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x62c4, 0xff, 0x7, "5da7904d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x20, 0x40, "29e9d3dd1568de9ffc"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x50f4, 0x5, '|'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0xf4, 0x1, '8'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc3, 0x6, 0x7, "93dbc628bcd3d4"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x69, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x3e, 0xf9, [@generic={0xc, 0x31, "5c695c6bc87408dccf84"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x3f, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xb}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x1f, 0x1b, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x2, 0x2, 0x1, [@generic={0x6f, 0x21, "68ce00b29f759c7d8ceda18ee69338cd12fcb5643d257a06dcefdd93e86d4c39e91ad088da262548479b448845904689ebd701aaa160895b0d0816907edf102fc64bdf5b6f29228960de1e4979a54ff94123ed977ed83e17025c5d186fd626c65698bf0cea48e6c9901a324c3b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xae, 0x7c}]}}, {{0x9, 0x5, 0xd, 0x19a6cc8b34181b43, 0x3ff, 0x0, 0x5, 0x9, [@generic={0xa5, 0xe, "d7a00a1f11e26ef760ec499d92a995bee5da35390a9a3a33dd590191c4a055b0edac80e0f60164b2eefe38ab74ad803865ba469473ea2d4ae45c48469c7e1b4c8b0da972cba43262b192aa189759e6f48509b376110a232c41aeb0166be3636a29271755b8e097a413fcb4e1b0eae232ad43a7253478295395fa5a4a27d0bc52c172e66777b5e03ecb0c11c48ccc0f6d02eb71036f18ebfc8b314df508f6f30d9bbf04"}, @generic={0x9f, 0x5, "f0c87a5a355a0c7a18667c8eae74904b8eacb3ed1beb236532620b55725e14e4aa469d67b9dc73e5fc9a0ee0f928ce761d7f814d89f0080e44c45c4dc2f62b99c6d159d158c12d57319e77c2d0100c95e6da8aeabdcfd6da217705d37f9ab335b91ff8c0177218dbc91623a1cb29597f101e6e5f2ff1f47bfe1c462b57cea2d76a481433770a75fd3fe80284d8b6def7b1997ff8d606425ae48fc34aff"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x6, 0x5, 0x71, [@generic={0x54, 0x4, "d273675abc8336e58ecf8a11bf2ecc9ec985e27c8ad5c0fd895cb834aabda261b405a0125f607631fbc7764187d08b626b5f55f967b7f03ca4415b16f0a5b9db5015c343f5bb45f5aed01b82be648ba268ef"}, @generic={0x68, 0x22, "c67c868c01f2e9d96722c71343c54a78a2ab482fb53220c48c01240f2a85e09e278214a577c820e2d7e4fe1024d4423b5ef2bc7779224183f4e1220c767b181d12ca512f827d586329d5d1333739e7dbf945f14cf5c50a40a7e002320d15519bd63b4e5dbefe"}]}}]}}, {{0x9, 0x4, 0x12, 0x8, 0x7, 0x4e, 0x20, 0xab, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0x1}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7, 0x4, "699e7b50d3"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0x9, 0x8, [@generic={0x4c, 0x30, "384a40bd884a6aa27a1e02ea9cc21e49aa2ad440147cf059207d0191adbcd22c1b635e7909eca067e44860e45fadddc8fa5fd18309c607109c3eba3feb5a4b73258c52e31837a0147685"}, @generic={0x35, 0x22, "a0a5c1d7d0b3d1af3b9bd9082f8af8a58944aebc0cbb82428ec67773277e4370dd2959cf0aae6dbb2e7d96e97a133f580f92f4"}]}}, {{0x9, 0x5, 0x9, 0xb, 0x60, 0x6, 0x20, 0x80, [@generic={0x1a, 0x21, "1541e39bde5aba915d6280bb6fff252ab01b4ba99dae79ae"}]}}, {{0x9, 0x5, 0xf, 0x34, 0x610, 0x20, 0xc9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3f, 0x1ff}, @generic={0x59, 0x30, "c44129f084aeba1dccd84a2834fd2223678715bfe0a5ca087bc09b5538bb9835c4bdead036a97a744a0d9f82a3821445217ad1e6b396e7a4aa3fce275f93d7e2474809ad85f725e4fa5761a6cc86e042df6d9f919d9400"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xcf}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x4}]}}, {{0x9, 0x5, 0x2, 0x2, 0x7ef, 0x0, 0x20, 0x6, [@generic={0xb0, 0x2, "2524b9c36accbec554fc14f28cc9f16e7fd4427fae84d1270cb161a9911ae8e2e88200abab9f46eb776e6a00dfc28ffa610f411e313769a833f48be4779ce3f896f02c9fb9500228fe39b45cfdf96ddb49b532773520f85dc340700c1660ed7bb90df662925c7e672942ef21b3d5da60ba8d56f4fd0d47d6c97b41e988acc33ee618096a467a7a0120471d03a39a4f423c7b1fd26ecbd25b541bb7e28f8d5b155748dea5d878db120829f80f4558"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x100, 0x1, 0x5, 0x1, 0xff, 0x3f}, 0x1a, &(0x7f0000001dc0)=ANY=[@ANYBLOB="050f1a000300071002043401803d07100200000f0ab25ecf1e73aee5823549947e9b649be79ee3118e69b7b559fbe399e8948d885341dd2a8536d78d57ced8e96db705511c339c4741b4dffec97f254cb01c7dc1aff3332c661108d826f871711b3fd7c1e755449a67e52dfe08ecfb753a6728701443855238c291d6f23464886814be5aee2bdb46c64443b5937fbcfb299255a50d7492d365eb2975b1a45d70ff02f1a354bc3c04c03c4e398d7d8731da23538b52b1e8762d028af5dfacaf84dee83177f2d4b8f6b193fe0be723fc0e47aadfca"], 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x808}}, {0x1f, &(0x7f0000000240)=@string={0x1f, 0x3, "7f72ea0ead46ae5601bd832c295d3c2f98d91ec710b4244577c03fc9df"}}]}) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1ff, 0x2, 0x1, {0x22, 0x12d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1f, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x9, 0xff, 0x32, 0x8, 0x6}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050b19000114100403503ca630a56fba7d118bb625380c6f5b"], 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x306a}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x6}}, {0x6f, &(0x7f0000001340)=@string={0x6f, 0x3, "28ce58734bb86c5572afea374337b5a90a9e005859f98fbfc0953b20864aeeb0deda6bd2d1d36eff013a0f9fc48192c6abd7e20e57a58b7f70a2cf0d27604240758a2cbfdf52b6b2e553b834eb16b755307753a0cf31c010670faaa5cc6be969a8f6c1f48438945a474c92311a"}}, {0x60, &(0x7f00000013c0)=ANY=[@ANYBLOB="6003e70589b6604975dca662ddaac80c8fce205b9f1088d19810827829743a3c6b467b7ab371002daf18b5bc45dabbdffd9fba45d78da575ba4643fe12cf3c5c4fdf6e17dd106d37baca4f1e2083ac0594278c00288139c2dc653b41f3"]}, {0x9c, &(0x7f0000001440)=@string={0x9c, 0x3, "fe3359c4756c241da68a0c458d0b6ad1990b47c21d3a4a2612996b6b8151f152c67d24af0c424ad3d4b6c73edf17773cb3e3801d6ecaf1bcaa5f9ccf1abb92cdaa96c7b8110cf724cad0866fbe9f2e96a52a05f2ece522f8c8ed7a80b97e9fb2cac2991d8178970dddcf11fcce20539681e936a3c5b66ab263287220138e1c6f4a66508a41e7b1b1c3320d5a5e1f7cd7ee6c9aea81906686d06e"}}, {0xd8, &(0x7f0000001500)=@string={0xd8, 0x3, "bb0241676f4742a0f5a394ef9e65678d89169e62d4275a2a00ecda9eea92eb1c471436e6596d458eb5732dd0884c82877d8df15100fe4c7fc2008411f2c5814bad3a37fa612f26266ab4abce41d4c3b3cdb5ece872e76d125e66cac9e78aad83cdaef3b634eff72588d65c1550935ddf98a86a3762706879c19af4d35b5dde102f24f6287ae8943e314be9a949d55a055e041588d6af5639b1859aac5bce6bfb63f034b26ca99af2e0aa8417bb0037cf068d35ad0436c7fe5439c0b9badabffb465e3c15e58204789c4731d55cd5283f3cfa73f32ea3"}}, {0xc9, &(0x7f0000001600)=@string={0xc9, 0x3, "ca2a5c3f5e0f5341aee5f9a0d49e3fa39a91f32648e2e78fbb03d3a6fcf0d1e8f4fae8b665fc20d531e8fc5aaa17cb870c1a5c736433748dd315d56e487cb09567158164113e70986e43ed5498fdf90e143ae02a08754807f3899d0c539947e95f4488de7cfada1d5c221210655c2a67cceffb5c6d770da2bf708fbb7773b99bcee40c7121aab8566b4c31e8c314753b1192d67658cddf6cbf7b88cd00799db14a9652bcd9c3d11d24e5ebd3719628da50b0183519bd0dcfde3c00088e0af8788ee8bc1812b755"}}]}) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001ec0)={0x40, 0x6, 0x77, {0x77, 0x22, "815b9f0e38670a9be4aedf521c6f1518b3cf1842b1aebab9aef1b057a1e8fda5f316d715777872f4113b030b8bdc72e66c2b5850b0361ffad1c64188ecdcf01701e3e09deabc910176ddc63c285707f8e898dbdb397b9f51a38437897e29802dbb5e4ba508c72b193781d60b92acaf6d6a2e1bf334"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe8a6}}, &(0x7f0000001f40)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x80, 0xffff}, @generic={0x1d, 0x10, 0xb, "8441be1d2964c68ae22052479209fd91bcc53acf2d8d9a352058"}, @generic={0xb2, 0x10, 0x1, "8c793cfbf08b3567b7e61675e56d7104ddd708a532bab61b10984d168b45beb2f36cd36c99fd6d99d374a025ddc94983cae2c30df92f5529afe6bb2f650b3840183dade9b48255354887857f05bd065603c39fdd30f0b3bfdcb2d4cf26a59a84f6aac14568668ea5f8ecc4dbc1d84051846c7a65532e9a2ccc2c78b1cb1c7698ac0d6bec7000464b27a415a1e4fdf7f81d25ff7f7a868aa903025456fd2c0f036304f3c9406c6313b81a9264754a61"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "023a0abf959c96063f44c4b09a978277"}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2d, 0x0, 0x60, 0x1, "b302ced0", "cc7c37cf"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x9, 0x0, 0x9, 0x81, 0x6}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x0, 0x15, 0xa0, "610fe222a93a4707a8245d0ad84decba93e898709b6999d5f78fdd19485753885654bb1e3cc093560c05167826be2e660e30bf1323c8bd591d5c02a36ed6040db1dfe1597ca1c8843ed7ab226b564b4ab3f4df28f5882f7c4730dd3feeefca33f3c692d588084b5401bc25108923ec001390f0f8f34b1ca4547a9c2afa07f63210fa16aac83567b02d353f399ab45af63efbd102193a196a42b260754fbb251d"}, &(0x7f00000021c0)={0x0, 0xa, 0x1}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000002340)={0x40, 0xb, 0x2, "bb4a"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000002400)={0x40, 0x17, 0x6, @random="fcd32e761046"}, &(0x7f0000002440)={0x40, 0x19, 0x2, "ba90"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0xfe01}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x3, "c9f39941"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f00000018c0)={0x2c, &(0x7f00000000c0)={0x20, 0x7, 0xf, {0xf, 0x7, "f182a4e7b30a02af5c37865af4"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000001800)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x7, 0x9}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x8, 0xcf, "ca82d3e2", "51c36f24"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf6, 0x18, 0x6, 0x11, 0x20, 0xd97, 0x4}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001900)={0x20, 0x18, 0x3d, "2b5c36596894f3e3f23b2400dbf3658610ce1f2bdd59164ec208e46c6b41ee9988582a739be3851ea88b4e47fa7497e9a1224c60d536b9c680b890d99e"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001b00)={0x40, 0xb, 0x2, 'QJ'}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @random="04e31ece03b2"}, &(0x7f0000001c00)={0x40, 0x19, 0x2, 'mS'}, &(0x7f0000001c40)={0x40, 0x1a, 0x2}, 0xfffffffffffffffe, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x80}}) (async, rerun: 32) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000040)=""/21) 23:23:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xbb0040}], 0x1, 0x0, 0x0, 0x0) 23:23:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x400454ca, 0x0) 23:23:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 23:23:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x28, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2b, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40049409, 0x0) [ 3053.937729][ T5140] usb 2-1: new high-speed USB device number 36 using dummy_hcd 23:23:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 23:23:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x33, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3054.147172][ T5140] usb 2-1: device descriptor read/64, error -71 23:23:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3054.437256][ T5140] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3054.584737][ T4746] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 3054.638714][ T5140] usb 2-1: device descriptor read/64, error -71 [ 3054.787543][ T5140] usb usb2-port1: attempt power cycle [ 3055.197248][ T5140] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3055.287510][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3055.557267][ T5140] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3055.647967][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3055.767910][ T5140] usb usb2-port1: unable to enumerate USB device 23:23:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000029dafaaea67146be334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0xe68, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x70, 0x56, 0xa3, 0x8, 0xd96, 0x5200, 0x1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe56, 0x4, 0x4, 0x2, 0x10, 0xe4, [{{0x9, 0x4, 0xf2, 0x8, 0xc, 0xb6, 0x1a, 0x94, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x101, 0xcc}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@acm={0x4}]}], [{{0x9, 0x5, 0xd, 0x2, 0x30, 0x9, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf6, 0xff4f}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x75, 0xd344}, @generic={0xc2, 0xa, "8c388b8f5b537c9a8cc7ecf273493985df1dc96bc5f107a946ba0a0bc2c0ada65bc832af9b21a1f0cdf567334b8d9ab108e1fd5b9d7c4564f418c31ed0cfd3740324601008a573cef14f0e15c99d738e00ed822f3bf5a950087723dae7c7ee09d5a2c885ba80ec6f1f021a4bf1e812ac6b12e002799ca4ab6de348a2ed3e772621f5cf5cd96ac7806053dcc5fcf7f06fc01176d5778b5f431e984b4224e2a68b5695731fa420a35972fd8fc3922fdee1c208819015f981028d322e7971618f45"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x96, 0x3, 0x4, [@generic={0x57, 0x24, "8d8d337d404496686f2812c97ed09820e0cc5c2b903b831eaefd43620624000a36f0a9b4814331521df63cfc43b9e5c2abf7effca3b32bc411f31e04436e71ce4a4580abbc15aae46b4e50df05fcc807a2504b2d0f"}, @generic={0xe3, 0x1, "ed40b875e5f5cc248ea77e8ef6f49ea1c3ca2a4571fb34f43d31755ea379e7d9eefca01a0e88610580a799945c02492b04a7d30097c18cbf68fe8a837b670f2f1a407f45fb837724ad0fb0c1f6639abd11825de864af46523eea83daa6a00d96f87f8a51bfca6e1a8e735bc05fe8bf52407366f1590c6501fbdcd724c4226a4273de5ff1c35257f291f5ba00810d7ca34059bf8acc63194a7c271515ad4e5226aafe6ab35ca08d1604d9f0f8a2a37e3c71acba9aee886efb21ba83f95c4e970db92577e1411c74f69474f4d3d2cdf837b7ca3d204d2d1ee43f199d4802f4efd5e1"}]}}, {{0x9, 0x5, 0x8e, 0x2, 0x3ff, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xae}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x81, 0x5, [@generic={0xf2, 0x6, "a3024bff19c3870b2db7f60f791f05856d60c9fb228acaf67b39d95829bb9784f838f25b15cc5df46185febfb4e961db1f57199ecf1ef9e3cf4ea36f06d683198922a62bc690fb68b5a7ea7c07d8ab59d9e4996a95a5b3fa692df80bddb758ebad9cabb71c37da579cdbc07a3f92ac9c3809a5a97db5b756096e6c0522839aa5f671fc0c4782f8382d24d76dd3ab097b64c6e610f2ca1697dca1764caac26ecee8c6052113fe342770105815f6afb5971bbdc744e2421abf1e7321713da86e7735fc364d432ca3ba75142ae3c10cd478d59b4bc5f85e99ccec4a3c86dd662b704f807b8b654e82bc03cdc2398e0a974d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x400}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xae, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x8, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7d4}, @generic={0x8, 0x2, "9d2e28c74a67"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x0, 0x3, 0x0, [@generic={0xc6, 0xc, "cfa354e87b9a801d416c2b199c2edb20f8efa078f60e9f3cd95041398255d2a4464eb195b8f6007358a5ffcc6ae4a03e96900d30ed008d4bae07ffc52e790d13d7ff6ede06a1d6454f188e3b2ff81fecefcce22b2c0afca5c39aeeeb064989da65235198618cca77241cbb2e2df62eba7e34a6e8fd698abb6c3221c98cbdba1611d7f78a3d87feb34f09cb23745a16679e7ad8af6fa081a9ddb892a7b671015e1280da565ecc5b2efb93e02d7dc3725c8a16780f9c3197a2f25a74fab1229f3f7d8d61d8"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xdb3}]}}]}}, {{0x9, 0x4, 0x74, 0x81, 0xd, 0x38, 0x9a, 0x5c, 0x1, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xec3}}, @hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x146}}], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x3f, 0x0, 0x1, [@generic={0xc0, 0x10, "2dad3483e85784d4b5576d610ddfd21d7213df0a63ee5368d47974dbbfd03c2e32ec4450794e34596d61434cbf6881278c8ffba6c8712cc56495fb0bedaeac2fda407719de9a3019471f4bc6af99fbcf70e52b55d7f25687dfe0d38a3d061e6ce8e688746764899d9ff7f0ef5ca7ae8a7feba8ad0a0b59a3eff73d34f7b3bd80256b34a41254ae8d46a8139d9eadc3082b4a3905ea6b9fef8912e35b701d44e154cb657c87010699100f0da50ced434540b5a45185f1541f884fb1218672"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x80, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffe1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x49, 0x26, 0x9, [@generic={0x94, 0x7, "e462081152c41cf9529101d73292010f072b5ae1b9e94c8bd265c8cb268bb3f95e2c53af44030bb2dc263ced177688bda0d2ef8d6f6354eac9f4ee5cd5f837021f618485a36d79280c67f6c24cacc500c51667171b0dab8ad4a4b83969dd53f309c32dab646f55c03f7b3a3b7d0c9c9d91358bf9f71d69c2221d1f92e9b3de9ada3f7033f09bee18d4b5e3b2dee657de60d3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xb2, 0x9e, 0x0, [@generic={0x2c, 0xb, "9619a958432c760c959f7fa1c60f360ddb6a9874f31ca2ae9c25bb626cdcb85b42a37138e1e1f999e2ea"}]}}, {{0x9, 0x5, 0x98, 0x0, 0x3f7, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x80}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x81, 0x9, [@generic={0xfd, 0x22, "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"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x7, 0xf8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3f, 0x4, 0x20, [@generic={0x26, 0x21, "883f346d94c53133466ecea00ce1cf1adbf8091546acc095879944a8705b0a723e4326c4"}]}}, {{0x9, 0x5, 0x0, 0x3c, 0x400, 0xe4, 0x4, 0x1, [@generic={0xb8, 0x5, "d1eb3d6444929066e9227d927e525a0bacdcb952627392dd1a889611fea2b12cf4170ca682a7445728e7d63e10ffa6e406794c22f306729637567884efc883915b52a523dc618d112e8c87c6628c2af8bf49c9cfe7d7e82765c12385354c6d508acf0a0b0db150f17a12bad0a102bc48bb00563cef8e04fc9e79d3f7e9ac9cc80454417f3c9abb614d57102aa92eb9709f9f27f0edadefc9b592ae13e5a0446e8e7bc16906a37e0d30048f8d1df63e3e8fe03381b6ea"}, @generic={0x3d, 0xf, "2d3c7b96c5da701988cd88043c95184dd3744fcd1a4436b1ceb6a6eaee3e0e0cf3751301b9df62198bab03f6af3efb3b48ad5d04a2c26e97bdf889"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1b, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x878fb6d738dc26f2, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8af28c1d91a0e1bb, 0x20, 0xf1, 0x7, [@generic={0x18, 0xc, "e83a157cd34f8e548148eb7b469bab698632e7bd4e0c"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x81, 0xa3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0x21, 0x1, 0x7, 0x49, 0xcc, 0x9, 0x9, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x62c4, 0xff, 0x7, "5da7904d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x20, 0x40, "29e9d3dd1568de9ffc"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x50f4, 0x5, '|'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0xf4, 0x1, '8'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc3, 0x6, 0x7, "93dbc628bcd3d4"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x69, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x3e, 0xf9, [@generic={0xc, 0x31, "5c695c6bc87408dccf84"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x3f, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xb}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x1f, 0x1b, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x2, 0x2, 0x1, [@generic={0x6f, 0x21, "68ce00b29f759c7d8ceda18ee69338cd12fcb5643d257a06dcefdd93e86d4c39e91ad088da262548479b448845904689ebd701aaa160895b0d0816907edf102fc64bdf5b6f29228960de1e4979a54ff94123ed977ed83e17025c5d186fd626c65698bf0cea48e6c9901a324c3b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xae, 0x7c}]}}, {{0x9, 0x5, 0xd, 0x19a6cc8b34181b43, 0x3ff, 0x0, 0x5, 0x9, [@generic={0xa5, 0xe, "d7a00a1f11e26ef760ec499d92a995bee5da35390a9a3a33dd590191c4a055b0edac80e0f60164b2eefe38ab74ad803865ba469473ea2d4ae45c48469c7e1b4c8b0da972cba43262b192aa189759e6f48509b376110a232c41aeb0166be3636a29271755b8e097a413fcb4e1b0eae232ad43a7253478295395fa5a4a27d0bc52c172e66777b5e03ecb0c11c48ccc0f6d02eb71036f18ebfc8b314df508f6f30d9bbf04"}, @generic={0x9f, 0x5, "f0c87a5a355a0c7a18667c8eae74904b8eacb3ed1beb236532620b55725e14e4aa469d67b9dc73e5fc9a0ee0f928ce761d7f814d89f0080e44c45c4dc2f62b99c6d159d158c12d57319e77c2d0100c95e6da8aeabdcfd6da217705d37f9ab335b91ff8c0177218dbc91623a1cb29597f101e6e5f2ff1f47bfe1c462b57cea2d76a481433770a75fd3fe80284d8b6def7b1997ff8d606425ae48fc34aff"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x6, 0x5, 0x71, [@generic={0x54, 0x4, "d273675abc8336e58ecf8a11bf2ecc9ec985e27c8ad5c0fd895cb834aabda261b405a0125f607631fbc7764187d08b626b5f55f967b7f03ca4415b16f0a5b9db5015c343f5bb45f5aed01b82be648ba268ef"}, @generic={0x68, 0x22, "c67c868c01f2e9d96722c71343c54a78a2ab482fb53220c48c01240f2a85e09e278214a577c820e2d7e4fe1024d4423b5ef2bc7779224183f4e1220c767b181d12ca512f827d586329d5d1333739e7dbf945f14cf5c50a40a7e002320d15519bd63b4e5dbefe"}]}}]}}, {{0x9, 0x4, 0x12, 0x8, 0x7, 0x4e, 0x20, 0xab, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0x1}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7, 0x4, "699e7b50d3"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0x9, 0x8, [@generic={0x4c, 0x30, "384a40bd884a6aa27a1e02ea9cc21e49aa2ad440147cf059207d0191adbcd22c1b635e7909eca067e44860e45fadddc8fa5fd18309c607109c3eba3feb5a4b73258c52e31837a0147685"}, @generic={0x35, 0x22, "a0a5c1d7d0b3d1af3b9bd9082f8af8a58944aebc0cbb82428ec67773277e4370dd2959cf0aae6dbb2e7d96e97a133f580f92f4"}]}}, {{0x9, 0x5, 0x9, 0xb, 0x60, 0x6, 0x20, 0x80, [@generic={0x1a, 0x21, "1541e39bde5aba915d6280bb6fff252ab01b4ba99dae79ae"}]}}, {{0x9, 0x5, 0xf, 0x34, 0x610, 0x20, 0xc9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3f, 0x1ff}, @generic={0x59, 0x30, "c44129f084aeba1dccd84a2834fd2223678715bfe0a5ca087bc09b5538bb9835c4bdead036a97a744a0d9f82a3821445217ad1e6b396e7a4aa3fce275f93d7e2474809ad85f725e4fa5761a6cc86e042df6d9f919d9400"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xcf}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x4}]}}, {{0x9, 0x5, 0x2, 0x2, 0x7ef, 0x0, 0x20, 0x6, [@generic={0xb0, 0x2, "2524b9c36accbec554fc14f28cc9f16e7fd4427fae84d1270cb161a9911ae8e2e88200abab9f46eb776e6a00dfc28ffa610f411e313769a833f48be4779ce3f896f02c9fb9500228fe39b45cfdf96ddb49b532773520f85dc340700c1660ed7bb90df662925c7e672942ef21b3d5da60ba8d56f4fd0d47d6c97b41e988acc33ee618096a467a7a0120471d03a39a4f423c7b1fd26ecbd25b541bb7e28f8d5b155748dea5d878db120829f80f4558"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x100, 0x1, 0x5, 0x1, 0xff, 0x3f}, 0x1a, &(0x7f0000001dc0)=ANY=[@ANYBLOB="050f1a000300071002043401803d07100200000f0ab25ecf1e73aee5823549947e9b649be79ee3118e69b7b559fbe399e8948d885341dd2a8536d78d57ced8e96db705511c339c4741b4dffec97f254cb01c7dc1aff3332c661108d826f871711b3fd7c1e755449a67e52dfe08ecfb753a6728701443855238c291d6f23464886814be5aee2bdb46c64443b5937fbcfb299255a50d7492d365eb2975b1a45d70ff02f1a354bc3c04c03c4e398d7d8731da23538b52b1e8762d028af5dfacaf84dee83177f2d4b8f6b193fe0be723fc0e47aadfca"], 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x808}}, {0x1f, &(0x7f0000000240)=@string={0x1f, 0x3, "7f72ea0ead46ae5601bd832c295d3c2f98d91ec710b4244577c03fc9df"}}]}) (async) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1ff, 0x2, 0x1, {0x22, 0x12d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1f, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x9, 0xff, 0x32, 0x8, 0x6}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050b19000114100403503ca630a56fba7d118bb625380c6f5b"], 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x306a}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x6}}, {0x6f, &(0x7f0000001340)=@string={0x6f, 0x3, "28ce58734bb86c5572afea374337b5a90a9e005859f98fbfc0953b20864aeeb0deda6bd2d1d36eff013a0f9fc48192c6abd7e20e57a58b7f70a2cf0d27604240758a2cbfdf52b6b2e553b834eb16b755307753a0cf31c010670faaa5cc6be969a8f6c1f48438945a474c92311a"}}, {0x60, &(0x7f00000013c0)=ANY=[@ANYBLOB="6003e70589b6604975dca662ddaac80c8fce205b9f1088d19810827829743a3c6b467b7ab371002daf18b5bc45dabbdffd9fba45d78da575ba4643fe12cf3c5c4fdf6e17dd106d37baca4f1e2083ac0594278c00288139c2dc653b41f3"]}, {0x9c, &(0x7f0000001440)=@string={0x9c, 0x3, "fe3359c4756c241da68a0c458d0b6ad1990b47c21d3a4a2612996b6b8151f152c67d24af0c424ad3d4b6c73edf17773cb3e3801d6ecaf1bcaa5f9ccf1abb92cdaa96c7b8110cf724cad0866fbe9f2e96a52a05f2ece522f8c8ed7a80b97e9fb2cac2991d8178970dddcf11fcce20539681e936a3c5b66ab263287220138e1c6f4a66508a41e7b1b1c3320d5a5e1f7cd7ee6c9aea81906686d06e"}}, {0xd8, &(0x7f0000001500)=@string={0xd8, 0x3, "bb0241676f4742a0f5a394ef9e65678d89169e62d4275a2a00ecda9eea92eb1c471436e6596d458eb5732dd0884c82877d8df15100fe4c7fc2008411f2c5814bad3a37fa612f26266ab4abce41d4c3b3cdb5ece872e76d125e66cac9e78aad83cdaef3b634eff72588d65c1550935ddf98a86a3762706879c19af4d35b5dde102f24f6287ae8943e314be9a949d55a055e041588d6af5639b1859aac5bce6bfb63f034b26ca99af2e0aa8417bb0037cf068d35ad0436c7fe5439c0b9badabffb465e3c15e58204789c4731d55cd5283f3cfa73f32ea3"}}, {0xc9, &(0x7f0000001600)=@string={0xc9, 0x3, "ca2a5c3f5e0f5341aee5f9a0d49e3fa39a91f32648e2e78fbb03d3a6fcf0d1e8f4fae8b665fc20d531e8fc5aaa17cb870c1a5c736433748dd315d56e487cb09567158164113e70986e43ed5498fdf90e143ae02a08754807f3899d0c539947e95f4488de7cfada1d5c221210655c2a67cceffb5c6d770da2bf708fbb7773b99bcee40c7121aab8566b4c31e8c314753b1192d67658cddf6cbf7b88cd00799db14a9652bcd9c3d11d24e5ebd3719628da50b0183519bd0dcfde3c00088e0af8788ee8bc1812b755"}}]}) (async) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001ec0)={0x40, 0x6, 0x77, {0x77, 0x22, "815b9f0e38670a9be4aedf521c6f1518b3cf1842b1aebab9aef1b057a1e8fda5f316d715777872f4113b030b8bdc72e66c2b5850b0361ffad1c64188ecdcf01701e3e09deabc910176ddc63c285707f8e898dbdb397b9f51a38437897e29802dbb5e4ba508c72b193781d60b92acaf6d6a2e1bf334"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe8a6}}, &(0x7f0000001f40)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x80, 0xffff}, @generic={0x1d, 0x10, 0xb, "8441be1d2964c68ae22052479209fd91bcc53acf2d8d9a352058"}, @generic={0xb2, 0x10, 0x1, "8c793cfbf08b3567b7e61675e56d7104ddd708a532bab61b10984d168b45beb2f36cd36c99fd6d99d374a025ddc94983cae2c30df92f5529afe6bb2f650b3840183dade9b48255354887857f05bd065603c39fdd30f0b3bfdcb2d4cf26a59a84f6aac14568668ea5f8ecc4dbc1d84051846c7a65532e9a2ccc2c78b1cb1c7698ac0d6bec7000464b27a415a1e4fdf7f81d25ff7f7a868aa903025456fd2c0f036304f3c9406c6313b81a9264754a61"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "023a0abf959c96063f44c4b09a978277"}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2d, 0x0, 0x60, 0x1, "b302ced0", "cc7c37cf"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x9, 0x0, 0x9, 0x81, 0x6}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x0, 0x15, 0xa0, "610fe222a93a4707a8245d0ad84decba93e898709b6999d5f78fdd19485753885654bb1e3cc093560c05167826be2e660e30bf1323c8bd591d5c02a36ed6040db1dfe1597ca1c8843ed7ab226b564b4ab3f4df28f5882f7c4730dd3feeefca33f3c692d588084b5401bc25108923ec001390f0f8f34b1ca4547a9c2afa07f63210fa16aac83567b02d353f399ab45af63efbd102193a196a42b260754fbb251d"}, &(0x7f00000021c0)={0x0, 0xa, 0x1}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000002340)={0x40, 0xb, 0x2, "bb4a"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000002400)={0x40, 0x17, 0x6, @random="fcd32e761046"}, &(0x7f0000002440)={0x40, 0x19, 0x2, "ba90"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0xfe01}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x3, "c9f39941"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000018c0)={0x2c, &(0x7f00000000c0)={0x20, 0x7, 0xf, {0xf, 0x7, "f182a4e7b30a02af5c37865af4"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000001800)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x7, 0x9}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x8, 0xcf, "ca82d3e2", "51c36f24"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf6, 0x18, 0x6, 0x11, 0x20, 0xd97, 0x4}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001900)={0x20, 0x18, 0x3d, "2b5c36596894f3e3f23b2400dbf3658610ce1f2bdd59164ec208e46c6b41ee9988582a739be3851ea88b4e47fa7497e9a1224c60d536b9c680b890d99e"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001b00)={0x40, 0xb, 0x2, 'QJ'}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @random="04e31ece03b2"}, &(0x7f0000001c00)={0x40, 0x19, 0x2, 'mS'}, &(0x7f0000001c40)={0x40, 0x1a, 0x2}, 0xfffffffffffffffe, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x80}}) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000040)=""/21) 23:23:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xbc0040}], 0x1, 0x0, 0x0, 0x0) 23:23:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x3a, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 23:23:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 23:23:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x8c, 0x5, 0x101, 0xc136, 0x3, 0x100, 0x401, 0x7, 0x9, 0x7, 0x5, 0x1, 0x5, 0x8}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x3b, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x8c, 0x5, 0x101, 0xc136, 0x3, 0x100, 0x401, 0x7, 0x9, 0x7, 0x5, 0x1, 0x5, 0x8}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) [ 3057.007527][ T5140] usb 2-1: new high-speed USB device number 40 using dummy_hcd 23:23:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40086602, 0x0) 23:23:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 23:23:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x3c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3057.207508][ T5140] usb 2-1: device descriptor read/64, error -71 23:23:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x8c, 0x5, 0x101, 0xc136, 0x3, 0x100, 0x401, 0x7, 0x9, 0x7, 0x5, 0x1, 0x5, 0x8}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3057.477769][ T5140] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3057.675529][ T5140] usb 2-1: device descriptor read/64, error -71 [ 3057.797881][ T5140] usb usb2-port1: attempt power cycle [ 3058.207260][ T5140] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3058.307365][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3058.581505][ T5140] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3058.680518][ T5140] usb 2-1: device descriptor read/8, error -71 [ 3058.807795][ T5140] usb usb2-port1: unable to enumerate USB device 23:23:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="ab56729597a358e1d1887a53d025f5692080049abdfe496a160210e78181a3d5ab7509579706be3c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:23:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xbd0040}], 0x1, 0x0, 0x0, 0x0) 23:23:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40186366, 0x0) 23:23:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40086602, 0x0) 23:23:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/26) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=ANY=[@ANYBLOB="0003040000feb7703a4a6a5051584cd7f9e93db594da7456c0ea86f3de5c11eef3db33f2a2533b3a1b96762e2e1ba0e4064fcc9f2508874d7952c6b34e72bc054614abca88f7d0715704d0162d896c9cb60f99d7a276778c4ee56b7e3ad207d10a09e2068b96df579e13ccc62f5a1150032c466cec7c9fdfab60ca38daee7b4e5922cf89bc7f0e4dd48ab970c4eec22f3e840c672d1e009c2c"], &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0xb, "b7"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "c242e4a2"}, @local=@item_012={0x2, 0x2, 0x6, "9ec0"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0x557}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x5, 0x38, "dc8c74ed2485cb0a26330c29f03005cdebddfa5372d5c6af682d63512666fb64c77635f3e56328578ebf7446d6fce13ada22e1aa1ccb8582"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x33, "2408779f45a5739ae09b9d9ae72b7358ca7de991914b176a56b5d0f8c81a638e797c5318879eff772465109f0d135df1cc40de"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9d}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 3059.791326][ T28] audit: type=1326 audit(1693956237.779:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4806 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:23:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x2, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x40186366, 0x0) 23:23:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x401c5820, 0x0) 23:23:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x3, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3060.382084][ T5140] usb 2-1: new high-speed USB device number 44 using dummy_hcd 23:23:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xbe0040}], 0x1, 0x0, 0x0, 0x0) 23:23:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 23:23:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x401c5820, 0x0) 23:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="ab56729597a358e1d1887a53d025f5692080049abdfe496a160210e78181a3d5ab7509579706be3c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="ab56729597a358e1d1887a53d025f5692080049abdfe496a160210e78181a3d5ab7509579706be3c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:23:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x4, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3060.787646][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3060.798683][ T28] audit: type=1326 audit(1693956238.799:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3060.818805][ T5140] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3060.855888][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.903439][ T5140] usb 2-1: config 0 descriptor?? 23:23:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x5, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:23:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) [ 3061.384416][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.411356][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3061.660164][ T5140] keytouch 0003:0926:3333.00D0: fixing up Keytouch IEC report descriptor [ 3061.679061][ T5140] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D0/input/input237 [ 3061.811957][ T5140] keytouch 0003:0926:3333.00D0: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3061.868778][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.894953][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3061.923264][T25112] usb 2-1: USB disconnect, device number 44 23:24:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/26) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=ANY=[@ANYBLOB="0003040000feb7703a4a6a5051584cd7f9e93db594da7456c0ea86f3de5c11eef3db33f2a2533b3a1b96762e2e1ba0e4064fcc9f2508874d7952c6b34e72bc054614abca88f7d0715704d0162d896c9cb60f99d7a276778c4ee56b7e3ad207d10a09e2068b96df579e13ccc62f5a1150032c466cec7c9fdfab60ca38daee7b4e5922cf89bc7f0e4dd48ab970c4eec22f3e840c672d1e009c2c"], &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0xb, "b7"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "c242e4a2"}, @local=@item_012={0x2, 0x2, 0x6, "9ec0"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0x557}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x5, 0x38, "dc8c74ed2485cb0a26330c29f03005cdebddfa5372d5c6af682d63512666fb64c77635f3e56328578ebf7446d6fce13ada22e1aa1ccb8582"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x33, "2408779f45a5739ae09b9d9ae72b7358ca7de991914b176a56b5d0f8c81a638e797c5318879eff772465109f0d135df1cc40de"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9d}}) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) 23:24:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) (async) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="ab56729597a358e1d1887a53d025f5692080049abdfe496a160210e78181a3d5ab7509579706be3c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x6, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) 23:24:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xbf0040}], 0x1, 0x0, 0x0, 0x0) [ 3062.586828][ T28] audit: type=1326 audit(1693956240.589:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/26) syz_usb_disconnect(r0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=ANY=[@ANYBLOB="0003040000feb7703a4a6a5051584cd7f9e93db594da7456c0ea86f3de5c11eef3db33f2a2533b3a1b96762e2e1ba0e4064fcc9f2508874d7952c6b34e72bc054614abca88f7d0715704d0162d896c9cb60f99d7a276778c4ee56b7e3ad207d10a09e2068b96df579e13ccc62f5a1150032c466cec7c9fdfab60ca38daee7b4e5922cf89bc7f0e4dd48ab970c4eec22f3e840c672d1e009c2c"], &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0xb, "b7"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "c242e4a2"}, @local=@item_012={0x2, 0x2, 0x6, "9ec0"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0x557}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x5, 0x38, "dc8c74ed2485cb0a26330c29f03005cdebddfa5372d5c6af682d63512666fb64c77635f3e56328578ebf7446d6fce13ada22e1aa1ccb8582"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x33, "2408779f45a5739ae09b9d9ae72b7358ca7de991914b176a56b5d0f8c81a638e797c5318879eff772465109f0d135df1cc40de"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9d}}) (async, rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x7, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 23:24:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 23:24:00 executing program 2: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x1, 0x4}, 0x100, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000001c0)={0xfffffffc, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="81bb4547cd891c6b6589e2b2f9b823ab63b6835cf33b461443bc59336e5d51b50d9a0ba85beea72cb4572a8f722730fb83298c45fc9dea2610e8a703c781db1f4a7aa419c48280fe97519745cb3c4787da7613d365a2da5078816acda9a4e7247f224f6360e3877bd212021a77fd2ba5d24857f8888c8051ce9c49d5a845fbda4de8f4a768dfa8f6cab01a28643354721cdb862f1b64e1ddee159cbd5e2415351371b829e8a2307d1048df5f7749ed98cb5449ce768c891f5bd9528e65a2f161af7ce46e"], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000040)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x110011, r4, 0xffffc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:24:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000d80)=0x2) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000600)=""/125) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000282000/0x4000)=nil, 0x4000, 0x100000b, 0x40010, r4, 0xa9ef0000) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000680)={0x1a, 0x81, 0x8000, 0x3, 0x101}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x20, 0xe, 0x4f, {0x4f, 0x0, "5d3eb4b05c751487d2ad84ae3ed4b9b09d05677f393a7f63417ec778e2650323c829061a7f32570552725fa2732ce730aa59c600da46b93f03445224e6e37c189af842c230b9fe6d75d5fa4ad8"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000780)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x1, 0x40, "1780354b", "6336e50b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x1, 0x8, 0x5, 0xf725, 0x800}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x40, 0x16, 0x3d, "926dc442d1f5c97bf75ff0524e60d8efc8d329e8dcd8cd368558c61613dcdce3896e0cf6fdf5765aba3272021d6ba3bde12c97c19684324aac059e414a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x40, 0x8, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "ec9f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "8427"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x98dc}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x40}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000dc0)=""/236) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000001c0)={0x20, 0x23, 0x78, {0x78, 0xb, "5a4001ad3743804b887cffe22bdc0df607f650f52ffdbf41a5d92de14620970e52336508234ae9eb84c73a43ea584d3d28b848d486d010d9c1ddc4e809d859b1f5e7088790e87d8b2f46bc46b315bfcfefc32df501cdc84880671f7c46b3410dc79aa99b46d7960f797a8740846db9ea078556cde749"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e00}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x9, 'b'}, @local=@item_4={0x3, 0x2, 0x0, "3121ef28"}, @local=@item_4={0x3, 0x2, 0x7, "529975fd"}, @main=@item_4={0x3, 0x0, 0xc, "20ad42f1"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xff, 0x1, {0x22, 0x9af}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x40, 0x1, 0xe9, "889e1ef79d479e78aefdf733a83a3fb638f766628667059c64e38a3f850e0972849182a71b667f521886d78e8cc12f9029ab343c9d968a878d21fe86363dcf023ae1b463302b869508839d46828ed43225f27502ee1c3ca9962b2ce6751ce7a9bde69e0c87687dfbdef78ef054b8743cf02c94277c8da96ae27905f94bd340bd11e25c098181bab6bb688e801acfc588cfebf94984bfb8f3613f827d93bfb5dfee56cc92167c76e1e2ce34c2d2f1d9b1c067c5d7b2164b58c26339fcbee13d954758d854e63d05842ad44e2f49b7d0f509a791c0742d2e30253c08efc543358e31e863f627350920b8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb7, "d09e3c633e1ab80fa4753f751a0327bad786e36e1bcbf5580bce51accd21820b84968d476a313814d4367262344d044c5a395f87ef2ad1d737bced38fecbf5f77b4c382e71be9398e060cd0bfaf2563e7387cf1f650caff2ef1481aeec8acb2df519e4e2d0d9962af52f62e97709701f5747572a0b1c4da584ae60562f89eeecd73cdfa5c634d404fcb9ef0ebf048a83b160326e34f60a15e5963ec4a22919900dea2071b2cb03ba4950092ee3a1d2fce0abaa14084da3"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x8, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3063.221114][ T28] audit: type=1326 audit(1693956241.219:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3063.303154][ T28] audit: type=1326 audit(1693956241.309:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 23:24:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 23:24:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x10, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc00040}], 0x1, 0x0, 0x0, 0x0) 23:24:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x2b, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3063.757504][T12673] usb 2-1: new high-speed USB device number 45 using dummy_hcd 23:24:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 23:24:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 23:24:02 executing program 2: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x1, 0x4}, 0x100, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000001c0)={0xfffffffc, 0x4}) (async) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000001c0)={0xfffffffc, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="81bb4547cd891c6b6589e2b2f9b823ab63b6835cf33b461443bc59336e5d51b50d9a0ba85beea72cb4572a8f722730fb83298c45fc9dea2610e8a703c781db1f4a7aa419c48280fe97519745cb3c4787da7613d365a2da5078816acda9a4e7247f224f6360e3877bd212021a77fd2ba5d24857f8888c8051ce9c49d5a845fbda4de8f4a768dfa8f6cab01a28643354721cdb862f1b64e1ddee159cbd5e2415351371b829e8a2307d1048df5f7749ed98cb5449ce768c891f5bd9528e65a2f161af7ce46e"], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000040)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x110011, r4, 0xffffc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:24:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x2c, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3064.157402][T12673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3064.205987][T12673] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3064.268783][T12673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.306147][T12673] usb 2-1: config 0 descriptor?? [ 3064.306386][ T28] audit: type=1326 audit(1693956242.309:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3064.425524][ T28] audit: type=1326 audit(1693956242.309:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) [ 3064.647848][T12673] usbhid 2-1:0.0: can't add hid device: -71 [ 3064.671971][T12673] usbhid: probe of 2-1:0.0 failed with error -71 [ 3064.692946][T12673] usb 2-1: USB disconnect, device number 45 [ 3065.247285][T12673] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3065.487265][T12673] usb 2-1: Using ep0 maxpacket: 8 [ 3065.607974][T12673] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3065.617076][T12673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.634756][T12673] usb 2-1: config 0 descriptor?? [ 3065.900695][T12673] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3066.453518][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.462486][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:24:05 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000d80)=0x2) pipe2$watch_queue(&(0x7f00000005c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000600)=""/125) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000282000/0x4000)=nil, 0x4000, 0x100000b, 0x40010, r4, 0xa9ef0000) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000680)={0x1a, 0x81, 0x8000, 0x3, 0x101}) (async) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000680)={0x1a, 0x81, 0x8000, 0x3, 0x101}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x20, 0xe, 0x4f, {0x4f, 0x0, "5d3eb4b05c751487d2ad84ae3ed4b9b09d05677f393a7f63417ec778e2650323c829061a7f32570552725fa2732ce730aa59c600da46b93f03445224e6e37c189af842c230b9fe6d75d5fa4ad8"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000780)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x1, 0x40, "1780354b", "6336e50b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x1, 0x8, 0x5, 0xf725, 0x800}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x40, 0x16, 0x3d, "926dc442d1f5c97bf75ff0524e60d8efc8d329e8dcd8cd368558c61613dcdce3896e0cf6fdf5765aba3272021d6ba3bde12c97c19684324aac059e414a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x40, 0x8, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "ec9f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "8427"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x98dc}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x40}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000dc0)=""/236) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000001c0)={0x20, 0x23, 0x78, {0x78, 0xb, "5a4001ad3743804b887cffe22bdc0df607f650f52ffdbf41a5d92de14620970e52336508234ae9eb84c73a43ea584d3d28b848d486d010d9c1ddc4e809d859b1f5e7088790e87d8b2f46bc46b315bfcfefc32df501cdc84880671f7c46b3410dc79aa99b46d7960f797a8740846db9ea078556cde749"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e00}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x9, 'b'}, @local=@item_4={0x3, 0x2, 0x0, "3121ef28"}, @local=@item_4={0x3, 0x2, 0x7, "529975fd"}, @main=@item_4={0x3, 0x0, 0xc, "20ad42f1"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xff, 0x1, {0x22, 0x9af}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x40, 0x1, 0xe9, "889e1ef79d479e78aefdf733a83a3fb638f766628667059c64e38a3f850e0972849182a71b667f521886d78e8cc12f9029ab343c9d968a878d21fe86363dcf023ae1b463302b869508839d46828ed43225f27502ee1c3ca9962b2ce6751ce7a9bde69e0c87687dfbdef78ef054b8743cf02c94277c8da96ae27905f94bd340bd11e25c098181bab6bb688e801acfc588cfebf94984bfb8f3613f827d93bfb5dfee56cc92167c76e1e2ce34c2d2f1d9b1c067c5d7b2164b58c26339fcbee13d954758d854e63d05842ad44e2f49b7d0f509a791c0742d2e30253c08efc543358e31e863f627350920b8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb7, "d09e3c633e1ab80fa4753f751a0327bad786e36e1bcbf5580bce51accd21820b84968d476a313814d4367262344d044c5a395f87ef2ad1d737bced38fecbf5f77b4c382e71be9398e060cd0bfaf2563e7387cf1f650caff2ef1481aeec8acb2df519e4e2d0d9962af52f62e97709701f5747572a0b1c4da584ae60562f89eeecd73cdfa5c634d404fcb9ef0ebf048a83b160326e34f60a15e5963ec4a22919900dea2071b2cb03ba4950092ee3a1d2fce0abaa14084da3"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 23:24:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc10040}], 0x1, 0x0, 0x0, 0x0) 23:24:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x33, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x80086301, 0x0) 23:24:05 executing program 2: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x1, 0x4}, 0x100, './file0\x00'}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000001c0)={0xfffffffc, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="81bb4547cd891c6b6589e2b2f9b823ab63b6835cf33b461443bc59336e5d51b50d9a0ba85beea72cb4572a8f722730fb83298c45fc9dea2610e8a703c781db1f4a7aa419c48280fe97519745cb3c4787da7613d365a2da5078816acda9a4e7247f224f6360e3877bd212021a77fd2ba5d24857f8888c8051ce9c49d5a845fbda4de8f4a768dfa8f6cab01a28643354721cdb862f1b64e1ddee159cbd5e2415351371b829e8a2307d1048df5f7749ed98cb5449ce768c891f5bd9528e65a2f161af7ce46e"], 0x208e24b) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000040)) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x110011, r4, 0xffffc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 3067.493298][ T5140] usb 2-1: USB disconnect, device number 46 [ 3067.540535][ T5140] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 3067.643936][ T28] audit: type=1326 audit(1693956245.649:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3067.693218][ T28] audit: type=1326 audit(1693956245.699:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x3b, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x3c, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x80086601, 0x0) 23:24:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x80086301, 0x0) [ 3068.237173][T23375] usb 2-1: new high-speed USB device number 47 using dummy_hcd 23:24:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x44, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3068.608127][T23375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3068.626611][T23375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3068.637039][T23375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.663132][T23375] usb 2-1: config 0 descriptor?? [ 3068.805048][ T28] audit: type=1326 audit(1693956246.809:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3069.048053][T23375] usbhid 2-1:0.0: can't add hid device: -71 [ 3069.054342][T23375] usbhid: probe of 2-1:0.0 failed with error -71 [ 3069.068515][T23375] usb 2-1: USB disconnect, device number 47 [ 3069.557258][T23375] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3069.807218][T23375] usb 2-1: Using ep0 maxpacket: 8 [ 3069.927438][T23375] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3069.936801][T23375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.957610][T23375] usb 2-1: config 0 descriptor?? [ 3070.220427][T23375] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 23:24:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000d80)=0x2) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000600)=""/125) (async) syz_usb_disconnect(r0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000282000/0x4000)=nil, 0x4000, 0x100000b, 0x40010, r4, 0xa9ef0000) (async, rerun: 32) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[], 0x208e24b) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000680)={0x1a, 0x81, 0x8000, 0x3, 0x101}) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349180f"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x20, 0xe, 0x4f, {0x4f, 0x0, "5d3eb4b05c751487d2ad84ae3ed4b9b09d05677f393a7f63417ec778e2650323c829061a7f32570552725fa2732ce730aa59c600da46b93f03445224e6e37c189af842c230b9fe6d75d5fa4ad8"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000780)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x1, 0x40, "1780354b", "6336e50b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x1, 0x8, 0x5, 0xf725, 0x800}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x40, 0x16, 0x3d, "926dc442d1f5c97bf75ff0524e60d8efc8d329e8dcd8cd368558c61613dcdce3896e0cf6fdf5765aba3272021d6ba3bde12c97c19684324aac059e414a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x40, 0x8, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "ec9f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "8427"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x98dc}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x40}}) (rerun: 64) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000dc0)=""/236) (async, rerun: 64) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000001c0)={0x20, 0x23, 0x78, {0x78, 0xb, "5a4001ad3743804b887cffe22bdc0df607f650f52ffdbf41a5d92de14620970e52336508234ae9eb84c73a43ea584d3d28b848d486d010d9c1ddc4e809d859b1f5e7088790e87d8b2f46bc46b315bfcfefc32df501cdc84880671f7c46b3410dc79aa99b46d7960f797a8740846db9ea078556cde749"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e00}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x9, 'b'}, @local=@item_4={0x3, 0x2, 0x0, "3121ef28"}, @local=@item_4={0x3, 0x2, 0x7, "529975fd"}, @main=@item_4={0x3, 0x0, 0xc, "20ad42f1"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xff, 0x1, {0x22, 0x9af}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x40, 0x1, 0xe9, "889e1ef79d479e78aefdf733a83a3fb638f766628667059c64e38a3f850e0972849182a71b667f521886d78e8cc12f9029ab343c9d968a878d21fe86363dcf023ae1b463302b869508839d46828ed43225f27502ee1c3ca9962b2ce6751ce7a9bde69e0c87687dfbdef78ef054b8743cf02c94277c8da96ae27905f94bd340bd11e25c098181bab6bb688e801acfc588cfebf94984bfb8f3613f827d93bfb5dfee56cc92167c76e1e2ce34c2d2f1d9b1c067c5d7b2164b58c26339fcbee13d954758d854e63d05842ad44e2f49b7d0f509a791c0742d2e30253c08efc543358e31e863f627350920b8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb7, "d09e3c633e1ab80fa4753f751a0327bad786e36e1bcbf5580bce51accd21820b84968d476a313814d4367262344d044c5a395f87ef2ad1d737bced38fecbf5f77b4c382e71be9398e060cd0bfaf2563e7387cf1f650caff2ef1481aeec8acb2df519e4e2d0d9962af52f62e97709701f5747572a0b1c4da584ae60562f89eeecd73cdfa5c634d404fcb9ef0ebf048a83b160326e34f60a15e5963ec4a22919900dea2071b2cb03ba4950092ee3a1d2fce0abaa14084da3"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) (rerun: 64) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x3}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc20040}], 0x1, 0x0, 0x0, 0x0) 23:24:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x80086601, 0x0) 23:24:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x801c581f, 0x0) 23:24:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3070.913941][ T5140] usb 2-1: USB disconnect, device number 48 [ 3070.927487][ T5140] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 3071.094469][ T28] audit: type=1326 audit(1693956249.099:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x16}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040)) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 23:24:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x4}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) [ 3071.442543][ T28] audit: type=1326 audit(1693956249.449:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 [ 3071.567234][ T5140] usb 2-1: new high-speed USB device number 49 using dummy_hcd 23:24:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x801c581f, 0x0) 23:24:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x5}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3071.657604][ T28] audit: type=1326 audit(1693956249.659:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6367a7cae9 code=0x0 23:24:09 executing program 2: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='.*\x00', &(0x7f0000000080)='devices.list\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x2, 0x1010, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3071.689868][ T5154] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 3071.987440][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3072.044555][ T5140] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3072.063546][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3072.102213][ T5140] usb 2-1: config 0 descriptor?? 23:24:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x6, "3f9c6a864f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0xff, "d40d", "795510"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7f, {0x7}}}}}}}]}}, 0x0) 23:24:10 executing program 2: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='.*\x00', &(0x7f0000000080)='devices.list\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x2, 0x1010, r2, 0x0) (async) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x2, 0x1010, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x6}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 23:24:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc30040}], 0x1, 0x0, 0x0, 0x0) 23:24:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) [ 3072.487411][ T5140] usbhid 2-1:0.0: can't add hid device: -71 [ 3072.496914][ T5140] usbhid: probe of 2-1:0.0 failed with error -71 [ 3072.529373][ T5140] usb 2-1: USB disconnect, device number 49 23:24:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x8}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 23:24:10 executing program 2: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='.*\x00', &(0x7f0000000080)='devices.list\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x2, 0x1010, r2, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 23:24:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 23:24:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0xe}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3073.157661][ T5140] usb 2-1: new high-speed USB device number 50 using dummy_hcd 23:24:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) [ 3073.557479][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3073.587232][ T5140] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3073.596496][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.616783][ T5140] usb 2-1: config 0 descriptor?? [ 3074.093055][ T5140] keytouch 0003:0926:3333.00D1: fixing up Keytouch IEC report descriptor [ 3074.110439][ T5140] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D1/input/input238 [ 3074.218089][ T5140] keytouch 0003:0926:3333.00D1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3074.291949][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3074.301390][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3074.312964][T23270] usb 2-1: USB disconnect, device number 50 23:24:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async, rerun: 64) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x6, "3f9c6a864f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0xff, "d40d", "795510"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7f, {0x7}}}}}}}]}}, 0x0) 23:24:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00007e8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="d2fd660f75ce6536f2a566660fc733660fc7710166b9800000c00f326635002000000f30670fc7bf70815d5d66b9800000c00f326635000800000f300f01c936d9e0", 0x42}], 0x1, 0x5, &(0x7f0000000100), 0x0) 23:24:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x27}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 23:24:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc40040}], 0x1, 0x0, 0x0, 0x0) 23:24:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 23:24:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x28}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) [ 3075.367328][T23270] usb 2-1: new high-speed USB device number 51 using dummy_hcd 23:24:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 23:24:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00007e8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="d2fd660f75ce6536f2a566660fc733660fc7710166b9800000c00f326635002000000f30670fc7bf70815d5d66b9800000c00f326635000800000f300f01c936d9e0", 0x42}], 0x1, 0x5, &(0x7f0000000100), 0x0) 23:24:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc50040}], 0x1, 0x0, 0x0, 0x0) [ 3075.728597][T23270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.771320][T23270] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3075.805977][T23270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3075.830033][T23270] usb 2-1: config 0 descriptor?? 23:24:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x6, "3f9c6a864f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0xff, "d40d", "795510"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7f, {0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x6, "3f9c6a864f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0xff, "d40d", "795510"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7f, {0x7}}}}}}}]}}, 0x0) 23:24:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 23:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00007e8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="d2fd660f75ce6536f2a566660fc733660fc7710166b9800000c00f326635002000000f30670fc7bf70815d5d66b9800000c00f326635000800000f300f01c936d9e0", 0x42}], 0x1, 0x5, &(0x7f0000000100), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00007e8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="d2fd660f75ce6536f2a566660fc733660fc7710166b9800000c00f326635002000000f30670fc7bf70815d5d66b9800000c00f326635000800000f300f01c936d9e0", 0x42}], 0x1, 0x5, &(0x7f0000000100), 0x0) (async) 23:24:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) [ 3076.197706][T23270] usbhid 2-1:0.0: can't add hid device: -71 [ 3076.203782][T23270] usbhid: probe of 2-1:0.0 failed with error -71 [ 3076.270229][T23270] usb 2-1: USB disconnect, device number 51 23:24:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="beea"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 23:24:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) 23:24:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc60040}], 0x1, 0x0, 0x0, 0x0) [ 3076.817531][T23270] usb 2-1: new high-speed USB device number 52 using dummy_hcd 23:24:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3077.197896][T23270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.231236][T23270] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3077.260311][T23270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.288679][T23270] usb 2-1: config 0 descriptor?? [ 3077.779977][T23270] keytouch 0003:0926:3333.00D2: fixing up Keytouch IEC report descriptor [ 3077.803727][T23270] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D2/input/input239 [ 3077.942322][T23270] keytouch 0003:0926:3333.00D2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3077.989602][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3077.998369][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3078.008704][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.016635][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.026281][ T9866] usb 2-1: USB disconnect, device number 52 23:24:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 23:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="beea"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="beea"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:24:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc70040}], 0x1, 0x0, 0x0, 0x0) 23:24:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2) 23:24:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x47b, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x8f, 0xfe, 0x3a, 0xff, 0x403, 0xa54a, 0xd02f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x469, 0x3, 0x0, 0x4, 0x40, 0x4, [{{0x9, 0x4, 0xc5, 0x3c, 0x0, 0x9e, 0x20, 0x9, 0x81, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0xd8, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x10, 0x8, "c004d90638e5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x20, 0x5f7, 0x9e, "998fa7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x800, 0x80, "a188a6ed4661a7"}]}]}}, {{0x9, 0x4, 0x82, 0x6, 0x7, 0x6b, 0x15, 0xe2, 0x40, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x9, 0x1, [@generic={0x4, 0x28, "e6d3"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x9b, 0x3, [@generic={0x83, 0xa, "2c55a779316f1b6bbf499a9737790864ba9654e89bf49581fd4de20b0147b74a94d1f2b9ca6f2cf51b1511ee138fad9ab4fb7eb58a727136d192d5d98d25c613165b7d78fb456f807e3a8a06e5891d57e9836dbeeaebf615f4f4356aa5889a6185e70cc4521c68a1a72060093f1c34ca91ec9a0ba8f100e1381a790cb84709e06c"}, @generic={0xa, 0x5, "dab00391c965a191"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x4, 0x34, 0x8, [@generic={0xad, 0x6, "be5a507b2f1201790594b7ad096593ca80e7082898493adc51708cfe82d452074b79d75f474cdcda199b399efed04267ab2e34e8968fdd08b9643b3d3c23852e313d537aa1f6b266e53a60e7ca2eb9d5753f71116aedecfd6113934ec0768b1f3527eb5b71f73d1c2a2fc35f9a3e628b571e115a164e8e529647b6fe63f1ee5fd1ce649b7035c305d92c450c5ca6e612988612cfcbbdf9025e2f17b2d4d60219b19676909f8c2588b15b58"}, @generic={0x39, 0x9, "c89081421741a61841949f8ba0d71e3b2c802b9d404db39cb8922a8605e0c06a2ba371b961ee880bd4c65e1f8ab51cc19757e87ca55792"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xff, 0x6, 0x0, [@generic={0xb9, 0xc, "ef22cc1413dc97450e309314f0171cd5e963b1833e82c7a98a75d25bb7ff89d6d3be29d9e8f1eee85cf462c49eb83b72cb0d99749590848b0ce413aa327bb2399f319d276dee84c7e2d7755f08d28bc88ce934a108a8ea028f8e4d8443cec06d6b696bf221b3f0053469c55dd06d42b7e4b13ef2a3f9cceb85e67c9df5214cd5c7e4ba96996789fa4c2ca9843dc7a360b4b8bb4d14dff6983fcdbb5b6d594e0872351c55bf2b37c49f901515ee1be041d072c711b1ab9b"}, @generic={0xb7, 0x8, "69facdcd3a513d6f3e2dede768973648b4f8761691fc017cfede27029f67523f5a64fa369bfb215dce05c2af7b11aaca1a9736d85627529b1f7dc58631e1b481e7acc56b0bef6807d09b7e5fbeebec7e237bf003042f8ce84f8c171100dc545a57270b50c65eef865972ef166454dc912a770201541af72437a42ca07fd4096e0eac103687c975f35f1863c3b5b323dc2cf8fa8119567ff0fdcc768f22686d66554874f25c3a52e3c653ff1b4c061720c7b9e441ca"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x9fd2b4a0d0176b37, 0x6c, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x0, 0xd5, 0xf2, [@generic={0xc1, 0x31, "efce5475af2d7d6c98ee842127ff39ed19d086899edc21ad3ac83168aa870074185933f4c43e1d5a4c7e88e65dbafa7f5c0e3fb4743e54590bfa70c73b8747e67f611b7673b785a660ab9aa0e6a995b26024dec7c5803f21bfcb01978c1b06471e4f1a1851157383033b5a2ea8a0464a3e1423e5c73b73e40c44cce71d476b2bb1057d54708488d2edd9351e8493ed4f5c5025483c6999cbd80fe03e855af43df5456215272eadcc4ec50e95f5edc4ff2d608a7f3985424fb9faf830de02fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0xa, 0x400, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xbc, 0x2}]}}]}}, {{0x9, 0x4, 0x1b, 0x80, 0x1, 0x45, 0x90, 0x43, 0x3, [], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x6, 0x2, 0x3f, 0xef}, 0x66, &(0x7f0000000cc0)={0x5, 0xf, 0x66, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x2, 0x5}, @generic={0x37, 0x10, 0x1, "4e02ca307d825465ce855868575b9d93ddbbf9a30b331874c6b1bb82db6d601889c5929c467404fe6959f2c990a9f64e47945366"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "60d42e532ddd3de173c53ed5839f9148"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7fff, 0x0, 0x892}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xfcff}}, {0x8c, &(0x7f0000000d80)=@string={0x8c, 0x3, "0975fea51cc1250320f5b0d9d66f728d69fa7cf06df516ea83002b112aa4fb33b0f528c88c60a1d2500a1b4f516195d209d7f34784e1fecba366150605d2138ff3a948873ce0101091dba7eaaed449dfd66d566374295564168172de68287b653a2428a24779e9af26f2de9e8b900d73daa7fa3538b0a73e2ca6bc6b0e2fbb4b3ea73ed2e5567fce6c2d"}}, {0x2a, &(0x7f0000000e40)=@string={0x2a, 0x3, "1ba892957725dd071050c3b371ea14e884fdd7b1d34519e9777a8543d081c5a47db671df6da9ed29"}}]}) syz_usb_connect(0xc, 0x22b, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xa0, 0xd6, 0xaa, 0x8, 0x10c4, 0x82f4, 0x24db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x219, 0x1, 0x9, 0x6, 0x40, 0xff, [{{0x9, 0x4, 0x1c, 0x4, 0xd, 0x29, 0x64, 0x70, 0x80, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x0, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x20}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x80, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x81, 0xf9, 0x4, [@generic={0x23, 0x7, "605abb2f879a5f24bf15b6d1e622673eeba98202b9362de4d2124de603e74d457f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3f, 0x7f, 0xab}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x6, 0x4, [@generic={0x56, 0xa, "c3c2d36cd7f35ffccd4ca9784b2968ea3ccc44efd273642db8f2b60f9adcda62182292c7b9ece1cbbcc476a603303cc6124c35aaeb146544b17dbea34e33b65b7aeac2015fc34d76f4d48f84bad3070e27f623d4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x8, 0x7, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4b0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x6}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x2, 0x0, 0x40, [@generic={0x65, 0x1, "b8b493c5171740f8a5a8c89d38c279e75f5872f5406b1cbe348496363b8c8938d665c0cab8f416077d48f57dc4f5302beef2e35e608dd3913702d1a0bd63d9d3c744d48bb2c8b3bc3213f0418a9e6b140a2b9a6ebdd5de2d923253bc166d32f05a60c6"}]}}, {{0x9, 0x5, 0xe, 0x18, 0x400, 0x3f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x3}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x8, 0x7f, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x1}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x81, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0xb2b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x44, 0x6, 0x7, [@generic={0x60, 0xa, "b70497c5e6425a2eda7d0a832b398bfa301ec399b839b86aba69cbccf0cba3a2c1fedbc4187b3a7a9a55d496628f8228b9689b45752c14c39237790be9aa3b77768891f2c0acab8e221921ad704ed4bc83416d6646e5f98012083eac6c3e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x1, 0x2, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "01be4a20e58b17d9a7c18c299bf50296"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xbf, &(0x7f0000000500)=@string={0xbf, 0x3, "0a6cb7babef514bfdcefc89ddba8c325c0669db0492d7ada5a77fa6eb8b80812df5a75ba3c0a191add0ff9c2be0276f80f40f587a8e62d05c97b4e8e6f52e8d2565ecf51f86360129469298d1c8921564eb958e65638cfd96acc9e1c0c6190cd5b0f2d202bcb0f806f88aea06ca2657a7451213a7e1f5a1cf24d2db2ad8f4a8641f1f8aeac3c441c2eedf6ddafaf88c783672885fbbd3d8477176dde53e7bb9952a62afef0893cd94fe68e31b7bc1d844be209104a246f746ed34d63d3"}}, {0xdf, &(0x7f00000005c0)=@string={0xdf, 0x3, "dc2ac5be65a4e58e6cd6fca430126668cc6053c8a7795213c7d173832aaa14c79e9c4b4c50553f7019c3dde0e36afd26c5a4d81109ba60499f0e644915b3617631b022a08c230408bab6eb7bb56e438a76e4de8698e85be5d978867726d5df2e6f743a0aae775411ab13f15070194287150852778c1c938fb44c8777fd03288c6e37e671dcd459891e648a2705b49be0c3d7bd7b911f5ad043b36448f234ef5b646da3a38596bd1023ccf8c1aa7e9682f9037d4d10f144283b365871392a60b7ac5014fc29de482bd828e2cc53e33e7aa962681607100df991999ead8b"}}, {0x3d, &(0x7f00000006c0)=@string={0x3d, 0x3, "205091d3e6079a9598bc82000e7ebbee90270347c3f92205a8404d0f45f88d973363451ce4bda709e615f46936b1a35c3ccefc121024d20754988d"}}, {0x5f, &(0x7f0000000700)=@string={0x5f, 0x3, "0ba4ec03cfc334be32ac0e01c2fe3e511c6da757e6e462464e64cd91d9c0e64c20b038177336fe8dbb71cbeda3eaddd286cdc9f09320e3a504b8cfefb2ada384f3b5bafae0a70ea2bc297cd81801ac479400ffb3ce20fca5065e37a554"}}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x1b8, &(0x7f0000001380)=ANY=[@ANYBLOB="12011001f5eb73208d1a1110d2b1010203010902a60101070500020904ac0805ff4057040524060001052400ff070d240f01fa030000000005000706241a0200001524120400a317a88b045e4f01a607c0ffcb7e392a07240a000840080a2407813f00030000001524120900a317a88b045e4f01a607c0ffcb7e392a092406000088efb29605240001000d240f01fb87783a2f38f83606e60000010101000107240a05d140080724140500ff0708241c018003fcff06241a080008052415be000905008bccee961cedd3380440001f1f009b104b725fe3ed1d00b886c3958c32dc401d9d96640fd759432c09c6813790cd98e228f6a38cfb4768273f0cf506ed751fa2b2a486e5e2678f1d57a1c6ee3929a519745010f21d46fa47af08bbf93e8798b8f4c61b0447f43ac057c7b0ee9e3723edf41a93b39f693a685854d6eea3366f4a7708d31f97706b3a380577105e74ed62c01d9779f092c6bd8711b76f744b140725018201030009050f020004072101072501022007000725018215008009050f00200005f802072501014005000725018206608a09050201200003080407250100070100090502100004010006072501808060fa07250102058100000000000000000000008eb240599fdf667445cbcf104d0e1f026b053f5cf93b698dc6453abd1271018bad78bcc4348167"], &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x200, 0x2, 0x0, 0x1f, 0x8, 0x7}, 0x6d, &(0x7f00000010c0)={0x5, 0xf, 0x6d, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x1, 0x0, 0x80}, @generic={0x50, 0x10, 0x2, "2abd2789c7360ced1dbce963bcbca51e40bcc6228dba0e144118c2cf26678b298166fbc5d4c4c6e20330c3e4edafee353bd373ff55252a4d672bd57ce9224c25c8b447420432eca38caa24fa5e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7f, 0x8, 0x200}]}, 0x5, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3409}}, {0x6e, &(0x7f00000011c0)=@string={0x6e, 0x3, "27cab78ef9d62407b4d4a45f737407f6c00b6e3557bd888ea5932dcac68196a84730ee200b4f938c8fad7438ab88e72638c525a96a1888be203a5562a4e558ac90d7d19c64191bd54522d5e8bb027e0e4ccbb52fff449d681f659ba095feba91ce1804c0fc9ac42e2c6cfc40"}}, {0x6f, &(0x7f0000001240)=@string={0x6f, 0x3, "43d686103f2b8b6e85f3beee3411ce78963978a7e26cc9cbed266823a01630ede6e9bdc86a29371de55e0c6a4ec3b8e12619a9fa5787f20761cb88c884025434a411d739e6663425f6fded7eda1046179c8b33be34222ec4302c12b816b230b598751aa85db8a574552d465479"}}, {0x2e, &(0x7f00000012c0)=@string={0x2e, 0x3, "56c1897f274a1dd98bd5733db10bbd9a13a137f3e2e9ef6821400dc9d633496bae2bc1daad5b09489906298f"}}]}) syz_usb_ep_read(r1, 0x1, 0xe1, &(0x7f0000000ec0)=""/225) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0x3) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x7}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 23:24:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3) 23:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="beea"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3079.110963][ T9866] usb 2-1: new high-speed USB device number 53 using dummy_hcd 23:24:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3c4f892ade0837c1b0814d1f42174ddfbc1c33c840dad0d86c04ff133b25b435e29889742463ec04cf0858c5ddfdae22435e81f59578680b7656a2ee766a649"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3079.327559][ T9866] usb 2-1: device descriptor read/64, error -71 23:24:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x10}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2) [ 3079.597747][ T9866] usb 2-1: new high-speed USB device number 54 using dummy_hcd 23:24:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc80040}], 0x1, 0x0, 0x0, 0x0) 23:24:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4) 23:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3c4f892ade0837c1b0814d1f42174ddfbc1c33c840dad0d86c04ff133b25b435e29889742463ec04cf0858c5ddfdae22435e81f59578680b7656a2ee766a649"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3c4f892ade0837c1b0814d1f42174ddfbc1c33c840dad0d86c04ff133b25b435e29889742463ec04cf0858c5ddfdae22435e81f59578680b7656a2ee766a649"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3079.818933][ T9866] usb 2-1: device descriptor read/64, error -71 [ 3079.957928][ T9866] usb usb2-port1: attempt power cycle [ 3080.397164][ T9866] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3080.487424][ T9866] usb 2-1: device descriptor read/8, error -71 [ 3080.777474][ T9866] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3080.867373][ T9866] usb 2-1: device descriptor read/8, error -71 [ 3080.987503][ T9866] usb usb2-port1: unable to enumerate USB device 23:24:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x47b, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x8f, 0xfe, 0x3a, 0xff, 0x403, 0xa54a, 0xd02f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x469, 0x3, 0x0, 0x4, 0x40, 0x4, [{{0x9, 0x4, 0xc5, 0x3c, 0x0, 0x9e, 0x20, 0x9, 0x81, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0xd8, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x10, 0x8, "c004d90638e5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x20, 0x5f7, 0x9e, "998fa7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x800, 0x80, "a188a6ed4661a7"}]}]}}, {{0x9, 0x4, 0x82, 0x6, 0x7, 0x6b, 0x15, 0xe2, 0x40, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x9, 0x1, [@generic={0x4, 0x28, "e6d3"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x9b, 0x3, [@generic={0x83, 0xa, "2c55a779316f1b6bbf499a9737790864ba9654e89bf49581fd4de20b0147b74a94d1f2b9ca6f2cf51b1511ee138fad9ab4fb7eb58a727136d192d5d98d25c613165b7d78fb456f807e3a8a06e5891d57e9836dbeeaebf615f4f4356aa5889a6185e70cc4521c68a1a72060093f1c34ca91ec9a0ba8f100e1381a790cb84709e06c"}, @generic={0xa, 0x5, "dab00391c965a191"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x4, 0x34, 0x8, [@generic={0xad, 0x6, "be5a507b2f1201790594b7ad096593ca80e7082898493adc51708cfe82d452074b79d75f474cdcda199b399efed04267ab2e34e8968fdd08b9643b3d3c23852e313d537aa1f6b266e53a60e7ca2eb9d5753f71116aedecfd6113934ec0768b1f3527eb5b71f73d1c2a2fc35f9a3e628b571e115a164e8e529647b6fe63f1ee5fd1ce649b7035c305d92c450c5ca6e612988612cfcbbdf9025e2f17b2d4d60219b19676909f8c2588b15b58"}, @generic={0x39, 0x9, "c89081421741a61841949f8ba0d71e3b2c802b9d404db39cb8922a8605e0c06a2ba371b961ee880bd4c65e1f8ab51cc19757e87ca55792"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xff, 0x6, 0x0, [@generic={0xb9, 0xc, "ef22cc1413dc97450e309314f0171cd5e963b1833e82c7a98a75d25bb7ff89d6d3be29d9e8f1eee85cf462c49eb83b72cb0d99749590848b0ce413aa327bb2399f319d276dee84c7e2d7755f08d28bc88ce934a108a8ea028f8e4d8443cec06d6b696bf221b3f0053469c55dd06d42b7e4b13ef2a3f9cceb85e67c9df5214cd5c7e4ba96996789fa4c2ca9843dc7a360b4b8bb4d14dff6983fcdbb5b6d594e0872351c55bf2b37c49f901515ee1be041d072c711b1ab9b"}, @generic={0xb7, 0x8, "69facdcd3a513d6f3e2dede768973648b4f8761691fc017cfede27029f67523f5a64fa369bfb215dce05c2af7b11aaca1a9736d85627529b1f7dc58631e1b481e7acc56b0bef6807d09b7e5fbeebec7e237bf003042f8ce84f8c171100dc545a57270b50c65eef865972ef166454dc912a770201541af72437a42ca07fd4096e0eac103687c975f35f1863c3b5b323dc2cf8fa8119567ff0fdcc768f22686d66554874f25c3a52e3c653ff1b4c061720c7b9e441ca"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x9fd2b4a0d0176b37, 0x6c, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x0, 0xd5, 0xf2, [@generic={0xc1, 0x31, "efce5475af2d7d6c98ee842127ff39ed19d086899edc21ad3ac83168aa870074185933f4c43e1d5a4c7e88e65dbafa7f5c0e3fb4743e54590bfa70c73b8747e67f611b7673b785a660ab9aa0e6a995b26024dec7c5803f21bfcb01978c1b06471e4f1a1851157383033b5a2ea8a0464a3e1423e5c73b73e40c44cce71d476b2bb1057d54708488d2edd9351e8493ed4f5c5025483c6999cbd80fe03e855af43df5456215272eadcc4ec50e95f5edc4ff2d608a7f3985424fb9faf830de02fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0xa, 0x400, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xbc, 0x2}]}}]}}, {{0x9, 0x4, 0x1b, 0x80, 0x1, 0x45, 0x90, 0x43, 0x3, [], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x6, 0x2, 0x3f, 0xef}, 0x66, &(0x7f0000000cc0)={0x5, 0xf, 0x66, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x2, 0x5}, @generic={0x37, 0x10, 0x1, "4e02ca307d825465ce855868575b9d93ddbbf9a30b331874c6b1bb82db6d601889c5929c467404fe6959f2c990a9f64e47945366"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "60d42e532ddd3de173c53ed5839f9148"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7fff, 0x0, 0x892}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xfcff}}, {0x8c, &(0x7f0000000d80)=@string={0x8c, 0x3, "0975fea51cc1250320f5b0d9d66f728d69fa7cf06df516ea83002b112aa4fb33b0f528c88c60a1d2500a1b4f516195d209d7f34784e1fecba366150605d2138ff3a948873ce0101091dba7eaaed449dfd66d566374295564168172de68287b653a2428a24779e9af26f2de9e8b900d73daa7fa3538b0a73e2ca6bc6b0e2fbb4b3ea73ed2e5567fce6c2d"}}, {0x2a, &(0x7f0000000e40)=@string={0x2a, 0x3, "1ba892957725dd071050c3b371ea14e884fdd7b1d34519e9777a8543d081c5a47db671df6da9ed29"}}]}) (async) syz_usb_connect(0xc, 0x22b, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xa0, 0xd6, 0xaa, 0x8, 0x10c4, 0x82f4, 0x24db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x219, 0x1, 0x9, 0x6, 0x40, 0xff, [{{0x9, 0x4, 0x1c, 0x4, 0xd, 0x29, 0x64, 0x70, 0x80, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x0, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x20}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x80, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x81, 0xf9, 0x4, [@generic={0x23, 0x7, "605abb2f879a5f24bf15b6d1e622673eeba98202b9362de4d2124de603e74d457f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3f, 0x7f, 0xab}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x6, 0x4, [@generic={0x56, 0xa, "c3c2d36cd7f35ffccd4ca9784b2968ea3ccc44efd273642db8f2b60f9adcda62182292c7b9ece1cbbcc476a603303cc6124c35aaeb146544b17dbea34e33b65b7aeac2015fc34d76f4d48f84bad3070e27f623d4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x8, 0x7, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4b0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x6}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x2, 0x0, 0x40, [@generic={0x65, 0x1, "b8b493c5171740f8a5a8c89d38c279e75f5872f5406b1cbe348496363b8c8938d665c0cab8f416077d48f57dc4f5302beef2e35e608dd3913702d1a0bd63d9d3c744d48bb2c8b3bc3213f0418a9e6b140a2b9a6ebdd5de2d923253bc166d32f05a60c6"}]}}, {{0x9, 0x5, 0xe, 0x18, 0x400, 0x3f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x3}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x8, 0x7f, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x1}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x81, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0xb2b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x44, 0x6, 0x7, [@generic={0x60, 0xa, "b70497c5e6425a2eda7d0a832b398bfa301ec399b839b86aba69cbccf0cba3a2c1fedbc4187b3a7a9a55d496628f8228b9689b45752c14c39237790be9aa3b77768891f2c0acab8e221921ad704ed4bc83416d6646e5f98012083eac6c3e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x1, 0x2, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "01be4a20e58b17d9a7c18c299bf50296"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xbf, &(0x7f0000000500)=@string={0xbf, 0x3, "0a6cb7babef514bfdcefc89ddba8c325c0669db0492d7ada5a77fa6eb8b80812df5a75ba3c0a191add0ff9c2be0276f80f40f587a8e62d05c97b4e8e6f52e8d2565ecf51f86360129469298d1c8921564eb958e65638cfd96acc9e1c0c6190cd5b0f2d202bcb0f806f88aea06ca2657a7451213a7e1f5a1cf24d2db2ad8f4a8641f1f8aeac3c441c2eedf6ddafaf88c783672885fbbd3d8477176dde53e7bb9952a62afef0893cd94fe68e31b7bc1d844be209104a246f746ed34d63d3"}}, {0xdf, &(0x7f00000005c0)=@string={0xdf, 0x3, "dc2ac5be65a4e58e6cd6fca430126668cc6053c8a7795213c7d173832aaa14c79e9c4b4c50553f7019c3dde0e36afd26c5a4d81109ba60499f0e644915b3617631b022a08c230408bab6eb7bb56e438a76e4de8698e85be5d978867726d5df2e6f743a0aae775411ab13f15070194287150852778c1c938fb44c8777fd03288c6e37e671dcd459891e648a2705b49be0c3d7bd7b911f5ad043b36448f234ef5b646da3a38596bd1023ccf8c1aa7e9682f9037d4d10f144283b365871392a60b7ac5014fc29de482bd828e2cc53e33e7aa962681607100df991999ead8b"}}, {0x3d, &(0x7f00000006c0)=@string={0x3d, 0x3, "205091d3e6079a9598bc82000e7ebbee90270347c3f92205a8404d0f45f88d973363451ce4bda709e615f46936b1a35c3ccefc121024d20754988d"}}, {0x5f, &(0x7f0000000700)=@string={0x5f, 0x3, "0ba4ec03cfc334be32ac0e01c2fe3e511c6da757e6e462464e64cd91d9c0e64c20b038177336fe8dbb71cbeda3eaddd286cdc9f09320e3a504b8cfefb2ada384f3b5bafae0a70ea2bc297cd81801ac479400ffb3ce20fca5065e37a554"}}]}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) syz_usb_connect(0x5, 0x1b8, &(0x7f0000001380)=ANY=[@ANYBLOB="12011001f5eb73208d1a1110d2b1010203010902a60101070500020904ac0805ff4057040524060001052400ff070d240f01fa030000000005000706241a0200001524120400a317a88b045e4f01a607c0ffcb7e392a07240a000840080a2407813f00030000001524120900a317a88b045e4f01a607c0ffcb7e392a092406000088efb29605240001000d240f01fb87783a2f38f83606e60000010101000107240a05d140080724140500ff0708241c018003fcff06241a080008052415be000905008bccee961cedd3380440001f1f009b104b725fe3ed1d00b886c3958c32dc401d9d96640fd759432c09c6813790cd98e228f6a38cfb4768273f0cf506ed751fa2b2a486e5e2678f1d57a1c6ee3929a519745010f21d46fa47af08bbf93e8798b8f4c61b0447f43ac057c7b0ee9e3723edf41a93b39f693a685854d6eea3366f4a7708d31f97706b3a380577105e74ed62c01d9779f092c6bd8711b76f744b140725018201030009050f020004072101072501022007000725018215008009050f00200005f802072501014005000725018206608a09050201200003080407250100070100090502100004010006072501808060fa07250102058100000000000000000000008eb240599fdf667445cbcf104d0e1f026b053f5cf93b698dc6453abd1271018bad78bcc4348167"], &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x200, 0x2, 0x0, 0x1f, 0x8, 0x7}, 0x6d, &(0x7f00000010c0)={0x5, 0xf, 0x6d, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x1, 0x0, 0x80}, @generic={0x50, 0x10, 0x2, "2abd2789c7360ced1dbce963bcbca51e40bcc6228dba0e144118c2cf26678b298166fbc5d4c4c6e20330c3e4edafee353bd373ff55252a4d672bd57ce9224c25c8b447420432eca38caa24fa5e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7f, 0x8, 0x200}]}, 0x5, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3409}}, {0x6e, &(0x7f00000011c0)=@string={0x6e, 0x3, "27cab78ef9d62407b4d4a45f737407f6c00b6e3557bd888ea5932dcac68196a84730ee200b4f938c8fad7438ab88e72638c525a96a1888be203a5562a4e558ac90d7d19c64191bd54522d5e8bb027e0e4ccbb52fff449d681f659ba095feba91ce1804c0fc9ac42e2c6cfc40"}}, {0x6f, &(0x7f0000001240)=@string={0x6f, 0x3, "43d686103f2b8b6e85f3beee3411ce78963978a7e26cc9cbed266823a01630ede6e9bdc86a29371de55e0c6a4ec3b8e12619a9fa5787f20761cb88c884025434a411d739e6663425f6fded7eda1046179c8b33be34222ec4302c12b816b230b598751aa85db8a574552d465479"}}, {0x2e, &(0x7f00000012c0)=@string={0x2e, 0x3, "56c1897f274a1dd98bd5733db10bbd9a13a137f3e2e9ef6821400dc9d633496bae2bc1daad5b09489906298f"}}]}) (async) syz_usb_ep_read(r1, 0x1, 0xe1, &(0x7f0000000ec0)=""/225) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0x3) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3) 23:24:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x2b}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x5) 23:24:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3c4f892ade0837c1b0814d1f42174ddfbc1c33c840dad0d86c04ff133b25b435e29889742463ec04cf0858c5ddfdae22435e81f59578680b7656a2ee766a649"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e3c4f892ade0837c1b0814d1f42174ddfbc1c33c840dad0d86c04ff133b25b435e29889742463ec04cf0858c5ddfdae22435e81f59578680b7656a2ee766a649"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:24:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xc90040}], 0x1, 0x0, 0x0, 0x0) [ 3081.965830][ T5460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3081.978686][ T5460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.021924][ T5436] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 3082.042219][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:24:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x2c}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6) 23:24:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4) [ 3082.113660][ T5460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3082.114341][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:24:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='Y\x00'], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3082.202864][ T5460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.238228][T25112] usb 2-1: new high-speed USB device number 57 using dummy_hcd 23:24:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x5, 0x47b, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x8f, 0xfe, 0x3a, 0xff, 0x403, 0xa54a, 0xd02f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x469, 0x3, 0x0, 0x4, 0x40, 0x4, [{{0x9, 0x4, 0xc5, 0x3c, 0x0, 0x9e, 0x20, 0x9, 0x81, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0xd8, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x10, 0x8, "c004d90638e5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x20, 0x5f7, 0x9e, "998fa7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x800, 0x80, "a188a6ed4661a7"}]}]}}, {{0x9, 0x4, 0x82, 0x6, 0x7, 0x6b, 0x15, 0xe2, 0x40, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x9, 0x1, [@generic={0x4, 0x28, "e6d3"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x9b, 0x3, [@generic={0x83, 0xa, "2c55a779316f1b6bbf499a9737790864ba9654e89bf49581fd4de20b0147b74a94d1f2b9ca6f2cf51b1511ee138fad9ab4fb7eb58a727136d192d5d98d25c613165b7d78fb456f807e3a8a06e5891d57e9836dbeeaebf615f4f4356aa5889a6185e70cc4521c68a1a72060093f1c34ca91ec9a0ba8f100e1381a790cb84709e06c"}, @generic={0xa, 0x5, "dab00391c965a191"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x4, 0x34, 0x8, [@generic={0xad, 0x6, "be5a507b2f1201790594b7ad096593ca80e7082898493adc51708cfe82d452074b79d75f474cdcda199b399efed04267ab2e34e8968fdd08b9643b3d3c23852e313d537aa1f6b266e53a60e7ca2eb9d5753f71116aedecfd6113934ec0768b1f3527eb5b71f73d1c2a2fc35f9a3e628b571e115a164e8e529647b6fe63f1ee5fd1ce649b7035c305d92c450c5ca6e612988612cfcbbdf9025e2f17b2d4d60219b19676909f8c2588b15b58"}, @generic={0x39, 0x9, "c89081421741a61841949f8ba0d71e3b2c802b9d404db39cb8922a8605e0c06a2ba371b961ee880bd4c65e1f8ab51cc19757e87ca55792"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xff, 0x6, 0x0, [@generic={0xb9, 0xc, "ef22cc1413dc97450e309314f0171cd5e963b1833e82c7a98a75d25bb7ff89d6d3be29d9e8f1eee85cf462c49eb83b72cb0d99749590848b0ce413aa327bb2399f319d276dee84c7e2d7755f08d28bc88ce934a108a8ea028f8e4d8443cec06d6b696bf221b3f0053469c55dd06d42b7e4b13ef2a3f9cceb85e67c9df5214cd5c7e4ba96996789fa4c2ca9843dc7a360b4b8bb4d14dff6983fcdbb5b6d594e0872351c55bf2b37c49f901515ee1be041d072c711b1ab9b"}, @generic={0xb7, 0x8, "69facdcd3a513d6f3e2dede768973648b4f8761691fc017cfede27029f67523f5a64fa369bfb215dce05c2af7b11aaca1a9736d85627529b1f7dc58631e1b481e7acc56b0bef6807d09b7e5fbeebec7e237bf003042f8ce84f8c171100dc545a57270b50c65eef865972ef166454dc912a770201541af72437a42ca07fd4096e0eac103687c975f35f1863c3b5b323dc2cf8fa8119567ff0fdcc768f22686d66554874f25c3a52e3c653ff1b4c061720c7b9e441ca"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x9fd2b4a0d0176b37, 0x6c, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x0, 0xd5, 0xf2, [@generic={0xc1, 0x31, "efce5475af2d7d6c98ee842127ff39ed19d086899edc21ad3ac83168aa870074185933f4c43e1d5a4c7e88e65dbafa7f5c0e3fb4743e54590bfa70c73b8747e67f611b7673b785a660ab9aa0e6a995b26024dec7c5803f21bfcb01978c1b06471e4f1a1851157383033b5a2ea8a0464a3e1423e5c73b73e40c44cce71d476b2bb1057d54708488d2edd9351e8493ed4f5c5025483c6999cbd80fe03e855af43df5456215272eadcc4ec50e95f5edc4ff2d608a7f3985424fb9faf830de02fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0xa, 0x400, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xbc, 0x2}]}}]}}, {{0x9, 0x4, 0x1b, 0x80, 0x1, 0x45, 0x90, 0x43, 0x3, [], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x6, 0x2, 0x3f, 0xef}, 0x66, &(0x7f0000000cc0)={0x5, 0xf, 0x66, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x2, 0x5}, @generic={0x37, 0x10, 0x1, "4e02ca307d825465ce855868575b9d93ddbbf9a30b331874c6b1bb82db6d601889c5929c467404fe6959f2c990a9f64e47945366"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "60d42e532ddd3de173c53ed5839f9148"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7fff, 0x0, 0x892}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xfcff}}, {0x8c, &(0x7f0000000d80)=@string={0x8c, 0x3, "0975fea51cc1250320f5b0d9d66f728d69fa7cf06df516ea83002b112aa4fb33b0f528c88c60a1d2500a1b4f516195d209d7f34784e1fecba366150605d2138ff3a948873ce0101091dba7eaaed449dfd66d566374295564168172de68287b653a2428a24779e9af26f2de9e8b900d73daa7fa3538b0a73e2ca6bc6b0e2fbb4b3ea73ed2e5567fce6c2d"}}, {0x2a, &(0x7f0000000e40)=@string={0x2a, 0x3, "1ba892957725dd071050c3b371ea14e884fdd7b1d34519e9777a8543d081c5a47db671df6da9ed29"}}]}) syz_usb_connect(0xc, 0x22b, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xa0, 0xd6, 0xaa, 0x8, 0x10c4, 0x82f4, 0x24db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x219, 0x1, 0x9, 0x6, 0x40, 0xff, [{{0x9, 0x4, 0x1c, 0x4, 0xd, 0x29, 0x64, 0x70, 0x80, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x0, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x20}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x80, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x81, 0xf9, 0x4, [@generic={0x23, 0x7, "605abb2f879a5f24bf15b6d1e622673eeba98202b9362de4d2124de603e74d457f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3f, 0x7f, 0xab}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x6, 0x4, [@generic={0x56, 0xa, "c3c2d36cd7f35ffccd4ca9784b2968ea3ccc44efd273642db8f2b60f9adcda62182292c7b9ece1cbbcc476a603303cc6124c35aaeb146544b17dbea34e33b65b7aeac2015fc34d76f4d48f84bad3070e27f623d4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x8, 0x7, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4b0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x6}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x2, 0x0, 0x40, [@generic={0x65, 0x1, "b8b493c5171740f8a5a8c89d38c279e75f5872f5406b1cbe348496363b8c8938d665c0cab8f416077d48f57dc4f5302beef2e35e608dd3913702d1a0bd63d9d3c744d48bb2c8b3bc3213f0418a9e6b140a2b9a6ebdd5de2d923253bc166d32f05a60c6"}]}}, {{0x9, 0x5, 0xe, 0x18, 0x400, 0x3f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x3}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x8, 0x7f, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x1}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x81, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0xb2b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x44, 0x6, 0x7, [@generic={0x60, 0xa, "b70497c5e6425a2eda7d0a832b398bfa301ec399b839b86aba69cbccf0cba3a2c1fedbc4187b3a7a9a55d496628f8228b9689b45752c14c39237790be9aa3b77768891f2c0acab8e221921ad704ed4bc83416d6646e5f98012083eac6c3e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x1, 0x2, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "01be4a20e58b17d9a7c18c299bf50296"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xbf, &(0x7f0000000500)=@string={0xbf, 0x3, "0a6cb7babef514bfdcefc89ddba8c325c0669db0492d7ada5a77fa6eb8b80812df5a75ba3c0a191add0ff9c2be0276f80f40f587a8e62d05c97b4e8e6f52e8d2565ecf51f86360129469298d1c8921564eb958e65638cfd96acc9e1c0c6190cd5b0f2d202bcb0f806f88aea06ca2657a7451213a7e1f5a1cf24d2db2ad8f4a8641f1f8aeac3c441c2eedf6ddafaf88c783672885fbbd3d8477176dde53e7bb9952a62afef0893cd94fe68e31b7bc1d844be209104a246f746ed34d63d3"}}, {0xdf, &(0x7f00000005c0)=@string={0xdf, 0x3, "dc2ac5be65a4e58e6cd6fca430126668cc6053c8a7795213c7d173832aaa14c79e9c4b4c50553f7019c3dde0e36afd26c5a4d81109ba60499f0e644915b3617631b022a08c230408bab6eb7bb56e438a76e4de8698e85be5d978867726d5df2e6f743a0aae775411ab13f15070194287150852778c1c938fb44c8777fd03288c6e37e671dcd459891e648a2705b49be0c3d7bd7b911f5ad043b36448f234ef5b646da3a38596bd1023ccf8c1aa7e9682f9037d4d10f144283b365871392a60b7ac5014fc29de482bd828e2cc53e33e7aa962681607100df991999ead8b"}}, {0x3d, &(0x7f00000006c0)=@string={0x3d, 0x3, "205091d3e6079a9598bc82000e7ebbee90270347c3f92205a8404d0f45f88d973363451ce4bda709e615f46936b1a35c3ccefc121024d20754988d"}}, {0x5f, &(0x7f0000000700)=@string={0x5f, 0x3, "0ba4ec03cfc334be32ac0e01c2fe3e511c6da757e6e462464e64cd91d9c0e64c20b038177336fe8dbb71cbeda3eaddd286cdc9f09320e3a504b8cfefb2ada384f3b5bafae0a70ea2bc297cd81801ac479400ffb3ce20fca5065e37a554"}}]}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x1b8, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x200, 0x2, 0x0, 0x1f, 0x8, 0x7}, 0x6d, &(0x7f00000010c0)={0x5, 0xf, 0x6d, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x1, 0x0, 0x80}, @generic={0x50, 0x10, 0x2, "2abd2789c7360ced1dbce963bcbca51e40bcc6228dba0e144118c2cf26678b298166fbc5d4c4c6e20330c3e4edafee353bd373ff55252a4d672bd57ce9224c25c8b447420432eca38caa24fa5e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7f, 0x8, 0x200}]}, 0x5, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3409}}, {0x6e, &(0x7f00000011c0)=@string={0x6e, 0x3, "27cab78ef9d62407b4d4a45f737407f6c00b6e3557bd888ea5932dcac68196a84730ee200b4f938c8fad7438ab88e72638c525a96a1888be203a5562a4e558ac90d7d19c64191bd54522d5e8bb027e0e4ccbb52fff449d681f659ba095feba91ce1804c0fc9ac42e2c6cfc40"}}, {0x6f, &(0x7f0000001240)=@string={0x6f, 0x3, "43d686103f2b8b6e85f3beee3411ce78963978a7e26cc9cbed266823a01630ede6e9bdc86a29371de55e0c6a4ec3b8e12619a9fa5787f20761cb88c884025434a411d739e6663425f6fded7eda1046179c8b33be34222ec4302c12b816b230b598751aa85db8a574552d465479"}}, {0x2e, &(0x7f00000012c0)=@string={0x2e, 0x3, "56c1897f274a1dd98bd5733db10bbd9a13a137f3e2e9ef6821400dc9d633496bae2bc1daad5b09489906298f"}}]}) (async) syz_usb_ep_read(r1, 0x1, 0xe1, &(0x7f0000000ec0)=""/225) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0x3) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:24:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x33}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xca0040}], 0x1, 0x0, 0x0, 0x0) 23:24:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7) 23:24:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x5) 23:24:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x3b}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3082.787268][T25112] usb 2-1: device descriptor read/64, error -71 [ 3083.077177][T25112] usb 2-1: new high-speed USB device number 58 using dummy_hcd 23:24:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8) 23:24:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x3c}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6) [ 3083.287835][T25112] usb 2-1: device descriptor read/64, error -71 [ 3083.416834][T25112] usb usb2-port1: attempt power cycle 23:24:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='Y\x00'], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='Y\x00'], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:24:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x44}, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xcb0040}], 0x1, 0x0, 0x0, 0x0) [ 3083.847700][T25112] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 3083.957968][T25112] usb 2-1: device descriptor read/8, error -71 [ 3084.237618][T25112] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3084.357569][T25112] usb 2-1: device descriptor read/8, error -71 [ 3084.488271][T25112] usb usb2-port1: unable to enumerate USB device 23:24:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x25, 0x1d, {0x1d, 0x1a, "316c75724316a6dc780395effdb12d56cfdf9f7a66c18593d692c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "031a9c298e6b0da76f8358a68fd5465bf1d1381175d2a09e43641ce191d825a4f4b40d1efb5e96d3d9013ec4d0a82f104d4e6b9430062ec66f408984f08ce3e0162974ec30456eee529d78084d6034420fb52295248ba956e1e8fab52b9822438114744f14dce8a73f7e6d4030a7eb08dd4244e5dc28"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0xd, "7287"}, @local=@item_4={0x3, 0x2, 0x0, "f88c9dc4"}, @local=@item_4={0x3, 0x2, 0x3, "7a2922d5"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x99, 0x1, {0x22, 0x50}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xfb, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xe9, "70abd6e7a2187691beb5f732dc96d015f76ef260b687668c0088f4fc1e65f795601372086444d5bcfba03c378858ff852903d5205ba24c15dc5025d95ff049ca9d753caf45e3c7a1961f117d4d1d9b672cc997541c822c64b6ed75aaf710f4783e3b60630a589ceb2cb422548ac7c67ae5e2b139f668e49d47174e8cd651f7db8b3cf33d0cb3d07853996b82dddbee5edbfff35de2afabb65cbcca37ae175e69e7062f536415a6dffc7179898e409e0170649dde5cec9d2faced052d9553a8274331f50d04fb9619bbf9332d6283d518685c85d02c0a01774834ec01efd8d0fd26aeae7b488f543885"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xff, {0x7}}}}}}}]}}, 0x0) 23:24:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7) 23:24:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9) 23:24:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0x0}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='Y\x00'], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xcc0040}], 0x1, 0x0, 0x0, 0x0) 23:24:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x3}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8) 23:24:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x4}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3085.987504][ T5541] usb 2-1: new high-speed USB device number 61 using dummy_hcd 23:24:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa) 23:24:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x5}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9) [ 3086.367489][ T5541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3086.406296][ T5541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3086.483480][ T5541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.524887][ T5541] usb 2-1: config 0 descriptor?? [ 3087.036382][ T5541] keytouch 0003:0926:3333.00D3: fixing up Keytouch IEC report descriptor [ 3087.053733][ T5541] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D3/input/input240 [ 3087.144553][ T5541] keytouch 0003:0926:3333.00D3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3087.375592][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 3087.382058][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 3087.440016][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3087.451596][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3087.462264][ T5540] usb 2-1: USB disconnect, device number 61 23:24:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x25, 0x1d, {0x1d, 0x1a, "316c75724316a6dc780395effdb12d56cfdf9f7a66c18593d692c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "031a9c298e6b0da76f8358a68fd5465bf1d1381175d2a09e43641ce191d825a4f4b40d1efb5e96d3d9013ec4d0a82f104d4e6b9430062ec66f408984f08ce3e0162974ec30456eee529d78084d6034420fb52295248ba956e1e8fab52b9822438114744f14dce8a73f7e6d4030a7eb08dd4244e5dc28"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0xd, "7287"}, @local=@item_4={0x3, 0x2, 0x0, "f88c9dc4"}, @local=@item_4={0x3, 0x2, 0x3, "7a2922d5"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x99, 0x1, {0x22, 0x50}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xfb, "a2f50af4161cfff961097f0cb6dde2f10c9e33153f116a8b4f433aee097d8e4dbee4cc60dd231a51f7e6108d60507f4dfe00c9de5bbf26ddbcc7d37d4fa71407fef77660075a5e0edff4256cb686a9da85aa9842d88fc5a37e05fa25ba87915507fc2f02f4fdbae827ff7e202ca620d62427e5fdda1dd3375ab2fdd0e5969c2f78d2c4c32527eb0ab54c662d53be9e4b8ed5cae4a593b963504beba7987f8a14681a2cc94a7941f2326d405e6f17edab13aabb61224c7e29343a13eb861eb25e1d116e99ffea53ceb38344d1db794a2106c11d9bcabe6dc45cae11d2c6d30811e7f8548fe4b6e91b958e1ef739b5a43a8969244dc309b460d81274"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xe9, "70abd6e7a2187691beb5f732dc96d015f76ef260b687668c0088f4fc1e65f795601372086444d5bcfba03c378858ff852903d5205ba24c15dc5025d95ff049ca9d753caf45e3c7a1961f117d4d1d9b672cc997541c822c64b6ed75aaf710f4783e3b60630a589ceb2cb422548ac7c67ae5e2b139f668e49d47174e8cd651f7db8b3cf33d0cb3d07853996b82dddbee5edbfff35de2afabb65cbcca37ae175e69e7062f536415a6dffc7179898e409e0170649dde5cec9d2faced052d9553a8274331f50d04fb9619bbf9332d6283d518685c85d02c0a01774834ec01efd8d0fd26aeae7b488f543885"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xff, {0x7}}}}}}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x25, 0x1d, {0x1d, 0x1a, "316c75724316a6dc780395effdb12d56cfdf9f7a66c18593d692c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "031a9c298e6b0da76f8358a68fd5465bf1d1381175d2a09e43641ce191d825a4f4b40d1efb5e96d3d9013ec4d0a82f104d4e6b9430062ec66f408984f08ce3e0162974ec30456eee529d78084d6034420fb52295248ba956e1e8fab52b9822438114744f14dce8a73f7e6d4030a7eb08dd4244e5dc28"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0xd, "7287"}, @local=@item_4={0x3, 0x2, 0x0, "f88c9dc4"}, @local=@item_4={0x3, 0x2, 0x3, "7a2922d5"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x99, 0x1, {0x22, 0x50}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xfb, "a2f50af4161cfff961097f0cb6dde2f10c9e33153f116a8b4f433aee097d8e4dbee4cc60dd231a51f7e6108d60507f4dfe00c9de5bbf26ddbcc7d37d4fa71407fef77660075a5e0edff4256cb686a9da85aa9842d88fc5a37e05fa25ba87915507fc2f02f4fdbae827ff7e202ca620d62427e5fdda1dd3375ab2fdd0e5969c2f78d2c4c32527eb0ab54c662d53be9e4b8ed5cae4a593b963504beba7987f8a14681a2cc94a7941f2326d405e6f17edab13aabb61224c7e29343a13eb861eb25e1d116e99ffea53ceb38344d1db794a2106c11d9bcabe6dc45cae11d2c6d30811e7f8548fe4b6e91b958e1ef739b5a43a8969244dc309b460d81274"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xe9, "70abd6e7a2187691beb5f732dc96d015f76ef260b687668c0088f4fc1e65f795601372086444d5bcfba03c378858ff852903d5205ba24c15dc5025d95ff049ca9d753caf45e3c7a1961f117d4d1d9b672cc997541c822c64b6ed75aaf710f4783e3b60630a589ceb2cb422548ac7c67ae5e2b139f668e49d47174e8cd651f7db8b3cf33d0cb3d07853996b82dddbee5edbfff35de2afabb65cbcca37ae175e69e7062f536415a6dffc7179898e409e0170649dde5cec9d2faced052d9553a8274331f50d04fb9619bbf9332d6283d518685c85d02c0a01774834ec01efd8d0fd26aeae7b488f543885"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xff, {0x7}}}}}}}]}}, 0x0) (async) 23:24:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x6}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xcd0040}], 0x1, 0x0, 0x0, 0x0) 23:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="b566067129aebae3c4452b9fcce8e98da9059ae79905ed"], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc) 23:24:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa) 23:24:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x8}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc) 23:24:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe) 23:24:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0xe}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) 23:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="b566067129aebae3c4452b9fcce8e98da9059ae79905ed"], 0x208e24b) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3088.567483][T23270] usb 2-1: new high-speed USB device number 62 using dummy_hcd 23:24:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x27}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3088.948249][T23270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3088.972931][T23270] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3089.005775][T23270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3089.041430][T23270] usb 2-1: config 0 descriptor?? [ 3089.551687][T23270] keytouch 0003:0926:3333.00D4: fixing up Keytouch IEC report descriptor [ 3089.566176][T23270] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D4/input/input241 [ 3089.670348][T23270] keytouch 0003:0926:3333.00D4: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3089.969856][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.980644][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.990486][T23270] usb 2-1: USB disconnect, device number 62 [ 3090.010646][ T4494] ================================================================== 23:24:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x25, 0x1d, {0x1d, 0x1a, "316c75724316a6dc780395effdb12d56cfdf9f7a66c18593d692c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "031a9c298e6b0da76f8358a68fd5465bf1d1381175d2a09e43641ce191d825a4f4b40d1efb5e96d3d9013ec4d0a82f104d4e6b9430062ec66f408984f08ce3e0162974ec30456eee529d78084d6034420fb52295248ba956e1e8fab52b9822438114744f14dce8a73f7e6d4030a7eb08dd4244e5dc28"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0xd, "7287"}, @local=@item_4={0x3, 0x2, 0x0, "f88c9dc4"}, @local=@item_4={0x3, 0x2, 0x3, "7a2922d5"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x99, 0x1, {0x22, 0x50}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xfb, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xe9, "70abd6e7a2187691beb5f732dc96d015f76ef260b687668c0088f4fc1e65f795601372086444d5bcfba03c378858ff852903d5205ba24c15dc5025d95ff049ca9d753caf45e3c7a1961f117d4d1d9b672cc997541c822c64b6ed75aaf710f4783e3b60630a589ceb2cb422548ac7c67ae5e2b139f668e49d47174e8cd651f7db8b3cf33d0cb3d07853996b82dddbee5edbfff35de2afabb65cbcca37ae175e69e7062f536415a6dffc7179898e409e0170649dde5cec9d2faced052d9553a8274331f50d04fb9619bbf9332d6283d518685c85d02c0a01774834ec01efd8d0fd26aeae7b488f543885"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xff, {0x7}}}}}}}]}}, 0x0) (rerun: 64) 23:24:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="b566067129aebae3c4452b9fcce8e98da9059ae79905ed"], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="b566067129aebae3c4452b9fcce8e98da9059ae79905ed"], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4e01b4712d0deeb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:24:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xce0040}], 0x1, 0x0, 0x0, 0x0) 23:24:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe) 23:24:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf) 23:24:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x3}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "02fd5f", 0x4c, 0x2c, 0x0, @private2, @mcast2={0xff, 0x28}, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x65f6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 3090.018762][ T4494] BUG: KASAN: slab-use-after-free in string+0x394/0x3d0 [ 3090.025785][ T4494] Read of size 1 at addr ffff888045fa4ec0 by task udevd/4494 [ 3090.033197][ T4494] [ 3090.035547][ T4494] CPU: 0 PID: 4494 Comm: udevd Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3090.044793][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3090.054900][ T4494] Call Trace: [ 3090.058218][ T4494] [ 3090.061182][ T4494] dump_stack_lvl+0xd9/0x1b0 [ 3090.065842][ T4494] print_report+0xc4/0x620 [ 3090.070309][ T4494] ? __virt_addr_valid+0x5e/0x2d0 [ 3090.075398][ T4494] ? __phys_addr+0xc6/0x140 [ 3090.079963][ T4494] kasan_report+0xda/0x110 [ 3090.084434][ T4494] ? string+0x394/0x3d0 [ 3090.088647][ T4494] ? string+0x394/0x3d0 [ 3090.092864][ T4494] string+0x394/0x3d0 [ 3090.096909][ T4494] ? ip6_addr_string_sa+0x820/0x820 [ 3090.102171][ T4494] ? stack_trace_save+0x96/0xd0 [ 3090.107264][ T4494] vsnprintf+0xc5f/0x1870 [ 3090.111656][ T4494] ? pointer+0xbf0/0xbf0 [ 3090.115967][ T4494] ? kasan_save_stack+0x33/0x50 [ 3090.120919][ T4494] ? __kasan_kmalloc+0xa2/0xb0 [ 3090.125845][ T4494] ? uevent_show+0x163/0x380 [ 3090.130607][ T4494] ? dev_attr_show+0x4f/0xd0 [ 3090.135254][ T4494] ? sysfs_kf_seq_show+0x23e/0x400 [ 3090.140428][ T4494] ? seq_read_iter+0x4e5/0x1280 [ 3090.145433][ T4494] ? kernfs_fop_read_iter+0x4c8/0x680 [ 3090.150868][ T4494] add_uevent_var+0x17c/0x390 [ 3090.155607][ T4494] ? cleanup_uevent_env+0x40/0x40 [ 3090.160698][ T4494] dev_uevent+0x18b/0x760 [ 3090.165189][ T4494] ? device_get_devnode+0x2b0/0x2b0 [ 3090.170496][ T4494] uevent_show+0x1bf/0x380 [ 3090.175015][ T4494] ? _dev_info+0x120/0x120 [ 3090.179506][ T4494] dev_attr_show+0x4f/0xd0 [ 3090.183994][ T4494] ? device_match_any+0x10/0x10 [ 3090.188897][ T4494] sysfs_kf_seq_show+0x23e/0x400 [ 3090.193901][ T4494] seq_read_iter+0x4e5/0x1280 [ 3090.198671][ T4494] kernfs_fop_read_iter+0x4c8/0x680 [ 3090.203968][ T4494] vfs_read+0x4e0/0x930 [ 3090.208281][ T4494] ? kernel_read+0x1b0/0x1b0 [ 3090.212951][ T4494] ? vfs_fstatat+0x9a/0xb0 [ 3090.217429][ T4494] ? __do_sys_newfstatat+0xb2/0x110 [ 3090.222678][ T4494] ? __do_compat_sys_newlstat+0x110/0x110 [ 3090.228456][ T4494] ? __fget_light+0x1fc/0x260 [ 3090.233198][ T4494] ksys_read+0x12f/0x250 [ 3090.237497][ T4494] ? vfs_write+0xe40/0xe40 [ 3090.241965][ T4494] ? rcu_is_watching+0x12/0xb0 [ 3090.246928][ T4494] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3090.252984][ T4494] do_syscall_64+0x38/0xb0 [ 3090.257471][ T4494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3090.263524][ T4494] RIP: 0033:0x7f9c16b16b6a [ 3090.268075][ T4494] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 3090.287736][ T4494] RSP: 002b:00007ffcf03ada88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3090.296201][ T4494] RAX: ffffffffffffffda RBX: 0000560f61604630 RCX: 00007f9c16b16b6a [ 3090.304215][ T4494] RDX: 0000000000001000 RSI: 0000560f61641750 RDI: 000000000000000c [ 3090.312316][ T4494] RBP: 0000560f61604630 R08: 000000000000000c R09: 0000000000040000 [ 3090.320334][ T4494] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 3090.328367][ T4494] R13: 0000000000003fff R14: 00007ffcf03adf68 R15: 000000000000000a [ 3090.336396][ T4494] [ 3090.339460][ T4494] [ 3090.341812][ T4494] Allocated by task 5599: [ 3090.346162][ T4494] kasan_save_stack+0x33/0x50 [ 3090.346329][ T5644] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 3090.350875][ T4494] kasan_set_track+0x25/0x30 [ 3090.350923][ T4494] __kasan_kmalloc+0xa2/0xb0 [ 3090.368244][ T4494] raw_ioctl_init+0x163/0x840 [ 3090.373081][ T4494] raw_ioctl+0x9d9/0x2b80 [ 3090.377495][ T4494] __x64_sys_ioctl+0x18f/0x210 [ 3090.382301][ T4494] do_syscall_64+0x38/0xb0 [ 3090.386780][ T4494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3090.392738][ T4494] [ 3090.395094][ T4494] Freed by task 5599: [ 3090.399108][ T4494] kasan_save_stack+0x33/0x50 [ 3090.403852][ T4494] kasan_set_track+0x25/0x30 [ 3090.408509][ T4494] kasan_save_free_info+0x2b/0x40 [ 3090.413613][ T4494] ____kasan_slab_free+0x15b/0x1b0 [ 3090.418790][ T4494] slab_free_freelist_hook+0x114/0x1e0 [ 3090.424307][ T4494] __kmem_cache_free+0xb8/0x2f0 [ 3090.429211][ T4494] dev_free+0x9a/0x700 [ 3090.433333][ T4494] raw_release+0x184/0x2e0 [ 3090.437806][ T4494] __fput+0x3f7/0xa70 [ 3090.441859][ T4494] task_work_run+0x14d/0x240 [ 3090.446609][ T4494] do_exit+0xa99/0x2a20 [ 3090.450857][ T4494] do_group_exit+0xd4/0x2a0 [ 3090.455508][ T4494] get_signal+0x23d1/0x27b0 [ 3090.460056][ T4494] arch_do_signal_or_restart+0x90/0x7f0 [ 3090.465659][ T4494] exit_to_user_mode_prepare+0x11f/0x240 [ 3090.471342][ T4494] syscall_exit_to_user_mode+0x1d/0x60 [ 3090.476854][ T4494] do_syscall_64+0x44/0xb0 [ 3090.481331][ T4494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3090.487290][ T4494] [ 3090.489639][ T4494] The buggy address belongs to the object at ffff888045fa4ec0 [ 3090.489639][ T4494] which belongs to the cache kmalloc-32 of size 32 [ 3090.503642][ T4494] The buggy address is located 0 bytes inside of [ 3090.503642][ T4494] freed 32-byte region [ffff888045fa4ec0, ffff888045fa4ee0) [ 3090.517232][ T4494] 23:24:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="e3c4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10) [ 3090.519586][ T4494] The buggy address belongs to the physical page: [ 3090.526034][ T4494] page:ffffea000117e900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888045fa4c40 pfn:0x45fa4 [ 3090.537545][ T4494] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 3090.545651][ T4494] page_type: 0xffffffff() [ 3090.550028][ T4494] raw: 00fff00000000800 ffff888012c41500 ffffea0001d58a00 dead000000000003 [ 3090.558662][ T4494] raw: ffff888045fa4c40 0000000080400035 00000001ffffffff 0000000000000000 [ 3090.567279][ T4494] page dumped because: kasan: bad access detected [ 3090.573726][ T4494] page_owner tracks the page as allocated [ 3090.579480][ T4494] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 28646, tgid 28644 (syz-executor.3), ts 1796952132395, free_ts 1796773050554 [ 3090.599876][ T4494] post_alloc_hook+0x2cf/0x340 [ 3090.604703][ T4494] get_page_from_freelist+0xee0/0x2f20 [ 3090.610217][ T4494] __alloc_pages+0x1d0/0x4a0 [ 3090.614878][ T4494] alloc_pages+0x1a9/0x270 23:24:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="fa32b2390f650600002b14922ff9864bfd67f46f2252e0b976cdd3bb9c78b3f89e126be6f17bca5b0b82f0c07679fac47b740b7254c1f8ba8edf932b5fb03760a9600163196e7cd4407d49ce86c90a1d8dad0572e7c3bf63d40c98ec796af4ed4d8206"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0x1, 0x2000, &(0x7f0000a0d000/0x2000)=nil}) [ 3090.619386][ T4494] allocate_slab+0x251/0x380 [ 3090.624041][ T4494] ___slab_alloc+0x8be/0x1570 [ 3090.628779][ T4494] __slab_alloc.constprop.0+0x56/0xa0 [ 3090.634307][ T4494] __kmem_cache_alloc_node+0x137/0x350 [ 3090.639832][ T4494] __kmalloc+0x4f/0x100 [ 3090.644031][ T4494] tomoyo_encode2+0x100/0x3d0 [ 3090.648772][ T4494] tomoyo_encode+0x29/0x50 [ 3090.653245][ T4494] tomoyo_realpath_from_path+0x196/0x710 [ 3090.658940][ T4494] tomoyo_check_open_permission+0x2aa/0x3b0 [ 3090.664901][ T4494] tomoyo_file_open+0xa8/0xd0 [ 3090.669648][ T4494] security_file_open+0x6a/0xe0 [ 3090.674555][ T4494] do_dentry_open+0x538/0x1730 [ 3090.679382][ T4494] page last free stack trace: [ 3090.684079][ T4494] free_unref_page_prepare+0x476/0xa40 [ 3090.689609][ T4494] free_unref_page_list+0xe6/0xb30 [ 3090.694771][ T4494] release_pages+0x32a/0x14e0 [ 3090.699525][ T4494] tlb_batch_pages_flush+0x9a/0x190 [ 3090.704792][ T4494] tlb_finish_mmu+0x14b/0x6f0 [ 3090.709552][ T4494] exit_mmap+0x38b/0xa60 [ 3090.713861][ T4494] __mmput+0x12a/0x4d0 [ 3090.717975][ T4494] mmput+0x62/0x70 [ 3090.721740][ T4494] do_exit+0x9b4/0x2a20 [ 3090.725952][ T4494] do_group_exit+0xd4/0x2a0 [ 3090.730523][ T4494] __x64_sys_exit_group+0x3e/0x50 [ 3090.735617][ T4494] do_syscall_64+0x38/0xb0 [ 3090.740097][ T4494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3090.746158][ T4494] [ 3090.748509][ T4494] Memory state around the buggy address: [ 3090.754165][ T4494] ffff888045fa4d80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 3090.762265][ T4494] ffff888045fa4e00: 00 00 00 00 fc fc fc fc fb fb fb fb fc fc fc fc [ 3090.770387][ T4494] >ffff888045fa4e80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 3090.778492][ T4494] ^ [ 3090.784686][ T4494] ffff888045fa4f00: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 3090.792798][ T4494] ffff888045fa4f80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 3090.800901][ T4494] ================================================================== [ 3090.989490][ T4494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3090.996756][ T4494] CPU: 1 PID: 4494 Comm: udevd Not tainted 6.5.0-syzkaller-11812-g7733171926cc #0 [ 3091.006003][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3091.016099][ T4494] Call Trace: [ 3091.019416][ T4494] [ 3091.022374][ T4494] dump_stack_lvl+0xd9/0x1b0 [ 3091.027022][ T4494] panic+0x6a6/0x750 [ 3091.030948][ T4494] ? panic_smp_self_stop+0xa0/0xa0 [ 3091.036077][ T4494] ? preempt_schedule_thunk+0x1a/0x30 [ 3091.041569][ T4494] ? preempt_schedule_common+0x45/0xc0 [ 3091.047067][ T4494] check_panic_on_warn+0xab/0xb0 [ 3091.052046][ T4494] end_report+0x108/0x150 [ 3091.056386][ T4494] kasan_report+0xea/0x110 [ 3091.060820][ T4494] ? string+0x394/0x3d0 [ 3091.064992][ T4494] ? string+0x394/0x3d0 [ 3091.069162][ T4494] string+0x394/0x3d0 [ 3091.073156][ T4494] ? ip6_addr_string_sa+0x820/0x820 [ 3091.078370][ T4494] ? stack_trace_save+0x96/0xd0 [ 3091.083294][ T4494] vsnprintf+0xc5f/0x1870 [ 3091.087641][ T4494] ? pointer+0xbf0/0xbf0 [ 3091.091898][ T4494] ? kasan_save_stack+0x33/0x50 [ 3091.096785][ T4494] ? __kasan_kmalloc+0xa2/0xb0 [ 3091.101581][ T4494] ? uevent_show+0x163/0x380 [ 3091.106291][ T4494] ? dev_attr_show+0x4f/0xd0 [ 3091.110896][ T4494] ? sysfs_kf_seq_show+0x23e/0x400 [ 3091.116023][ T4494] ? seq_read_iter+0x4e5/0x1280 [ 3091.120896][ T4494] ? kernfs_fop_read_iter+0x4c8/0x680 [ 3091.126284][ T4494] add_uevent_var+0x17c/0x390 [ 3091.130996][ T4494] ? cleanup_uevent_env+0x40/0x40 [ 3091.136041][ T4494] dev_uevent+0x18b/0x760 [ 3091.140484][ T4494] ? device_get_devnode+0x2b0/0x2b0 [ 3091.145729][ T4494] uevent_show+0x1bf/0x380 [ 3091.150179][ T4494] ? _dev_info+0x120/0x120 [ 3091.154620][ T4494] dev_attr_show+0x4f/0xd0 [ 3091.159056][ T4494] ? device_match_any+0x10/0x10 [ 3091.163924][ T4494] sysfs_kf_seq_show+0x23e/0x400 [ 3091.168903][ T4494] seq_read_iter+0x4e5/0x1280 [ 3091.173640][ T4494] kernfs_fop_read_iter+0x4c8/0x680 [ 3091.178860][ T4494] vfs_read+0x4e0/0x930 [ 3091.183033][ T4494] ? kernel_read+0x1b0/0x1b0 [ 3091.187634][ T4494] ? vfs_fstatat+0x9a/0xb0 [ 3091.192074][ T4494] ? __do_sys_newfstatat+0xb2/0x110 [ 3091.197304][ T4494] ? __do_compat_sys_newlstat+0x110/0x110 [ 3091.203085][ T4494] ? __fget_light+0x1fc/0x260 [ 3091.207795][ T4494] ksys_read+0x12f/0x250 [ 3091.212058][ T4494] ? vfs_write+0xe40/0xe40 [ 3091.216492][ T4494] ? rcu_is_watching+0x12/0xb0 [ 3091.221270][ T4494] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3091.227635][ T4494] do_syscall_64+0x38/0xb0 [ 3091.232089][ T4494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3091.238026][ T4494] RIP: 0033:0x7f9c16b16b6a [ 3091.242456][ T4494] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 3091.262081][ T4494] RSP: 002b:00007ffcf03ada88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3091.270624][ T4494] RAX: ffffffffffffffda RBX: 0000560f61604630 RCX: 00007f9c16b16b6a [ 3091.278646][ T4494] RDX: 0000000000001000 RSI: 0000560f61641750 RDI: 000000000000000c [ 3091.286644][ T4494] RBP: 0000560f61604630 R08: 000000000000000c R09: 0000000000040000 [ 3091.294649][ T4494] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 3091.302728][ T4494] R13: 0000000000003fff R14: 00007ffcf03adf68 R15: 000000000000000a [ 3091.310722][ T4494] [ 3091.314112][ T4494] Kernel Offset: disabled [ 3091.318524][ T4494] Rebooting in 86400 seconds..