&(0x7f0000000700)={0x40, 0x21, 0x1, 0x1f}}) (async)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x50, 0x20, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2e, 0x4a, 0xb7}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x27, 0xfb, 0x8, 0x10, 0x2}, 0xad, &(0x7f0000000900)={0x5, 0xf, 0xad, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "7dda25accf0e33fd59e97f3779aba36f"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x8, 0x1a97, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x8, 0x0, 0x9, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x0, 0x725b}, @generic={0x68, 0x10, 0x1, "ec2c2f33c8546eeb8d5660e54826e4fd93f2bdc422bd9552766e64622d6ae5fac4a4f2a1ca525d3604303807fe0d2ebb893dde2610630348d5a38605df25fc5f3fc0715e6f50fb933a7e39259e22e8e313a6d50292a030b3b4b7e7b253d71c4cb2cf689ae6"}]}, 0x5, [{0x29, &(0x7f0000000c00)=ANY=[@ANYBLOB="290391724d99ff865efad143d52b23bf365639ade0932d9b850c600681898f01ea00803d01bfca5175684c564e9a28413666a9fcac0ee40fe284fd13ea4e8a9c2f665eff3c7d9c780fe407000000000000006985768f409d3cb7963bc27627d7e65de4ea51312f9d89e69acfd625ff74bd60bea6fc791e8dc200000000"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "54ce3ac1bd9e2e6502fd9084aee83c60629c4406d9c3518b18d648de5691483216de6666c52685170654bcedb6846c472b8ef46d2215958e0f5bb7940284e5a4a5a5591859f5b1ecde272caa5e976b20ceb65eec8c7de1b34ab1c8020175a64c3f5895e6ddc41ac03e125c7edc1b8c3c965a3df5b7276b1d4fc5ddf57ad3689508c39263de1e3fde3321b56ab210da7517ac9dd45c047991ce7d4cca903c4eec0c75be1b45242806d659655d7aa0b8fc04fbdfdd3dded41703cfbe82e3be4b7d8909b7c74b36a57b93f77d8e2000c9a90708dd3f812eddecf3131a4a8975e7ac7e2c129c"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x860}}]})

00:17:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x1100000000000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0xffffffff00000000, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0xe00000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 64)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], 0x10000, 0x1480}) (rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3256.460127][T31937] usb 2-1: USB disconnect, device number 97
[ 3256.483539][ T4767] binder: BC_ACQUIRE_RESULT not supported
00:17:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x1200000000000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x1000000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3256.511525][ T4767] binder: 4766:4767 ioctl c0306201 20000240 returned -22
00:17:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x1800000000000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x2500000000000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3256.645968][ T4788] binder: 4781:4788 unknown command 0
[ 3256.656439][ T4788] binder: 4781:4788 ioctl c0306201 20000240 returned -22
[ 3256.674358][ T4793] binder: 4789:4793 unknown command 0
[ 3256.687393][ T4793] binder: 4789:4793 ioctl c0306201 200012c0 returned -22
[ 3256.950705][T31937] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 3257.190679][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3257.310929][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3257.319077][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3257.330420][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3257.340449][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3257.600838][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3257.607218][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3257.616402][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3257.948932][T31937] hid-generic 0003:057B:003F.003F: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3258.141973][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3258.150507][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:17:22 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="002206000000274b27e2eb04"], 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0x74, {0x74, 0x11, "a34495d1f6a37b2de7314cf17d44eb3eb9cfe869a6557f13d858726133692d084f5e2ed5ddac6e8cc82ffde703948f725da597f3402e763fbe2592ae4fae0e436acc5cf5c83130425790d7559e3e23a5106ff9720b6002cdf8b8699c96038525a8f6e86327da70f4e45a32485f5ff49a53ad"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000100)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x8, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x7, 0x9, 0x100, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x6, 0x7, "33fe80d8", "769cd7bf"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe9, 0x8, 0x8a, 0xf6, 0xe4, 0x3f, 0xf8f7}}}, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x20, 0xa, 0xe3, "7a380e69c0633a55693c7781a7b7065f47e8e69225fecfe670045a54600804169c5f4218f30de77952b1a1202b95c5ebb0394669f926beb407e20e0f61c8e9670014d3f63b46a85a3972971b6d971038a5d06970afcd2a39503081366a8cde474c4d391113f09e91a4047041ac941fe5b5c38f31c09bdeb18c7d7f32137cb51c3e267ad1125873a899cab3ae1917a0097eb4d4fa6fc1b73e69961f3417bbd790819bdc4cb0122c4aa7c81acdcc7cb81b8bcc453a3283db2199cdc66b533af2d4b27a4b060b471441d6b5a2d7f31415ee90fa68a914114c343c99f058da9e33a73d5c04"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x4b0, 0x20, [0xff00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xab}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "19ee"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfbec}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="d7040d7e39f6"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "78f5"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3a}, &(0x7f0000000680)={0x40, 0x1c, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x50, 0x20, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2e, 0x4a, 0xb7}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x27, 0xfb, 0x8, 0x10, 0x2}, 0xad, &(0x7f0000000900)={0x5, 0xf, 0xad, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "7dda25accf0e33fd59e97f3779aba36f"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x8, 0x1a97, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x8, 0x0, 0x9, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x0, 0x725b}, @generic={0x68, 0x10, 0x1, "ec2c2f33c8546eeb8d5660e54826e4fd93f2bdc422bd9552766e64622d6ae5fac4a4f2a1ca525d3604303807fe0d2ebb893dde2610630348d5a38605df25fc5f3fc0715e6f50fb933a7e39259e22e8e313a6d50292a030b3b4b7e7b253d71c4cb2cf689ae6"}]}, 0x5, [{0x29, &(0x7f0000000c00)=ANY=[@ANYBLOB="290391724d99ff865efad143d52b23bf365639ade0932d9b850c600681898f01ea00803d01bfca5175684c564e9a28413666a9fcac0ee40fe284fd13ea4e8a9c2f665eff3c7d9c780fe407000000000000006985768f409d3cb7963bc27627d7e65de4ea51312f9d89e69acfd625ff74bd60bea6fc791e8dc200000000"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "54ce3ac1bd9e2e6502fd9084aee83c60629c4406d9c3518b18d648de5691483216de6666c52685170654bcedb6846c472b8ef46d2215958e0f5bb7940284e5a4a5a5591859f5b1ecde272caa5e976b20ceb65eec8c7de1b34ab1c8020175a64c3f5895e6ddc41ac03e125c7edc1b8c3c965a3df5b7276b1d4fc5ddf57ad3689508c39263de1e3fde3321b56ab210da7517ac9dd45c047991ce7d4cca903c4eec0c75be1b45242806d659655d7aa0b8fc04fbdfdd3dded41703cfbe82e3be4b7d8909b7c74b36a57b93f77d8e2000c9a90708dd3f812eddecf3131a4a8975e7ac7e2c129c"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x860}}]})

00:17:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x5c00000000000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x1100000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], 0x10000, 0x1480}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3259.501806][T29461] usb 2-1: USB disconnect, device number 98
00:17:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x1200000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0xfcffffff00000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3259.545160][ T4802] binder: 4797:4802 unknown command 0
[ 3259.546903][ T4804] binder: 4798:4804 unknown command 0
[ 3259.562799][ T4802] binder: 4797:4802 ioctl c0306201 200012c0 returned -22
[ 3259.574472][ T4804] binder: 4798:4804 ioctl c0306201 20000240 returned -22
00:17:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x1800000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3259.635862][ T4818] binder: 4817:4818 unknown command 0
[ 3259.641604][ T4818] binder: 4817:4818 ioctl c0306201 200012c0 returned -22
[ 3259.698611][ T4820] binder: 4819:4820 unknown command 0
[ 3259.722875][ T4820] binder: 4819:4820 ioctl c0306201 20000240 returned -22
[ 3259.770252][ T4824] binder: BC_ACQUIRE_RESULT not supported
[ 3259.785300][ T4824] binder: 4821:4824 ioctl c0306201 200012c0 returned -22
[ 3260.002233][T29461] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 3260.250742][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3260.380943][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3260.389076][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3260.400903][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3260.411041][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3260.662043][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3260.668297][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3260.677561][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3260.985385][T29461] hid-generic 0003:057B:003F.0040: unknown main item tag 0x1
[ 3260.993823][T29461] hid-generic 0003:057B:003F.0040: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3261.182015][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3261.190551][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:17:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0xfdfdffff00000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0xcce9108d3abcd9e7, 0x9, 0x6, {0x6, 0x1, "4ce5d413"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0xa, "debad0c8"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4a46, 0x1f, 0x1, {0x22, 0x418}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0xbb, "6d3f6cec14d7b09705bc14dbd21db1af65199b82b4d64d221f41dbbc6892d2c85bd9efb28d4df33d3db933b7a48fe68d1d3480a7e5f6fef45f9fc1068fb3f035842a62bc203c24431bf3f4124456c879f52fa6052f76ad36e02f27bf689ee384b4095a062c5fac55518d5a2b09d9250f4bd945c6d95f0db31bdcd5211b558e051332077bbc5197fc994fbf8b2e04cb09a7c1a8339f549932e36b24e59704c9c22f3fc27702d055aa4714e16916d253eb4ad219ff19a4213a66c266"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000340)={0x20, 0x1, 0x68, "b705a3c9333e99a065f1d709a5b8d230077e717f7cab9652bc72c17d5009bad65c0451dbff902cfd324b4ff9e02579c5b3cd36fb9d4348bb4f504fc4c4f167528b53adc9bc4aca44e67ee255fd6196f863c7df9370caaa3ec4898a30b28099e193b86d8eb2a598b7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x11}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:25 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x2500000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3ff, 0x7, &(0x7f00000026c0)=[{&(0x7f0000000400)="7d6039bfb73cfe2a01db4c9e2f230315906f06e8fc146180361c3f02edbd518984336ad6db950f43bd8e7317066799f7f6fb6a77ab62f6d18da18c888a98eab3f08594bb7086f6843348884ec5ff01999f9b8c39b73f24a8147e51acbf6b4233cf2d8aa48bc8aed8de805d798e187ce09ca467", 0x73, 0xfffffffffffff535}, {&(0x7f0000000480)="95bd09da3fdb13497e68b577e6e24c7b616558", 0x13, 0x80000001}, {&(0x7f00000004c0)="3f35ba6506dd49e4d8ccab8347d2ae3d3f905937e647348f5e3a49bde5ecbac70715df98da48b3762caec65649b5d47ee841070842f4fbc96cab4cd9b444262baabfc25a774caec82239dde0a1e019d054fe9bce1bdd1857b0e6ae8ff637fdf9a7d65c9fe57ebcd858bf8c8cda1fb3570afce2dc59e45d64e6eafca8802fdd741f9db616baa7f88f50abaac0fb03afe1e464ac707f72f883a5d2ff3ec858f38c85055e769f26c523763e0a49fa787d", 0xaf, 0x18d4}, {&(0x7f0000000580)="644240a64e3395699fbfd3fa4d987da5eddd08b977", 0x15, 0x800}, {&(0x7f00000005c0)="4df0137f695d2b5aee6c5d492d2b173e98abc03e5bb2e42d353d6eafa02c2848adbe3085ad8627c5a246fa7fb3836025a56ce2fbbd6bf1d0a94305fac18f4083c16e958c8248112430e9ceee582dba0c73931754a957c7fd5008af5751aa5ddfc092ad5591c8242801701e0e0d2c92a271809540a50dbc2fc6fc7ac2a543a443eafdc11cfd6625cb360450b9d5f8fc37409a63b936d9cb49f8a6d786d2eb3f3278189792a76e725ffc5aa66208b6bea7a39a122a7fe68045d884446a095ca979ae0a165c6fda1853a6e2a9c324b320b44f", 0xd1, 0xffffffffffffffff}, {&(0x7f00000006c0)="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", 0x1000, 0x9}, {&(0x7f00000016c0)="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", 0x1000, 0x7}], 0x6, &(0x7f0000002780)={[{'\x00'}, {'\x00'}, {'{:&,'}, {'[-'}, {'\x00'}, {'/dev/kvm\x00'}, {',('}], [{@pcr={'pcr', 0x3d, 0x22}}]})
move_mount(r2, &(0x7f00000027c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002800)='./file0\x00', 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="0f35f30f230a66b9b40a00000f323e0f23c266b9990b000066b80f3e000066ba000000000f30f2a70f09bad10466ed2e67f30f1c41f40f01df", 0x39}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32])
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x1f, 0x7f, 0x7f, 0x3, 0x7, 0x0, 0xff, 0x4, 0x6, 0x0, 0x9, 0x4}, {0x3, 0x100, 0x81, 0x22, 0x4, 0x5, 0x2, 0x5, 0x81, 0x3, 0x6, 0x1f, 0x9}, {0x9, 0xf9, 0x0, 0x0, 0x34, 0x9, 0x8, 0xb4, 0x5, 0x1, 0x81, 0x20, 0xfff}], 0x3})

00:17:25 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x5c00000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3262.570402][T26182] usb 2-1: USB disconnect, device number 99
[ 3262.599902][ T4836] binder: 4835:4836 unknown command 0
[ 3262.614626][ T4837] binder: 4829:4837 unknown command 0
00:17:25 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0xffffffff00000000, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3262.619116][ T4836] binder: 4835:4836 ioctl c0306201 200012c0 returned -22
[ 3262.652526][ T4837] binder: 4829:4837 ioctl c0306201 20000240 returned -22
00:17:25 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0xfcffffff00000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3262.694542][ T4834] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
00:17:25 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x630b}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3262.746101][ T4850] binder: 4847:4850 unknown command 0
[ 3262.751614][ T4850] binder: 4847:4850 ioctl c0306201 200012c0 returned -22
00:17:25 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0xfdfdffff00000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3262.839366][ T4855] binder: 4854:4855 unknown command 0
[ 3262.857040][ T4855] binder: 4854:4855 ioctl c0306201 20000240 returned -22
[ 3262.878946][ T4857] binder: 4853:4857 unknown command 0
[ 3262.894375][ T4857] binder: 4853:4857 ioctl c0306201 200012c0 returned -22
[ 3262.901281][ T4860] binder: 4858:4860 unknown command 0
[ 3262.923157][ T4860] binder: 4858:4860 ioctl c0306201 20000940 returned -22
[ 3263.040720][T26182] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 3263.280750][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3263.400795][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3263.409503][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3263.421063][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3263.431009][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3263.680815][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3263.687216][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3263.696753][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3264.250722][T26182] usbhid 2-1:1.0: can't add hid device: -71
[ 3264.256739][T26182] usbhid: probe of 2-1:1.0 failed with error -71
[ 3264.279936][T26182] usb 2-1: USB disconnect, device number 100
00:17:27 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0xcce9108d3abcd9e7, 0x9, 0x6, {0x6, 0x1, "4ce5d413"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0xa, "debad0c8"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4a46, 0x1f, 0x1, {0x22, 0x418}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0xbb, "6d3f6cec14d7b09705bc14dbd21db1af65199b82b4d64d221f41dbbc6892d2c85bd9efb28d4df33d3db933b7a48fe68d1d3480a7e5f6fef45f9fc1068fb3f035842a62bc203c24431bf3f4124456c879f52fa6052f76ad36e02f27bf689ee384b4095a062c5fac55518d5a2b09d9250f4bd945c6d95f0db31bdcd5211b558e051332077bbc5197fc994fbf8b2e04cb09a7c1a8339f549932e36b24e59704c9c22f3fc27702d055aa4714e16916d253eb4ad219ff19a4213a66c266"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000340)={0x20, 0x1, 0x68, "b705a3c9333e99a065f1d709a5b8d230077e717f7cab9652bc72c17d5009bad65c0451dbff902cfd324b4ff9e02579c5b3cd36fb9d4348bb4f504fc4c4f167528b53adc9bc4aca44e67ee255fd6196f863c7df9370caaa3ec4898a30b28099e193b86d8eb2a598b7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x11}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3ff, 0x7, &(0x7f00000026c0)=[{&(0x7f0000000400)="7d6039bfb73cfe2a01db4c9e2f230315906f06e8fc146180361c3f02edbd518984336ad6db950f43bd8e7317066799f7f6fb6a77ab62f6d18da18c888a98eab3f08594bb7086f6843348884ec5ff01999f9b8c39b73f24a8147e51acbf6b4233cf2d8aa48bc8aed8de805d798e187ce09ca467", 0x73, 0xfffffffffffff535}, {&(0x7f0000000480)="95bd09da3fdb13497e68b577e6e24c7b616558", 0x13, 0x80000001}, {&(0x7f00000004c0)="3f35ba6506dd49e4d8ccab8347d2ae3d3f905937e647348f5e3a49bde5ecbac70715df98da48b3762caec65649b5d47ee841070842f4fbc96cab4cd9b444262baabfc25a774caec82239dde0a1e019d054fe9bce1bdd1857b0e6ae8ff637fdf9a7d65c9fe57ebcd858bf8c8cda1fb3570afce2dc59e45d64e6eafca8802fdd741f9db616baa7f88f50abaac0fb03afe1e464ac707f72f883a5d2ff3ec858f38c85055e769f26c523763e0a49fa787d", 0xaf, 0x18d4}, {&(0x7f0000000580)="644240a64e3395699fbfd3fa4d987da5eddd08b977", 0x15, 0x800}, {&(0x7f00000005c0)="4df0137f695d2b5aee6c5d492d2b173e98abc03e5bb2e42d353d6eafa02c2848adbe3085ad8627c5a246fa7fb3836025a56ce2fbbd6bf1d0a94305fac18f4083c16e958c8248112430e9ceee582dba0c73931754a957c7fd5008af5751aa5ddfc092ad5591c8242801701e0e0d2c92a271809540a50dbc2fc6fc7ac2a543a443eafdc11cfd6625cb360450b9d5f8fc37409a63b936d9cb49f8a6d786d2eb3f3278189792a76e725ffc5aa66208b6bea7a39a122a7fe68045d884446a095ca979ae0a165c6fda1853a6e2a9c324b320b44f", 0xd1, 0xffffffffffffffff}, {&(0x7f00000006c0)="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", 0x1000, 0x9}, {&(0x7f00000016c0)="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", 0x1000, 0x7}], 0x6, &(0x7f0000002780)={[{'\x00'}, {'\x00'}, {'{:&,'}, {'[-'}, {'\x00'}, {'/dev/kvm\x00'}, {',('}], [{@pcr={'pcr', 0x3d, 0x22}}]})
move_mount(r2, &(0x7f00000027c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002800)='./file0\x00', 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="0f35f30f230a66b9b40a00000f323e0f23c266b9990b000066b80f3e000066ba000000000f30f2a70f09bad10466ed2e67f30f1c41f40f01df", 0x39}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32])
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x1f, 0x7f, 0x7f, 0x3, 0x7, 0x0, 0xff, 0x4, 0x6, 0x0, 0x9, 0x4}, {0x3, 0x100, 0x81, 0x22, 0x4, 0x5, 0x2, 0x5, 0x81, 0x3, 0x6, 0x1f, 0x9}, {0x9, 0xf9, 0x0, 0x0, 0x34, 0x9, 0x8, 0xb4, 0x5, 0x1, 0x81, 0x20, 0xfff}], 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3ff, 0x7, &(0x7f00000026c0)=[{&(0x7f0000000400)="7d6039bfb73cfe2a01db4c9e2f230315906f06e8fc146180361c3f02edbd518984336ad6db950f43bd8e7317066799f7f6fb6a77ab62f6d18da18c888a98eab3f08594bb7086f6843348884ec5ff01999f9b8c39b73f24a8147e51acbf6b4233cf2d8aa48bc8aed8de805d798e187ce09ca467", 0x73, 0xfffffffffffff535}, {&(0x7f0000000480)="95bd09da3fdb13497e68b577e6e24c7b616558", 0x13, 0x80000001}, {&(0x7f00000004c0)="3f35ba6506dd49e4d8ccab8347d2ae3d3f905937e647348f5e3a49bde5ecbac70715df98da48b3762caec65649b5d47ee841070842f4fbc96cab4cd9b444262baabfc25a774caec82239dde0a1e019d054fe9bce1bdd1857b0e6ae8ff637fdf9a7d65c9fe57ebcd858bf8c8cda1fb3570afce2dc59e45d64e6eafca8802fdd741f9db616baa7f88f50abaac0fb03afe1e464ac707f72f883a5d2ff3ec858f38c85055e769f26c523763e0a49fa787d", 0xaf, 0x18d4}, {&(0x7f0000000580)="644240a64e3395699fbfd3fa4d987da5eddd08b977", 0x15, 0x800}, {&(0x7f00000005c0)="4df0137f695d2b5aee6c5d492d2b173e98abc03e5bb2e42d353d6eafa02c2848adbe3085ad8627c5a246fa7fb3836025a56ce2fbbd6bf1d0a94305fac18f4083c16e958c8248112430e9ceee582dba0c73931754a957c7fd5008af5751aa5ddfc092ad5591c8242801701e0e0d2c92a271809540a50dbc2fc6fc7ac2a543a443eafdc11cfd6625cb360450b9d5f8fc37409a63b936d9cb49f8a6d786d2eb3f3278189792a76e725ffc5aa66208b6bea7a39a122a7fe68045d884446a095ca979ae0a165c6fda1853a6e2a9c324b320b44f", 0xd1, 0xffffffffffffffff}, {&(0x7f00000006c0)="eee1e52036227650fa9d0ffe7b9963f6e955cb3003560e16a198d51b7e3ed04f0ee208cee2d60fdd07848deaf26a39ad93e163b6f9c1e555815ae95bff6d6f177de0754f95c50e35931637eabea9b5bbd6c9f63a3817dc393352ecf6347dabf9eacf4945b384f9c440f91cb2fc8f9ae42795b1ba2cd17352eef83a184af7e903b047477c70a99ba918fb09883b3c5db7482de66be66766b9006dc19f1031d99fe8536b896e91ea485c6809cdb6396b6efcb6e0c9828c881bb7a84564cf14620bc65d87a01d2c8b957be3219f239493500e856f611a9eb55f26dfeddc5d42f0483e61aea5fcb288134fe7ebdfc30cabf097469fe1550b719ce8e7f6fe50f3e8a8a47e77df02cb7764356df0121a77c311c24a80ca9ef2fbce108629ea1d2ff06ef2cc32251461baf5019e41554a5cb3f0edc5f9c275db655f89b14489eda14c1d114051e328f1448b278198b2b3f2f9f41ddb5615765ae885749d6032633b22af4a7078c3d5d2583b4e98942d9c82b04163898e1c40001c776a2ed7256b74063c45f0d02117fe1f64656e629843a5e55660f9757394af4146695756bc6c69729b26f8ce13932e1525ea851b48c6d5d31f9a6706eeea9436572b582674be86e3ae73f6776f0a054df7b1442a8d76f4444cd9b4b6b55a2aa01fadcf8c786620e59b0065d71abef95f480c7b71b600854461674c6fda379f2309a98f8cf99bf3d2a86a5aebe28599f66e5d05e55d231c2aecf85e5370db390c12c8eea4cade63706ae9491d6b0ad06b1465a22d975c7d2c4b1455d4e8e4bc0454072b1e28d69034373557ce566cef8a7076e5211fa141482ec7d5640403dc4003ec4364127c1edee8d602fb8d37ecaae223839cdbcbc7320c0415a07c19e3e8fad324b4136c6dd2bf246b5871f350de24fbf818c990a4219a1da8a6c9e2fc53a0be4fc96205b3bc6336d5490a38a3e5d45da1411565222448651c32072a6f674977d67c50c572cfbdefe4adba72e3597750470a2304596b0b4425b1a4407e583cf0ec5c758460f7f5942131275ff5d3b81ab658c8b5c4d82ec9e6d0bd8124b35fb6ce1a81e7da252cb4d2d6dd6c22e78072b35d42320662cf5e4a246e6f0eb5ad17a26ab5728627f04980fe719d67cf87f6e98dc75e71b47ef058aa380abf2f91f4537e8bda4cc66badc2fbd09b6ccf543bf30ae2348180cc7ed4382461de8b73586ce371128ae9edad3fb467d07b417671dd567e8a4030a13356cd9a7f33baba694c6dba0bbb3525d8363ab5ded4d9ea991579ff6f1f5ebf841d2ece4c59af67d64082066bdcc233da6e8bcfbb27887b2156017d55ffa7da3e8ceabf6421285972bdd3a45188d16eb8dde007d983abb6e10c0419d276b332477d01eeba8f5bc3a5286d75970a95b1fc1446c8a25fe2beab5384a01a6ab658ee0994c5d7a03c3d0f7172c431275ffe2697fa64eb97499de5d116e157bafac094bbc0c071a27912d898271bc916b5d5c5d6b92e74bd0666f24230e1a9b7d201a5ff35599b3d867c568262f3e8440cb5e3c773683169083c0d65097f101ead2db81c9d326fbf7678e4c7eca6d5072aeb2669b6bebd584ce9783dca078d3c76e24b01af8fa0dc8e096416a734e2fbaa19ea50c2d76aea48205d97e4c9383807497aac1f1f71e229e015b73d4f8fa457931753739abed6c9254df75f2347b30b89083f738facfc2b74bf85697e9b34e87ddc3a1a22ab0e044bdc0f999e6b8394d683595afaeac27e7fda96207087a535d79d9feef43e98b357bbbef1fd1ab9a5b25aa3de29c4f600a00d75b58a53d7cdec2e3714cc68bc7599de5186d8e75570c41b589e24d452e0c1746222db532678e9a4427532a3cb1aca5ae3bb2c743421fafb777bfaacccf9f6534eb8b541a0ac6722d627944e6ff6a032ae4b18b7c072d69cb484f48de5c8be0a28e6f059364b61ff8efa0a54573fe82b410a1fad37d689354bd826cd7206648ce3f23c8db52dc06249724df6706484f3f2dd06a597799a719588cc979a7c3c73db22bf16fea4b40c757dbb8b413764d3209972d11070d5675077d57849492192316872ae31a0b8c8bda6440bee729d521504f4becbd51bd4aad4995666c96d984ac9a45aa1a86d0dbe0f38cec4ac17945495908fe565baf5cb6e3a4ded0089973dc45cdadded7f21e5729a504d7221f70ff20a89fbb10c7919f778ee9115e857b2f6d760b9c429a2fb5f78a87f08c2ce787bf5510658bf66a5302fc2ff8ebff2c85853370ae61d0e423f1e5a8e8aa549d7eed21ff7f89b70b79cfe358bad0611a5737d4017be986d96186f8cd782ae9021093dab53f6df1cc04e6cadce6a1881535cd335630d9c5fef794ce3d3d9f8a7bcc49cf360b7d2c098a20e8a7decbb0756e5c64ab24c5d61e4feba369fd789a17d5b33ddc32c5cd0aaa8ed7a02b91b2cc0c66f79fcfb973f1e0f342dc533c25f5c38f6af2413ebba784c472199f8d7b3f949e7ef68e4c06c97813f849e8626057c1401dd61ea221a2ddd811bf8a4c2cfd2a42434e7787d0d68662c1116134d81f7610c10e666f5bf94751f967bc131a7618d8e3e71798e47933ba287f2ddf2f8f050625af58f4783fcf64a3a26fee358efe8029a87def65f549a6ec875564a7ee4c6730ddcbc40c0ed6b04145a2f971aff6142aaede426d2848405baab258b57987e5bd2b1dcdaf10cbaecc26c99f610b2fc5c63233d9b2191f3f237c798c4fb3d80d108565d0914dbea2518dcca2c475f72053c9fc7daa9e72df17d811e1f6a526f9d86bd88e812e6d98ca0ff5ee2b1876db46928252beacab4fd45b9eae55c37df74a7508531e21744dca6342abfa55199c5abdce475352cc543b7851eecc99100ef7e69035656f56318da00dafa02273b2a008115f79898e869c2525c78e269447634a5bce0cd843ddf765b38a67eea690f3db09f2fb266d9810d08181446ab554c59148d4e381b2d9209515f753cc295ab0302629d069234c40ee63e9237ed7f78e80041d3c2cd8fe75bc8ffed874241a150fa5cde263388bb51867c26a60d09ea3e5bfa5e3fc9fd7296d0947c3e4e6fde1496da7ed55084636ccb2f676e8ba74e63bce3a34051c1b5f1c5868a8d5490b7dcee746c4b53f945b4a2821403363292fd353a379145e5627d2a8730c4decfb0b54555f67e2a56666322adee03bac51908600841ec393661cbafd16b39b90b14d7b4ede5205c6327b0802cd27c6aed8c2662afa40ed73a4fc1a3402542af574ba2cbc7653b54af99b8b28a7b775d5a19ee2cdee6a14185626b7c6d8938a9d8be72303dfbfedcb86ba5a91e9703b6e01834509c59a7ffadfa1b05dfcb0e8f9345b43ed4f9e5ba5bb231907764f251c4720cee257dcae4134fbdb3a80e65db12b45f607d4e3c28f9a1fe6f1581e4e94e5187b7ef1b739b521e3713b72487349b485cb7e941f27b6c846474c28c6c8eb0c9d4a3de5d7acb9bbe8a6aae8856578e42d541b242f8dbbf892a470f046e53c79d93982e355ab7580ea0e33a9c136478dc7fe25c0dbc164aa00ea2b6dfc84239a261911f4602391719d3fc19bda10017283d45fb29d3df2b6d286474cda9b98b136b34be01c00b817c047bac7431ee6f2a2ced3d588c3bc9b8d0dfc2ab78b24cdd082bb4d94b15e04f9816943b03e512c4421458c8b0553fcb1c5662c9c1181d7f0ef7611f1242b95f9fcf69c4e99c7c8cf518c6d1866c43648039f2a95d0e7f12afb8952aee48d335b30b8a7a8c2e7cc4f422e5be15b24ed6a21a2b8b77a95147591b404ad37a0870fd3716946b4ef88c0126e6a2814c1d60274f27fecfdd80f55ce905225d200e76d5c4e9ff4e013ab3cc3741e5f0af90a9a5c8fde676d6cf76421715740f88c21b522a359747b0f41898ef775568e272aa941c09e1a91d4fb6387a409cd7b988e170a21ff42d37214d393c0ff597869d83e402648749494f7ae520e83c7b95941d33afee012139716702e0a00955b950351f868fb0aa64806d5f6725ce9e719e46e3580f8789476202235e213304a17b4472460598f6c8fe1a254a554402e7b70b7aeec29c83cc2cf534fcdc827b76696ae0cca1e62ed628a2efa4bdd4a9c1bc0508c05f3458b45921dd761dd07f9ee28be83d8702d8e7486af0d20886ff9b15b9520fa364354f68c37797173f278ce6ad1a1bce194a4b672cdc9e808da22e463866071b358e6323353331e3eadcb8d23f064d29dc50127446a1f1b40bca04ff4d5d4dd662c2888b2fd7bf65529d092ac18b68ab1a8096017cd0880aeaf1bb00a9be4c4091164465ac6e21bb3317443eed55322e8b83dd01f5f118998ac1324527ed938bbbdfd88b24bc9862e1173a1ebf6442b45d55e8d704003115fac0aec7f0185a23a3152340004fbc74e2e4e811ace89a37d7cac2eac49342a4246d1bbb4e418b03a7980df13b60217429232d55df6fefbb6b550ee0982af2fd9d8dfdf36ee58c40d3d49e01558f2cfd491072798de4cb6bd7e7a592624c924f69e660ee7ba27c798be7ebac8a7e499bb9dc3f663210b4d9657c53cf76bbd9b72a81e0ec857c83e0b7b5c7d75c45a36f06fae693c67258b078440d75d2edc95bd133afee854b91c8b50accd7686987afc9be18daa16888d94e0c13cfe54a180a39cca57927f8a1fc1768792203a3b62a8c360e1c28f9e64b106f9639c2967444185326ba13b13f317d8dbd91cd2d32fd8a3952dceaefeb790192ae4fce3cd10c7169da5671e99ad9fc0d4a016ff477867edd33585c0d223bccc064da787a8f584c9b6dca824e088f640feb0f2300a3373caa0a9f9f51a5134df0e787d65b495eefbeb74a888f5ef1dca5c775e278cbfc5256de3312f4753ceb38550b61bcb5fa9bbbaeb95de5f453f41e4aa7b5c06ec5530b61a460c2a8146f53e606d1d5d48d9da0934ae120d2505c31a9480372985b33a0eb4acc521e690e8ede69c601037718c8b6eb9c87d18d082c9e2e52480b99db70163bd6c3d293a09d5237c83b710eaf64d4d22db10bed0e9d74d7477c625731c5b2539343c7ba4762cfa6ffa12344cdbb7d478330141bd97392cc6df3795e21d12565c161db1b818f020433bfe13ec78e38a03938c64d3b891ddd268da223aa7b949ce1d995b45a920fc7d1f7ff61773adedd17a94eb451112611489a36c37090da5a20b47d93124210e1003b9a2df96ef0318d33dc61f2257b0c436ebe2a762add77afcb43bb46c57dcb75148ec6bc001ece4c6c1718520e79555a1d3197df84cd5aa2f71ccb1db7090e3bf76492326fc6b0e6ecc54fad7d452266f349feb1cbf573b9d0dc3ea66a114172f67035e93094592f5992f23eac9033f9f3ff4c878b4143cf68f3a875aebe007be49874803b5e92de533c5e7b8c49ddb611d72beaeecb06e2e28a7069616deb9320338cd912b138d017237e700e3a2ceba2112a3eb34e44badce18d60e6e865ba364f4b92d0bfabb0522991264e666b6dba6eabfcdf69da08c211155a4f5902283f98dbf050f4bb9583d5ac1dd3b4126a87228b98865706d6fdf45f23e84be8a7bcdf4e16964bee0c5fe6fa21d0d3de0e333924674b4bda2178adddf3a1744948157b309451804e604aa43fc991c6ecbfed9b0da3f0597bdc6fa8e4d9b6e8f2d0ea767d334c4f4fa9aa8680da09c62c0fde2fa03d3d0e65018b00133f94051c7eaf5138bd69157e0217c1b9e36ee0f4ba3df2c28cc764a64ea4957e2a93b8f1f0aeed9a0836449f28c3bbe8c7bf5574c0eaaaec80e1e0bf548668acb162921bb28a9f74cc7e38ac27b533e7a213aa715e2b7b662d", 0x1000, 0x9}, {&(0x7f00000016c0)="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", 0x1000, 0x7}], 0x6, &(0x7f0000002780)={[{'\x00'}, {'\x00'}, {'{:&,'}, {'[-'}, {'\x00'}, {'/dev/kvm\x00'}, {',('}], [{@pcr={'pcr', 0x3d, 0x22}}]}) (async)
move_mount(r2, &(0x7f00000027c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002800)='./file0\x00', 0x5) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="0f35f30f230a66b9b40a00000f323e0f23c266b9990b000066b80f3e000066ba000000000f30f2a70f09bad10466ed2e67f30f1c41f40f01df", 0x39}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32]) (async)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x1f, 0x7f, 0x7f, 0x3, 0x7, 0x0, 0xff, 0x4, 0x6, 0x0, 0x9, 0x4}, {0x3, 0x100, 0x81, 0x22, 0x4, 0x5, 0x2, 0x5, 0x81, 0x3, 0x6, 0x1f, 0x9}, {0x9, 0xf9, 0x0, 0x0, 0x34, 0x9, 0x8, 0xb4, 0x5, 0x1, 0x81, 0x20, 0xfff}], 0x3}) (async)

00:17:27 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0xffffffff00000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x630c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3264.704274][ T4866] binder: 4865:4866 unknown command 0
[ 3264.731966][ T4866] binder: 4865:4866 ioctl c0306201 20000940 returned -22
[ 3264.739776][ T4874] binder: BC_ATTEMPT_ACQUIRE not supported
[ 3264.742254][ T4870] binder: 4862:4870 unknown command 0
00:17:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x630d}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3264.759170][ T4870] binder: 4862:4870 ioctl c0306201 200012c0 returned -22
[ 3264.765054][ T4874] binder: 4861:4874 ioctl c0306201 20000240 returned -22
00:17:27 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40046302}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3264.833224][ T4882] binder: 4880:4882 unknown command 0
[ 3264.833897][ T4883] binder: 4879:4883 unknown command 0
[ 3264.845286][ T4883] binder: 4879:4883 ioctl c0306201 20000940 returned -22
00:17:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3264.879597][ T4885] binder: 4884:4885 unknown command 0
[ 3264.879735][ T4882] binder: 4880:4882 ioctl c0306201 20000240 returned -22
[ 3264.885151][ T4885] binder: 4884:4885 ioctl c0306201 20000240 returned -22
[ 3264.919367][ T4888] binder: BC_ACQUIRE_RESULT not supported
[ 3264.926232][ T4889] binder: 4887:4889 unknown command 0
[ 3264.950679][ T4888] binder: 4886:4888 ioctl c0306201 20000940 returned -22
[ 3264.954005][ T4889] binder: 4887:4889 ioctl c0306201 200012c0 returned -22
[ 3264.959723][ T4891] binder: 4890:4891 unknown command 0
[ 3264.991946][ T3221] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 3265.008830][ T4891] binder: 4890:4891 ioctl c0306201 20000240 returned -22
[ 3265.270635][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3265.390720][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3265.399227][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3265.415754][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3265.425560][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3265.690742][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3265.697035][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3265.711327][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3265.972382][ T1235] ieee802154 phy0 wpan0: encryption failed: -22
[ 3265.978706][ T1235] ieee802154 phy1 wpan1: encryption failed: -22
[ 3266.291056][ T3221] usbhid 2-1:1.0: can't add hid device: -71
[ 3266.297224][ T3221] usbhid: probe of 2-1:1.0 failed with error -71
[ 3266.306214][ T3221] usb 2-1: USB disconnect, device number 101
00:17:29 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0xcce9108d3abcd9e7, 0x9, 0x6, {0x6, 0x1, "4ce5d413"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0xa, "debad0c8"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4a46, 0x1f, 0x1, {0x22, 0x418}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0xbb, "6d3f6cec14d7b09705bc14dbd21db1af65199b82b4d64d221f41dbbc6892d2c85bd9efb28d4df33d3db933b7a48fe68d1d3480a7e5f6fef45f9fc1068fb3f035842a62bc203c24431bf3f4124456c879f52fa6052f76ad36e02f27bf689ee384b4095a062c5fac55518d5a2b09d9250f4bd945c6d95f0db31bdcd5211b558e051332077bbc5197fc994fbf8b2e04cb09a7c1a8339f549932e36b24e59704c9c22f3fc27702d055aa4714e16916d253eb4ad219ff19a4213a66c266"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000340)={0x20, 0x1, 0x68, "b705a3c9333e99a065f1d709a5b8d230077e717f7cab9652bc72c17d5009bad65c0451dbff902cfd324b4ff9e02579c5b3cd36fb9d4348bb4f504fc4c4f167528b53adc9bc4aca44e67ee255fd6196f863c7df9370caaa3ec4898a30b28099e193b86d8eb2a598b7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x11}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40046304}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3ff, 0x7, &(0x7f00000026c0)=[{&(0x7f0000000400)="7d6039bfb73cfe2a01db4c9e2f230315906f06e8fc146180361c3f02edbd518984336ad6db950f43bd8e7317066799f7f6fb6a77ab62f6d18da18c888a98eab3f08594bb7086f6843348884ec5ff01999f9b8c39b73f24a8147e51acbf6b4233cf2d8aa48bc8aed8de805d798e187ce09ca467", 0x73, 0xfffffffffffff535}, {&(0x7f0000000480)="95bd09da3fdb13497e68b577e6e24c7b616558", 0x13, 0x80000001}, {&(0x7f00000004c0)="3f35ba6506dd49e4d8ccab8347d2ae3d3f905937e647348f5e3a49bde5ecbac70715df98da48b3762caec65649b5d47ee841070842f4fbc96cab4cd9b444262baabfc25a774caec82239dde0a1e019d054fe9bce1bdd1857b0e6ae8ff637fdf9a7d65c9fe57ebcd858bf8c8cda1fb3570afce2dc59e45d64e6eafca8802fdd741f9db616baa7f88f50abaac0fb03afe1e464ac707f72f883a5d2ff3ec858f38c85055e769f26c523763e0a49fa787d", 0xaf, 0x18d4}, {&(0x7f0000000580)="644240a64e3395699fbfd3fa4d987da5eddd08b977", 0x15, 0x800}, {&(0x7f00000005c0)="4df0137f695d2b5aee6c5d492d2b173e98abc03e5bb2e42d353d6eafa02c2848adbe3085ad8627c5a246fa7fb3836025a56ce2fbbd6bf1d0a94305fac18f4083c16e958c8248112430e9ceee582dba0c73931754a957c7fd5008af5751aa5ddfc092ad5591c8242801701e0e0d2c92a271809540a50dbc2fc6fc7ac2a543a443eafdc11cfd6625cb360450b9d5f8fc37409a63b936d9cb49f8a6d786d2eb3f3278189792a76e725ffc5aa66208b6bea7a39a122a7fe68045d884446a095ca979ae0a165c6fda1853a6e2a9c324b320b44f", 0xd1, 0xffffffffffffffff}, {&(0x7f00000006c0)="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", 0x1000, 0x9}, {&(0x7f00000016c0)="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", 0x1000, 0x7}], 0x6, &(0x7f0000002780)={[{'\x00'}, {'\x00'}, {'{:&,'}, {'[-'}, {'\x00'}, {'/dev/kvm\x00'}, {',('}], [{@pcr={'pcr', 0x3d, 0x22}}]})
move_mount(r2, &(0x7f00000027c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002800)='./file0\x00', 0x5) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="0f35f30f230a66b9b40a00000f323e0f23c266b9990b000066b80f3e000066ba000000000f30f2a70f09bad10466ed2e67f30f1c41f40f01df", 0x39}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32]) (async)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x1f, 0x7f, 0x7f, 0x3, 0x7, 0x0, 0xff, 0x4, 0x6, 0x0, 0x9, 0x4}, {0x3, 0x100, 0x81, 0x22, 0x4, 0x5, 0x2, 0x5, 0x81, 0x3, 0x6, 0x1f, 0x9}, {0x9, 0xf9, 0x0, 0x0, 0x34, 0x9, 0x8, 0xb4, 0x5, 0x1, 0x81, 0x20, 0xfff}], 0x3})

00:17:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3266.730735][ T4895] binder: 4893:4895 unknown command 0
[ 3266.736170][ T4895] binder: 4893:4895 ioctl c0306201 20000240 returned -22
[ 3266.739460][ T4900] binder: 4892:4900 ioctl c0306201 20000940 returned -22
[ 3266.751428][ T4899] binder: 4896:4899 unknown command 0
[ 3266.751845][ T4901] binder: BC_ATTEMPT_ACQUIRE not supported
[ 3266.768410][ T4901] binder: 4894:4901 ioctl c0306201 200012c0 returned -22
00:17:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40046305}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3266.777402][ T4899] binder: 4896:4899 ioctl c0306201 20000240 returned -22
00:17:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3266.889456][ T4913] binder: 4911:4913 ioctl c0306201 20000940 returned -22
[ 3266.890374][ T4914] binder: 4912:4914 unknown command 0
[ 3266.909808][ T4917] binder: 4915:4917 unknown command 0
[ 3266.924483][ T4914] binder: 4912:4914 ioctl c0306201 20000240 returned -22
[ 3266.927551][ T4918] binder: 4916:4918 unknown command 0
00:17:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40046306}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x8002, 0x0, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0x0, 0x9, 0x9, 0x6, 0x1f})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3266.940985][ T4917] binder: 4915:4917 ioctl c0306201 20000240 returned -22
[ 3266.975089][ T4918] binder: 4916:4918 ioctl c0306201 200012c0 returned -22
[ 3267.034958][ T4923] binder: 4921:4923 unknown command 0
[ 3267.055426][ T4923] binder: 4921:4923 ioctl c0306201 20000940 returned -22
[ 3267.080739][T26183] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 3267.320796][T26183] usb 2-1: Using ep0 maxpacket: 8
[ 3267.440875][T26183] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3267.449112][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3267.460771][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3267.470668][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3267.720842][T26183] usb 2-1: string descriptor 0 read error: -22
[ 3267.727120][T26183] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3267.736452][T26183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3268.261155][T26183] usbhid 2-1:1.0: can't add hid device: -71
[ 3268.267176][T26183] usbhid: probe of 2-1:1.0 failed with error -71
[ 3268.276863][T26183] usb 2-1: USB disconnect, device number 102
00:17:31 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40312f0000002f8dc915c1c800399372bd8d72b794429a48bba82b0719b73756d818be34f1d0d759b128e9a9e2813bd55d98f2061470506d570decf406481b8de13d92337577f4c9c9b96feb6fae699242fc664848"], &(0x7f0000000080)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "04f00998b94502be45683e5f581f5b773af617cebc5515348eaf5dff15e776778eb568ed115a87a4949d2f27ab50ca962f1c16e6ff672641b8a8c0c96c4b36ed59685adfac66e5cb45b11820addc27dbdc1e3855371ef2db3bf9179d821dbd5f1bdbac068a7c22fc2e8b03fab792f9cf20b9c3a64a8640cc9ab8a42edd22efa73445f13d4c279e28"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1e, 0x1, 0x2, "0e023b64", "3100a3bd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x0, 0x80, 0x9, 0x4, 0x100, 0x3ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x53, "a5db687278bc4faf1d4948a388cb884ece763177b55834107220e3feabfd9ccb373b98e464879508ad1b253e8e25f3f9b942b9b805424623ccdf43c2191b34acb3df7775ee84b0d8494af9eb071bbdb547ccdb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x60, 0x1, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000480)={0x40, 0xb, 0x2, "f8e8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "67ee"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:17:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40046307}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x8002, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0x0, 0x9, 0x9, 0x6, 0x1f})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3268.743002][ T4934] binder: 4932:4934 unknown command 0
[ 3268.751546][ T4938] binder: 4933:4938 unknown command 0
[ 3268.757756][ T4935] binder: BC_ACQUIRE_RESULT not supported
[ 3268.764889][ T4936] binder: 4931:4936 unknown command 0
[ 3268.771259][ T4934] binder: 4932:4934 ioctl c0306201 20000240 returned -22
[ 3268.779287][ T4936] binder: 4931:4936 ioctl c0306201 200012c0 returned -22
00:17:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3268.786528][ T4938] binder: 4933:4938 ioctl c0306201 20000940 returned -22
[ 3268.791440][ T4935] binder: 4929:4935 ioctl c0306201 20000240 returned -22
00:17:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40086303}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3268.881323][ T4953] binder: 4952:4953 unknown command 1077961474
[ 3268.887825][ T4953] binder: 4952:4953 ioctl c0306201 20000240 returned -22
[ 3268.936951][ T4955] binder: 4954:4955 unknown command 0
[ 3268.954857][ T4958] binder: 4956:4958 unknown command 0
[ 3268.957161][ T4959] binder: 4957:4959 unknown command 0
[ 3268.969514][ T4955] binder: 4954:4955 ioctl c0306201 20000940 returned -22
[ 3268.979216][ T4958] binder: 4956:4958 ioctl c0306201 200012c0 returned -22
[ 3268.981774][ T4961] binder: 4960:4961 unknown command 1077961475
[ 3268.992752][ T4959] binder: 4957:4959 ioctl c0306201 20000240 returned -22
[ 3269.013401][ T4961] binder: 4960:4961 ioctl c0306201 20000240 returned -22
[ 3269.090856][T29461] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 3269.330812][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3269.490773][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3269.499008][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3269.509993][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3269.519867][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3269.790866][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3269.797332][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3269.806475][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3270.309958][T29461] hid-generic 0003:057B:003F.0041: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:34 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40312f0000002f8dc915c1c800399372bd8d72b794429a48bba82b0719b73756d818be34f1d0d759b128e9a9e2813bd55d98f2061470506d570decf406481b8de13d92337577f4c9c9b96feb6fae699242fc664848"], &(0x7f0000000080)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "04f00998b94502be45683e5f581f5b773af617cebc5515348eaf5dff15e776778eb568ed115a87a4949d2f27ab50ca962f1c16e6ff672641b8a8c0c96c4b36ed59685adfac66e5cb45b11820addc27dbdc1e3855371ef2db3bf9179d821dbd5f1bdbac068a7c22fc2e8b03fab792f9cf20b9c3a64a8640cc9ab8a42edd22efa73445f13d4c279e28"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1e, 0x1, 0x2, "0e023b64", "3100a3bd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x0, 0x80, 0x9, 0x4, 0x100, 0x3ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x53, "a5db687278bc4faf1d4948a388cb884ece763177b55834107220e3feabfd9ccb373b98e464879508ad1b253e8e25f3f9b942b9b805424623ccdf43c2191b34acb3df7775ee84b0d8494af9eb071bbdb547ccdb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x60, 0x1, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000480)={0x40, 0xb, 0x2, "f8e8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "67ee"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x2}}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (rerun: 32)

00:17:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x8002, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0x0, 0x9, 0x9, 0x6, 0x1f}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:17:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4008630a}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3271.786495][T26182] usb 2-1: USB disconnect, device number 103
[ 3271.826634][ T4968] binder: 4965:4968 unknown command 0
[ 3271.826758][ T4972] binder: 4964:4972 unknown command 0
[ 3271.838310][ T4971] binder: 4966:4971 unknown command 1077961476
[ 3271.839264][ T4969] binder: BC_ATTEMPT_ACQUIRE not supported
[ 3271.854876][ T4968] binder: 4965:4968 ioctl c0306201 20000240 returned -22
[ 3271.864216][ T4972] binder: 4964:4972 ioctl c0306201 200012c0 returned -22
[ 3271.871110][ T4971] binder: 4966:4971 ioctl c0306201 20000240 returned -22
00:17:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3271.911978][ T4969] binder: 4963:4969 ioctl c0306201 20000940 returned -22
00:17:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40086310}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3272.001148][ T4984] binder: 4983:4984 unknown command 1077961477
[ 3272.012333][ T4985] binder: 4977:4985 unknown command 0
[ 3272.029071][ T4987] binder: 4986:4987 unknown command 0
[ 3272.032473][ T4984] binder: 4983:4984 ioctl c0306201 20000240 returned -22
00:17:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3272.047178][ T4985] binder: 4977:4985 ioctl c0306201 20000240 returned -22
[ 3272.063542][ T4987] binder: 4986:4987 ioctl c0306201 200012c0 returned -22
[ 3272.073920][ T4989] binder: 4988:4989 unknown command 0
[ 3272.120962][ T4989] binder: 4988:4989 ioctl c0306201 20000940 returned -22
[ 3272.159240][ T4992] binder: 4991:4992 unknown command 0
[ 3272.171416][ T4993] binder: 4990:4993 unknown command 1077961478
[ 3272.179529][ T4992] binder: 4991:4992 ioctl c0306201 20000240 returned -22
[ 3272.194564][ T4993] binder: 4990:4993 ioctl c0306201 20000240 returned -22
[ 3272.261390][T26182] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 3272.530885][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3272.660745][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3272.669055][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3272.685367][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3272.695139][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3272.950825][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3272.957935][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3272.967157][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3273.455321][T26182] hid-generic 0003:057B:003F.0042: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:37 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40312f0000002f8dc915c1c800399372bd8d72b794429a48bba82b0719b73756d818be34f1d0d759b128e9a9e2813bd55d98f2061470506d570decf406481b8de13d92337577f4c9c9b96feb6fae699242fc664848"], &(0x7f0000000080)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "04f00998b94502be45683e5f581f5b773af617cebc5515348eaf5dff15e776778eb568ed115a87a4949d2f27ab50ca962f1c16e6ff672641b8a8c0c96c4b36ed59685adfac66e5cb45b11820addc27dbdc1e3855371ef2db3bf9179d821dbd5f1bdbac068a7c22fc2e8b03fab792f9cf20b9c3a64a8640cc9ab8a42edd22efa73445f13d4c279e28"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1e, 0x1, 0x2, "0e023b64", "3100a3bd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x0, 0x80, 0x9, 0x4, 0x100, 0x3ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x53, "a5db687278bc4faf1d4948a388cb884ece763177b55834107220e3feabfd9ccb373b98e464879508ad1b253e8e25f3f9b942b9b805424623ccdf43c2191b34acb3df7775ee84b0d8494af9eb071bbdb547ccdb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x60, 0x1, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000480)={0x40, 0xb, 0x2, "f8e8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "67ee"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40312f0000002f8dc915c1c800399372bd8d72b794429a48bba82b0719b73756d818be34f1d0d759b128e9a9e2813bd55d98f2061470506d570decf406481b8de13d92337577f4c9c9b96feb6fae699242fc664848"], &(0x7f0000000080)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "04f00998b94502be45683e5f581f5b773af617cebc5515348eaf5dff15e776778eb568ed115a87a4949d2f27ab50ca962f1c16e6ff672641b8a8c0c96c4b36ed59685adfac66e5cb45b11820addc27dbdc1e3855371ef2db3bf9179d821dbd5f1bdbac068a7c22fc2e8b03fab792f9cf20b9c3a64a8640cc9ab8a42edd22efa73445f13d4c279e28"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1e, 0x1, 0x2, "0e023b64", "3100a3bd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x0, 0x80, 0x9, 0x4, 0x100, 0x3ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x53, "a5db687278bc4faf1d4948a388cb884ece763177b55834107220e3feabfd9ccb373b98e464879508ad1b253e8e25f3f9b942b9b805424623ccdf43c2191b34acb3df7775ee84b0d8494af9eb071bbdb547ccdb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x60, 0x1, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000480)={0x40, 0xb, 0x2, "f8e8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "67ee"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x2}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)

00:17:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x890b, &(0x7f0000000180)={'wlan1\x00'})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32])

00:17:37 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x400c630e}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3274.855575][T29461] usb 2-1: USB disconnect, device number 104
[ 3274.882025][ T5000] binder: 4997:5000 unknown command 0
[ 3274.890912][ T5004] binder: 4995:5004 unknown command 0
00:17:37 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x400c630f}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3274.906680][ T5000] binder: 4997:5000 ioctl c0306201 20000240 returned -22
[ 3274.916836][ T5003] binder: 5002:5003 unknown command 1077961479
[ 3274.917600][ T5004] binder: 4995:5004 ioctl c0306201 20000940 returned -22
[ 3274.943996][ T5003] binder: 5002:5003 ioctl c0306201 20000240 returned -22
00:17:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3274.993977][ T5010] binder: 5009:5010 unknown command 1077961480
[ 3275.000304][ T5010] binder: 5009:5010 ioctl c0306201 20000240 returned -22
00:17:37 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3275.069142][ T5019] binder: 5016:5019 unknown command 1077961481
[ 3275.070194][ T5015] binder: BC_ATTEMPT_ACQUIRE not supported
[ 3275.102699][ T5019] binder: 5016:5019 ioctl c0306201 20000240 returned -22
[ 3275.111290][ T5020] binder: 5017:5020 unknown command 0
[ 3275.116694][ T5020] binder: 5017:5020 ioctl c0306201 20000940 returned -22
[ 3275.124688][ T5015] binder: 5014:5015 ioctl c0306201 20000240 returned -22
[ 3275.370730][T29461] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 3275.610756][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3275.730874][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3275.739107][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3275.750369][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3275.760359][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3276.000883][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3276.007137][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3276.021822][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3276.515518][T29461] hid-generic 0003:057B:003F.0043: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106302}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x890b, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32])

[ 3277.071422][ T3221] usb 2-1: USB disconnect, device number 105
[ 3277.102019][ T5036] binder: 5029:5036 unknown command 1077961482
[ 3277.108228][ T5036] binder: 5029:5036 ioctl c0306201 20000240 returned -22
00:17:39 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x92, {0x92, 0x5, "425a1affce6c9ced083b0fc625fe8bb876d09498003be35860630d9949276c1df294907f30bc91c8a6bb4b5105f0c56fcb28594a387feb71d829814c2ef28b28f0874c59f8f7dde69e0348aec40b51a56ac90d7ef634238907c18cfa8c6acd313ed97b362fbdce695a228dd88675c0edcb800b0e57dd044f58bd24813d06470dec213607d6f06ff3cf0d5a0bab65ef1c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x1, 0x1, 0x6, 0x2}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0x5, 0x0, "7b044b84", "dba62a6c"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x7b, 0xcd, 0x2, 0x5, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x14, 0xf7, "2b315de0db3cfed04c26ab7c5c963a2ffabeba93e0bd34378052525bb19200cbaa68da532d88cce4b8bd58cf84300fefa13ff27d18c5006b0abb3f3a2c816ee6b7f31f2765b32213c9dd22fc9eddc63dd2571a8a3ead3b78a52476bd0b435ab6b791caaa92c3f2132b73f020b1bd710eafc710cbe7fded5fab37a6cb08a63184dbebc6679273f59d19bdceef6922171e5e2ee1a64bd64c8d735fdec1b1a17f84483988e368363c345c675118b43e3f54a25b01c2b2e4f13bdd2999d4af65e43eb619c03f29ab9c57a3b5e6a6b383e58e7f27021e07624fd5768671eb73b32ca95126fbc049baa7fd2d0ac2e579dc8bd3ad512e7d03be50"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x160, 0x40, [0x1e00]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "f35b"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x91}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "0e83"}, &(0x7f0000000680)={0x40, 0x1a, 0xffffff00, 0xbc}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}})

[ 3277.117397][ T5032] binder: 5030:5032 unknown command 1074815746
[ 3277.118168][ T5037] binder: 5031:5037 unknown command 1078485779
[ 3277.135817][ T5041] binder: 5028:5041 unknown command 0
[ 3277.151568][ T5041] binder: 5028:5041 ioctl c0306201 20000240 returned -22
[ 3277.158865][ T5037] binder: 5031:5037 ioctl c0306201 200012c0 returned -22
00:17:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x890b, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32]) (rerun: 64)

[ 3277.166369][ T5032] binder: 5030:5032 ioctl c0306201 20000940 returned -22
00:17:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486327, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106303}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3277.272188][ T5051] binder: 5050:5051 unknown command 1077961483
[ 3277.278782][ T5051] binder: 5050:5051 ioctl c0306201 20000240 returned -22
00:17:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3277.332398][ T5060] binder: 5058:5060 unknown command 1077961484
[ 3277.335152][ T5059] binder: 5055:5059 unknown command 1074815747
[ 3277.339100][ T5060] binder: 5058:5060 ioctl c0306201 20000240 returned -22
[ 3277.346497][ T5057] binder: 5056:5057 unknown command 1078485799
[ 3277.366301][ T5061] binder: 5048:5061 unknown command 0
00:17:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106304}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x4048632a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3277.402751][ T5059] binder: 5055:5059 ioctl c0306201 20000940 returned -22
[ 3277.421861][ T5057] binder: 5056:5057 ioctl c0306201 200012c0 returned -22
[ 3277.429169][ T5061] binder: 5048:5061 ioctl c0306201 20000240 returned -22
00:17:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3277.501846][ T5064] binder: 5062:5064 unknown command 1077961485
[ 3277.510494][ T5065] binder: 5063:5065 unknown command 1078485802
[ 3277.516982][ T5065] binder: 5063:5065 ioctl c0306201 200012c0 returned -22
00:17:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3277.532762][ T5064] binder: 5062:5064 ioctl c0306201 20000240 returned -22
[ 3277.545135][ T5067] binder: 5066:5067 unknown command 1074815748
[ 3277.556355][ T3221] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 3277.598900][ T5067] binder: 5066:5067 ioctl c0306201 20000940 returned -22
[ 3277.610306][ T5069] binder: 5068:5069 unknown command 0
[ 3277.624049][ T5069] binder: 5068:5069 ioctl c0306201 20000240 returned -22
[ 3277.820670][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3277.940723][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3277.948851][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3277.965306][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3277.975159][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3278.220790][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3278.227075][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3278.236180][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3278.736259][ T3221] hid-generic 0003:057B:003F.0044: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3278.935395][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3278.944165][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3278.953742][ T3221] usb 2-1: USB disconnect, device number 106
00:17:42 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x92, {0x92, 0x5, "425a1affce6c9ced083b0fc625fe8bb876d09498003be35860630d9949276c1df294907f30bc91c8a6bb4b5105f0c56fcb28594a387feb71d829814c2ef28b28f0874c59f8f7dde69e0348aec40b51a56ac90d7ef634238907c18cfa8c6acd313ed97b362fbdce695a228dd88675c0edcb800b0e57dd044f58bd24813d06470dec213607d6f06ff3cf0d5a0bab65ef1c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x1, 0x1, 0x6, 0x2}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0x5, 0x0, "7b044b84", "dba62a6c"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x7b, 0xcd, 0x2, 0x5, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x14, 0xf7, "2b315de0db3cfed04c26ab7c5c963a2ffabeba93e0bd34378052525bb19200cbaa68da532d88cce4b8bd58cf84300fefa13ff27d18c5006b0abb3f3a2c816ee6b7f31f2765b32213c9dd22fc9eddc63dd2571a8a3ead3b78a52476bd0b435ab6b791caaa92c3f2132b73f020b1bd710eafc710cbe7fded5fab37a6cb08a63184dbebc6679273f59d19bdceef6922171e5e2ee1a64bd64c8d735fdec1b1a17f84483988e368363c345c675118b43e3f54a25b01c2b2e4f13bdd2999d4af65e43eb619c03f29ab9c57a3b5e6a6b383e58e7f27021e07624fd5768671eb73b32ca95126fbc049baa7fd2d0ac2e579dc8bd3ad512e7d03be50"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x160, 0x40, [0x1e00]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "f35b"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x91}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "0e83"}, &(0x7f0000000680)={0x40, 0x1a, 0xffffff00, 0xbc}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}})

00:17:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:17:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106305}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3279.485103][ T5079] binder: 5074:5079 unknown command 1074815749
[ 3279.493885][ T5078] binder: 5076:5078 unknown command 0
00:17:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3279.525969][ T5078] binder: 5076:5078 ioctl c0306201 20000240 returned -22
[ 3279.529746][ T5082] binder: 5073:5082 unknown command 1077961486
[ 3279.550903][ T5079] binder: 5074:5079 ioctl c0306201 20000940 returned -22
[ 3279.564250][ T5082] binder: 5073:5082 ioctl c0306201 20000240 returned -22
00:17:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106306}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3279.603644][ T5088] binder: 5087:5088 unknown command 0
[ 3279.634523][ T5088] binder: 5087:5088 ioctl c0306201 20000240 returned -22
[ 3279.693196][ T5093] binder: 5092:5093 unknown command 1074815750
[ 3279.717317][ T5093] binder: 5092:5093 ioctl c0306201 20000940 returned -22
[ 3279.729955][ T5098] binder: 5095:5098 unknown command 1077961488
[ 3279.764162][ T5098] binder: 5095:5098 ioctl c0306201 20000240 returned -22
[ 3279.830888][ T3222] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 3280.090683][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3280.210807][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3280.221335][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3280.232727][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3280.242803][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3280.490851][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3280.497135][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3280.506759][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.775567][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3280.784159][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3280.792827][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3280.801496][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3280.809806][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3280.818718][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3280.827353][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3280.836015][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3280.841078][ T3222] hid-generic 0003:057B:003F.0045: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3280.844952][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3280.867057][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:17:45 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x92, {0x92, 0x5, "425a1affce6c9ced083b0fc625fe8bb876d09498003be35860630d9949276c1df294907f30bc91c8a6bb4b5105f0c56fcb28594a387feb71d829814c2ef28b28f0874c59f8f7dde69e0348aec40b51a56ac90d7ef634238907c18cfa8c6acd313ed97b362fbdce695a228dd88675c0edcb800b0e57dd044f58bd24813d06470dec213607d6f06ff3cf0d5a0bab65ef1c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x1, 0x1, 0x6, 0x2}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0x5, 0x0, "7b044b84", "dba62a6c"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x7b, 0xcd, 0x2, 0x5, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x14, 0xf7, "2b315de0db3cfed04c26ab7c5c963a2ffabeba93e0bd34378052525bb19200cbaa68da532d88cce4b8bd58cf84300fefa13ff27d18c5006b0abb3f3a2c816ee6b7f31f2765b32213c9dd22fc9eddc63dd2571a8a3ead3b78a52476bd0b435ab6b791caaa92c3f2132b73f020b1bd710eafc710cbe7fded5fab37a6cb08a63184dbebc6679273f59d19bdceef6922171e5e2ee1a64bd64c8d735fdec1b1a17f84483988e368363c345c675118b43e3f54a25b01c2b2e4f13bdd2999d4af65e43eb619c03f29ab9c57a3b5e6a6b383e58e7f27021e07624fd5768671eb73b32ca95126fbc049baa7fd2d0ac2e579dc8bd3ad512e7d03be50"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x160, 0x40, [0x1e00]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "f35b"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x91}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "0e83"}, &(0x7f0000000680)={0x40, 0x1a, 0xffffff00, 0xbc}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}})

00:17:45 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106307}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

[ 3282.552833][T31937] usb 2-1: USB disconnect, device number 107
[ 3282.586845][ T5108] binder: 5106:5108 unknown command 1077961489
00:17:45 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3282.603113][ T5112] binder: 5104:5112 unknown command 1074815751
[ 3282.608911][ T5108] binder: 5106:5108 ioctl c0306201 20000240 returned -22
00:17:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106308}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3282.643614][ T5112] binder: 5104:5112 ioctl c0306201 20000940 returned -22
00:17:45 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:45 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3282.783178][ T5137] binder: 5120:5137 unknown command 1077961490
[ 3282.789383][ T5137] binder: 5120:5137 ioctl c0306201 20000240 returned -22
[ 3282.860367][ T5139] binder: 5138:5139 unknown command 1078485779
[ 3282.887080][ T5139] binder: 5138:5139 ioctl c0306201 20000240 returned -22
[ 3283.060683][T31937] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 3283.310761][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3283.430786][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3283.438909][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3283.455024][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3283.464993][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3283.710763][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3283.717126][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3283.726526][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:17:46 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0x22, 0xb0, {0xb0, 0x30, "aef82e68371e8ce373f1052099f10fb35f4b4f7c5275f90f19d14d78363f66f91301796cc271c82131bb964c5c235d217ede94059b9ed5884c9351679dacffb15f9c922e17c271a94469c4cb30f92bbea2851f2e33afc6830abaf584ad4a84151dfec0e5db6914f2a0f04c40d8dee41f314a195ef62e87b53c808211bbec3c222f3160038e3d8e3676672a84f1bcdf785f301d7f843956bec3f107767df44d0c8b0438263c3146ad9e7f01b12ee6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000580)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "0782d8133a955d5fc500f41217090d87"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x89, 0xff, 0x1, 0x5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd0, 0x7f, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0xca, 0x6, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x0, 0x3, 0x2, "233b1264", "b69d0986"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x2, 0x7f}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x0, 0x31, 0x2f, "b31c297300bb2a7a3ba0feec9e5cd593c7be547664f6aeecc93596f5ef30be4ad93956956b7c7c289efd5992bf8559"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1e0, 0x10}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e118"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xa0}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @random="c0f420e9e6b8"}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "a9f5"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x11, 0xd3, {0xd3, 0xc, "f131a6b3ff96e9d5ffc4cb4f842e34aa18553f2aad8eced5aa4d231ceef6a57b651a8c02fa2e0b177074b28e46971d978a141e4a4b8a3cccd935452333870293a9c83bc5fba055555071b6d7f5c8a86f22cc3fe0f28fe408144002912499ec899ac418358ac78b1c463ebc0dc7f23004164aa2b72540beb4c5b555b211cb46f6780e2c7442b144b1f35a0f938866d9baf28a3e76156fa0ad5e9803b02371d831cf97088e60abcce083e0a3ecc91988e46893503fd3491552dbf98246b9ecea55f7d262e854d9ed462613bbc94f384d87d9"}}, &(0x7f0000000240)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "e79429338b95c8edb28148aead2f44934b0fe81583d83247b41f9c4bb02dd6939109f197dc55249159012229dbcbba6e49ff5515d0d1da289b7519ef1e065e363db4dda5f5502a70f59c3c8c4adc446a5dbe3ecc64427a1dd84cc73c671976590dcdc912f436d77f1f01ffc05153a7b3dc5481187499c58f88c4468eba77a2253a2a04b655f58e0f88e899ce689683a7758abc982591104b9c0b90fd13eeab1039778ffa6a665feeeef04dd1f2a0e52f03a42da141286062f9c3"}}, &(0x7f0000000540)={0x0, 0x22, 0x11, {[@global=@item_012={0x1, 0x1, 0x9, "d3"}, @main=@item_012={0x0, 0x0, 0xd}, @global=@item_012={0x1, 0x1, 0x3, 'l'}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_4={0x3, 0x1, 0x8, "cb0e8cac"}, @global=@item_4={0x3, 0x1, 0x2, "2541abb2"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3b5}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x11, 0xb6, "9fa7f0cebef88c6ca65f65265aa39726c5f76031102caa2fc4c92ce4e8a41ee88b0fafb833efd18cb6f0e28453f0275807000557b4967bd92d54dd0f7a76c17c6dd633c23f624f687ef4c52d1086eab7504cac855734b44442d5246fc17af6ec41b90e8bfa39eecf06da23c2b9a13dd8f81625527d20d8e0b41387b6c701261c000d1cb728aaeb4188b1fd7d8578056b1c3e2a21fcdcd973c575b062f6a38c35fc5ac7862a2f6e4283c99c98e2afe53ad7c733d2faa8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x8, "880fa2217c88e5df"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x8}})

00:17:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4010630a}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3283.973572][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3283.983762][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:17:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3284.024611][ T5155] binder: 5148:5155 unknown command 1074815754
[ 3284.039093][ T5154] binder: 5147:5154 unknown command 1077961491
[ 3284.054201][ T5154] binder: 5147:5154 ioctl c0306201 20000240 returned -22
00:17:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406318, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3284.071851][ T5155] binder: 5148:5155 ioctl c0306201 20000940 returned -22
00:17:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4010630b}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3284.100922][T31937] usbhid 2-1:1.0: can't add hid device: -71
[ 3284.106942][T31937] usbhid: probe of 2-1:1.0 failed with error -71
00:17:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4010630c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3284.178112][ T5167] binder: 5166:5167 unknown command 1074815755
[ 3284.179680][T31937] usb 2-1: USB disconnect, device number 108
[ 3284.184963][ T5167] binder: 5166:5167 ioctl c0306201 20000940 returned -22
[ 3284.212750][ T5169] binder: 5165:5169 unknown command 1077961496
[ 3284.259630][ T5169] binder: 5165:5169 ioctl c0306201 20000240 returned -22
[ 3284.265109][ T5173] binder: 5172:5173 unknown command 1074815756
[ 3284.291121][ T5173] binder: 5172:5173 ioctl c0306201 20000940 returned -22
[ 3284.600739][T31937] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 3284.850655][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3284.970740][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3284.978921][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3284.990011][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3284.999957][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3285.240736][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3285.246970][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3285.256491][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3285.764698][T31937] hid-generic 0003:057B:003F.0046: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:49 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0x22, 0xb0, {0xb0, 0x30, "aef82e68371e8ce373f1052099f10fb35f4b4f7c5275f90f19d14d78363f66f91301796cc271c82131bb964c5c235d217ede94059b9ed5884c9351679dacffb15f9c922e17c271a94469c4cb30f92bbea2851f2e33afc6830abaf584ad4a84151dfec0e5db6914f2a0f04c40d8dee41f314a195ef62e87b53c808211bbec3c222f3160038e3d8e3676672a84f1bcdf785f301d7f843956bec3f107767df44d0c8b0438263c3146ad9e7f01b12ee6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000580)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "0782d8133a955d5fc500f41217090d87"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x89, 0xff, 0x1, 0x5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd0, 0x7f, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0xca, 0x6, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x0, 0x3, 0x2, "233b1264", "b69d0986"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x2, 0x7f}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x0, 0x31, 0x2f, "b31c297300bb2a7a3ba0feec9e5cd593c7be547664f6aeecc93596f5ef30be4ad93956956b7c7c289efd5992bf8559"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1e0, 0x10}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e118"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xa0}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @random="c0f420e9e6b8"}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "a9f5"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x11, 0xd3, {0xd3, 0xc, "f131a6b3ff96e9d5ffc4cb4f842e34aa18553f2aad8eced5aa4d231ceef6a57b651a8c02fa2e0b177074b28e46971d978a141e4a4b8a3cccd935452333870293a9c83bc5fba055555071b6d7f5c8a86f22cc3fe0f28fe408144002912499ec899ac418358ac78b1c463ebc0dc7f23004164aa2b72540beb4c5b555b211cb46f6780e2c7442b144b1f35a0f938866d9baf28a3e76156fa0ad5e9803b02371d831cf97088e60abcce083e0a3ecc91988e46893503fd3491552dbf98246b9ecea55f7d262e854d9ed462613bbc94f384d87d9"}}, &(0x7f0000000240)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "e79429338b95c8edb28148aead2f44934b0fe81583d83247b41f9c4bb02dd6939109f197dc55249159012229dbcbba6e49ff5515d0d1da289b7519ef1e065e363db4dda5f5502a70f59c3c8c4adc446a5dbe3ecc64427a1dd84cc73c671976590dcdc912f436d77f1f01ffc05153a7b3dc5481187499c58f88c4468eba77a2253a2a04b655f58e0f88e899ce689683a7758abc982591104b9c0b90fd13eeab1039778ffa6a665feeeef04dd1f2a0e52f03a42da141286062f9c3"}}, &(0x7f0000000540)={0x0, 0x22, 0x11, {[@global=@item_012={0x1, 0x1, 0x9, "d3"}, @main=@item_012={0x0, 0x0, 0xd}, @global=@item_012={0x1, 0x1, 0x3, 'l'}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_4={0x3, 0x1, 0x8, "cb0e8cac"}, @global=@item_4={0x3, 0x1, 0x2, "2541abb2"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3b5}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x11, 0xb6, "9fa7f0cebef88c6ca65f65265aa39726c5f76031102caa2fc4c92ce4e8a41ee88b0fafb833efd18cb6f0e28453f0275807000557b4967bd92d54dd0f7a76c17c6dd633c23f624f687ef4c52d1086eab7504cac855734b44442d5246fc17af6ec41b90e8bfa39eecf06da23c2b9a13dd8f81625527d20d8e0b41387b6c701261c000d1cb728aaeb4188b1fd7d8578056b1c3e2a21fcdcd973c575b062f6a38c35fc5ac7862a2f6e4283c99c98e2afe53ad7c733d2faa8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x8, "880fa2217c88e5df"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x8}})

00:17:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406325, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4010630d}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x2172, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c257000015bbbbbbbbbb8100400086dd6ed9b60b103b2cd692725bfda10aecf32cd429644e9edd2ddb0d54f316d8a5c2db7c931e78c4dd73adc7f1"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010001007cb1ac5f134ecbbdea1b209c69efcf50316b38d674ad3d2d1f122215968bfcfb8f4ce82491762f9adf236e4e50f05f450eac0650249bb4eb4d64dc49ef433ebec9c4d0f7accd3198dcbcc06b468b798bc5bf7cd2c2aae18c8384ab92885a59c5ec665937d70a0ccd3e680a90b1169270348f6b1ad6", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3287.058292][T26182] usb 2-1: USB disconnect, device number 109
[ 3287.098075][ T5183] binder: 5180:5183 unknown command 1074815757
00:17:49 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3287.106687][ T5184] binder: 5177:5184 unknown command 1077961509
00:17:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x4010630e}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3287.135141][ T5183] binder: 5180:5183 ioctl c0306201 20000940 returned -22
[ 3287.135512][ T5184] binder: 5177:5184 ioctl c0306201 20000240 returned -22
00:17:49 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040635c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:49 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3287.240317][ T5198] binder: 5197:5198 unknown command 1077961564
[ 3287.248149][ T5198] binder: 5197:5198 ioctl c0306201 20000240 returned -22
[ 3287.260282][ T5199] binder: 5196:5199 unknown command 1074815758
[ 3287.291307][ T5199] binder: 5196:5199 ioctl c0306201 20000940 returned -22
[ 3287.620683][T26182] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 3287.860668][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3287.980726][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3287.988981][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3288.004837][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3288.014922][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3288.260765][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3288.267270][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3288.276433][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3288.584586][T26182] hid-generic 0003:057B:003F.0047: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:52 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0x22, 0xb0, {0xb0, 0x30, "aef82e68371e8ce373f1052099f10fb35f4b4f7c5275f90f19d14d78363f66f91301796cc271c82131bb964c5c235d217ede94059b9ed5884c9351679dacffb15f9c922e17c271a94469c4cb30f92bbea2851f2e33afc6830abaf584ad4a84151dfec0e5db6914f2a0f04c40d8dee41f314a195ef62e87b53c808211bbec3c222f3160038e3d8e3676672a84f1bcdf785f301d7f843956bec3f107767df44d0c8b0438263c3146ad9e7f01b12ee6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000580)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "0782d8133a955d5fc500f41217090d87"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x89, 0xff, 0x1, 0x5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd0, 0x7f, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0xca, 0x6, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x0, 0x3, 0x2, "233b1264", "b69d0986"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x2, 0x7f}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x0, 0x31, 0x2f, "b31c297300bb2a7a3ba0feec9e5cd593c7be547664f6aeecc93596f5ef30be4ad93956956b7c7c289efd5992bf8559"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1e0, 0x10}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e118"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xa0}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @random="c0f420e9e6b8"}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "a9f5"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x11, 0xd3, {0xd3, 0xc, "f131a6b3ff96e9d5ffc4cb4f842e34aa18553f2aad8eced5aa4d231ceef6a57b651a8c02fa2e0b177074b28e46971d978a141e4a4b8a3cccd935452333870293a9c83bc5fba055555071b6d7f5c8a86f22cc3fe0f28fe408144002912499ec899ac418358ac78b1c463ebc0dc7f23004164aa2b72540beb4c5b555b211cb46f6780e2c7442b144b1f35a0f938866d9baf28a3e76156fa0ad5e9803b02371d831cf97088e60abcce083e0a3ecc91988e46893503fd3491552dbf98246b9ecea55f7d262e854d9ed462613bbc94f384d87d9"}}, &(0x7f0000000240)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "e79429338b95c8edb28148aead2f44934b0fe81583d83247b41f9c4bb02dd6939109f197dc55249159012229dbcbba6e49ff5515d0d1da289b7519ef1e065e363db4dda5f5502a70f59c3c8c4adc446a5dbe3ecc64427a1dd84cc73c671976590dcdc912f436d77f1f01ffc05153a7b3dc5481187499c58f88c4468eba77a2253a2a04b655f58e0f88e899ce689683a7758abc982591104b9c0b90fd13eeab1039778ffa6a665feeeef04dd1f2a0e52f03a42da141286062f9c3"}}, &(0x7f0000000540)={0x0, 0x22, 0x11, {[@global=@item_012={0x1, 0x1, 0x9, "d3"}, @main=@item_012={0x0, 0x0, 0xd}, @global=@item_012={0x1, 0x1, 0x3, 'l'}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_4={0x3, 0x1, 0x8, "cb0e8cac"}, @global=@item_4={0x3, 0x1, 0x2, "2541abb2"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3b5}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x11, 0xb6, "9fa7f0cebef88c6ca65f65265aa39726c5f76031102caa2fc4c92ce4e8a41ee88b0fafb833efd18cb6f0e28453f0275807000557b4967bd92d54dd0f7a76c17c6dd633c23f624f687ef4c52d1086eab7504cac855734b44442d5246fc17af6ec41b90e8bfa39eecf06da23c2b9a13dd8f81625527d20d8e0b41387b6c701261c000d1cb728aaeb4188b1fd7d8578056b1c3e2a21fcdcd973c575b062f6a38c35fc5ac7862a2f6e4283c99c98e2afe53ad7c733d2faa8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x8, "880fa2217c88e5df"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x8}})

00:17:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x2172, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c257000015bbbbbbbbbb8100400086dd6ed9b60b103b2cd692725bfda10aecf32cd429644e9edd2ddb0d54f316d8a5c2db7c931e78c4dd73adc7f1"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010001007cb1ac5f134ecbbdea1b209c69efcf50316b38d674ad3d2d1f122215968bfcfb8f4ce82491762f9adf236e4e50f05f450eac0650249bb4eb4d64dc49ef433ebec9c4d0f7accd3198dcbcc06b468b798bc5bf7cd2c2aae18c8384ab92885a59c5ec665937d70a0ccd3e680a90b1169270348f6b1ad6", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_emit_ethernet(0x2172, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c257000015bbbbbbbbbb8100400086dd6ed9b60b103b2cd692725bfda10aecf32cd429644e9edd2ddb0d54f316d8a5c2db7c931e78c4dd73adc7f1"], 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010001007cb1ac5f134ecbbdea1b209c69efcf50316b38d674ad3d2d1f122215968bfcfb8f4ce82491762f9adf236e4e50f05f450eac0650249bb4eb4d64dc49ef433ebec9c4d0f7accd3198dcbcc06b468b798bc5bf7cd2c2aae18c8384ab92885a59c5ec665937d70a0ccd3e680a90b1169270348f6b1ad6", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:17:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106310}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3290.104060][T31937] usb 2-1: USB disconnect, device number 110
[ 3290.143488][ T5212] binder: 5210:5212 unknown command 1074815760
00:17:52 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106311}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3290.190942][ T5212] binder: 5210:5212 ioctl c0306201 20000940 returned -22
00:17:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106312}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3290.250546][ T5232] binder: 5231:5232 unknown command 1074815761
[ 3290.257044][ T5232] binder: 5231:5232 ioctl c0306201 20000940 returned -22
[ 3290.292811][ T5235] binder: BINDER_SET_CONTEXT_MGR already set
[ 3290.299118][ T5235] binder: 5234:5235 ioctl 4018620d 20002840 returned -16
[ 3290.307414][ T5235] binder: 5234:5235 unknown command 1074815762
[ 3290.314912][ T5235] binder: 5234:5235 ioctl c0306201 20000940 returned -22
[ 3290.580701][T31937] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 3290.820684][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3290.951423][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3290.959877][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3290.970886][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3290.980710][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3291.221112][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3291.227398][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3291.236879][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3291.542489][T31937] hid-generic 0003:057B:003F.0048: unknown main item tag 0xd
[ 3291.550906][T31937] hid-generic 0003:057B:003F.0048: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:17:55 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x15, "8e8f30b5"}, @global]}}, 0x0}, 0x0)

00:17:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106313}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_emit_ethernet(0x2172, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c257000015bbbbbbbbbb8100400086dd6ed9b60b103b2cd692725bfda10aecf32cd429644e9edd2ddb0d54f316d8a5c2db7c931e78c4dd73adc7f1"], 0x0) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010001007cb1ac5f134ecbbdea1b209c69efcf50316b38d674ad3d2d1f122215968bfcfb8f4ce82491762f9adf236e4e50f05f450eac0650249bb4eb4d64dc49ef433ebec9c4d0f7accd3198dcbcc06b468b798bc5bf7cd2c2aae18c8384ab92885a59c5ec665937d70a0ccd3e680a90b1169270348f6b1ad6", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:17:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3293.161811][ T3222] usb 2-1: USB disconnect, device number 111
[ 3293.193409][ T5247] binder: 5242:5247 unknown command 1074815763
00:17:55 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3293.224396][ T5247] binder: 5242:5247 ioctl c0306201 20000940 returned -22
00:17:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40406300}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3293.630694][ T3222] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 3293.890683][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3294.010944][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3294.019091][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3294.030444][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3294.040523][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3294.300758][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3294.307006][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3294.316478][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3294.792353][ T3222] hid-generic 0003:057B:003F.0049: unknown main item tag 0x5
[ 3294.800750][ T3222] hid-generic 0003:057B:003F.0049: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3294.994358][T26182] usb 2-1: USB disconnect, device number 112
00:17:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x15, "8e8f30b5"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x15, "8e8f30b5"}, @global]}}, 0x0}, 0x0) (async)

00:17:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x2})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100004f82a48a930a", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32])

00:17:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40486311}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:17:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3295.910806][T26182] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 3296.150856][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3296.271138][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3296.279277][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3296.290680][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3296.300447][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3296.550997][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3296.557277][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3296.566398][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3297.053845][T26182] hid-generic 0003:057B:003F.004A: unknown main item tag 0x5
[ 3297.062560][T26182] hid-generic 0003:057B:003F.004A: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3297.261819][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3297.270429][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:18:01 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x15, "8e8f30b5"}, @global]}}, 0x0}, 0x0)

00:18:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40486312}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x2})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100004f82a48a930a", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x2}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100004f82a48a930a", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32]) (async)

[ 3298.571176][ T3221] usb 2-1: USB disconnect, device number 113
00:18:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3299.040674][ T3221] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 3299.280663][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3299.401340][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3299.409461][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3299.420662][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3299.430417][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3299.670844][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3299.677086][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3299.691207][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3300.183832][ T3221] hid-generic 0003:057B:003F.004B: unknown main item tag 0x5
[ 3300.196702][ T3221] hid-generic 0003:057B:003F.004B: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3300.381705][T31937] usb 2-1: USB disconnect, device number 114
00:18:03 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0x10, 0x15, {0x15, 0xc, "c48c46792c926dc39936b4efce2e04d786ff19"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "21f2e0a1"}, @local=@item_4={0x3, 0x2, 0x1, "841e1ee9"}, @main=@item_012={0x2, 0x0, 0xb, "c0a8"}, @local=@item_012={0x1, 0x2, 0xb, "d1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x3a7}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x6, 0xb1, "e869ded4df45faaf6343617553d35df94d8a14f55268157373fa375130c032960536c8f156ba1486aff5ebac26d39e6a5bf1c8b936c532287122ac5a097c9e15f656303f53b067733c63edf508844903030b9d87840550afd9138e766a39950b1509bbd41be523760ea838497b5a7484ea04eae6d0311fdeba531415666f2721a32697e07c4ae47abacf29f44beaad97b7aa72374dda0864af776af4dd15566b9e5c98afd77ffb504e01f6eb5c74268b3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x4d, "57e4641156be6c14437db7af5920d4877ebad92bcdc4471a924d3dcf03b962cc6786e4c22cf6447933d47496b20f80314542bd10d003fcd4196b5a413af2efdb41b7a31bc4333ae4662ae0b754"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xa7}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x2}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100004f82a48a930a", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32])

00:18:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x4}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3301.261036][T26182] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 3301.501978][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3301.620891][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3301.629020][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3301.640221][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3301.650298][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3301.900756][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3301.907046][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3301.916448][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3302.393469][T26182] hid-generic 0003:057B:003F.004C: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3302.594721][T26182] usb 2-1: USB disconnect, device number 115
00:18:05 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0x10, 0x15, {0x15, 0xc, "c48c46792c926dc39936b4efce2e04d786ff19"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "21f2e0a1"}, @local=@item_4={0x3, 0x2, 0x1, "841e1ee9"}, @main=@item_012={0x2, 0x0, 0xb, "c0a8"}, @local=@item_012={0x1, 0x2, 0xb, "d1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x3a7}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x6, 0xb1, "e869ded4df45faaf6343617553d35df94d8a14f55268157373fa375130c032960536c8f156ba1486aff5ebac26d39e6a5bf1c8b936c532287122ac5a097c9e15f656303f53b067733c63edf508844903030b9d87840550afd9138e766a39950b1509bbd41be523760ea838497b5a7484ea04eae6d0311fdeba531415666f2721a32697e07c4ae47abacf29f44beaad97b7aa72374dda0864af776af4dd15566b9e5c98afd77ffb504e01f6eb5c74268b3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x4d, "57e4641156be6c14437db7af5920d4877ebad92bcdc4471a924d3dcf03b962cc6786e4c22cf6447933d47496b20f80314542bd10d003fcd4196b5a413af2efdb41b7a31bc4333ae4662ae0b754"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xa7}})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x2, 0xead, 0x5, 0x40, 0x10000, 0x101, 0x40, 0xfffffffffffffffc, 0x8, 0x7fffffffffffffff, 0x40, 0x8, 0x8, 0x800, 0x8], 0x1, 0x1681d0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x6}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x7}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x8}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3303.440823][ T3222] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 3303.690684][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3303.810871][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3303.818979][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3303.830515][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3303.840534][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3304.080795][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3304.087085][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3304.096181][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3304.406966][ T3222] hid-generic 0003:057B:003F.004D: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3304.607491][ T3221] usb 2-1: USB disconnect, device number 116
00:18:07 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0x10, 0x15, {0x15, 0xc, "c48c46792c926dc39936b4efce2e04d786ff19"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "21f2e0a1"}, @local=@item_4={0x3, 0x2, 0x1, "841e1ee9"}, @main=@item_012={0x2, 0x0, 0xb, "c0a8"}, @local=@item_012={0x1, 0x2, 0xb, "d1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x3a7}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x6, 0xb1, "e869ded4df45faaf6343617553d35df94d8a14f55268157373fa375130c032960536c8f156ba1486aff5ebac26d39e6a5bf1c8b936c532287122ac5a097c9e15f656303f53b067733c63edf508844903030b9d87840550afd9138e766a39950b1509bbd41be523760ea838497b5a7484ea04eae6d0311fdeba531415666f2721a32697e07c4ae47abacf29f44beaad97b7aa72374dda0864af776af4dd15566b9e5c98afd77ffb504e01f6eb5c74268b3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x4d, "57e4641156be6c14437db7af5920d4877ebad92bcdc4471a924d3dcf03b962cc6786e4c22cf6447933d47496b20f80314542bd10d003fcd4196b5a413af2efdb41b7a31bc4333ae4662ae0b754"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xa7}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x40, 0x10, 0x15, {0x15, 0xc, "c48c46792c926dc39936b4efce2e04d786ff19"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "21f2e0a1"}, @local=@item_4={0x3, 0x2, 0x1, "841e1ee9"}, @main=@item_012={0x2, 0x0, 0xb, "c0a8"}, @local=@item_012={0x1, 0x2, 0xb, "d1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x3a7}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x6, 0xb1, "e869ded4df45faaf6343617553d35df94d8a14f55268157373fa375130c032960536c8f156ba1486aff5ebac26d39e6a5bf1c8b936c532287122ac5a097c9e15f656303f53b067733c63edf508844903030b9d87840550afd9138e766a39950b1509bbd41be523760ea838497b5a7484ea04eae6d0311fdeba531415666f2721a32697e07c4ae47abacf29f44beaad97b7aa72374dda0864af776af4dd15566b9e5c98afd77ffb504e01f6eb5c74268b3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x4d, "57e4641156be6c14437db7af5920d4877ebad92bcdc4471a924d3dcf03b962cc6786e4c22cf6447933d47496b20f80314542bd10d003fcd4196b5a413af2efdb41b7a31bc4333ae4662ae0b754"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xa7}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)

00:18:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x9}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x2, 0xead, 0x5, 0x40, 0x10000, 0x101, 0x40, 0xfffffffffffffffc, 0x8, 0x7fffffffffffffff, 0x40, 0x8, 0x8, 0x800, 0x8], 0x1, 0x1681d0}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xa}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3305.530743][T29461] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 3305.780731][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3305.910782][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3305.918931][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3305.930109][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3305.940166][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3306.180832][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3306.187052][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3306.199092][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3306.685965][T29461] hid-generic 0003:057B:003F.004E: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xb}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x2, 0xead, 0x5, 0x40, 0x10000, 0x101, 0x40, 0xfffffffffffffffc, 0x8, 0x7fffffffffffffff, 0x40, 0x8, 0x8, 0x800, 0x8], 0x1, 0x1681d0}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:09 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0xf, {0xf, 0xc, "d2d8e01da2ed6db9cdad05f636"}}, &(0x7f0000000240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "302d5b46e1be36b39bf4c75d3b3bbaa8098c9b31c34f69a9e6fa7947867dd5b65b02993b97ad1e9a3ce5e11c7e8dc85353d35219da53da76d8550c26452a6a5c06ce0f688cc726485ba17e9aef1577b43bebabff0e426bdc00bbbfc2dc80eb7ebb8b76a052695c28c9a3df7e076cdaa6e3b6531656985910e9cd24e9a0da"}}, &(0x7f0000000180)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0xcc56b1e57e3944d9, 0xb, 0x81, 0x0, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x8, 0xf001}, @ssp_cap={0x1c, 0x10, 0xa, 0xfe, 0x4, 0x3, 0x10e1e, 0x6b, [0xff0000, 0xc00f, 0xffc0c0, 0xff3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x0, 0x5f, 0xea, 0x1f}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x10, 0x1, 0xff, "14ff15ed", "6cce3d80"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x2, 0x80, 0xc0, 0x7f, 0x3ff, 0x1ff}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0xe, 0x36, "fb85f0b72cc261d0882055f030f3831ed0d64c4308ec6a44392ef23fb6a9e8a6be5aad939a7fc6f988464c02e7752cce68d6e8a9ab69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2c}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '@4'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, '\nf'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xa19}, &(0x7f0000000780)={0x40, 0x1c, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x11}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

[ 3306.883572][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3306.892434][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3306.906142][T29461] usb 2-1: USB disconnect, device number 117
00:18:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xc}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xd}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3307.430844][T29461] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 3307.700702][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3307.830775][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3307.838960][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3307.850288][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3307.860162][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 240, changing to 7
[ 3307.871232][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33277, setting to 1024
[ 3308.120805][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3308.127091][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3308.136584][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3308.664655][T29461] hid-generic 0003:057B:003F.004F: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3308.865665][ T3221] usb 2-1: USB disconnect, device number 118
00:18:12 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0xf, {0xf, 0xc, "d2d8e01da2ed6db9cdad05f636"}}, &(0x7f0000000240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "302d5b46e1be36b39bf4c75d3b3bbaa8098c9b31c34f69a9e6fa7947867dd5b65b02993b97ad1e9a3ce5e11c7e8dc85353d35219da53da76d8550c26452a6a5c06ce0f688cc726485ba17e9aef1577b43bebabff0e426bdc00bbbfc2dc80eb7ebb8b76a052695c28c9a3df7e076cdaa6e3b6531656985910e9cd24e9a0da"}}, &(0x7f0000000180)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0xcc56b1e57e3944d9, 0xb, 0x81, 0x0, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x8, 0xf001}, @ssp_cap={0x1c, 0x10, 0xa, 0xfe, 0x4, 0x3, 0x10e1e, 0x6b, [0xff0000, 0xc00f, 0xffc0c0, 0xff3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x0, 0x5f, 0xea, 0x1f}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x10, 0x1, 0xff, "14ff15ed", "6cce3d80"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x2, 0x80, 0xc0, 0x7f, 0x3ff, 0x1ff}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0xe, 0x36, "fb85f0b72cc261d0882055f030f3831ed0d64c4308ec6a44392ef23fb6a9e8a6be5aad939a7fc6f988464c02e7752cce68d6e8a9ab69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2c}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '@4'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, '\nf'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xa19}, &(0x7f0000000780)={0x40, 0x1c, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x11}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x8}}) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xe}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x10}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3309.495040][ T5480] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
00:18:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3309.750792][T29462] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 3310.000624][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3310.120888][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3310.129016][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3310.140129][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3310.149940][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 240, changing to 7
[ 3310.161106][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33277, setting to 1024
[ 3310.410787][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3310.417007][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3310.431269][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3310.794745][T29462] hid-generic 0003:057B:003F.0050: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:15 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0xf, {0xf, 0xc, "d2d8e01da2ed6db9cdad05f636"}}, &(0x7f0000000240)={0x0, 0x3, 0x80, @string={0x80, 0x3, "302d5b46e1be36b39bf4c75d3b3bbaa8098c9b31c34f69a9e6fa7947867dd5b65b02993b97ad1e9a3ce5e11c7e8dc85353d35219da53da76d8550c26452a6a5c06ce0f688cc726485ba17e9aef1577b43bebabff0e426bdc00bbbfc2dc80eb7ebb8b76a052695c28c9a3df7e076cdaa6e3b6531656985910e9cd24e9a0da"}}, &(0x7f0000000180)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0xcc56b1e57e3944d9, 0xb, 0x81, 0x0, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x8, 0xf001}, @ssp_cap={0x1c, 0x10, 0xa, 0xfe, 0x4, 0x3, 0x10e1e, 0x6b, [0xff0000, 0xc00f, 0xffc0c0, 0xff3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x0, 0x5f, 0xea, 0x1f}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x10, 0x1, 0xff, "14ff15ed", "6cce3d80"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x2, 0x80, 0xc0, 0x7f, 0x3ff, 0x1ff}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0xe, 0x36, "fb85f0b72cc261d0882055f030f3831ed0d64c4308ec6a44392ef23fb6a9e8a6be5aad939a7fc6f988464c02e7752cce68d6e8a9ab69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2c}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '@4'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, '\nf'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xa19}, &(0x7f0000000780)={0x40, 0x1c, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x11}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x8}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x11}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x12}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3312.417472][T29461] usb 2-1: USB disconnect, device number 119
00:18:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x18}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3312.870757][T29461] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 3313.120664][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3313.240775][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3313.248873][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3313.260210][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3313.270217][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 240, changing to 7
[ 3313.281446][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33277, setting to 1024
[ 3313.530767][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3313.537045][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3313.547376][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3313.855337][T29461] hid-generic 0003:057B:003F.0051: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x7, {0x7, 0x2, "a709bc9c6c"}}, &(0x7f0000000080)={0x0, 0x3, 0x32, @string={0x32, 0x3, "cbfb4d5a34685a0501c974e2ff8091a644e646ba759672c2cd0b510e985c45ceec9127de10b6c5b2d9c5402710814514"}}, &(0x7f0000000240)={0x0, 0xf, 0x145, {0x5, 0xf, 0x145, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "4baf09078579866e8ac0b426c0be86a6"}, @generic={0xf2, 0x10, 0x2, "3548709a8fc502144d501892a56c1fb8b2e9518e9729c3d953113fc61e7425c7cb2dff27514ef8948873e675990297341a468b12238241b4335bdffb037e48c0a6523139185796bbb6710c13e95afa2d6bc9c50777b42fb31937f8c803e91b8b3d06ed87ea18b70fa66c6cba8660ea46c1d9b72902c0c9e046c518bd9c869d180a2709c2ff769c895cc088d088ccde1e5a8c2cbfe0182f611b364002e3799179581b8b41d5c616e4639430b2836a6c8a61d0739a37e1786136df4b622abd163d654097cdee296cd992946925352f0236437ffdfa6ace92e9a07765d304dfee6edf6696ef46df6a700e5222e7fdc1fb"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3d70e6cd332a204238a017fa787b5dff"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x40, 0x24, 0x5, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "51ca590f52350fef4fdba438ccb61bfe"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa3, 0x80, 0x1, 0x98, "c958a59e", "3fa1df79"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xff, 0x0, 0x7, 0x1, 0x8001}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x16, 0xa9, "2fba4f3902fa495b9e88e6e62c9889acdf38e44cccf38c8f5e1ce9d962139eb1cb610b5675ff6e4c48fb7f79c67dee738c1adfc2f02f3252b2be9a5b27de7e02e9c5e7a5aac066d4fe899bea37de25d39b20a2977f4c21162d25621017945465e741dc2a85267471432a55409085ecb033b4d88439b89e7e6f048ba05a6eb66c198575102c636da450d294fdc2a22269198df1421c56de0f2bb09b00d43ae1c555ba560d39706933fd"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x35}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x8, [0x8800]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b10f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b516"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x25}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3315.452908][T26182] usb 2-1: USB disconnect, device number 120
00:18:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x300}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x500}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3315.940650][T26182] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 3316.180635][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3316.300765][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3316.309003][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3316.320550][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3316.330540][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3316.590826][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3316.597071][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3316.606910][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3317.083280][T26182] hid-generic 0003:057B:003F.0052: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:21 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x7, {0x7, 0x2, "a709bc9c6c"}}, &(0x7f0000000080)={0x0, 0x3, 0x32, @string={0x32, 0x3, "cbfb4d5a34685a0501c974e2ff8091a644e646ba759672c2cd0b510e985c45ceec9127de10b6c5b2d9c5402710814514"}}, &(0x7f0000000240)={0x0, 0xf, 0x145, {0x5, 0xf, 0x145, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "4baf09078579866e8ac0b426c0be86a6"}, @generic={0xf2, 0x10, 0x2, "3548709a8fc502144d501892a56c1fb8b2e9518e9729c3d953113fc61e7425c7cb2dff27514ef8948873e675990297341a468b12238241b4335bdffb037e48c0a6523139185796bbb6710c13e95afa2d6bc9c50777b42fb31937f8c803e91b8b3d06ed87ea18b70fa66c6cba8660ea46c1d9b72902c0c9e046c518bd9c869d180a2709c2ff769c895cc088d088ccde1e5a8c2cbfe0182f611b364002e3799179581b8b41d5c616e4639430b2836a6c8a61d0739a37e1786136df4b622abd163d654097cdee296cd992946925352f0236437ffdfa6ace92e9a07765d304dfee6edf6696ef46df6a700e5222e7fdc1fb"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3d70e6cd332a204238a017fa787b5dff"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x40, 0x24, 0x5, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "51ca590f52350fef4fdba438ccb61bfe"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa3, 0x80, 0x1, 0x98, "c958a59e", "3fa1df79"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xff, 0x0, 0x7, 0x1, 0x8001}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x16, 0xa9, "2fba4f3902fa495b9e88e6e62c9889acdf38e44cccf38c8f5e1ce9d962139eb1cb610b5675ff6e4c48fb7f79c67dee738c1adfc2f02f3252b2be9a5b27de7e02e9c5e7a5aac066d4fe899bea37de25d39b20a2977f4c21162d25621017945465e741dc2a85267471432a55409085ecb033b4d88439b89e7e6f048ba05a6eb66c198575102c636da450d294fdc2a22269198df1421c56de0f2bb09b00d43ae1c555ba560d39706933fd"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x35}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x8, [0x8800]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b10f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b516"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc2}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:21 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x600}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:18:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x700}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3318.529178][T26182] usb 2-1: USB disconnect, device number 121
00:18:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3318.990822][T26182] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 3319.230675][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3319.351165][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3319.359273][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3319.375825][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3319.385655][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3319.630851][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3319.637143][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3319.646816][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3319.955022][T26182] hid-generic 0003:057B:003F.0053: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x900}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x7, {0x7, 0x2, "a709bc9c6c"}}, &(0x7f0000000080)={0x0, 0x3, 0x32, @string={0x32, 0x3, "cbfb4d5a34685a0501c974e2ff8091a644e646ba759672c2cd0b510e985c45ceec9127de10b6c5b2d9c5402710814514"}}, &(0x7f0000000240)={0x0, 0xf, 0x145, {0x5, 0xf, 0x145, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "4baf09078579866e8ac0b426c0be86a6"}, @generic={0xf2, 0x10, 0x2, "3548709a8fc502144d501892a56c1fb8b2e9518e9729c3d953113fc61e7425c7cb2dff27514ef8948873e675990297341a468b12238241b4335bdffb037e48c0a6523139185796bbb6710c13e95afa2d6bc9c50777b42fb31937f8c803e91b8b3d06ed87ea18b70fa66c6cba8660ea46c1d9b72902c0c9e046c518bd9c869d180a2709c2ff769c895cc088d088ccde1e5a8c2cbfe0182f611b364002e3799179581b8b41d5c616e4639430b2836a6c8a61d0739a37e1786136df4b622abd163d654097cdee296cd992946925352f0236437ffdfa6ace92e9a07765d304dfee6edf6696ef46df6a700e5222e7fdc1fb"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3d70e6cd332a204238a017fa787b5dff"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x40, 0x24, 0x5, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "51ca590f52350fef4fdba438ccb61bfe"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa3, 0x80, 0x1, 0x98, "c958a59e", "3fa1df79"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xff, 0x0, 0x7, 0x1, 0x8001}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x16, 0xa9, "2fba4f3902fa495b9e88e6e62c9889acdf38e44cccf38c8f5e1ce9d962139eb1cb610b5675ff6e4c48fb7f79c67dee738c1adfc2f02f3252b2be9a5b27de7e02e9c5e7a5aac066d4fe899bea37de25d39b20a2977f4c21162d25621017945465e741dc2a85267471432a55409085ecb033b4d88439b89e7e6f048ba05a6eb66c198575102c636da450d294fdc2a22269198df1421c56de0f2bb09b00d43ae1c555ba560d39706933fd"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x35}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x8, [0x8800]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b10f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b516"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x7, {0x7, 0x2, "a709bc9c6c"}}, &(0x7f0000000080)={0x0, 0x3, 0x32, @string={0x32, 0x3, "cbfb4d5a34685a0501c974e2ff8091a644e646ba759672c2cd0b510e985c45ceec9127de10b6c5b2d9c5402710814514"}}, &(0x7f0000000240)={0x0, 0xf, 0x145, {0x5, 0xf, 0x145, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "4baf09078579866e8ac0b426c0be86a6"}, @generic={0xf2, 0x10, 0x2, "3548709a8fc502144d501892a56c1fb8b2e9518e9729c3d953113fc61e7425c7cb2dff27514ef8948873e675990297341a468b12238241b4335bdffb037e48c0a6523139185796bbb6710c13e95afa2d6bc9c50777b42fb31937f8c803e91b8b3d06ed87ea18b70fa66c6cba8660ea46c1d9b72902c0c9e046c518bd9c869d180a2709c2ff769c895cc088d088ccde1e5a8c2cbfe0182f611b364002e3799179581b8b41d5c616e4639430b2836a6c8a61d0739a37e1786136df4b622abd163d654097cdee296cd992946925352f0236437ffdfa6ace92e9a07765d304dfee6edf6696ef46df6a700e5222e7fdc1fb"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3d70e6cd332a204238a017fa787b5dff"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x40, 0x24, 0x5, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "51ca590f52350fef4fdba438ccb61bfe"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa3, 0x80, 0x1, 0x98, "c958a59e", "3fa1df79"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xff, 0x0, 0x7, 0x1, 0x8001}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x16, 0xa9, "2fba4f3902fa495b9e88e6e62c9889acdf38e44cccf38c8f5e1ce9d962139eb1cb610b5675ff6e4c48fb7f79c67dee738c1adfc2f02f3252b2be9a5b27de7e02e9c5e7a5aac066d4fe899bea37de25d39b20a2977f4c21162d25621017945465e741dc2a85267471432a55409085ecb033b4d88439b89e7e6f048ba05a6eb66c198575102c636da450d294fdc2a22269198df1421c56de0f2bb09b00d43ae1c555ba560d39706933fd"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x35}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x8, [0x8800]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b10f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b516"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc2}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)

00:18:24 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (rerun: 64)

[ 3321.581435][ T3221] usb 2-1: USB disconnect, device number 122
00:18:24 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xa00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3322.090748][ T3221] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 3322.350737][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3322.470861][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3322.478997][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3322.490725][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3322.500477][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3322.752104][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3322.758384][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3322.767783][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3323.254668][ T3221] hid-generic 0003:057B:003F.0054: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x31, 0xb1, {0xb1, 0x21, "978782f4077499ae986dd2011af9b52c6d7858e2794d7dd5ec32d56b490317badd9779595776d405e9aa9d826a6ed92f035173e47a0e39d54d5b6065e0813ab58f8c4e9490feee34856e451792faf2cb3875ee6efbedde1c21d70b5e7d00190d4fa2f7e2b25e17fe3f9002c9d5932892a0dfc23dc84a697fdd6741f99e59d2bfccff35b99f96faca3e78c9718eab935d12d247a45083e17180c57930bda9abd17dd0a12bbb60815a12b5234ab66ae9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "d3ea7339"}, @local=@item_4={0x3, 0x2, 0x8, "7b12000c"}, @main=@item_012={0x2, 0x0, 0xb, "70c2"}, @local=@item_012={0x1, 0x2, 0x0, '6'}, @local=@item_4={0x3, 0x2, 0x9, "c2a4df84"}, @main=@item_4={0x3, 0x0, 0x9, "68893b67"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "6d69209f"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc000, 0x6, 0x1, {0x22, 0x2f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x4a, "c2eccf0b598d3cbf1243050fa1e70fb4192738cc6e24c1d0a610dc96df1b08f95dd8fe868f42440463b435e3a4748a5179f73773384ac732f36887028d31a601a56b62973601d59962dd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xf2, "cc6a0c8ee48aa289c26e48788a65a6c63b1b866a2d12dfce8a73aa0549b9452ab16a7439a8f2ce36ca717b98c0d997a41859ba832c3cd70a123ae74487de1396833dfea2bc63c3ce4af443905196fbbf8afa4c577bcf7ab679eaa69846394bdb017440498d0fe3c87123e695fd21ab5d7f5caa16b73b4a8b4f18a52ffa0af2f444969a42365f89801a073e960e123f1c6fca004be1c72b91862ce824b2c794a26c26e50bb2096981d5a1748941de7f7bff3697837eff138079fb19a48b54977f7e9e418f1ef67f97370e2ead651dbc2fa2a72ad64c0b8881513f514c03652e76dacefd39fb5f5222cad24eae473d3472cf75"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}})

00:18:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xb00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0f01c9660f79d336670fad9a09aa00003e670f01cf0fc72cf40f30baf80c66b83e101c8c66efbafc0cb8b700ef9a7db885007902", 0x34}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
ftruncate(r3, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3323.804298][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3323.812942][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3323.827349][ T3221] usb 2-1: USB disconnect, device number 123
00:18:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xc00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3324.320707][ T3221] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 3324.560697][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3324.685872][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3324.694279][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3324.705826][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3324.716227][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3324.960821][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3324.967117][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3324.976708][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3325.443279][ T3221] hid-generic 0003:057B:003F.0055: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:29 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x31, 0xb1, {0xb1, 0x21, "978782f4077499ae986dd2011af9b52c6d7858e2794d7dd5ec32d56b490317badd9779595776d405e9aa9d826a6ed92f035173e47a0e39d54d5b6065e0813ab58f8c4e9490feee34856e451792faf2cb3875ee6efbedde1c21d70b5e7d00190d4fa2f7e2b25e17fe3f9002c9d5932892a0dfc23dc84a697fdd6741f99e59d2bfccff35b99f96faca3e78c9718eab935d12d247a45083e17180c57930bda9abd17dd0a12bbb60815a12b5234ab66ae9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "d3ea7339"}, @local=@item_4={0x3, 0x2, 0x8, "7b12000c"}, @main=@item_012={0x2, 0x0, 0xb, "70c2"}, @local=@item_012={0x1, 0x2, 0x0, '6'}, @local=@item_4={0x3, 0x2, 0x9, "c2a4df84"}, @main=@item_4={0x3, 0x0, 0x9, "68893b67"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "6d69209f"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc000, 0x6, 0x1, {0x22, 0x2f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x4a, "c2eccf0b598d3cbf1243050fa1e70fb4192738cc6e24c1d0a610dc96df1b08f95dd8fe868f42440463b435e3a4748a5179f73773384ac732f36887028d31a601a56b62973601d59962dd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xf2, "cc6a0c8ee48aa289c26e48788a65a6c63b1b866a2d12dfce8a73aa0549b9452ab16a7439a8f2ce36ca717b98c0d997a41859ba832c3cd70a123ae74487de1396833dfea2bc63c3ce4af443905196fbbf8afa4c577bcf7ab679eaa69846394bdb017440498d0fe3c87123e695fd21ab5d7f5caa16b73b4a8b4f18a52ffa0af2f444969a42365f89801a073e960e123f1c6fca004be1c72b91862ce824b2c794a26c26e50bb2096981d5a1748941de7f7bff3697837eff138079fb19a48b54977f7e9e418f1ef67f97370e2ead651dbc2fa2a72ad64c0b8881513f514c03652e76dacefd39fb5f5222cad24eae473d3472cf75"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x31, 0xb1, {0xb1, 0x21, "978782f4077499ae986dd2011af9b52c6d7858e2794d7dd5ec32d56b490317badd9779595776d405e9aa9d826a6ed92f035173e47a0e39d54d5b6065e0813ab58f8c4e9490feee34856e451792faf2cb3875ee6efbedde1c21d70b5e7d00190d4fa2f7e2b25e17fe3f9002c9d5932892a0dfc23dc84a697fdd6741f99e59d2bfccff35b99f96faca3e78c9718eab935d12d247a45083e17180c57930bda9abd17dd0a12bbb60815a12b5234ab66ae9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "d3ea7339"}, @local=@item_4={0x3, 0x2, 0x8, "7b12000c"}, @main=@item_012={0x2, 0x0, 0xb, "70c2"}, @local=@item_012={0x1, 0x2, 0x0, '6'}, @local=@item_4={0x3, 0x2, 0x9, "c2a4df84"}, @main=@item_4={0x3, 0x0, 0x9, "68893b67"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "6d69209f"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc000, 0x6, 0x1, {0x22, 0x2f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x4a, "c2eccf0b598d3cbf1243050fa1e70fb4192738cc6e24c1d0a610dc96df1b08f95dd8fe868f42440463b435e3a4748a5179f73773384ac732f36887028d31a601a56b62973601d59962dd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xf2, "cc6a0c8ee48aa289c26e48788a65a6c63b1b866a2d12dfce8a73aa0549b9452ab16a7439a8f2ce36ca717b98c0d997a41859ba832c3cd70a123ae74487de1396833dfea2bc63c3ce4af443905196fbbf8afa4c577bcf7ab679eaa69846394bdb017440498d0fe3c87123e695fd21ab5d7f5caa16b73b4a8b4f18a52ffa0af2f444969a42365f89801a073e960e123f1c6fca004be1c72b91862ce824b2c794a26c26e50bb2096981d5a1748941de7f7bff3697837eff138079fb19a48b54977f7e9e418f1ef67f97370e2ead651dbc2fa2a72ad64c0b8881513f514c03652e76dacefd39fb5f5222cad24eae473d3472cf75"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}}) (async)

00:18:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xd00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 64)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0f01c9660f79d336670fad9a09aa00003e670f01cf0fc72cf40f30baf80c66b83e101c8c66efbafc0cb8b700ef9a7db885007902", 0x34}], 0x1, 0x0, 0x0, 0x0) (rerun: 32)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
ftruncate(r3, 0x4) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3326.879951][T31937] usb 2-1: USB disconnect, device number 124
00:18:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xe00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3327.370688][T31937] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 3327.412213][ T1235] ieee802154 phy0 wpan0: encryption failed: -22
[ 3327.418540][ T1235] ieee802154 phy1 wpan1: encryption failed: -22
[ 3327.610719][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3327.730884][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3327.739044][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3327.750458][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3327.760628][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3328.000815][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3328.007191][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3328.016498][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3328.514109][T31937] hid-generic 0003:057B:003F.0056: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1100}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x31, 0xb1, {0xb1, 0x21, "978782f4077499ae986dd2011af9b52c6d7858e2794d7dd5ec32d56b490317badd9779595776d405e9aa9d826a6ed92f035173e47a0e39d54d5b6065e0813ab58f8c4e9490feee34856e451792faf2cb3875ee6efbedde1c21d70b5e7d00190d4fa2f7e2b25e17fe3f9002c9d5932892a0dfc23dc84a697fdd6741f99e59d2bfccff35b99f96faca3e78c9718eab935d12d247a45083e17180c57930bda9abd17dd0a12bbb60815a12b5234ab66ae9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "d3ea7339"}, @local=@item_4={0x3, 0x2, 0x8, "7b12000c"}, @main=@item_012={0x2, 0x0, 0xb, "70c2"}, @local=@item_012={0x1, 0x2, 0x0, '6'}, @local=@item_4={0x3, 0x2, 0x9, "c2a4df84"}, @main=@item_4={0x3, 0x0, 0x9, "68893b67"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "6d69209f"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc000, 0x6, 0x1, {0x22, 0x2f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x4a, "c2eccf0b598d3cbf1243050fa1e70fb4192738cc6e24c1d0a610dc96df1b08f95dd8fe868f42440463b435e3a4748a5179f73773384ac732f36887028d31a601a56b62973601d59962dd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xf2, "cc6a0c8ee48aa289c26e48788a65a6c63b1b866a2d12dfce8a73aa0549b9452ab16a7439a8f2ce36ca717b98c0d997a41859ba832c3cd70a123ae74487de1396833dfea2bc63c3ce4af443905196fbbf8afa4c577bcf7ab679eaa69846394bdb017440498d0fe3c87123e695fd21ab5d7f5caa16b73b4a8b4f18a52ffa0af2f444969a42365f89801a073e960e123f1c6fca004be1c72b91862ce824b2c794a26c26e50bb2096981d5a1748941de7f7bff3697837eff138079fb19a48b54977f7e9e418f1ef67f97370e2ead651dbc2fa2a72ad64c0b8881513f514c03652e76dacefd39fb5f5222cad24eae473d3472cf75"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}})

00:18:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0f01c9660f79d336670fad9a09aa00003e670f01cf0fc72cf40f30baf80c66b83e101c8c66efbafc0cb8b700ef9a7db885007902", 0x34}], 0x1, 0x0, 0x0, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
ftruncate(r3, 0x4) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3329.065508][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3329.074267][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3329.087214][ T8081] usb 2-1: USB disconnect, device number 125
00:18:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1200}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3329.520727][ T8081] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 3329.760689][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3329.880880][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3329.889007][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3329.900160][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3329.910084][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3330.150847][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3330.157090][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3330.166244][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3330.654658][ T8081] hid-generic 0003:057B:003F.0057: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:34 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x20, 0xb, 0x12, {0x12, 0x3, "693557a7877dd1999986833b6181c66d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0x9, "c6"}, @local=@item_4={0x3, 0x2, 0x3, "eb09d63f"}, @main=@item_012={0x1, 0x0, 0xb, "cc"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x4, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x11, 0xe2, "4b2aaa337a18eaf848cc90743045b9a98f0629f8000e35fe88d919c271dcac7657191654376bdd61da174e65dcff9b8d316b902f48dfb3e7f04d1fa9ba5af6b1987d07e675ae4805f24ece47fde76153e79f21bee65863f09676b111817e5b13772c396388ea9e04a02eceababab8e81c276385c919612e48485dd3932067db406af47ac5f622b38bdf222138fce38fb2fe86c9508a0f8e345953fff0dca6174ffd85fbc6f6c702a960093552c46e4e3067adb228aa920f076b7f9779babea32077d3dfb0e8cda78fde05e53e57aeb3eb47ecc39073d38195c9f70c7d7d819dc3937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0x41, "6c83b033d7a338045d66cf2b188852dcbf25e507e21bd7bf02aaefc05fcbfd6a7384d39d02b0e25c73e18c6a0bd55d1364123265d00b2070e6cd61f7d6075fe974"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1800}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="9cd75388740be6cdb9fab224f7c7cec3d96f6dd12c7a0ea31261c799381c4257514ab6ebe3b0572f2e4c56e4d73fe4ee018b6951b9062757aaa53b94df1d3522123c71c05b9eaa914d89709db58255bac5c4347ced5dc5077f68aa8665484754139342d3d4927193a8c420ebebe0846a67cf44fc94dfdb5a", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES32=r7])

00:18:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3332.147384][ T8081] usb 2-1: USB disconnect, device number 126
00:18:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x2500}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5c00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3332.610805][ T8081] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 3332.860834][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3332.985840][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3333.003445][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3333.027851][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3333.040358][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3333.290760][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3333.297045][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3333.306142][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3333.792675][ T8081] hid-generic 0003:057B:003F.0058: item fetching failed at offset 2/6
[ 3333.801193][ T8081] hid-generic: probe of 0003:057B:003F.0058 failed with error -22
00:18:37 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x20, 0xb, 0x12, {0x12, 0x3, "693557a7877dd1999986833b6181c66d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0x9, "c6"}, @local=@item_4={0x3, 0x2, 0x3, "eb09d63f"}, @main=@item_012={0x1, 0x0, 0xb, "cc"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x4, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x11, 0xe2, "4b2aaa337a18eaf848cc90743045b9a98f0629f8000e35fe88d919c271dcac7657191654376bdd61da174e65dcff9b8d316b902f48dfb3e7f04d1fa9ba5af6b1987d07e675ae4805f24ece47fde76153e79f21bee65863f09676b111817e5b13772c396388ea9e04a02eceababab8e81c276385c919612e48485dd3932067db406af47ac5f622b38bdf222138fce38fb2fe86c9508a0f8e345953fff0dca6174ffd85fbc6f6c702a960093552c46e4e3067adb228aa920f076b7f9779babea32077d3dfb0e8cda78fde05e53e57aeb3eb47ecc39073d38195c9f70c7d7d819dc3937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0x41, "6c83b033d7a338045d66cf2b188852dcbf25e507e21bd7bf02aaefc05fcbfd6a7384d39d02b0e25c73e18c6a0bd55d1364123265d00b2070e6cd61f7d6075fe974"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:37 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="9cd75388740be6cdb9fab224f7c7cec3d96f6dd12c7a0ea31261c799381c4257514ab6ebe3b0572f2e4c56e4d73fe4ee018b6951b9062757aaa53b94df1d3522123c71c05b9eaa914d89709db58255bac5c4347ced5dc5077f68aa8665484754139342d3d4927193a8c420ebebe0846a67cf44fc94dfdb5a", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES32=r7])

[ 3335.185885][ T8081] usb 2-1: USB disconnect, device number 127
00:18:37 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x2000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3335.700663][ T8081] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 3335.960723][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3336.090753][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3336.099018][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3336.109999][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3336.119818][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3336.370840][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3336.377118][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3336.386864][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3336.695257][ T8081] hid-generic 0003:057B:003F.0059: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:40 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x20, 0xb, 0x12, {0x12, 0x3, "693557a7877dd1999986833b6181c66d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0x9, "c6"}, @local=@item_4={0x3, 0x2, 0x3, "eb09d63f"}, @main=@item_012={0x1, 0x0, 0xb, "cc"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x4, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x11, 0xe2, "4b2aaa337a18eaf848cc90743045b9a98f0629f8000e35fe88d919c271dcac7657191654376bdd61da174e65dcff9b8d316b902f48dfb3e7f04d1fa9ba5af6b1987d07e675ae4805f24ece47fde76153e79f21bee65863f09676b111817e5b13772c396388ea9e04a02eceababab8e81c276385c919612e48485dd3932067db406af47ac5f622b38bdf222138fce38fb2fe86c9508a0f8e345953fff0dca6174ffd85fbc6f6c702a960093552c46e4e3067adb228aa920f076b7f9779babea32077d3dfb0e8cda78fde05e53e57aeb3eb47ecc39073d38195c9f70c7d7d819dc3937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0x41, "6c83b033d7a338045d66cf2b188852dcbf25e507e21bd7bf02aaefc05fcbfd6a7384d39d02b0e25c73e18c6a0bd55d1364123265d00b2070e6cd61f7d6075fe974"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x3000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async, rerun: 64)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0) (async, rerun: 64)
socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="9cd75388740be6cdb9fab224f7c7cec3d96f6dd12c7a0ea31261c799381c4257514ab6ebe3b0572f2e4c56e4d73fe4ee018b6951b9062757aaa53b94df1d3522123c71c05b9eaa914d89709db58255bac5c4347ced5dc5077f68aa8665484754139342d3d4927193a8c420ebebe0846a67cf44fc94dfdb5a", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES32=r7])

00:18:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3338.250030][ T3221] usb 2-1: USB disconnect, device number 2
00:18:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x4000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3338.780805][ T3221] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 3339.020664][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3339.180824][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3339.189011][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3339.200388][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3339.210371][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3339.460916][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3339.467202][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3339.477284][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3339.798440][ T3221] hid-generic 0003:057B:003F.005A: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:18:43 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="652ed217263e0f01c864660f3a22fb0066b9d60a000066b80000000066ba010000000f3066b94f02000066b80c00000066ba000000000f30b812010f00d066b9800000c00f326635000100000f30f20f20a6eafb007000f21037", 0x5a}], 0x1, 0xf, &(0x7f0000000200)=[@dstype0={0x6, 0x2}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x13000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3341.299828][ T8081] usb 2-1: USB disconnect, device number 3
00:18:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x6000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 1:
keyctl$session_to_parent(0x12)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0x9d, {0x9d, 0x21, "aea58f8536c9c31d62936b40c0a0fcfbfb48e669cf48cccdd3001ea4d7f252011c762c306a9ab399110944cdc0654442c8c74aa2324dcc3c6dde6a79bc0eca50dda39a0e406a641acaa6eb7ffc9542d50c24b65337a03c870324dbcbfb63e0f522014b8a8db02e70d8259fdfa18d9eed358b36afd6baad7d88058eca42349d4aab517fd5546024f2e00df95012facec91c62d2225aca2de94cbc6a"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000004c0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x0, 0xf31e}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3f, 0x0, "f839ad6e", "c0c099c5"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x9, 0x4, 0x20, 0x8, 0xd8b1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xfd, "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"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0xb08, 0x2, [0xf]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xe25d}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xdf}, &(0x7f0000000900)={0x40, 0xb, 0x2, '`f'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'ag'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0x11, 0xef, {0xef, 0xd, "ec0804a643373de0eac81b59810e570087221d3ecca837a5cdd472a39a11615115e037ccac463301930bcd6e93b3676ba88819f4fce92094978d49ffb58ff6553b06a47e584465b1125ce98c0ddcc7e7aa0bfb6041c3ba5ea61285b93041789c4d3057acc6ac279b8757496112a95a8a6fffb3c2ffcd717c1608d2e19a0d97b231d059db8fa3b39373745fcdf3730560f6f01b696e93be76b2965aec7646a9206864e144e50bc838b835f879a97be60f30b0aaea963ae3cc200abb6f0c78681d6fa64bec4b640bb314636754b51d2ff0efae1ba4176bdd2bfc21d5454dce8b33adf557fe4395a334a4f494a695"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "f6566a3f"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "bd919c19"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0xa, "860b21a2"}, @global=@item_4={0x3, 0x1, 0x9, "31e9f45e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x3, 0x1, {0x22, 0xdf1}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0x1d, "c78b6977edd8ff7969149fe9c0b76abf52794a7e3f632a68e3f8573fcd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x1, 0x17, "23f9dfda58576548cf958f0a17e09220670b59219dc862"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xff}})

00:18:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x7000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3341.452605][ T5831] binder: 5825:5831 ioctl 4018620d 0 returned -22
00:18:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3341.557738][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.568365][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.586366][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.615174][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.630769][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.655735][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.682493][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.691470][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.699070][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.708856][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.725811][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.734322][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.742593][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.751464][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.759311][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.767765][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.776566][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.784328][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.793634][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.801855][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.809486][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.819067][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.827727][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.835336][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3341.843028][ T8081] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 3341.851044][ T5841] binder: 5825:5841 ioctl 4020ae46 7fdb2d115a10 returned -22
[ 3342.050871][ T8081] usb 2-1: device descriptor read/64, error 18
00:18:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 32)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="652ed217263e0f01c864660f3a22fb0066b9d60a000066b80000000066ba010000000f3066b94f02000066b80c00000066ba000000000f30b812010f00d066b9800000c00f326635000100000f30f20f20a6eafb007000f21037", 0x5a}], 0x1, 0xf, &(0x7f0000000200)=[@dstype0={0x6, 0x2}], 0x1) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x8000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3342.320912][ T8081] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 3342.339283][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.346196][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.352943][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.359771][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.368275][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.374985][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.381643][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.388190][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.394959][ T5870] binder: 5866:5870 ioctl 4018620d 0 returned -22
[ 3342.397028][ T5867] binder: 5866:5867 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3342.540707][ T8081] usb 2-1: device descriptor read/64, error 18
[ 3342.660776][ T8081] usb usb2-port1: attempt power cycle
[ 3343.070738][ T8081] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 3343.280812][ T8081] usb 2-1: device descriptor read/8, error -61
[ 3343.550717][ T8081] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 3343.720814][ T8081] usb 2-1: device descriptor read/8, error -61
[ 3343.840864][ T8081] usb usb2-port1: unable to enumerate USB device
00:18:47 executing program 1:
keyctl$session_to_parent(0x12)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0x9d, {0x9d, 0x21, "aea58f8536c9c31d62936b40c0a0fcfbfb48e669cf48cccdd3001ea4d7f252011c762c306a9ab399110944cdc0654442c8c74aa2324dcc3c6dde6a79bc0eca50dda39a0e406a641acaa6eb7ffc9542d50c24b65337a03c870324dbcbfb63e0f522014b8a8db02e70d8259fdfa18d9eed358b36afd6baad7d88058eca42349d4aab517fd5546024f2e00df95012facec91c62d2225aca2de94cbc6a"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000004c0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x0, 0xf31e}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3f, 0x0, "f839ad6e", "c0c099c5"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x9, 0x4, 0x20, 0x8, 0xd8b1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xfd, "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"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0xb08, 0x2, [0xf]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xe25d}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xdf}, &(0x7f0000000900)={0x40, 0xb, 0x2, '`f'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'ag'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0x11, 0xef, {0xef, 0xd, "ec0804a643373de0eac81b59810e570087221d3ecca837a5cdd472a39a11615115e037ccac463301930bcd6e93b3676ba88819f4fce92094978d49ffb58ff6553b06a47e584465b1125ce98c0ddcc7e7aa0bfb6041c3ba5ea61285b93041789c4d3057acc6ac279b8757496112a95a8a6fffb3c2ffcd717c1608d2e19a0d97b231d059db8fa3b39373745fcdf3730560f6f01b696e93be76b2965aec7646a9206864e144e50bc838b835f879a97be60f30b0aaea963ae3cc200abb6f0c78681d6fa64bec4b640bb314636754b51d2ff0efae1ba4176bdd2bfc21d5454dce8b33adf557fe4395a334a4f494a695"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "f6566a3f"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "bd919c19"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0xa, "860b21a2"}, @global=@item_4={0x3, 0x1, 0x9, "31e9f45e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x3, 0x1, {0x22, 0xdf1}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0x1d, "c78b6977edd8ff7969149fe9c0b76abf52794a7e3f632a68e3f8573fcd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x1, 0x17, "23f9dfda58576548cf958f0a17e09220670b59219dc862"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xff}})
keyctl$session_to_parent(0x12) (async)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0x9d, {0x9d, 0x21, "aea58f8536c9c31d62936b40c0a0fcfbfb48e669cf48cccdd3001ea4d7f252011c762c306a9ab399110944cdc0654442c8c74aa2324dcc3c6dde6a79bc0eca50dda39a0e406a641acaa6eb7ffc9542d50c24b65337a03c870324dbcbfb63e0f522014b8a8db02e70d8259fdfa18d9eed358b36afd6baad7d88058eca42349d4aab517fd5546024f2e00df95012facec91c62d2225aca2de94cbc6a"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000004c0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x0, 0xf31e}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3f, 0x0, "f839ad6e", "c0c099c5"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x9, 0x4, 0x20, 0x8, 0xd8b1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xfd, "adadd7c0d2e9f562b4b23aaa400da7f4d41854d1ce14ad01bf3105b4786727117a49f92889b83da7b47368bdfd5db1ae3081e4ea0d50cc1642eb01087d9f59f7e4935ff3889c48773242885fd207e6b96acea3c6a5045338e7ad935442975b7c7225d9a3c194ad831099230d8961cf6a24b9f808a4fe98bcc266f466e39094efaa17e238baca4230179a40ac23eac3caff8eeac8e8b097d7c77c07a699d7ed490b3b3e8e64c7c4578041057b27efb7054adaf863704a2d0f1c13d5b1f0338072331ad54586b952ebbb1d339eb677a285bde941a0df986c737cd08d3e8f2408a42bbc0df24ce99780959fbb4ad0f1587b6216d2566cc708f2dfd8ba4570"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0xb08, 0x2, [0xf]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xe25d}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xdf}, &(0x7f0000000900)={0x40, 0xb, 0x2, '`f'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'ag'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}}) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0x11, 0xef, {0xef, 0xd, "ec0804a643373de0eac81b59810e570087221d3ecca837a5cdd472a39a11615115e037ccac463301930bcd6e93b3676ba88819f4fce92094978d49ffb58ff6553b06a47e584465b1125ce98c0ddcc7e7aa0bfb6041c3ba5ea61285b93041789c4d3057acc6ac279b8757496112a95a8a6fffb3c2ffcd717c1608d2e19a0d97b231d059db8fa3b39373745fcdf3730560f6f01b696e93be76b2965aec7646a9206864e144e50bc838b835f879a97be60f30b0aaea963ae3cc200abb6f0c78681d6fa64bec4b640bb314636754b51d2ff0efae1ba4176bdd2bfc21d5454dce8b33adf557fe4395a334a4f494a695"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "f6566a3f"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "bd919c19"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0xa, "860b21a2"}, @global=@item_4={0x3, 0x1, 0x9, "31e9f45e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x3, 0x1, {0x22, 0xdf1}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0x1d, "c78b6977edd8ff7969149fe9c0b76abf52794a7e3f632a68e3f8573fcd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x1, 0x17, "23f9dfda58576548cf958f0a17e09220670b59219dc862"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xff}}) (async)

00:18:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x9000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="652ed217263e0f01c864660f3a22fb0066b9d60a000066b80000000066ba010000000f3066b94f02000066b80c00000066ba000000000f30b812010f00d066b9800000c00f326635000100000f30f20f20a6eafb007000f21037", 0x5a}], 0x1, 0xf, &(0x7f0000000200)=[@dstype0={0x6, 0x2}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r4, r3) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="652ed217263e0f01c864660f3a22fb0066b9d60a000066b80000000066ba010000000f3066b94f02000066b80c00000066ba000000000f30b812010f00d066b9800000c00f326635000100000f30f20f20a6eafb007000f21037", 0x5a}], 0x1, 0xf, &(0x7f0000000200)=[@dstype0={0x6, 0x2}], 0x1) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:18:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xa000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3344.558331][ T5880] binder: 5876:5880 ioctl 4018620d 0 returned -22
[ 3344.645724][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.655371][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.671914][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.686899][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.695095][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.702914][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.710493][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.731940][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.739416][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.747866][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.755612][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.763626][ T5889] binder: 5876:5889 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3344.891043][T29461] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 3345.080673][T29461] usb 2-1: device descriptor read/64, error 18
[ 3345.350712][T29461] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 3345.540659][T29461] usb 2-1: device descriptor read/64, error 18
[ 3345.660771][T29461] usb usb2-port1: attempt power cycle
[ 3346.090733][T29461] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 3346.260781][T29461] usb 2-1: device descriptor read/8, error -61
[ 3346.530683][T29461] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 3346.700754][T29461] usb 2-1: device descriptor read/8, error -61
[ 3346.821610][T29461] usb usb2-port1: unable to enumerate USB device
00:18:50 executing program 1:
keyctl$session_to_parent(0x12) (async)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0x9d, {0x9d, 0x21, "aea58f8536c9c31d62936b40c0a0fcfbfb48e669cf48cccdd3001ea4d7f252011c762c306a9ab399110944cdc0654442c8c74aa2324dcc3c6dde6a79bc0eca50dda39a0e406a641acaa6eb7ffc9542d50c24b65337a03c870324dbcbfb63e0f522014b8a8db02e70d8259fdfa18d9eed358b36afd6baad7d88058eca42349d4aab517fd5546024f2e00df95012facec91c62d2225aca2de94cbc6a"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000004c0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x0, 0xf31e}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3f, 0x0, "f839ad6e", "c0c099c5"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x9, 0x4, 0x20, 0x8, 0xd8b1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xfd, "adadd7c0d2e9f562b4b23aaa400da7f4d41854d1ce14ad01bf3105b4786727117a49f92889b83da7b47368bdfd5db1ae3081e4ea0d50cc1642eb01087d9f59f7e4935ff3889c48773242885fd207e6b96acea3c6a5045338e7ad935442975b7c7225d9a3c194ad831099230d8961cf6a24b9f808a4fe98bcc266f466e39094efaa17e238baca4230179a40ac23eac3caff8eeac8e8b097d7c77c07a699d7ed490b3b3e8e64c7c4578041057b27efb7054adaf863704a2d0f1c13d5b1f0338072331ad54586b952ebbb1d339eb677a285bde941a0df986c737cd08d3e8f2408a42bbc0df24ce99780959fbb4ad0f1587b6216d2566cc708f2dfd8ba4570"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0xb08, 0x2, [0xf]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xe25d}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xdf}, &(0x7f0000000900)={0x40, 0xb, 0x2, '`f'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'ag'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}}) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0x11, 0xef, {0xef, 0xd, "ec0804a643373de0eac81b59810e570087221d3ecca837a5cdd472a39a11615115e037ccac463301930bcd6e93b3676ba88819f4fce92094978d49ffb58ff6553b06a47e584465b1125ce98c0ddcc7e7aa0bfb6041c3ba5ea61285b93041789c4d3057acc6ac279b8757496112a95a8a6fffb3c2ffcd717c1608d2e19a0d97b231d059db8fa3b39373745fcdf3730560f6f01b696e93be76b2965aec7646a9206864e144e50bc838b835f879a97be60f30b0aaea963ae3cc200abb6f0c78681d6fa64bec4b640bb314636754b51d2ff0efae1ba4176bdd2bfc21d5454dce8b33adf557fe4395a334a4f494a695"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "f6566a3f"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "bd919c19"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0xa, "860b21a2"}, @global=@item_4={0x3, 0x1, 0x9, "31e9f45e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x3, 0x1, {0x22, 0xdf1}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0x1d, "c78b6977edd8ff7969149fe9c0b76abf52794a7e3f632a68e3f8573fcd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x1, 0x17, "23f9dfda58576548cf958f0a17e09220670b59219dc862"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xff}})

00:18:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xb000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="3473ba3e01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xc000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xd000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3347.890876][T31937] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 3348.080686][T31937] usb 2-1: device descriptor read/64, error 18
[ 3348.350742][T31937] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 3348.560756][T31937] usb 2-1: device descriptor read/64, error 18
[ 3348.692266][T31937] usb usb2-port1: attempt power cycle
[ 3349.100707][T31937] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 3349.270735][T31937] usb 2-1: device descriptor read/8, error -61
[ 3349.540694][T31937] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 3349.740887][T31937] usb 2-1: device descriptor read/8, error -61
[ 3349.861246][T31937] usb usb2-port1: unable to enumerate USB device
00:18:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="3473ba3e01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="3473ba3e01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:18:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xe000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xedd521edf826ab6, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x5, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "532490e8d0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1b2f, 0x6, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x8000, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xea}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0x9, 0x10, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x18, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x8, 0x3f}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xf8, 0x45, 0x3f, 0x20, 0x2}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x40, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "68d20c134bbca7b9ff0c61aa540352f6"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf00, 0x3f, [0xff3f00, 0xc0, 0xff0000, 0x0, 0xff3fc8, 0x3f0f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x22, 0x20, {0x20, 0x24, "7206387a71967d4bc98a727d4689a91429fdd2b2f1212f130e3ab1aadf1c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000c40)={0x0, 0xf, 0xb4, {0x5, 0xf, 0xb4, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xee, 0x6, 0x9, 0x3ff, 0x80}, @generic={0x84, 0x10, 0x3, "6a6cd3c4dd623a8d37c43e95b42e36c6046e6962d5fc1870254d629296b1500b353a3278947660c4f6a5399143f3c1353a5d5dbdbd9b53f75b7c8a87d9ab30b90a4c7e27232b4024af495c6e2dcef38b8df3b7203446a64d8b2af62f20092743a945768a2223f2a0b0463d37f6797db3f8c05dfa4b0b522617ac852c20ca70c5bb"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7ff8001, 0x0, 0x101, [0x0, 0xc0, 0x3f00, 0xf, 0xff0000]}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0xf5, "c5c4f2a7", "29e20caa"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xff, 0x80, 0x5d, 0x4, 0x7}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x40, 0x15, 0xf8, "9dc903ccd4ed24486c0611c02ebfe33bbcfc9516d0220e3af2ec07c1c76511699d5a771951d8608d159f6f22eaed80f27c6d16424f552b336a5d5a39184c28617ae842c7fed2ff93c8f741b34c858ba6673ddb37706afbf4b0dd35646f0a5bede6d8183b3cb961ad01236cb19872854014384fb28299439bde1b10d5f74745bf516a852a4a8ff33cce074bd0efe1b26aa82e1239ff2a80a7b9202d65fcb1e1ef3331f101305ab6263198f2fb944d2e7e281674a5e303e1673b8a0c9019121f23c9fcb1c973f8e1a53e32e55c9ab83f32f5a608dd2d903af825dbfacc7fb14ba6ca3aa7865315b5777d42606ad699913d106a3d33a30d10d3"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x120, 0x20, [0xf00]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0xb, 0x2, "1a09"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x674d}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="35d58fe06767"}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="b8491171a2e3"}, &(0x7f0000001140)={0x40, 0x19, 0x2, '+\t'}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0xc}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040f000000074be2eb04fb0e71247cca2149f582d32f24ee8fe05f28ca582a640cb9051d82cf4bcd4fb9a2b5df142d92f082796facd23f00115a824e71109fc4f49ab1f2533852fb8ff2b29f7d5572bee0e07c1ecad23906023e3d0d4fecb2c8cff34dfcc78d9269bbfde1d9c2f3dc60"], 0x0}, 0x0)

00:18:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x10000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x11000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="3473ba3e01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x12000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3351.046720][T31937] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 3351.290729][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3351.410884][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3351.419028][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3351.429985][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3351.440329][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3351.710695][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3351.717070][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3351.731852][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3352.202226][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3352.210913][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3352.291471][T31937] usbhid 2-1:1.0: can't add hid device: -71
[ 3352.297501][T31937] usbhid: probe of 2-1:1.0 failed with error -71
[ 3352.306242][T31937] usb 2-1: USB disconnect, device number 16
00:18:55 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xedd521edf826ab6, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x5, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "532490e8d0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1b2f, 0x6, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x8000, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xea}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0x9, 0x10, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x18, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x8, 0x3f}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xf8, 0x45, 0x3f, 0x20, 0x2}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x40, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "68d20c134bbca7b9ff0c61aa540352f6"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf00, 0x3f, [0xff3f00, 0xc0, 0xff0000, 0x0, 0xff3fc8, 0x3f0f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async, rerun: 64)
syz_usb_control_io(r1, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x22, 0x20, {0x20, 0x24, "7206387a71967d4bc98a727d4689a91429fdd2b2f1212f130e3ab1aadf1c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000c40)={0x0, 0xf, 0xb4, {0x5, 0xf, 0xb4, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xee, 0x6, 0x9, 0x3ff, 0x80}, @generic={0x84, 0x10, 0x3, "6a6cd3c4dd623a8d37c43e95b42e36c6046e6962d5fc1870254d629296b1500b353a3278947660c4f6a5399143f3c1353a5d5dbdbd9b53f75b7c8a87d9ab30b90a4c7e27232b4024af495c6e2dcef38b8df3b7203446a64d8b2af62f20092743a945768a2223f2a0b0463d37f6797db3f8c05dfa4b0b522617ac852c20ca70c5bb"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7ff8001, 0x0, 0x101, [0x0, 0xc0, 0x3f00, 0xf, 0xff0000]}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0xf5, "c5c4f2a7", "29e20caa"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xff, 0x80, 0x5d, 0x4, 0x7}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x40, 0x15, 0xf8, "9dc903ccd4ed24486c0611c02ebfe33bbcfc9516d0220e3af2ec07c1c76511699d5a771951d8608d159f6f22eaed80f27c6d16424f552b336a5d5a39184c28617ae842c7fed2ff93c8f741b34c858ba6673ddb37706afbf4b0dd35646f0a5bede6d8183b3cb961ad01236cb19872854014384fb28299439bde1b10d5f74745bf516a852a4a8ff33cce074bd0efe1b26aa82e1239ff2a80a7b9202d65fcb1e1ef3331f101305ab6263198f2fb944d2e7e281674a5e303e1673b8a0c9019121f23c9fcb1c973f8e1a53e32e55c9ab83f32f5a608dd2d903af825dbfacc7fb14ba6ca3aa7865315b5777d42606ad699913d106a3d33a30d10d3"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x120, 0x20, [0xf00]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0xb, 0x2, "1a09"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x674d}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="35d58fe06767"}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="b8491171a2e3"}, &(0x7f0000001140)={0x40, 0x19, 0x2, '+\t'}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0xc}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x9}}) (rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040f000000074be2eb04fb0e71247cca2149f582d32f24ee8fe05f28ca582a640cb9051d82cf4bcd4fb9a2b5df142d92f082796facd23f00115a824e71109fc4f49ab1f2533852fb8ff2b29f7d5572bee0e07c1ecad23906023e3d0d4fecb2c8cff34dfcc78d9269bbfde1d9c2f3dc60"], 0x0}, 0x0)

00:18:55 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x18000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x11003, 0x0, 0x0, 0x0, 0x0, 0x6], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x25000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5c000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfcffffff}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3353.070718][T29461] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 3353.310670][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3353.430954][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3353.439932][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3353.450983][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3353.460809][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3353.700839][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3353.707123][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3353.716252][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3353.963663][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3353.972456][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3354.242046][T29461] usbhid 2-1:1.0: can't add hid device: -71
[ 3354.248009][T29461] usbhid: probe of 2-1:1.0 failed with error -71
[ 3354.256622][T29461] usb 2-1: USB disconnect, device number 17
00:18:57 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xedd521edf826ab6, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x5, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "532490e8d0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1b2f, 0x6, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x8000, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xea}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0x9, 0x10, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x18, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x8, 0x3f}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xf8, 0x45, 0x3f, 0x20, 0x2}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x40, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "68d20c134bbca7b9ff0c61aa540352f6"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf00, 0x3f, [0xff3f00, 0xc0, 0xff0000, 0x0, 0xff3fc8, 0x3f0f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x22, 0x20, {0x20, 0x24, "7206387a71967d4bc98a727d4689a91429fdd2b2f1212f130e3ab1aadf1c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000c40)={0x0, 0xf, 0xb4, {0x5, 0xf, 0xb4, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xee, 0x6, 0x9, 0x3ff, 0x80}, @generic={0x84, 0x10, 0x3, "6a6cd3c4dd623a8d37c43e95b42e36c6046e6962d5fc1870254d629296b1500b353a3278947660c4f6a5399143f3c1353a5d5dbdbd9b53f75b7c8a87d9ab30b90a4c7e27232b4024af495c6e2dcef38b8df3b7203446a64d8b2af62f20092743a945768a2223f2a0b0463d37f6797db3f8c05dfa4b0b522617ac852c20ca70c5bb"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7ff8001, 0x0, 0x101, [0x0, 0xc0, 0x3f00, 0xf, 0xff0000]}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0xf5, "c5c4f2a7", "29e20caa"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xff, 0x80, 0x5d, 0x4, 0x7}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x40, 0x15, 0xf8, "9dc903ccd4ed24486c0611c02ebfe33bbcfc9516d0220e3af2ec07c1c76511699d5a771951d8608d159f6f22eaed80f27c6d16424f552b336a5d5a39184c28617ae842c7fed2ff93c8f741b34c858ba6673ddb37706afbf4b0dd35646f0a5bede6d8183b3cb961ad01236cb19872854014384fb28299439bde1b10d5f74745bf516a852a4a8ff33cce074bd0efe1b26aa82e1239ff2a80a7b9202d65fcb1e1ef3331f101305ab6263198f2fb944d2e7e281674a5e303e1673b8a0c9019121f23c9fcb1c973f8e1a53e32e55c9ab83f32f5a608dd2d903af825dbfacc7fb14ba6ca3aa7865315b5777d42606ad699913d106a3d33a30d10d3"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x120, 0x20, [0xf00]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0xb, 0x2, "1a09"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x674d}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="35d58fe06767"}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="b8491171a2e3"}, &(0x7f0000001140)={0x40, 0x19, 0x2, '+\t'}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0xc}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040f000000074be2eb04fb0e71247cca2149f582d32f24ee8fe05f28ca582a640cb9051d82cf4bcd4fb9a2b5df142d92f082796facd23f00115a824e71109fc4f49ab1f2533852fb8ff2b29f7d5572bee0e07c1ecad23906023e3d0d4fecb2c8cff34dfcc78d9269bbfde1d9c2f3dc60"], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xedd521edf826ab6, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x5, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "532490e8d0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1b2f, 0x6, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x8000, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xea}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0x9, 0x10, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x18, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x8, 0x3f}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xf8, 0x45, 0x3f, 0x20, 0x2}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x40, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "68d20c134bbca7b9ff0c61aa540352f6"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf00, 0x3f, [0xff3f00, 0xc0, 0xff0000, 0x0, 0xff3fc8, 0x3f0f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x22, 0x20, {0x20, 0x24, "7206387a71967d4bc98a727d4689a91429fdd2b2f1212f130e3ab1aadf1c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000c40)={0x0, 0xf, 0xb4, {0x5, 0xf, 0xb4, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xee, 0x6, 0x9, 0x3ff, 0x80}, @generic={0x84, 0x10, 0x3, "6a6cd3c4dd623a8d37c43e95b42e36c6046e6962d5fc1870254d629296b1500b353a3278947660c4f6a5399143f3c1353a5d5dbdbd9b53f75b7c8a87d9ab30b90a4c7e27232b4024af495c6e2dcef38b8df3b7203446a64d8b2af62f20092743a945768a2223f2a0b0463d37f6797db3f8c05dfa4b0b522617ac852c20ca70c5bb"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7ff8001, 0x0, 0x101, [0x0, 0xc0, 0x3f00, 0xf, 0xff0000]}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0xf5, "c5c4f2a7", "29e20caa"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xff, 0x80, 0x5d, 0x4, 0x7}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x40, 0x15, 0xf8, "9dc903ccd4ed24486c0611c02ebfe33bbcfc9516d0220e3af2ec07c1c76511699d5a771951d8608d159f6f22eaed80f27c6d16424f552b336a5d5a39184c28617ae842c7fed2ff93c8f741b34c858ba6673ddb37706afbf4b0dd35646f0a5bede6d8183b3cb961ad01236cb19872854014384fb28299439bde1b10d5f74745bf516a852a4a8ff33cce074bd0efe1b26aa82e1239ff2a80a7b9202d65fcb1e1ef3331f101305ab6263198f2fb944d2e7e281674a5e303e1673b8a0c9019121f23c9fcb1c973f8e1a53e32e55c9ab83f32f5a608dd2d903af825dbfacc7fb14ba6ca3aa7865315b5777d42606ad699913d106a3d33a30d10d3"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x120, 0x20, [0xf00]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0xb, 0x2, "1a09"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x674d}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="35d58fe06767"}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="b8491171a2e3"}, &(0x7f0000001140)={0x40, 0x19, 0x2, '+\t'}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0xc}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040f000000074be2eb04fb0e71247cca2149f582d32f24ee8fe05f28ca582a640cb9051d82cf4bcd4fb9a2b5df142d92f082796facd23f00115a824e71109fc4f49ab1f2533852fb8ff2b29f7d5572bee0e07c1ecad23906023e3d0d4fecb2c8cff34dfcc78d9269bbfde1d9c2f3dc60"], 0x0}, 0x0) (async)

00:18:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfdfdffff}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x11003, 0x0, 0x0, 0x0, 0x0, 0x6], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfffffdfd}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfffffffc}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3355.070682][T29461] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 3355.310749][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3355.430924][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3355.439062][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3355.450020][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3355.459919][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3355.700804][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3355.707041][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3355.721208][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:18:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502994734"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:18:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x11003, 0x0, 0x0, 0x0, 0x0, 0x6], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:18:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x100000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3356.192206][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3356.200904][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3356.210961][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3356.225759][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:18:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3356.310914][T29461] usbhid 2-1:1.0: can't add hid device: -71
[ 3356.316934][T29461] usbhid: probe of 2-1:1.0 failed with error -71
[ 3356.326866][T29461] usb 2-1: USB disconnect, device number 18
00:18:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x200000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:18:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3356.700750][T29461] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 3356.940668][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3357.060702][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3357.069047][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3357.080081][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3357.089869][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 3357.100791][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 9287, setting to 1024
[ 3357.350774][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3357.357269][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3357.366678][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3357.853254][T29461] hid-generic 0003:057B:003F.005B: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3358.054144][T29461] usb 2-1: USB disconnect, device number 19
00:19:01 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502994734"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000001c0)={0x4, 0x5, 0x3, 0xff, 0xfffffffffffff9dc})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0)
write(r3, &(0x7f0000000180)="dab69f31be12b7acb73ee0d10b6c57ec308cfa93aa6396a7eebcd75f1eae2655360f2b577a", 0x25)

00:19:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x300000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x400000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3358.900920][T29461] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 3359.140814][T29461] usb 2-1: Using ep0 maxpacket: 8
[ 3359.260769][T29461] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3359.268952][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3359.280066][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3359.289966][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 3359.300853][T29461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 9287, setting to 1024
[ 3359.550725][T29461] usb 2-1: string descriptor 0 read error: -22
[ 3359.557201][T29461] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3359.566384][T29461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3360.090752][T29461] usbhid 2-1:1.0: can't add hid device: -71
[ 3360.096730][T29461] usbhid: probe of 2-1:1.0 failed with error -71
[ 3360.109658][T29461] usb 2-1: USB disconnect, device number 20
00:19:03 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502994734"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502994734"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)

00:19:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x500000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000001c0)={0x4, 0x5, 0x3, 0xff, 0xfffffffffffff9dc})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async, rerun: 64)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0)
write(r3, &(0x7f0000000180)="dab69f31be12b7acb73ee0d10b6c57ec308cfa93aa6396a7eebcd75f1eae2655360f2b577a", 0x25)

00:19:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x600000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3360.890796][ T3221] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 3361.140838][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3361.260922][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3361.269077][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3361.280215][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3361.290222][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 3361.301453][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 9287, setting to 1024
[ 3361.550971][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3361.557259][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3361.566621][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3362.065195][ T3221] hid-generic 0003:057B:003F.005C: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3362.271552][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3362.280221][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:06 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000040)={0x40, 0xf12899927e6c6f77, 0xf6, {0xf6, 0x11, "6f885f356c3de5670130b6f0267a81d4dd39e4f7da8d7976b59a15f1c1fd322b22578b25ccdd4f000bde3922948c87b8cc48706e93e7d74b0b87058e344db7eeb91792ba6ec04091a16fd569b2946cb5af0a72bf52b3b6592b3d009a8f16cd69fcf66486e2b0e928c433d96cc5c4adc889c8fbe8917698c27fa7937d84345aafa1dca1a09526e3ead51fedce1a337fdcd57b71d269911b1139f957c15e2afa288dbfb87705b4ae1576cd028742af2b342bc42159570c48b6305cd00df4e51e94781fc529a15c868b78104f07e2277a696480001030e80726cfb080ec21a3243b56259f35587c2e5a8f87974b5ec9dce213b06221"}}, &(0x7f0000000140)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "55655a98b259db4f2bf39554c8ef923bfd32146f30098c868fb5c4311d1fd49a3321b8208031a805762be08b28bbf89ecc0fbad5c4de9966ac641c3edefd72ca079003958d6d2cf6ff2ecc084c270941b190e2bbc487af1495115e39200be75bdb175cbdc849e333f26bdd96eb44f36a967a333e9d27a0174f0f3f7adc70bab7dec7b70525acd7d3e1abf731e7e7df0249e939d56780485f4fa04db5"}}, &(0x7f0000000240)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x3, "a4724af3"}, @local=@item_012={0x1, 0x2, 0x3, 'Z'}, @local=@item_4={0x3, 0x2, 0x9, "3765c934"}, @local=@item_012={0x2, 0x2, 0x4, "e10c"}, @local=@item_4={0x3, 0x2, 0x9, "2a5074a8"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x8fe}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0xaf, "45d479f14a5f8a43a932f02240c64dbe90e54b78799962825ec580c99039d9c2060b6fee92e4e5ac58325093716b06f73c4b180b7baed532db89353588a5a30a4037a83f541cf973ebb226b521822de752fa55b369330e92d4bc64150930def5281c21966ba091f63873ca7d9c1f870c1712cb3dd63e9d271d18ea456a0f61fa8e80873c3170c949f8a375dc1cc9dd7b98f0005c448ddd7920444f3edf0833f36707d71d868c563a5ff1090e0ef55f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0x3d, "b3fe9d87f4d946243363ee758bb33c6f3dfa1df1cdd68f47e42d53fcc6b9422aef716ecdda5e904b9e0bbcd1c5f91c530e3b4ac8d1ff7494f961e08546"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x700000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000001c0)={0x4, 0x5, 0x3, 0xff, 0xfffffffffffff9dc}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0)
write(r3, &(0x7f0000000180)="dab69f31be12b7acb73ee0d10b6c57ec308cfa93aa6396a7eebcd75f1eae2655360f2b577a", 0x25)

00:19:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3363.612978][ T8081] usb 2-1: USB disconnect, device number 21
00:19:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x800000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3364.100716][ T8081] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 3364.360810][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3364.490702][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3364.498810][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3364.510193][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3364.520707][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3364.770837][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3364.777122][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3364.786325][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3365.293369][ T8081] hid-generic 0003:057B:003F.005D: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3365.496007][ T8081] usb 2-1: USB disconnect, device number 22
00:19:08 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000040)={0x40, 0xf12899927e6c6f77, 0xf6, {0xf6, 0x11, "6f885f356c3de5670130b6f0267a81d4dd39e4f7da8d7976b59a15f1c1fd322b22578b25ccdd4f000bde3922948c87b8cc48706e93e7d74b0b87058e344db7eeb91792ba6ec04091a16fd569b2946cb5af0a72bf52b3b6592b3d009a8f16cd69fcf66486e2b0e928c433d96cc5c4adc889c8fbe8917698c27fa7937d84345aafa1dca1a09526e3ead51fedce1a337fdcd57b71d269911b1139f957c15e2afa288dbfb87705b4ae1576cd028742af2b342bc42159570c48b6305cd00df4e51e94781fc529a15c868b78104f07e2277a696480001030e80726cfb080ec21a3243b56259f35587c2e5a8f87974b5ec9dce213b06221"}}, &(0x7f0000000140)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "55655a98b259db4f2bf39554c8ef923bfd32146f30098c868fb5c4311d1fd49a3321b8208031a805762be08b28bbf89ecc0fbad5c4de9966ac641c3edefd72ca079003958d6d2cf6ff2ecc084c270941b190e2bbc487af1495115e39200be75bdb175cbdc849e333f26bdd96eb44f36a967a333e9d27a0174f0f3f7adc70bab7dec7b70525acd7d3e1abf731e7e7df0249e939d56780485f4fa04db5"}}, &(0x7f0000000240)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x3, "a4724af3"}, @local=@item_012={0x1, 0x2, 0x3, 'Z'}, @local=@item_4={0x3, 0x2, 0x9, "3765c934"}, @local=@item_012={0x2, 0x2, 0x4, "e10c"}, @local=@item_4={0x3, 0x2, 0x9, "2a5074a8"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x8fe}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0xaf, "45d479f14a5f8a43a932f02240c64dbe90e54b78799962825ec580c99039d9c2060b6fee92e4e5ac58325093716b06f73c4b180b7baed532db89353588a5a30a4037a83f541cf973ebb226b521822de752fa55b369330e92d4bc64150930def5281c21966ba091f63873ca7d9c1f870c1712cb3dd63e9d271d18ea456a0f61fa8e80873c3170c949f8a375dc1cc9dd7b98f0005c448ddd7920444f3edf0833f36707d71d868c563a5ff1090e0ef55f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0x3d, "b3fe9d87f4d946243363ee758bb33c6f3dfa1df1cdd68f47e42d53fcc6b9422aef716ecdda5e904b9e0bbcd1c5f91c530e3b4ac8d1ff7494f961e08546"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
dup3(r3, r6, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x100000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x900000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xa00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xb00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3366.330811][T29462] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 3366.580747][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3366.720757][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3366.728944][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3366.739911][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3366.749825][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3366.990753][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3366.997020][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3367.006212][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3367.546211][T29462] hid-generic 0003:057B:003F.005E: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3367.747092][T29462] usb 2-1: USB disconnect, device number 23
00:19:10 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000040)={0x40, 0xf12899927e6c6f77, 0xf6, {0xf6, 0x11, "6f885f356c3de5670130b6f0267a81d4dd39e4f7da8d7976b59a15f1c1fd322b22578b25ccdd4f000bde3922948c87b8cc48706e93e7d74b0b87058e344db7eeb91792ba6ec04091a16fd569b2946cb5af0a72bf52b3b6592b3d009a8f16cd69fcf66486e2b0e928c433d96cc5c4adc889c8fbe8917698c27fa7937d84345aafa1dca1a09526e3ead51fedce1a337fdcd57b71d269911b1139f957c15e2afa288dbfb87705b4ae1576cd028742af2b342bc42159570c48b6305cd00df4e51e94781fc529a15c868b78104f07e2277a696480001030e80726cfb080ec21a3243b56259f35587c2e5a8f87974b5ec9dce213b06221"}}, &(0x7f0000000140)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "55655a98b259db4f2bf39554c8ef923bfd32146f30098c868fb5c4311d1fd49a3321b8208031a805762be08b28bbf89ecc0fbad5c4de9966ac641c3edefd72ca079003958d6d2cf6ff2ecc084c270941b190e2bbc487af1495115e39200be75bdb175cbdc849e333f26bdd96eb44f36a967a333e9d27a0174f0f3f7adc70bab7dec7b70525acd7d3e1abf731e7e7df0249e939d56780485f4fa04db5"}}, &(0x7f0000000240)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x3, "a4724af3"}, @local=@item_012={0x1, 0x2, 0x3, 'Z'}, @local=@item_4={0x3, 0x2, 0x9, "3765c934"}, @local=@item_012={0x2, 0x2, 0x4, "e10c"}, @local=@item_4={0x3, 0x2, 0x9, "2a5074a8"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x8fe}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0xaf, "45d479f14a5f8a43a932f02240c64dbe90e54b78799962825ec580c99039d9c2060b6fee92e4e5ac58325093716b06f73c4b180b7baed532db89353588a5a30a4037a83f541cf973ebb226b521822de752fa55b369330e92d4bc64150930def5281c21966ba091f63873ca7d9c1f870c1712cb3dd63e9d271d18ea456a0f61fa8e80873c3170c949f8a375dc1cc9dd7b98f0005c448ddd7920444f3edf0833f36707d71d868c563a5ff1090e0ef55f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0x3d, "b3fe9d87f4d946243363ee758bb33c6f3dfa1df1cdd68f47e42d53fcc6b9422aef716ecdda5e904b9e0bbcd1c5f91c530e3b4ac8d1ff7494f961e08546"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (rerun: 32)

00:19:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
dup3(r3, r6, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x100000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) (async)
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async)
dup3(r3, r6, 0x0) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x100000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:19:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xc00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xd00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
dup3(r3, r6, 0x0) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x100000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3368.650658][T26182] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 3368.890807][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3369.011122][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3369.019326][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3369.031668][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3369.041680][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3369.290758][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3369.297146][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3369.311475][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3369.626089][T26182] hid-generic 0003:057B:003F.005F: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:19:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xe00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3371.311350][T26182] usb 2-1: USB disconnect, device number 24
00:19:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1000000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb651, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x24, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1, 0x9c, 0x1, {0x22, 0x932}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x7, 0x85}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xf1, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x8, 0x1, 0x5, 0x40, 0x2}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x0, 0x401}]}, 0x3, [{0xed, &(0x7f00000013c0)=@string={0xed, 0x3, "ba31f51be9913b1f0eded4262f9c559c015415f19b8c559deaa8f8ca88e563c56b4b6ab6253424b7ecaaba8eeaf21b017dfcd8cb6cefdd6bdc9e9fe316f7c90d1dd2a1365d6d2f24b7e74dff4fb01ca71cd0cd784253f2a0e3cd2d6646438fc034962585419aaa848d7645975a2d8f486811ea422a4f5d9139e19f534aa0de2b0f782593cd17e76588d77dbf5cdcfbb952f76593053e7ec670dfaed2852159ed3dbbf9fe4d290396803aa8253e1b2f6a994981f4f903ce5f68bbb4b4a25bf1735cf0d3d7805e90433743ffbfc83545341d3d835f09908350296a9fe78c4a1e2eb6fd8e8b530683673a369a"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x408}}, {0x7c, &(0x7f0000001500)=@string={0x7c, 0x3, "abccfab0194f15c30c392d09cfea8c29fe1a599f1d3ffda3795b5008005c5efee7b27dc0be05c9d35385ef431f8fc71c74c7e117b3edd80924ecc350f67234ff1eacc96c03256833faec35a0314a12417c29afff0671be2413173a650b1712e7ea964bb79618b789d050fe8f57245caed2c122cb725476ad0c20"}}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_connect(0x1, 0x8cb, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0x48, 0xc5, 0x0, 0x10, 0x2304, 0x207, 0x4531, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b9, 0x3, 0x20, 0x81, 0x0, 0x6, [{{0x9, 0x4, 0xa7, 0x0, 0x6, 0xc4, 0x51, 0x42, 0xe9, [], [{{0x9, 0x5, 0x2, 0x1c, 0x20, 0x0, 0x60, 0x3, [@generic={0xa5, 0x3, "1875b602008f9677f45f2837d1245d6444638eace1fa9f3f359c2f212cacb0ea3617d58996e40ed8d337042502600d34d795ad1e040f7a2ef0a38d5e697ee5e2ec733d651a166ab66f77f6da4a6e207466bcd6740c7b630e8266364fd5a627e769b4cb37eaaf7c57ddb9701b21639f25e991ff99e53aeb5e935134b9e96a3d4358bf5b804226e9d5c377720d8306b06f9d1ba1a2490ad13112eec07fabf45b59e0f85d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x25, 0xff80}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x3f, 0xe0, 0x3}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x3, 0x1}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x7, 0x1f, 0x7f, [@generic={0x72, 0x0, "b1488052afa22fe226aeeee699ce3800f28dd20c66a57e1819d376ad17550d85629fe4912b16ad89072bda03b4afbcbf598075c543e5059328aae41ec6935021ef1ff1b564710068a1ad983fef65458ae222f7ec8835a72d31b6ecbed7ca24cc72ee7b0052c310d1b9b3aa473a3046c8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x7f, 0x7, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0xe4c916cb29fcf2ee, 0x2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x40, 0x9, [@generic={0xb3, 0x5, "71b71d26decc2e92657511367770fed4f86a934ae8d1ad863932614e2cfe1a6b7c03696e2d8c7b46696b2a1c1cb9a39deb33360cf2086e05a8ccf359062ac14f2c630c2fb82ecb87012e80c1df52db3f2dec5957ebb5210100aa481a63cac806aef106737288b1f964a53a42c259d4c894dfb7661451dd9b4325c606f1fccd9c46402a2158931ba96153de1ced0394606009da4bc1b20577c671deed8a40f5593456429ab76598fcbc4dcba4dd3c547c7c"}, @generic={0x6e, 0xa, "34ec89b47dec9a67b5be057169f188ed813049cedbd6367849b307dbfeab3d1fa4143b5207180051069d86782410b2a6a5dd03ebf342a91b9e7641c6e56a2d8d58f9d43ced1f11f0a2a07bc4093ab306a73f26ed9c270c7fdf3c7f7decad0ac901aef6975afe9cf8418889e9"}]}}]}}, {{0x9, 0x4, 0x9b, 0x59, 0x5, 0x6, 0xfd, 0xa8, 0x20, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2be93b0176"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x8, 0xc8}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0x5}, @dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x24, 0x0, 0x3f, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa0}, @acm={0x4, 0x24, 0x2, 0xf}]}, @hid_hid={0x9, 0x21, 0xd9, 0x80, 0x1, {0x22, 0xd3a}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x2, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xe9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x9, 0x3f, 0x7, [@generic={0x3c, 0x11, "14d530ab5a1e7735f3cd784128bd6f543787a90b8870cc81bd2ae1852ed350daac83a32e0c920b27f9cacb95700831960491e40e0a8e521b4127"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x5, 0x0, 0x1, [@generic={0x73, 0x1, "49e90083b9459ea22000494111f5ae44c927b909966c648455d2e84b76b6de2569e4d381963f29724f6b30490da4ffec943c25209c060604dd35f8e10ca4882eecc5e2ff78e76bb40b5885c52a12342d630c74e26f7ed295512a9b504a611264e62c5a38d5fdb10e2bee020d28860e97eb"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x200, 0x0, 0x3, 0x94, [@generic={0xfe, 0x1a, "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"}, @generic={0x2d, 0x22, "e7b87d70275f80cc193a3df07f137efd25df671857940b8f5821adfac30677ff73c3746c60983190558e6e"}]}}]}}, {{0x9, 0x4, 0x7e, 0x2, 0x9, 0xff, 0xff, 0xff, 0x6, [@generic={0x3d, 0x21, "1885949c0c7257a0d84b03a3d0facdc2acfabff6c4d4e448d6b1e2fa404c85c64b90d5a7e7c3d04528321be5a3d5db64cf0148c4861b980486ddf5"}, @uac_control={{0xa, 0x24, 0x1, 0x101, 0x8c}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x1, 0x5, 0x3, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x43ef, 0x68, "66172aed"}]}], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa6, 0x3, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x6}, @generic={0x32, 0xa, "6305eb1832873422081b161f98bd701322ec3c6b25eb0690cf606b15ecd62e8d3d19c8971cdd213bc9f77e76cf85fc45"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x8, 0x1f, [@generic={0xb6, 0x1, "e9a9757027135d8b8b227033287531035e46d3a31566331cd4140a324737901f2023cf94f533c0e2c454e74098a34a61307013d1158bc856d2327d402a3016b27af54c708d08f1557d30cf0b313e27e792035f33d5ca68ad4aa174de4b83cb8057e04ad449c247ff9dfed5bda012698da67738291aa7bbbe0007ac940626c1bb711da19374b9b69dd620b10b31211b7d5cef414032c6c599e6a5232d6b45a8a5a1d0ffdac66a07a9b0d2b4222c83c51985339ae4"}, @generic={0x44, 0x22, "23bd330da5991a8b59b04b415605d9e05bf40d40dbb68671cf676daea5cbe32b5c5380831dc375e52efe496e0c3a4fa0c5aa707e19c570fff53668549d557b8fe963"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x80, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xe1, 0x20, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x80}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xff, 0x8a}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8a}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x80, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x5, 0xc9, 0xff, [@generic={0x7f, 0xa, "fbba6836a22519a969bcad73298a6467b8545e0bf42a35f3e7413e9882aff64899436993bbba0e7e8464b5910a5466a84ead9cf7c507f9f644b4b2d469991b6256d09a8e17a94ff51b287df125644f08f4eb06002a9a75000a3a138e69650558de670edb9edaba36195816a7e091fc29fe563e3b8c861b2db644c90823"}, @generic={0xf8, 0x23, "c24af849a6faadc1c54cb1f7cad4311b19703d7d37e43700545693c609d0bc330c8b359b38ea078d65e68ec0d999d99c1362fb6364fcfd60c725fbf5c1a02ccc485e5fcad9cf8e152a24315f5a5386c419b2f3fc6899edae35c0269c3fdc7c0a4115b1dcf079dcc48971926c5645e7b88523e68e14d341f03968ce95105d480919d5209a49fa745885886c6aeadbde1a8eade3948d0faffde06eaf20735c605744698fa9e9dbaa75c157fc604d14374036826a6dbb103da9eefc55da79eb7276d553b911ebcb77ec44ac2c551d4bac4a3586e8325c29922589be5c925bcaca0202aca23470758bf492de26f1dd2d94293a99ca0569ca"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x23, 0x5, 0x5, [@generic={0x3f, 0x21, "3358c420a43e6dd909dc2d54c671d7dade57cd5fe8306b88e5758477699a29bdc594d24b78390cc89f18d780d2bc55ef4d31f0e3aac026bce4a76c6873"}]}}]}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x250, 0x4, 0x7, 0x9, 0x20, 0x81}, 0x3e, &(0x7f00000021c0)={0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x40, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xbf, 0xff, 0x7f, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x7, 0xff14}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bef538f594e37309f73beada77695a71"}]}, 0x3, [{0x3b, &(0x7f0000002200)=@string={0x3b, 0x3, "bafad51c2acffde54f1ccdc266233d52141eeccd2935302b9946e6203d2b7c6a2322bf8325ea1b1e5fc44b3eb36de444efbcbe2c7730b94666"}}, {0x70, &(0x7f0000002240)=@string={0x70, 0x3, "a13e8c2c57fa9653bb1bd30dd7ff54397fe4e2dfa3cf3c0788920780796c0b1f068ba21a2a380bf9bccb98835dc1a2a52d7a983dfefcf2302102c73be18a8bcbc7b3d2c8dfc1e2c784f12a3c931d86bcc570b578b0a55ada7d51f4614f3eb9855882e5d7185cb07b69868d04a4a6"}}, {0x8c, &(0x7f00000022c0)=@string={0x8c, 0x3, "438e27aec5fa2bf33359e1404bf00f32c2ae431c1b813e1730c9e815b7b5559660b32000f300de996189c16959199c8b05988e501eef92c39c6f7b8047737db48fcd338c3911eb0d51bd035fc89f7ebf1d7eb992e73bc57e92b11ed1a226d93ff8a4c3187fa976d1c192a2151f35291d8c0a3179568b4d7746911ca7255dd894b5474842817d76e82ac7"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x44b, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x84, 0xea, 0x26, 0xff, 0x471, 0x30c, 0xd9cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x439, 0x3, 0x4, 0x5, 0xc0, 0x2, [{{0x9, 0x4, 0x4c, 0x1, 0x6, 0x6a, 0xcc, 0x82, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x45f6}, [@country_functional={0xe, 0x24, 0x7, 0x20, 0x5, [0x7fff, 0xc7e3, 0x81, 0x0]}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x9, [0x7, 0x2, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xa4, 0x1, 0xf0}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0x80, 0x1f, [@generic={0x17, 0x3, "5f4acbeb88df78352146bcb2c812fa77d068c576c5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8d}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x2c, 0x22, "ed86bea83cc09d0402c13fb796f35df8bfb0f8c28e7066dba0426272bcbc5528ac719770a59bbc656175"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x6, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}, @generic={0xc8, 0x23, "01c6749b786b6e3695958210329a80bc46c83c3524b4b009394f210557865080383ed70e5d1e4dc57f8152bd75a57efbbdff8849430ca1622eb09d92091840066d1becad9156ccdbc1b39411195065ed12bc470d8c042b03af4fd98a9e9ebc3b005b33e3063e5592f938c665bce1e4f6a2bb76ec5166c5740264ff1917a64a6153c9bfc5099475084294c8735c9b0d58b94007377dd913364ec005da57cf83b25f8fd824ca1186b7b438d4ae072f45133ec8a36c9c1df9122d24260b49809e5252a3a5a5d58a"}]}}]}}, {{0x9, 0x4, 0xbb, 0x0, 0xb, 0x2a, 0x34, 0x28, 0xab, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x60, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xf9, 0x4, 0x1, [@generic={0xd9, 0xe, "673c5754219889fcee27d4456b1b781e4ce088a0aef01dd460d20c27a15948d569087d1790227a12ed6edb89df4774f4440200884427dadf44a3792dbb3792ea86bf6d0cb18b8a2937e9ef091d0c8760bbb471f174998c1708aa92bc3b7bafd4295070e02688667df44fd9238f679a8f1c2582fec6c09d95aa4ee90dab2a88517a3c6f95842822067efccae57a7dc7ffec9fddc751c709e0b8aa9814719e8b9bb870045aa49b8587154b8c5fcbd55bd99d1e918fa7f15d35555a66c5ac8ec6a5d9b3d27b4ca0863d8af07c8bdb495a1dca5cbc84c867b5"}, @generic={0x1b, 0x2, "dd5eb76962e97655751fc30a95ad6162247531e5be88b44dff"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x10, 0xf9, 0x81}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xc5, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xe3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xfa, 0x9, 0xff, [@generic={0xbb, 0x9, "cfce6c9e2611afc100f03c5140042c993566896be2ad4a26011bc4cf5fbe996acba25ca841702f938228cd95c956519e8a5c19c8adfbece6f6ff2b0daa64f0579a55fbfd601171d97b1101612fd475f04369f2e370b0233ee9d06f074156390275c12a358ca8bdba6404b2da9c4e35749ae06ee35840daa6d3010199d9f5fbe48dfd7ca1b219c1113dbd1cc3d2876e6df6d038102c5af2d5fa0a016042b10e7a7e6d0e808bfb323b670ab43f40f00759c313802b7fffb050c0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2e, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x74, 0x9, 0x7a}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc7, 0x9, 0x5}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x65, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x13, 0x200, 0x0, 0x7, 0x4e, [@generic={0xb, 0x21, "dd06c0b29ea068fbbf"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x3, 0x7f}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x7f, 0x8}}]}}, {{0x9, 0x4, 0xd0, 0x81, 0x4, 0x3f, 0xa9, 0x9f, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'M'}, {0x5, 0x24, 0x0, 0xf801}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x852, 0xff}, {0x6, 0x24, 0x1a, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x17}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x401, [0x0, 0x5, 0x1, 0x9]}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x19, 0x6, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0xe08}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x2, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x6, 0x9, 0xd7}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x78efbc5f38889d98, 0x9, 0x8c, 0x0, 0x8, 0xd8}, 0x8, &(0x7f0000000e00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x420}}, {0x49, &(0x7f0000000e80)=@string={0x49, 0x3, "485a58a71320bb790a5a64893b204a7b54994501623530c8fd1d3b7cdad5a899e5cb88729cd1edfcd8ddbcb8e9988a7dc79fe5ca6a56477a610136d952c3b4843d5dd7e3dbdcf9"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x809}}, {0x6, &(0x7f0000000f40)=@string={0x6, 0x3, "81162234"}}, {0x3e, &(0x7f0000000f80)=@string={0x3e, 0x3, "5bb97828837289ab9f8e4470c231db932f3b908172b615b756f2e3abaff3d552b9cc8a64e827259d81d3746db6e7f36ba0a934292cfb7297f84a4001"}}, {0x71, &(0x7f0000000fc0)=@string={0x71, 0x3, "99a2be11b19c945693c23e6849df3059c549bf08f977b72f10a926a5eaed3403c88f9944578ab8d75c0ccacb87d97e7f0934a59a6e1e87a524b977bb176c2140427ca13c631e4d3cf3f9fe7794f621aa4b86e6305662c45f60849bb3e166e90eaafb1d1ccf2658df66bcebaf24107d"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1809}}, {0xe5, &(0x7f0000001080)=@string={0xe5, 0x3, "fca35a661b8f24e1f1f5507a1da4e42f4108a398c9dc9e4fbac1fdd9d2dcc3ffaacdca721e18423193a58b66e3a8bc0812428698220d1268cb1ed58cade41e2867557741c05a9bd1cf2c2d113795e4660c4e455205944d518e61e979812c6109827b6d58d674b3c4fee3b8bd1c57aa952b61fdaeeff4b91c7b8c9d2b8b0419d5a03c68d9aefe532403dc33a454ea024de684426edc5ffe6a90b584db63f266c7dbe0fd5b7e370ab43aa07621d0dd300e573906b61a9090b455759c808655f02ac0528f0e0026625c13ed2060594cd68fe456ecf08c10c3ad71bf4278ea96fed8df01a1"}}, {0x68, &(0x7f0000001180)=@string={0x68, 0x3, "859ef7eaff2d5652ee838d7306822c55c215032f115963ddec3106e995678794474b38be786c01428530cc1669b0bdc0219a9520852f00439cfefa3f45b439dd877161cf3bd1014d72af088ce15a7fced9d171a87fa6d9bc265938c40aaaef00bc14782d34c0"}}, {0xc, &(0x7f0000001200)=@string={0xc, 0x3, "dccbfc7ae64d24c67213"}}]})
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x40, 0x5, 0x5, {0x5, 0x21, "2edba2"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xe0, 0x4, "587abe8e", "3291d883"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x9, 0x2, 0xff, 0x7, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x6, 0xdf, "224039cbebbe07e6a29d49f8756e250700c79d3b5c0110092ff65dc0b3ba193ba78329f395eab1b9d4784e11588b061274a5f7ea92e10d3c6acf7050432e19dcbb9fb0b7dbc21c9182cd49493e705fa66934022817e34bd47b3d85ca2d18e0f7b1fcb985dcb4f4bc0135a8beea2912ce73b7b61333f7cce66b0b7113aeea7637c1fe0f0f410dbecc5bc8b8ad442f3080dffd556d9f16efff0ad45dfb751774d0855724cb93216baa5f87b97ee3f71dafc35f2778369b778c5333295018729bbfa8822db58dd7201623bf4e845d5b001e984c6590bdf5c9e36ed798e0210928"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x40}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9a}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b430"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f4e2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x8}})
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbd, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0xc5, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xdd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x40}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x1, 0x8, 0x8, 0x10}, 0x1a, &(0x7f0000000840)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x68, 0x20, 0xcc, 0x9, 0xd1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfb, 0x400}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2401}}]})
syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0xe, 0x80, 0xf8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x15, {{0x8, 0x24, 0x6, 0x0, 0x0, "38a733"}, {0x5, 0x24, 0x0, 0xc2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8000, 0x4, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0xad, 0x1c}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x6, 0xa3}}], {{0x9, 0x5, 0x82, 0x2, 0x418, 0x3f, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x110, 0x81, 0x5, 0x16, 0x10, 0xa9}, 0x1d, &(0x7f0000001680)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x2, 0x7, 0x0, 0x87}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x8, 0x3883}]}, 0x5, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x22, &(0x7f0000001700)=@string={0x22, 0x3, "cbb11e953c9f9c90bfd9caef6098dfcd3c3306893d15039cb3e55aac3f08d120"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xaac}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3c0a}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1100000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1200000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3371.880753][T26182] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 3372.120691][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3372.240919][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3372.249565][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3372.260787][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3372.270678][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3372.510800][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3372.517037][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3372.533545][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3372.782171][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3372.791062][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3372.799881][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3372.808781][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3372.818208][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3372.826858][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3372.836012][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3372.844820][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3373.084992][T26182] hid-generic 0003:057B:003F.0060: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3373.285316][ T3222] usb 2-1: USB disconnect, device number 25
00:19:16 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb651, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x24, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1, 0x9c, 0x1, {0x22, 0x932}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x7, 0x85}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xf1, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x8, 0x1, 0x5, 0x40, 0x2}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x0, 0x401}]}, 0x3, [{0xed, &(0x7f00000013c0)=@string={0xed, 0x3, "ba31f51be9913b1f0eded4262f9c559c015415f19b8c559deaa8f8ca88e563c56b4b6ab6253424b7ecaaba8eeaf21b017dfcd8cb6cefdd6bdc9e9fe316f7c90d1dd2a1365d6d2f24b7e74dff4fb01ca71cd0cd784253f2a0e3cd2d6646438fc034962585419aaa848d7645975a2d8f486811ea422a4f5d9139e19f534aa0de2b0f782593cd17e76588d77dbf5cdcfbb952f76593053e7ec670dfaed2852159ed3dbbf9fe4d290396803aa8253e1b2f6a994981f4f903ce5f68bbb4b4a25bf1735cf0d3d7805e90433743ffbfc83545341d3d835f09908350296a9fe78c4a1e2eb6fd8e8b530683673a369a"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x408}}, {0x7c, &(0x7f0000001500)=@string={0x7c, 0x3, "abccfab0194f15c30c392d09cfea8c29fe1a599f1d3ffda3795b5008005c5efee7b27dc0be05c9d35385ef431f8fc71c74c7e117b3edd80924ecc350f67234ff1eacc96c03256833faec35a0314a12417c29afff0671be2413173a650b1712e7ea964bb79618b789d050fe8f57245caed2c122cb725476ad0c20"}}]}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_connect(0x1, 0x8cb, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0x48, 0xc5, 0x0, 0x10, 0x2304, 0x207, 0x4531, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b9, 0x3, 0x20, 0x81, 0x0, 0x6, [{{0x9, 0x4, 0xa7, 0x0, 0x6, 0xc4, 0x51, 0x42, 0xe9, [], [{{0x9, 0x5, 0x2, 0x1c, 0x20, 0x0, 0x60, 0x3, [@generic={0xa5, 0x3, "1875b602008f9677f45f2837d1245d6444638eace1fa9f3f359c2f212cacb0ea3617d58996e40ed8d337042502600d34d795ad1e040f7a2ef0a38d5e697ee5e2ec733d651a166ab66f77f6da4a6e207466bcd6740c7b630e8266364fd5a627e769b4cb37eaaf7c57ddb9701b21639f25e991ff99e53aeb5e935134b9e96a3d4358bf5b804226e9d5c377720d8306b06f9d1ba1a2490ad13112eec07fabf45b59e0f85d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x25, 0xff80}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x3f, 0xe0, 0x3}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x3, 0x1}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x7, 0x1f, 0x7f, [@generic={0x72, 0x0, "b1488052afa22fe226aeeee699ce3800f28dd20c66a57e1819d376ad17550d85629fe4912b16ad89072bda03b4afbcbf598075c543e5059328aae41ec6935021ef1ff1b564710068a1ad983fef65458ae222f7ec8835a72d31b6ecbed7ca24cc72ee7b0052c310d1b9b3aa473a3046c8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x7f, 0x7, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0xe4c916cb29fcf2ee, 0x2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x40, 0x9, [@generic={0xb3, 0x5, "71b71d26decc2e92657511367770fed4f86a934ae8d1ad863932614e2cfe1a6b7c03696e2d8c7b46696b2a1c1cb9a39deb33360cf2086e05a8ccf359062ac14f2c630c2fb82ecb87012e80c1df52db3f2dec5957ebb5210100aa481a63cac806aef106737288b1f964a53a42c259d4c894dfb7661451dd9b4325c606f1fccd9c46402a2158931ba96153de1ced0394606009da4bc1b20577c671deed8a40f5593456429ab76598fcbc4dcba4dd3c547c7c"}, @generic={0x6e, 0xa, "34ec89b47dec9a67b5be057169f188ed813049cedbd6367849b307dbfeab3d1fa4143b5207180051069d86782410b2a6a5dd03ebf342a91b9e7641c6e56a2d8d58f9d43ced1f11f0a2a07bc4093ab306a73f26ed9c270c7fdf3c7f7decad0ac901aef6975afe9cf8418889e9"}]}}]}}, {{0x9, 0x4, 0x9b, 0x59, 0x5, 0x6, 0xfd, 0xa8, 0x20, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2be93b0176"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x8, 0xc8}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0x5}, @dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x24, 0x0, 0x3f, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa0}, @acm={0x4, 0x24, 0x2, 0xf}]}, @hid_hid={0x9, 0x21, 0xd9, 0x80, 0x1, {0x22, 0xd3a}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x2, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xe9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x9, 0x3f, 0x7, [@generic={0x3c, 0x11, "14d530ab5a1e7735f3cd784128bd6f543787a90b8870cc81bd2ae1852ed350daac83a32e0c920b27f9cacb95700831960491e40e0a8e521b4127"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x5, 0x0, 0x1, [@generic={0x73, 0x1, "49e90083b9459ea22000494111f5ae44c927b909966c648455d2e84b76b6de2569e4d381963f29724f6b30490da4ffec943c25209c060604dd35f8e10ca4882eecc5e2ff78e76bb40b5885c52a12342d630c74e26f7ed295512a9b504a611264e62c5a38d5fdb10e2bee020d28860e97eb"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x200, 0x0, 0x3, 0x94, [@generic={0xfe, 0x1a, "27533ce1af8a979df421a0d74142d7b406af3524a24d11fab67a8970573009d1426130ce3901631a8c508416ae330a422bceb5ed10f84690c88c178d23c9ecbb249d1751dc48c1d0076b06adf373a509c4dbbac32008262a98efbffa5fcb0bf6513835c26e3c9c8d50cd6e16d4c4be1416002c6ec4aaad8d8bab3e833448f91dd15e4c9ddc62404b99ef82a7667a13e90629793deccaad9c12e5aabfa657cba6b621ef2900f88ac4b78110c8a2192514ce18b2141c3e6a4bc3b6eb4a05f0466bf5fe1b0822fbe7e0dffcacc13d2ecf08b981e704248e42253fe54122eae0eb539e4b6185c8d79d4d39b6f7552dc5436a552b59080cc280778dc47f1b"}, @generic={0x2d, 0x22, "e7b87d70275f80cc193a3df07f137efd25df671857940b8f5821adfac30677ff73c3746c60983190558e6e"}]}}]}}, {{0x9, 0x4, 0x7e, 0x2, 0x9, 0xff, 0xff, 0xff, 0x6, [@generic={0x3d, 0x21, "1885949c0c7257a0d84b03a3d0facdc2acfabff6c4d4e448d6b1e2fa404c85c64b90d5a7e7c3d04528321be5a3d5db64cf0148c4861b980486ddf5"}, @uac_control={{0xa, 0x24, 0x1, 0x101, 0x8c}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x1, 0x5, 0x3, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x43ef, 0x68, "66172aed"}]}], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa6, 0x3, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x6}, @generic={0x32, 0xa, "6305eb1832873422081b161f98bd701322ec3c6b25eb0690cf606b15ecd62e8d3d19c8971cdd213bc9f77e76cf85fc45"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x8, 0x1f, [@generic={0xb6, 0x1, "e9a9757027135d8b8b227033287531035e46d3a31566331cd4140a324737901f2023cf94f533c0e2c454e74098a34a61307013d1158bc856d2327d402a3016b27af54c708d08f1557d30cf0b313e27e792035f33d5ca68ad4aa174de4b83cb8057e04ad449c247ff9dfed5bda012698da67738291aa7bbbe0007ac940626c1bb711da19374b9b69dd620b10b31211b7d5cef414032c6c599e6a5232d6b45a8a5a1d0ffdac66a07a9b0d2b4222c83c51985339ae4"}, @generic={0x44, 0x22, "23bd330da5991a8b59b04b415605d9e05bf40d40dbb68671cf676daea5cbe32b5c5380831dc375e52efe496e0c3a4fa0c5aa707e19c570fff53668549d557b8fe963"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x80, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xe1, 0x20, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x80}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xff, 0x8a}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8a}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x80, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x5, 0xc9, 0xff, [@generic={0x7f, 0xa, "fbba6836a22519a969bcad73298a6467b8545e0bf42a35f3e7413e9882aff64899436993bbba0e7e8464b5910a5466a84ead9cf7c507f9f644b4b2d469991b6256d09a8e17a94ff51b287df125644f08f4eb06002a9a75000a3a138e69650558de670edb9edaba36195816a7e091fc29fe563e3b8c861b2db644c90823"}, @generic={0xf8, 0x23, "c24af849a6faadc1c54cb1f7cad4311b19703d7d37e43700545693c609d0bc330c8b359b38ea078d65e68ec0d999d99c1362fb6364fcfd60c725fbf5c1a02ccc485e5fcad9cf8e152a24315f5a5386c419b2f3fc6899edae35c0269c3fdc7c0a4115b1dcf079dcc48971926c5645e7b88523e68e14d341f03968ce95105d480919d5209a49fa745885886c6aeadbde1a8eade3948d0faffde06eaf20735c605744698fa9e9dbaa75c157fc604d14374036826a6dbb103da9eefc55da79eb7276d553b911ebcb77ec44ac2c551d4bac4a3586e8325c29922589be5c925bcaca0202aca23470758bf492de26f1dd2d94293a99ca0569ca"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x23, 0x5, 0x5, [@generic={0x3f, 0x21, "3358c420a43e6dd909dc2d54c671d7dade57cd5fe8306b88e5758477699a29bdc594d24b78390cc89f18d780d2bc55ef4d31f0e3aac026bce4a76c6873"}]}}]}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x250, 0x4, 0x7, 0x9, 0x20, 0x81}, 0x3e, &(0x7f00000021c0)={0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x40, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xbf, 0xff, 0x7f, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x7, 0xff14}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bef538f594e37309f73beada77695a71"}]}, 0x3, [{0x3b, &(0x7f0000002200)=@string={0x3b, 0x3, "bafad51c2acffde54f1ccdc266233d52141eeccd2935302b9946e6203d2b7c6a2322bf8325ea1b1e5fc44b3eb36de444efbcbe2c7730b94666"}}, {0x70, &(0x7f0000002240)=@string={0x70, 0x3, "a13e8c2c57fa9653bb1bd30dd7ff54397fe4e2dfa3cf3c0788920780796c0b1f068ba21a2a380bf9bccb98835dc1a2a52d7a983dfefcf2302102c73be18a8bcbc7b3d2c8dfc1e2c784f12a3c931d86bcc570b578b0a55ada7d51f4614f3eb9855882e5d7185cb07b69868d04a4a6"}}, {0x8c, &(0x7f00000022c0)=@string={0x8c, 0x3, "438e27aec5fa2bf33359e1404bf00f32c2ae431c1b813e1730c9e815b7b5559660b32000f300de996189c16959199c8b05988e501eef92c39c6f7b8047737db48fcd338c3911eb0d51bd035fc89f7ebf1d7eb992e73bc57e92b11ed1a226d93ff8a4c3187fa976d1c192a2151f35291d8c0a3179568b4d7746911ca7255dd894b5474842817d76e82ac7"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x44b, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x84, 0xea, 0x26, 0xff, 0x471, 0x30c, 0xd9cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x439, 0x3, 0x4, 0x5, 0xc0, 0x2, [{{0x9, 0x4, 0x4c, 0x1, 0x6, 0x6a, 0xcc, 0x82, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x45f6}, [@country_functional={0xe, 0x24, 0x7, 0x20, 0x5, [0x7fff, 0xc7e3, 0x81, 0x0]}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x9, [0x7, 0x2, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xa4, 0x1, 0xf0}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0x80, 0x1f, [@generic={0x17, 0x3, "5f4acbeb88df78352146bcb2c812fa77d068c576c5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8d}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x2c, 0x22, "ed86bea83cc09d0402c13fb796f35df8bfb0f8c28e7066dba0426272bcbc5528ac719770a59bbc656175"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x6, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}, @generic={0xc8, 0x23, "01c6749b786b6e3695958210329a80bc46c83c3524b4b009394f210557865080383ed70e5d1e4dc57f8152bd75a57efbbdff8849430ca1622eb09d92091840066d1becad9156ccdbc1b39411195065ed12bc470d8c042b03af4fd98a9e9ebc3b005b33e3063e5592f938c665bce1e4f6a2bb76ec5166c5740264ff1917a64a6153c9bfc5099475084294c8735c9b0d58b94007377dd913364ec005da57cf83b25f8fd824ca1186b7b438d4ae072f45133ec8a36c9c1df9122d24260b49809e5252a3a5a5d58a"}]}}]}}, {{0x9, 0x4, 0xbb, 0x0, 0xb, 0x2a, 0x34, 0x28, 0xab, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x60, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xf9, 0x4, 0x1, [@generic={0xd9, 0xe, "673c5754219889fcee27d4456b1b781e4ce088a0aef01dd460d20c27a15948d569087d1790227a12ed6edb89df4774f4440200884427dadf44a3792dbb3792ea86bf6d0cb18b8a2937e9ef091d0c8760bbb471f174998c1708aa92bc3b7bafd4295070e02688667df44fd9238f679a8f1c2582fec6c09d95aa4ee90dab2a88517a3c6f95842822067efccae57a7dc7ffec9fddc751c709e0b8aa9814719e8b9bb870045aa49b8587154b8c5fcbd55bd99d1e918fa7f15d35555a66c5ac8ec6a5d9b3d27b4ca0863d8af07c8bdb495a1dca5cbc84c867b5"}, @generic={0x1b, 0x2, "dd5eb76962e97655751fc30a95ad6162247531e5be88b44dff"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x10, 0xf9, 0x81}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xc5, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xe3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xfa, 0x9, 0xff, [@generic={0xbb, 0x9, "cfce6c9e2611afc100f03c5140042c993566896be2ad4a26011bc4cf5fbe996acba25ca841702f938228cd95c956519e8a5c19c8adfbece6f6ff2b0daa64f0579a55fbfd601171d97b1101612fd475f04369f2e370b0233ee9d06f074156390275c12a358ca8bdba6404b2da9c4e35749ae06ee35840daa6d3010199d9f5fbe48dfd7ca1b219c1113dbd1cc3d2876e6df6d038102c5af2d5fa0a016042b10e7a7e6d0e808bfb323b670ab43f40f00759c313802b7fffb050c0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2e, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x74, 0x9, 0x7a}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc7, 0x9, 0x5}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x65, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x13, 0x200, 0x0, 0x7, 0x4e, [@generic={0xb, 0x21, "dd06c0b29ea068fbbf"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x3, 0x7f}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x7f, 0x8}}]}}, {{0x9, 0x4, 0xd0, 0x81, 0x4, 0x3f, 0xa9, 0x9f, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'M'}, {0x5, 0x24, 0x0, 0xf801}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x852, 0xff}, {0x6, 0x24, 0x1a, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x17}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x401, [0x0, 0x5, 0x1, 0x9]}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x19, 0x6, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0xe08}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x2, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x6, 0x9, 0xd7}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x78efbc5f38889d98, 0x9, 0x8c, 0x0, 0x8, 0xd8}, 0x8, &(0x7f0000000e00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x420}}, {0x49, &(0x7f0000000e80)=@string={0x49, 0x3, "485a58a71320bb790a5a64893b204a7b54994501623530c8fd1d3b7cdad5a899e5cb88729cd1edfcd8ddbcb8e9988a7dc79fe5ca6a56477a610136d952c3b4843d5dd7e3dbdcf9"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x809}}, {0x6, &(0x7f0000000f40)=@string={0x6, 0x3, "81162234"}}, {0x3e, &(0x7f0000000f80)=@string={0x3e, 0x3, "5bb97828837289ab9f8e4470c231db932f3b908172b615b756f2e3abaff3d552b9cc8a64e827259d81d3746db6e7f36ba0a934292cfb7297f84a4001"}}, {0x71, &(0x7f0000000fc0)=@string={0x71, 0x3, "99a2be11b19c945693c23e6849df3059c549bf08f977b72f10a926a5eaed3403c88f9944578ab8d75c0ccacb87d97e7f0934a59a6e1e87a524b977bb176c2140427ca13c631e4d3cf3f9fe7794f621aa4b86e6305662c45f60849bb3e166e90eaafb1d1ccf2658df66bcebaf24107d"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1809}}, {0xe5, &(0x7f0000001080)=@string={0xe5, 0x3, "fca35a661b8f24e1f1f5507a1da4e42f4108a398c9dc9e4fbac1fdd9d2dcc3ffaacdca721e18423193a58b66e3a8bc0812428698220d1268cb1ed58cade41e2867557741c05a9bd1cf2c2d113795e4660c4e455205944d518e61e979812c6109827b6d58d674b3c4fee3b8bd1c57aa952b61fdaeeff4b91c7b8c9d2b8b0419d5a03c68d9aefe532403dc33a454ea024de684426edc5ffe6a90b584db63f266c7dbe0fd5b7e370ab43aa07621d0dd300e573906b61a9090b455759c808655f02ac0528f0e0026625c13ed2060594cd68fe456ecf08c10c3ad71bf4278ea96fed8df01a1"}}, {0x68, &(0x7f0000001180)=@string={0x68, 0x3, "859ef7eaff2d5652ee838d7306822c55c215032f115963ddec3106e995678794474b38be786c01428530cc1669b0bdc0219a9520852f00439cfefa3f45b439dd877161cf3bd1014d72af088ce15a7fced9d171a87fa6d9bc265938c40aaaef00bc14782d34c0"}}, {0xc, &(0x7f0000001200)=@string={0xc, 0x3, "dccbfc7ae64d24c67213"}}]}) (async)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x40, 0x5, 0x5, {0x5, 0x21, "2edba2"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xe0, 0x4, "587abe8e", "3291d883"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x9, 0x2, 0xff, 0x7, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x6, 0xdf, "224039cbebbe07e6a29d49f8756e250700c79d3b5c0110092ff65dc0b3ba193ba78329f395eab1b9d4784e11588b061274a5f7ea92e10d3c6acf7050432e19dcbb9fb0b7dbc21c9182cd49493e705fa66934022817e34bd47b3d85ca2d18e0f7b1fcb985dcb4f4bc0135a8beea2912ce73b7b61333f7cce66b0b7113aeea7637c1fe0f0f410dbecc5bc8b8ad442f3080dffd556d9f16efff0ad45dfb751774d0855724cb93216baa5f87b97ee3f71dafc35f2778369b778c5333295018729bbfa8822db58dd7201623bf4e845d5b001e984c6590bdf5c9e36ed798e0210928"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x40}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9a}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b430"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f4e2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x8}}) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbd, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0xc5, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xdd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x40}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x1, 0x8, 0x8, 0x10}, 0x1a, &(0x7f0000000840)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x68, 0x20, 0xcc, 0x9, 0xd1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfb, 0x400}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2401}}]}) (async)
syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0xe, 0x80, 0xf8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x15, {{0x8, 0x24, 0x6, 0x0, 0x0, "38a733"}, {0x5, 0x24, 0x0, 0xc2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8000, 0x4, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0xad, 0x1c}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x6, 0xa3}}], {{0x9, 0x5, 0x82, 0x2, 0x418, 0x3f, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x110, 0x81, 0x5, 0x16, 0x10, 0xa9}, 0x1d, &(0x7f0000001680)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x2, 0x7, 0x0, 0x87}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x8, 0x3883}]}, 0x5, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x22, &(0x7f0000001700)=@string={0x22, 0x3, "cbb11e953c9f9c90bfd9caef6098dfcd3c3306893d15039cb3e55aac3f08d120"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xaac}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3c0a}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1800000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:19:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x2500000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3374.220814][T26182] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3374.460673][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3374.580897][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3374.589023][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3374.600418][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3374.610386][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3374.860881][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3374.867143][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3374.876515][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3375.123132][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.131715][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.131898][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.140226][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.158754][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
00:19:17 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb651, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x24, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1, 0x9c, 0x1, {0x22, 0x932}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x7, 0x85}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xf1, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x8, 0x1, 0x5, 0x40, 0x2}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x0, 0x401}]}, 0x3, [{0xed, &(0x7f00000013c0)=@string={0xed, 0x3, "ba31f51be9913b1f0eded4262f9c559c015415f19b8c559deaa8f8ca88e563c56b4b6ab6253424b7ecaaba8eeaf21b017dfcd8cb6cefdd6bdc9e9fe316f7c90d1dd2a1365d6d2f24b7e74dff4fb01ca71cd0cd784253f2a0e3cd2d6646438fc034962585419aaa848d7645975a2d8f486811ea422a4f5d9139e19f534aa0de2b0f782593cd17e76588d77dbf5cdcfbb952f76593053e7ec670dfaed2852159ed3dbbf9fe4d290396803aa8253e1b2f6a994981f4f903ce5f68bbb4b4a25bf1735cf0d3d7805e90433743ffbfc83545341d3d835f09908350296a9fe78c4a1e2eb6fd8e8b530683673a369a"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x408}}, {0x7c, &(0x7f0000001500)=@string={0x7c, 0x3, "abccfab0194f15c30c392d09cfea8c29fe1a599f1d3ffda3795b5008005c5efee7b27dc0be05c9d35385ef431f8fc71c74c7e117b3edd80924ecc350f67234ff1eacc96c03256833faec35a0314a12417c29afff0671be2413173a650b1712e7ea964bb79618b789d050fe8f57245caed2c122cb725476ad0c20"}}]}) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_connect(0x1, 0x8cb, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0x48, 0xc5, 0x0, 0x10, 0x2304, 0x207, 0x4531, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b9, 0x3, 0x20, 0x81, 0x0, 0x6, [{{0x9, 0x4, 0xa7, 0x0, 0x6, 0xc4, 0x51, 0x42, 0xe9, [], [{{0x9, 0x5, 0x2, 0x1c, 0x20, 0x0, 0x60, 0x3, [@generic={0xa5, 0x3, "1875b602008f9677f45f2837d1245d6444638eace1fa9f3f359c2f212cacb0ea3617d58996e40ed8d337042502600d34d795ad1e040f7a2ef0a38d5e697ee5e2ec733d651a166ab66f77f6da4a6e207466bcd6740c7b630e8266364fd5a627e769b4cb37eaaf7c57ddb9701b21639f25e991ff99e53aeb5e935134b9e96a3d4358bf5b804226e9d5c377720d8306b06f9d1ba1a2490ad13112eec07fabf45b59e0f85d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x25, 0xff80}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x3f, 0xe0, 0x3}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x3, 0x1}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x7, 0x1f, 0x7f, [@generic={0x72, 0x0, "b1488052afa22fe226aeeee699ce3800f28dd20c66a57e1819d376ad17550d85629fe4912b16ad89072bda03b4afbcbf598075c543e5059328aae41ec6935021ef1ff1b564710068a1ad983fef65458ae222f7ec8835a72d31b6ecbed7ca24cc72ee7b0052c310d1b9b3aa473a3046c8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x7f, 0x7, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0xe4c916cb29fcf2ee, 0x2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x40, 0x9, [@generic={0xb3, 0x5, "71b71d26decc2e92657511367770fed4f86a934ae8d1ad863932614e2cfe1a6b7c03696e2d8c7b46696b2a1c1cb9a39deb33360cf2086e05a8ccf359062ac14f2c630c2fb82ecb87012e80c1df52db3f2dec5957ebb5210100aa481a63cac806aef106737288b1f964a53a42c259d4c894dfb7661451dd9b4325c606f1fccd9c46402a2158931ba96153de1ced0394606009da4bc1b20577c671deed8a40f5593456429ab76598fcbc4dcba4dd3c547c7c"}, @generic={0x6e, 0xa, "34ec89b47dec9a67b5be057169f188ed813049cedbd6367849b307dbfeab3d1fa4143b5207180051069d86782410b2a6a5dd03ebf342a91b9e7641c6e56a2d8d58f9d43ced1f11f0a2a07bc4093ab306a73f26ed9c270c7fdf3c7f7decad0ac901aef6975afe9cf8418889e9"}]}}]}}, {{0x9, 0x4, 0x9b, 0x59, 0x5, 0x6, 0xfd, 0xa8, 0x20, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2be93b0176"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x8, 0xc8}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0x5}, @dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x24, 0x0, 0x3f, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa0}, @acm={0x4, 0x24, 0x2, 0xf}]}, @hid_hid={0x9, 0x21, 0xd9, 0x80, 0x1, {0x22, 0xd3a}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x2, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xe9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x9, 0x3f, 0x7, [@generic={0x3c, 0x11, "14d530ab5a1e7735f3cd784128bd6f543787a90b8870cc81bd2ae1852ed350daac83a32e0c920b27f9cacb95700831960491e40e0a8e521b4127"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x5, 0x0, 0x1, [@generic={0x73, 0x1, "49e90083b9459ea22000494111f5ae44c927b909966c648455d2e84b76b6de2569e4d381963f29724f6b30490da4ffec943c25209c060604dd35f8e10ca4882eecc5e2ff78e76bb40b5885c52a12342d630c74e26f7ed295512a9b504a611264e62c5a38d5fdb10e2bee020d28860e97eb"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x200, 0x0, 0x3, 0x94, [@generic={0xfe, 0x1a, "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"}, @generic={0x2d, 0x22, "e7b87d70275f80cc193a3df07f137efd25df671857940b8f5821adfac30677ff73c3746c60983190558e6e"}]}}]}}, {{0x9, 0x4, 0x7e, 0x2, 0x9, 0xff, 0xff, 0xff, 0x6, [@generic={0x3d, 0x21, "1885949c0c7257a0d84b03a3d0facdc2acfabff6c4d4e448d6b1e2fa404c85c64b90d5a7e7c3d04528321be5a3d5db64cf0148c4861b980486ddf5"}, @uac_control={{0xa, 0x24, 0x1, 0x101, 0x8c}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x1, 0x5, 0x3, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x43ef, 0x68, "66172aed"}]}], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa6, 0x3, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x6}, @generic={0x32, 0xa, "6305eb1832873422081b161f98bd701322ec3c6b25eb0690cf606b15ecd62e8d3d19c8971cdd213bc9f77e76cf85fc45"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x8, 0x1f, [@generic={0xb6, 0x1, "e9a9757027135d8b8b227033287531035e46d3a31566331cd4140a324737901f2023cf94f533c0e2c454e74098a34a61307013d1158bc856d2327d402a3016b27af54c708d08f1557d30cf0b313e27e792035f33d5ca68ad4aa174de4b83cb8057e04ad449c247ff9dfed5bda012698da67738291aa7bbbe0007ac940626c1bb711da19374b9b69dd620b10b31211b7d5cef414032c6c599e6a5232d6b45a8a5a1d0ffdac66a07a9b0d2b4222c83c51985339ae4"}, @generic={0x44, 0x22, "23bd330da5991a8b59b04b415605d9e05bf40d40dbb68671cf676daea5cbe32b5c5380831dc375e52efe496e0c3a4fa0c5aa707e19c570fff53668549d557b8fe963"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x80, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xe1, 0x20, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x80}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xff, 0x8a}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8a}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x80, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x5, 0xc9, 0xff, [@generic={0x7f, 0xa, "fbba6836a22519a969bcad73298a6467b8545e0bf42a35f3e7413e9882aff64899436993bbba0e7e8464b5910a5466a84ead9cf7c507f9f644b4b2d469991b6256d09a8e17a94ff51b287df125644f08f4eb06002a9a75000a3a138e69650558de670edb9edaba36195816a7e091fc29fe563e3b8c861b2db644c90823"}, @generic={0xf8, 0x23, "c24af849a6faadc1c54cb1f7cad4311b19703d7d37e43700545693c609d0bc330c8b359b38ea078d65e68ec0d999d99c1362fb6364fcfd60c725fbf5c1a02ccc485e5fcad9cf8e152a24315f5a5386c419b2f3fc6899edae35c0269c3fdc7c0a4115b1dcf079dcc48971926c5645e7b88523e68e14d341f03968ce95105d480919d5209a49fa745885886c6aeadbde1a8eade3948d0faffde06eaf20735c605744698fa9e9dbaa75c157fc604d14374036826a6dbb103da9eefc55da79eb7276d553b911ebcb77ec44ac2c551d4bac4a3586e8325c29922589be5c925bcaca0202aca23470758bf492de26f1dd2d94293a99ca0569ca"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x23, 0x5, 0x5, [@generic={0x3f, 0x21, "3358c420a43e6dd909dc2d54c671d7dade57cd5fe8306b88e5758477699a29bdc594d24b78390cc89f18d780d2bc55ef4d31f0e3aac026bce4a76c6873"}]}}]}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x250, 0x4, 0x7, 0x9, 0x20, 0x81}, 0x3e, &(0x7f00000021c0)={0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x40, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xbf, 0xff, 0x7f, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x7, 0xff14}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bef538f594e37309f73beada77695a71"}]}, 0x3, [{0x3b, &(0x7f0000002200)=@string={0x3b, 0x3, "bafad51c2acffde54f1ccdc266233d52141eeccd2935302b9946e6203d2b7c6a2322bf8325ea1b1e5fc44b3eb36de444efbcbe2c7730b94666"}}, {0x70, &(0x7f0000002240)=@string={0x70, 0x3, "a13e8c2c57fa9653bb1bd30dd7ff54397fe4e2dfa3cf3c0788920780796c0b1f068ba21a2a380bf9bccb98835dc1a2a52d7a983dfefcf2302102c73be18a8bcbc7b3d2c8dfc1e2c784f12a3c931d86bcc570b578b0a55ada7d51f4614f3eb9855882e5d7185cb07b69868d04a4a6"}}, {0x8c, &(0x7f00000022c0)=@string={0x8c, 0x3, "438e27aec5fa2bf33359e1404bf00f32c2ae431c1b813e1730c9e815b7b5559660b32000f300de996189c16959199c8b05988e501eef92c39c6f7b8047737db48fcd338c3911eb0d51bd035fc89f7ebf1d7eb992e73bc57e92b11ed1a226d93ff8a4c3187fa976d1c192a2151f35291d8c0a3179568b4d7746911ca7255dd894b5474842817d76e82ac7"}}]}) (async, rerun: 64)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x1, 0x44b, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x84, 0xea, 0x26, 0xff, 0x471, 0x30c, 0xd9cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x439, 0x3, 0x4, 0x5, 0xc0, 0x2, [{{0x9, 0x4, 0x4c, 0x1, 0x6, 0x6a, 0xcc, 0x82, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x45f6}, [@country_functional={0xe, 0x24, 0x7, 0x20, 0x5, [0x7fff, 0xc7e3, 0x81, 0x0]}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x9, [0x7, 0x2, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xa4, 0x1, 0xf0}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0x80, 0x1f, [@generic={0x17, 0x3, "5f4acbeb88df78352146bcb2c812fa77d068c576c5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8d}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x2c, 0x22, "ed86bea83cc09d0402c13fb796f35df8bfb0f8c28e7066dba0426272bcbc5528ac719770a59bbc656175"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x6, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}, @generic={0xc8, 0x23, "01c6749b786b6e3695958210329a80bc46c83c3524b4b009394f210557865080383ed70e5d1e4dc57f8152bd75a57efbbdff8849430ca1622eb09d92091840066d1becad9156ccdbc1b39411195065ed12bc470d8c042b03af4fd98a9e9ebc3b005b33e3063e5592f938c665bce1e4f6a2bb76ec5166c5740264ff1917a64a6153c9bfc5099475084294c8735c9b0d58b94007377dd913364ec005da57cf83b25f8fd824ca1186b7b438d4ae072f45133ec8a36c9c1df9122d24260b49809e5252a3a5a5d58a"}]}}]}}, {{0x9, 0x4, 0xbb, 0x0, 0xb, 0x2a, 0x34, 0x28, 0xab, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x60, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xf9, 0x4, 0x1, [@generic={0xd9, 0xe, "673c5754219889fcee27d4456b1b781e4ce088a0aef01dd460d20c27a15948d569087d1790227a12ed6edb89df4774f4440200884427dadf44a3792dbb3792ea86bf6d0cb18b8a2937e9ef091d0c8760bbb471f174998c1708aa92bc3b7bafd4295070e02688667df44fd9238f679a8f1c2582fec6c09d95aa4ee90dab2a88517a3c6f95842822067efccae57a7dc7ffec9fddc751c709e0b8aa9814719e8b9bb870045aa49b8587154b8c5fcbd55bd99d1e918fa7f15d35555a66c5ac8ec6a5d9b3d27b4ca0863d8af07c8bdb495a1dca5cbc84c867b5"}, @generic={0x1b, 0x2, "dd5eb76962e97655751fc30a95ad6162247531e5be88b44dff"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x10, 0xf9, 0x81}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xc5, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xe3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xfa, 0x9, 0xff, [@generic={0xbb, 0x9, "cfce6c9e2611afc100f03c5140042c993566896be2ad4a26011bc4cf5fbe996acba25ca841702f938228cd95c956519e8a5c19c8adfbece6f6ff2b0daa64f0579a55fbfd601171d97b1101612fd475f04369f2e370b0233ee9d06f074156390275c12a358ca8bdba6404b2da9c4e35749ae06ee35840daa6d3010199d9f5fbe48dfd7ca1b219c1113dbd1cc3d2876e6df6d038102c5af2d5fa0a016042b10e7a7e6d0e808bfb323b670ab43f40f00759c313802b7fffb050c0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2e, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x74, 0x9, 0x7a}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc7, 0x9, 0x5}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x65, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x13, 0x200, 0x0, 0x7, 0x4e, [@generic={0xb, 0x21, "dd06c0b29ea068fbbf"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x3, 0x7f}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x7f, 0x8}}]}}, {{0x9, 0x4, 0xd0, 0x81, 0x4, 0x3f, 0xa9, 0x9f, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'M'}, {0x5, 0x24, 0x0, 0xf801}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x852, 0xff}, {0x6, 0x24, 0x1a, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x17}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x401, [0x0, 0x5, 0x1, 0x9]}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x19, 0x6, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0xe08}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x2, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x6, 0x9, 0xd7}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x78efbc5f38889d98, 0x9, 0x8c, 0x0, 0x8, 0xd8}, 0x8, &(0x7f0000000e00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x420}}, {0x49, &(0x7f0000000e80)=@string={0x49, 0x3, "485a58a71320bb790a5a64893b204a7b54994501623530c8fd1d3b7cdad5a899e5cb88729cd1edfcd8ddbcb8e9988a7dc79fe5ca6a56477a610136d952c3b4843d5dd7e3dbdcf9"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x809}}, {0x6, &(0x7f0000000f40)=@string={0x6, 0x3, "81162234"}}, {0x3e, &(0x7f0000000f80)=@string={0x3e, 0x3, "5bb97828837289ab9f8e4470c231db932f3b908172b615b756f2e3abaff3d552b9cc8a64e827259d81d3746db6e7f36ba0a934292cfb7297f84a4001"}}, {0x71, &(0x7f0000000fc0)=@string={0x71, 0x3, "99a2be11b19c945693c23e6849df3059c549bf08f977b72f10a926a5eaed3403c88f9944578ab8d75c0ccacb87d97e7f0934a59a6e1e87a524b977bb176c2140427ca13c631e4d3cf3f9fe7794f621aa4b86e6305662c45f60849bb3e166e90eaafb1d1ccf2658df66bcebaf24107d"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1809}}, {0xe5, &(0x7f0000001080)=@string={0xe5, 0x3, "fca35a661b8f24e1f1f5507a1da4e42f4108a398c9dc9e4fbac1fdd9d2dcc3ffaacdca721e18423193a58b66e3a8bc0812428698220d1268cb1ed58cade41e2867557741c05a9bd1cf2c2d113795e4660c4e455205944d518e61e979812c6109827b6d58d674b3c4fee3b8bd1c57aa952b61fdaeeff4b91c7b8c9d2b8b0419d5a03c68d9aefe532403dc33a454ea024de684426edc5ffe6a90b584db63f266c7dbe0fd5b7e370ab43aa07621d0dd300e573906b61a9090b455759c808655f02ac0528f0e0026625c13ed2060594cd68fe456ecf08c10c3ad71bf4278ea96fed8df01a1"}}, {0x68, &(0x7f0000001180)=@string={0x68, 0x3, "859ef7eaff2d5652ee838d7306822c55c215032f115963ddec3106e995678794474b38be786c01428530cc1669b0bdc0219a9520852f00439cfefa3f45b439dd877161cf3bd1014d72af088ce15a7fced9d171a87fa6d9bc265938c40aaaef00bc14782d34c0"}}, {0xc, &(0x7f0000001200)=@string={0xc, 0x3, "dccbfc7ae64d24c67213"}}]})
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x40, 0x5, 0x5, {0x5, 0x21, "2edba2"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xe0, 0x4, "587abe8e", "3291d883"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x9, 0x2, 0xff, 0x7, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x6, 0xdf, "224039cbebbe07e6a29d49f8756e250700c79d3b5c0110092ff65dc0b3ba193ba78329f395eab1b9d4784e11588b061274a5f7ea92e10d3c6acf7050432e19dcbb9fb0b7dbc21c9182cd49493e705fa66934022817e34bd47b3d85ca2d18e0f7b1fcb985dcb4f4bc0135a8beea2912ce73b7b61333f7cce66b0b7113aeea7637c1fe0f0f410dbecc5bc8b8ad442f3080dffd556d9f16efff0ad45dfb751774d0855724cb93216baa5f87b97ee3f71dafc35f2778369b778c5333295018729bbfa8822db58dd7201623bf4e845d5b001e984c6590bdf5c9e36ed798e0210928"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x40}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9a}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b430"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f4e2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x8}}) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbd, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0xc5, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xdd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x40}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x1, 0x8, 0x8, 0x10}, 0x1a, &(0x7f0000000840)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x68, 0x20, 0xcc, 0x9, 0xd1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfb, 0x400}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2401}}]}) (async)
syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0xe, 0x80, 0xf8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x15, {{0x8, 0x24, 0x6, 0x0, 0x0, "38a733"}, {0x5, 0x24, 0x0, 0xc2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8000, 0x4, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0xad, 0x1c}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x6, 0xa3}}], {{0x9, 0x5, 0x82, 0x2, 0x418, 0x3f, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x110, 0x81, 0x5, 0x16, 0x10, 0xa9}, 0x1d, &(0x7f0000001680)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x2, 0x7, 0x0, 0x87}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x8, 0x3883}]}, 0x5, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x22, &(0x7f0000001700)=@string={0x22, 0x3, "cbb11e953c9f9c90bfd9caef6098dfcd3c3306893d15039cb3e55aac3f08d120"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xaac}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3c0a}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x5c00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x3, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @ioapic={0xf000, 0x2, 0x60000, 0x6, 0x0, [{0x81, 0x1f, 0x96}, {0x9, 0x0, 0x4, '\x00', 0x29}, {0x6, 0x59, 0x3f, '\x00', 0x7}, {0x5, 0xbe, 0x3, '\x00', 0x1}, {0x86, 0x81, 0x19, '\x00', 0x8}, {0x9, 0x0, 0x81, '\x00', 0xb6}, {0x20, 0x8, 0x8, '\x00', 0x7f}, {0x7f, 0xf9, 0x5, '\x00', 0x40}, {0x40, 0x80, 0xff, '\x00', 0x4}, {0x8, 0x2, 0x3f, '\x00', 0xf9}, {0x0, 0x0, 0x81, '\x00', 0x40}, {0x4, 0x0, 0x2, '\x00', 0x7f}, {0x4, 0x5, 0x3, '\x00', 0x9}, {0x3, 0x80, 0x2}, {0x20, 0xc1, 0x0, '\x00', 0x8}, {0xbf, 0x1, 0x40, '\x00', 0x4}, {0xcf, 0x80, 0x20, '\x00', 0x1f}, {0x20, 0x1, 0x2, '\x00', 0x20}, {0xff, 0x2, 0x40, '\x00', 0x8}, {0x35, 0x6, 0x2, '\x00', 0x2b}, {0x80, 0x9, 0x6c, '\x00', 0x1}, {0x0, 0x7, 0x81, '\x00', 0x1}, {0x5, 0x81, 0x4, '\x00', 0x8}, {0x89, 0xac, 0x1f, '\x00', 0xf9}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002b7bfc9e1eca847e47f207566ef4ed80b7a7b95a78f6310716ffdb998782a2bb4e9b79d0cf0229cb6d195070d5ccff64684425d857bffc06b1e5140b5046c3386534f5b0ac4d11b70f98960ec385c0f01193e7469c47f6a01cf12ce9d9166b7da8e004db447a6cd2a9", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3375.169157][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.179148][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.188679][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfcffffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3375.273367][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.288773][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.297058][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.297747][T26182] usbhid 2-1:1.0: can't add hid device: -71
[ 3375.311770][T26182] usbhid: probe of 2-1:1.0 failed with error -71
00:19:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xfdfdffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3375.326416][T26182] usb 2-1: USB disconnect, device number 26
00:19:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3375.377348][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.402467][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.454212][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="200d640000006403239b41db49cd4909e2627a966825001cac82afde5caf96779417daba28c914636d81adcf183cf29ebccc1ba9224eae2a2b2ff0f5164fd5ef067ab530859d79d5b9ee4205fcc319d033eef0092a14bcab2c0e703ae1ef21036527e5e0318bd3949ca5"], &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x85, "3871264ce2aed65b12e1ec3cf2c1fc4a666571fbe537c23beb1e67943cbf2d125bee4aeb73d06f55bb14fe6d5ab5d0af23c78890af3b7cac81c79ffe0c60df9b76cb3470736643cae3cfedfb0cc7e603f0335ba1630a19cba431e532758747f0f8c596928250867ab816d70dbe40d0fe2616c5af7fb8d8cbb4e4e63307372333429335d7e5"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2bb, 0x1, 0x571e, 0x6, 0x1, 0xf3, 0xff, 0xa9c7, 0x4, 0x0, 0x0, 0x81}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0xf2}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'q'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9612, 0x0, 0x401, 0x58}, {0x6, 0x24, 0x1a, 0x800}, [@mdlm_detail={0xd, 0x24, 0x13, 0x7f, "e8b1dcdf2a81a7bc79"}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8f, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x20, 0xb8, 0x81, 0x8, 0x40}, 0xb5, &(0x7f0000000140)={0x5, 0xf, 0xb5, 0x2, [@generic={0x9c, 0x10, 0x0, "a71f00427f39155eb1b59b2b82077c085b490af079e46205de70194ea6b355fcf050e0273543b0e854e216acd8c29f8649a0aada4ab8e85ae54515f77b5db144377b75397ff070178d8b26069117ee985f7257efb4afce798336f85c3ac42e6414a2c9d96509b77b9457710d1d3a13eeae0b2d95012acfdf1591a25ade7cd83e27f6d8b18493a126afd8d25ba3aa84b5b9fcbfbbd670057940"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3eda470f9126a9561aee6c26e23b98b1"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x3f, &(0x7f00000002c0)=@string={0x3f, 0x3, "22437e140debcd2d328ca243fc948ebda2088db44615bce5234fb9cfb49fca9a3afb68fba54f4690bc2fc55523803bbf243a063bcc00b5a4daa6b302e5"}}, {0x35, &(0x7f0000000300)=@string={0x35, 0x3, "147fcd751b5e0b4aa63fbf9baa7ec8e1fdf832dd6a48826748860fb97a1bac1652245baaa18899f81d84178f9366ff5c5e613c"}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "253ae6176548d038224c9da22d889775f246dc0c8466cadbd4aaebc8de96c428288ae96b97ce0c96bfb8226902dfc6621ae7bcde189aba75"}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "0008145e9d935c5dd97b5a395091"}}]})

00:19:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0xffffffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x3, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @ioapic={0xf000, 0x2, 0x60000, 0x6, 0x0, [{0x81, 0x1f, 0x96}, {0x9, 0x0, 0x4, '\x00', 0x29}, {0x6, 0x59, 0x3f, '\x00', 0x7}, {0x5, 0xbe, 0x3, '\x00', 0x1}, {0x86, 0x81, 0x19, '\x00', 0x8}, {0x9, 0x0, 0x81, '\x00', 0xb6}, {0x20, 0x8, 0x8, '\x00', 0x7f}, {0x7f, 0xf9, 0x5, '\x00', 0x40}, {0x40, 0x80, 0xff, '\x00', 0x4}, {0x8, 0x2, 0x3f, '\x00', 0xf9}, {0x0, 0x0, 0x81, '\x00', 0x40}, {0x4, 0x0, 0x2, '\x00', 0x7f}, {0x4, 0x5, 0x3, '\x00', 0x9}, {0x3, 0x80, 0x2}, {0x20, 0xc1, 0x0, '\x00', 0x8}, {0xbf, 0x1, 0x40, '\x00', 0x4}, {0xcf, 0x80, 0x20, '\x00', 0x1f}, {0x20, 0x1, 0x2, '\x00', 0x20}, {0xff, 0x2, 0x40, '\x00', 0x8}, {0x35, 0x6, 0x2, '\x00', 0x2b}, {0x80, 0x9, 0x6c, '\x00', 0x1}, {0x0, 0x7, 0x81, '\x00', 0x1}, {0x5, 0x81, 0x4, '\x00', 0x8}, {0x89, 0xac, 0x1f, '\x00', 0xf9}]}}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002b7bfc9e1eca847e47f207566ef4ed80b7a7b95a78f6310716ffdb998782a2bb4e9b79d0cf0229cb6d195070d5ccff64684425d857bffc06b1e5140b5046c3386534f5b0ac4d11b70f98960ec385c0f01193e7469c47f6a01cf12ce9d9166b7da8e004db447a6cd2a9", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3375.510497][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.521001][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3375.529413][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3375.551171][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3375.990691][T26182] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 3376.230822][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3376.350857][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3376.358983][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3376.370165][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3376.380344][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3376.630935][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3376.637252][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3376.646746][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3377.143244][T26182] hid-generic 0003:057B:003F.0061: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3377.346610][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3377.358041][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3377.369880][ T3222] usb 2-1: USB disconnect, device number 27
00:19:20 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="200d640000006403239b41db49cd4909e2627a966825001cac82afde5caf96779417daba28c914636d81adcf183cf29ebccc1ba9224eae2a2b2ff0f5164fd5ef067ab530859d79d5b9ee4205fcc319d033eef0092a14bcab2c0e703ae1ef21036527e5e0318bd3949ca5"], &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x85, "3871264ce2aed65b12e1ec3cf2c1fc4a666571fbe537c23beb1e67943cbf2d125bee4aeb73d06f55bb14fe6d5ab5d0af23c78890af3b7cac81c79ffe0c60df9b76cb3470736643cae3cfedfb0cc7e603f0335ba1630a19cba431e532758747f0f8c596928250867ab816d70dbe40d0fe2616c5af7fb8d8cbb4e4e63307372333429335d7e5"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2bb, 0x1, 0x571e, 0x6, 0x1, 0xf3, 0xff, 0xa9c7, 0x4, 0x0, 0x0, 0x81}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0xf2}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'q'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9612, 0x0, 0x401, 0x58}, {0x6, 0x24, 0x1a, 0x800}, [@mdlm_detail={0xd, 0x24, 0x13, 0x7f, "e8b1dcdf2a81a7bc79"}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8f, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x20, 0xb8, 0x81, 0x8, 0x40}, 0xb5, &(0x7f0000000140)={0x5, 0xf, 0xb5, 0x2, [@generic={0x9c, 0x10, 0x0, "a71f00427f39155eb1b59b2b82077c085b490af079e46205de70194ea6b355fcf050e0273543b0e854e216acd8c29f8649a0aada4ab8e85ae54515f77b5db144377b75397ff070178d8b26069117ee985f7257efb4afce798336f85c3ac42e6414a2c9d96509b77b9457710d1d3a13eeae0b2d95012acfdf1591a25ade7cd83e27f6d8b18493a126afd8d25ba3aa84b5b9fcbfbbd670057940"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3eda470f9126a9561aee6c26e23b98b1"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x3f, &(0x7f00000002c0)=@string={0x3f, 0x3, "22437e140debcd2d328ca243fc948ebda2088db44615bce5234fb9cfb49fca9a3afb68fba54f4690bc2fc55523803bbf243a063bcc00b5a4daa6b302e5"}}, {0x35, &(0x7f0000000300)=@string={0x35, 0x3, "147fcd751b5e0b4aa63fbf9baa7ec8e1fdf832dd6a48826748860fb97a1bac1652245baaa18899f81d84178f9366ff5c5e613c"}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "253ae6176548d038224c9da22d889775f246dc0c8466cadbd4aaebc8de96c428288ae96b97ce0c96bfb8226902dfc6621ae7bcde189aba75"}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "0008145e9d935c5dd97b5a395091"}}]})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="200d640000006403239b41db49cd4909e2627a966825001cac82afde5caf96779417daba28c914636d81adcf183cf29ebccc1ba9224eae2a2b2ff0f5164fd5ef067ab530859d79d5b9ee4205fcc319d033eef0092a14bcab2c0e703ae1ef21036527e5e0318bd3949ca5"], &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x85, "3871264ce2aed65b12e1ec3cf2c1fc4a666571fbe537c23beb1e67943cbf2d125bee4aeb73d06f55bb14fe6d5ab5d0af23c78890af3b7cac81c79ffe0c60df9b76cb3470736643cae3cfedfb0cc7e603f0335ba1630a19cba431e532758747f0f8c596928250867ab816d70dbe40d0fe2616c5af7fb8d8cbb4e4e63307372333429335d7e5"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2bb, 0x1, 0x571e, 0x6, 0x1, 0xf3, 0xff, 0xa9c7, 0x4, 0x0, 0x0, 0x81}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0xf2}, &(0x7f00000007c0)={0x20, 0x89, 0x2}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_connect$cdc_ncm(0x2, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'q'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9612, 0x0, 0x401, 0x58}, {0x6, 0x24, 0x1a, 0x800}, [@mdlm_detail={0xd, 0x24, 0x13, 0x7f, "e8b1dcdf2a81a7bc79"}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8f, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x20, 0xb8, 0x81, 0x8, 0x40}, 0xb5, &(0x7f0000000140)={0x5, 0xf, 0xb5, 0x2, [@generic={0x9c, 0x10, 0x0, "a71f00427f39155eb1b59b2b82077c085b490af079e46205de70194ea6b355fcf050e0273543b0e854e216acd8c29f8649a0aada4ab8e85ae54515f77b5db144377b75397ff070178d8b26069117ee985f7257efb4afce798336f85c3ac42e6414a2c9d96509b77b9457710d1d3a13eeae0b2d95012acfdf1591a25ade7cd83e27f6d8b18493a126afd8d25ba3aa84b5b9fcbfbbd670057940"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3eda470f9126a9561aee6c26e23b98b1"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x3f, &(0x7f00000002c0)=@string={0x3f, 0x3, "22437e140debcd2d328ca243fc948ebda2088db44615bce5234fb9cfb49fca9a3afb68fba54f4690bc2fc55523803bbf243a063bcc00b5a4daa6b302e5"}}, {0x35, &(0x7f0000000300)=@string={0x35, 0x3, "147fcd751b5e0b4aa63fbf9baa7ec8e1fdf832dd6a48826748860fb97a1bac1652245baaa18899f81d84178f9366ff5c5e613c"}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "253ae6176548d038224c9da22d889775f246dc0c8466cadbd4aaebc8de96c428288ae96b97ce0c96bfb8226902dfc6621ae7bcde189aba75"}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "0008145e9d935c5dd97b5a395091"}}]}) (async)

00:19:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x3, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @ioapic={0xf000, 0x2, 0x60000, 0x6, 0x0, [{0x81, 0x1f, 0x96}, {0x9, 0x0, 0x4, '\x00', 0x29}, {0x6, 0x59, 0x3f, '\x00', 0x7}, {0x5, 0xbe, 0x3, '\x00', 0x1}, {0x86, 0x81, 0x19, '\x00', 0x8}, {0x9, 0x0, 0x81, '\x00', 0xb6}, {0x20, 0x8, 0x8, '\x00', 0x7f}, {0x7f, 0xf9, 0x5, '\x00', 0x40}, {0x40, 0x80, 0xff, '\x00', 0x4}, {0x8, 0x2, 0x3f, '\x00', 0xf9}, {0x0, 0x0, 0x81, '\x00', 0x40}, {0x4, 0x0, 0x2, '\x00', 0x7f}, {0x4, 0x5, 0x3, '\x00', 0x9}, {0x3, 0x80, 0x2}, {0x20, 0xc1, 0x0, '\x00', 0x8}, {0xbf, 0x1, 0x40, '\x00', 0x4}, {0xcf, 0x80, 0x20, '\x00', 0x1f}, {0x20, 0x1, 0x2, '\x00', 0x20}, {0xff, 0x2, 0x40, '\x00', 0x8}, {0x35, 0x6, 0x2, '\x00', 0x2b}, {0x80, 0x9, 0x6c, '\x00', 0x1}, {0x0, 0x7, 0x81, '\x00', 0x1}, {0x5, 0x81, 0x4, '\x00', 0x8}, {0x89, 0xac, 0x1f, '\x00', 0xf9}]}}) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002b7bfc9e1eca847e47f207566ef4ed80b7a7b95a78f6310716ffdb998782a2bb4e9b79d0cf0229cb6d195070d5ccff64684425d857bffc06b1e5140b5046c3386534f5b0ac4d11b70f98960ec385c0f01193e7469c47f6a01cf12ce9d9166b7da8e004db447a6cd2a9", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (rerun: 64)

00:19:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x4}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x6}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3378.270643][T26182] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 3378.510672][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3378.630833][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3378.638988][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3378.650680][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3378.660482][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3378.910721][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3378.916973][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3378.926314][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3379.413296][T26182] hid-generic 0003:057B:003F.0062: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:19:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="200d640000006403239b41db49cd4909e2627a966825001cac82afde5caf96779417daba28c914636d81adcf183cf29ebccc1ba9224eae2a2b2ff0f5164fd5ef067ab530859d79d5b9ee4205fcc319d033eef0092a14bcab2c0e703ae1ef21036527e5e0318bd3949ca5"], &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x85, "3871264ce2aed65b12e1ec3cf2c1fc4a666571fbe537c23beb1e67943cbf2d125bee4aeb73d06f55bb14fe6d5ab5d0af23c78890af3b7cac81c79ffe0c60df9b76cb3470736643cae3cfedfb0cc7e603f0335ba1630a19cba431e532758747f0f8c596928250867ab816d70dbe40d0fe2616c5af7fb8d8cbb4e4e63307372333429335d7e5"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2bb, 0x1, 0x571e, 0x6, 0x1, 0xf3, 0xff, 0xa9c7, 0x4, 0x0, 0x0, 0x81}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0xf2}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_connect$cdc_ncm(0x2, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'q'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9612, 0x0, 0x401, 0x58}, {0x6, 0x24, 0x1a, 0x800}, [@mdlm_detail={0xd, 0x24, 0x13, 0x7f, "e8b1dcdf2a81a7bc79"}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8f, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x20, 0xb8, 0x81, 0x8, 0x40}, 0xb5, &(0x7f0000000140)={0x5, 0xf, 0xb5, 0x2, [@generic={0x9c, 0x10, 0x0, "a71f00427f39155eb1b59b2b82077c085b490af079e46205de70194ea6b355fcf050e0273543b0e854e216acd8c29f8649a0aada4ab8e85ae54515f77b5db144377b75397ff070178d8b26069117ee985f7257efb4afce798336f85c3ac42e6414a2c9d96509b77b9457710d1d3a13eeae0b2d95012acfdf1591a25ade7cd83e27f6d8b18493a126afd8d25ba3aa84b5b9fcbfbbd670057940"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3eda470f9126a9561aee6c26e23b98b1"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x3f, &(0x7f00000002c0)=@string={0x3f, 0x3, "22437e140debcd2d328ca243fc948ebda2088db44615bce5234fb9cfb49fca9a3afb68fba54f4690bc2fc55523803bbf243a063bcc00b5a4daa6b302e5"}}, {0x35, &(0x7f0000000300)=@string={0x35, 0x3, "147fcd751b5e0b4aa63fbf9baa7ec8e1fdf832dd6a48826748860fb97a1bac1652245baaa18899f81d84178f9366ff5c5e613c"}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "253ae6176548d038224c9da22d889775f246dc0c8466cadbd4aaebc8de96c428288ae96b97ce0c96bfb8226902dfc6621ae7bcde189aba75"}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "0008145e9d935c5dd97b5a395091"}}]})

00:19:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x7}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = fsmount(r5, 0x0, 0x176)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffc], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000e2225fe7a368b70b538810376762952884567e9a14cbdcd0592f657cbabe7757d457311be82f0a67cb97cd6fdf7ca6ece5cdc6ba6bf67c05073ee376029ec15bac1046065e1ad04674012e6a55045133334de273e076e04798be4998cf293eb06c", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3379.613023][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3379.621761][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3379.633258][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3379.641995][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3379.655584][T31937] usb 2-1: USB disconnect, device number 28
00:19:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x8}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:22 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3379.763395][ T6428] binder: 6424:6428 ioctl 4018620d 0 returned -22
00:19:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3380.130809][T31937] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 3380.372685][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3380.500718][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3380.508990][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3380.520454][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3380.530436][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3380.780840][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3380.787120][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3380.796226][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3381.272290][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3381.284572][T31937] hid-generic 0003:057B:003F.0063: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3381.296436][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3381.483278][T26182] usb 2-1: USB disconnect, device number 29
00:19:24 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0xca, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x8d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x81, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x16, 0x8, 0x10}, 0x148, &(0x7f0000000240)={0x5, 0xf, 0x148, 0x4, [@generic={0x4b, 0x10, 0x1, "cf23c0b36a45ba950274848c8399ed0521569a0822f5f4268eb71bb7b97ba0902207587e2c6e1edf22bf6418048fc41db93152207ad68cfae5a40707b2a5cc2864796355858ba7dc"}, @ssp_cap={0x10, 0x10, 0xa, 0x3a, 0x1, 0x10001, 0x0, 0x5, [0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x0, 0xff0f, 0x1f, [0x3fff, 0xff3ff0]}, @generic={0xd4, 0x10, 0x0, "dac3caf7df5d59771f0f486e1df6fdab215c80b949271f7b34fa885f3fe408897204b7fd3d0020436dc0f6e8f3b987879971c6a49909ad5b72e611b551a9caa347722e7236bcebdd43f7197b3022d93c8c589c2bed0b8abc7585492f808872dc15c139cc01e4ce8819ded0415010dbdf2332105452e75ae3975b98c49c03d39e917f1e761d6f11b67caba9965824f0bb1e26b0f64e553086010a34a493e21e67feec79183e4a62dfef62f7e788042c0990502de0ffa1bf48a9ffee81d517e96aff5707e246b4336c2bf903f2eaf3e536cf"}]}, 0x9, [{0xb9, &(0x7f00000000c0)=@string={0xb9, 0x3, "3c8d5d45b5a7d45a224039800f212b8d5b6a3af4bd090a656c96a073643543142ef86afc62d9f8eceddc78d37e914d47bd47df994dc2350b37391d7ad34073d9f223011fbcc39cfeff85272cfd3feb789eda1242fcc5f1ba1408be1ee24c376b80101959b0be25274269b747d99f2431537c508d2a520620287b8c5216990ab19194c13f1a2a411a084a9ede0c878a3b2e29568bd9b9689aa5bb801591df3775a36bb77940da8d5bfdcbde28cc0ca1cebeca29183ccd28"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f00000003c0)=@string={0x7d, 0x3, "69667ce5a32663e145f9c3dabc099af83ac6e97c2689f3e19fa7f6651a986b038809905daa35fe6e0d02bf06d84d38c40c3b076a09e4d6e302c8ebbc3a1ed0c62b5764563abb5a20da63ca4f7a25e361c31f344bd672dba2fa428072e93a0a7672cb45243140ba8d1d37c07ffa995593084f487dcde96807b0f0e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41e}}, {0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "3b8c4c5da67a616f3a8df8d83f9027a6283165c0c2b7c138e37257486e1aaea113fc6c949d953efd6ab17cfd600d49e559e62dba83b6cfbb7405c5033f5749f6f66328b1a309ad38213fc529a71f9856aeaab66223deea189d702418bf3713cfe057b810"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x40, 0xa, 0xe0, {0xe0, 0x24, "8a85f1f111b5176a8c3fb872fcc28ecf51847f4f4153ca78c338c692e8c2c0e284767e7ff868ad5398e57080dd4653c1f45da29e33e5fd600f0ea5fc89024c0071daa139e5c8671f50471f74616b516e2f935050855a88f5a63d9b49c3ebf3e045a55f624c31f1ff77f74fb4826e9a8dbff70828f988d7691f38b27d24f04b4e6424535be5fce5a5731bae29b47838d741771aaaa35b2136c95ccd32584fb25334839b9fb480c1cb9e4f08f7bcd250f2b641f4d791006f36e9588df5d1de9f972c162e0d53d07804c6ac3ee37e1297bccfe9862ad060cd493720c4ed55a4"}}, &(0x7f0000000800)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "c8a520a3dcd2b279e236a2844a3b6068d26adc6d875bd57e9ade1743f19669cb7abfdb8dd4aea06e2c1bebc593a21c19b2302be05985958a5750094a190a7fadd5da1a0c321369f446a77aa2f85827e235f839423aae96b14ea9a953f48fb327cbb670b3255c9070a31244d1e6151ff33dd52031cd9b36eb45d842b14b31095059eb7e944ede2364253da48a9ad6abbff8cd4fbafb8fd4a284b2f1"}}, &(0x7f00000005c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "8a429653"}, @local=@item_4={0x3, 0x2, 0x5, "283c0ac9"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf48, 0x1, 0x1, {0x22, 0x21c}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x3, 0xa0, "49b249f087b3363b8e2c2408be7f6725775dd98e907d5d0127000e51af7c21e8baf44e25d3491c472ca431cf07d72ff8047e7d4b87b5340d48806758874e2afbe8fde5449747a7f50568a8dad739d8d3dea828fc9dd8c4234e308e9702d973a4ad8364e1bcf6cbcdbdbcde6401984bbf3277e95ff8c3c0e2d1b3c533aaa33781b37eba49824f11380ee4596ed64f912deff2760f6943bae4d90684fd2a17fc59"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000ac0)={0x20, 0x1, 0x8e, "08661102cfb05992adb5f65887a5b54ce8fe870e10552ab8607aa253e0ff547fca06b271faee63033b5e1ea3201686cc99a00965eeda59453a93ca7984293eb6d5d642812ff2e2779a15fac57e065ef72b01db8e993309b9079b2a6984607703b74cd6af7ebb5f3516038e27f731e44a67a827f3b4d0b8e624e5b4c4ca2b4a9c322d26674a64c6ea88c5689964a5"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x9}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = fsmount(r5, 0x0, 0x176)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffc], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000e2225fe7a368b70b538810376762952884567e9a14cbdcd0592f657cbabe7757d457311be82f0a67cb97cd6fdf7ca6ece5cdc6ba6bf67c05073ee376029ec15bac1046065e1ad04674012e6a55045133334de273e076e04798be4998cf293eb06c", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:24 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xa}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xb}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3382.410709][T29462] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 3382.660717][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3382.780863][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3382.789018][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3382.800025][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3382.809807][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3383.050789][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3383.057188][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3383.066336][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3383.532008][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3383.541163][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3383.559317][T29462] hid-generic 0003:057B:003F.0064: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3383.754629][T29462] usb 2-1: USB disconnect, device number 30
00:19:26 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0xca, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x8d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x81, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x16, 0x8, 0x10}, 0x148, &(0x7f0000000240)={0x5, 0xf, 0x148, 0x4, [@generic={0x4b, 0x10, 0x1, "cf23c0b36a45ba950274848c8399ed0521569a0822f5f4268eb71bb7b97ba0902207587e2c6e1edf22bf6418048fc41db93152207ad68cfae5a40707b2a5cc2864796355858ba7dc"}, @ssp_cap={0x10, 0x10, 0xa, 0x3a, 0x1, 0x10001, 0x0, 0x5, [0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x0, 0xff0f, 0x1f, [0x3fff, 0xff3ff0]}, @generic={0xd4, 0x10, 0x0, "dac3caf7df5d59771f0f486e1df6fdab215c80b949271f7b34fa885f3fe408897204b7fd3d0020436dc0f6e8f3b987879971c6a49909ad5b72e611b551a9caa347722e7236bcebdd43f7197b3022d93c8c589c2bed0b8abc7585492f808872dc15c139cc01e4ce8819ded0415010dbdf2332105452e75ae3975b98c49c03d39e917f1e761d6f11b67caba9965824f0bb1e26b0f64e553086010a34a493e21e67feec79183e4a62dfef62f7e788042c0990502de0ffa1bf48a9ffee81d517e96aff5707e246b4336c2bf903f2eaf3e536cf"}]}, 0x9, [{0xb9, &(0x7f00000000c0)=@string={0xb9, 0x3, "3c8d5d45b5a7d45a224039800f212b8d5b6a3af4bd090a656c96a073643543142ef86afc62d9f8eceddc78d37e914d47bd47df994dc2350b37391d7ad34073d9f223011fbcc39cfeff85272cfd3feb789eda1242fcc5f1ba1408be1ee24c376b80101959b0be25274269b747d99f2431537c508d2a520620287b8c5216990ab19194c13f1a2a411a084a9ede0c878a3b2e29568bd9b9689aa5bb801591df3775a36bb77940da8d5bfdcbde28cc0ca1cebeca29183ccd28"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f00000003c0)=@string={0x7d, 0x3, "69667ce5a32663e145f9c3dabc099af83ac6e97c2689f3e19fa7f6651a986b038809905daa35fe6e0d02bf06d84d38c40c3b076a09e4d6e302c8ebbc3a1ed0c62b5764563abb5a20da63ca4f7a25e361c31f344bd672dba2fa428072e93a0a7672cb45243140ba8d1d37c07ffa995593084f487dcde96807b0f0e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41e}}, {0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "3b8c4c5da67a616f3a8df8d83f9027a6283165c0c2b7c138e37257486e1aaea113fc6c949d953efd6ab17cfd600d49e559e62dba83b6cfbb7405c5033f5749f6f66328b1a309ad38213fc529a71f9856aeaab66223deea189d702418bf3713cfe057b810"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x40, 0xa, 0xe0, {0xe0, 0x24, "8a85f1f111b5176a8c3fb872fcc28ecf51847f4f4153ca78c338c692e8c2c0e284767e7ff868ad5398e57080dd4653c1f45da29e33e5fd600f0ea5fc89024c0071daa139e5c8671f50471f74616b516e2f935050855a88f5a63d9b49c3ebf3e045a55f624c31f1ff77f74fb4826e9a8dbff70828f988d7691f38b27d24f04b4e6424535be5fce5a5731bae29b47838d741771aaaa35b2136c95ccd32584fb25334839b9fb480c1cb9e4f08f7bcd250f2b641f4d791006f36e9588df5d1de9f972c162e0d53d07804c6ac3ee37e1297bccfe9862ad060cd493720c4ed55a4"}}, &(0x7f0000000800)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "c8a520a3dcd2b279e236a2844a3b6068d26adc6d875bd57e9ade1743f19669cb7abfdb8dd4aea06e2c1bebc593a21c19b2302be05985958a5750094a190a7fadd5da1a0c321369f446a77aa2f85827e235f839423aae96b14ea9a953f48fb327cbb670b3255c9070a31244d1e6151ff33dd52031cd9b36eb45d842b14b31095059eb7e944ede2364253da48a9ad6abbff8cd4fbafb8fd4a284b2f1"}}, &(0x7f00000005c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "8a429653"}, @local=@item_4={0x3, 0x2, 0x5, "283c0ac9"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf48, 0x1, 0x1, {0x22, 0x21c}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x3, 0xa0, "49b249f087b3363b8e2c2408be7f6725775dd98e907d5d0127000e51af7c21e8baf44e25d3491c472ca431cf07d72ff8047e7d4b87b5340d48806758874e2afbe8fde5449747a7f50568a8dad739d8d3dea828fc9dd8c4234e308e9702d973a4ad8364e1bcf6cbcdbdbcde6401984bbf3277e95ff8c3c0e2d1b3c533aaa33781b37eba49824f11380ee4596ed64f912deff2760f6943bae4d90684fd2a17fc59"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000ac0)={0x20, 0x1, 0x8e, "08661102cfb05992adb5f65887a5b54ce8fe870e10552ab8607aa253e0ff547fca06b271faee63033b5e1ea3201686cc99a00965eeda59453a93ca7984293eb6d5d642812ff2e2779a15fac57e065ef72b01db8e993309b9079b2a6984607703b74cd6af7ebb5f3516038e27f731e44a67a827f3b4d0b8e624e5b4c4ca2b4a9c322d26674a64c6ea88c5689964a5"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)

00:19:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xc}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = fsmount(r5, 0x0, 0x176)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffc], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000e2225fe7a368b70b538810376762952884567e9a14cbdcd0592f657cbabe7757d457311be82f0a67cb97cd6fdf7ca6ece5cdc6ba6bf67c05073ee376029ec15bac1046065e1ad04674012e6a55045133334de273e076e04798be4998cf293eb06c", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r4, r3) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
fsmount(r5, 0x0, 0x176) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffc], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000e2225fe7a368b70b538810376762952884567e9a14cbdcd0592f657cbabe7757d457311be82f0a67cb97cd6fdf7ca6ece5cdc6ba6bf67c05073ee376029ec15bac1046065e1ad04674012e6a55045133334de273e076e04798be4998cf293eb06c", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:19:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xd}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:27 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3384.349425][ T6492] binder: 6482:6492 ioctl 4018620d 0 returned -22
00:19:27 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:27 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3384.730848][T31937] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 3385.030666][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3385.170917][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3385.179160][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3385.190540][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3385.200743][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3385.460755][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3385.466994][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3385.476761][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3385.735814][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3385.744583][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3385.799256][T31937] hid-generic 0003:057B:003F.0065: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3385.994561][T31937] usb 2-1: USB disconnect, device number 31
00:19:29 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0xca, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x8d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x81, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x16, 0x8, 0x10}, 0x148, &(0x7f0000000240)={0x5, 0xf, 0x148, 0x4, [@generic={0x4b, 0x10, 0x1, "cf23c0b36a45ba950274848c8399ed0521569a0822f5f4268eb71bb7b97ba0902207587e2c6e1edf22bf6418048fc41db93152207ad68cfae5a40707b2a5cc2864796355858ba7dc"}, @ssp_cap={0x10, 0x10, 0xa, 0x3a, 0x1, 0x10001, 0x0, 0x5, [0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x0, 0xff0f, 0x1f, [0x3fff, 0xff3ff0]}, @generic={0xd4, 0x10, 0x0, "dac3caf7df5d59771f0f486e1df6fdab215c80b949271f7b34fa885f3fe408897204b7fd3d0020436dc0f6e8f3b987879971c6a49909ad5b72e611b551a9caa347722e7236bcebdd43f7197b3022d93c8c589c2bed0b8abc7585492f808872dc15c139cc01e4ce8819ded0415010dbdf2332105452e75ae3975b98c49c03d39e917f1e761d6f11b67caba9965824f0bb1e26b0f64e553086010a34a493e21e67feec79183e4a62dfef62f7e788042c0990502de0ffa1bf48a9ffee81d517e96aff5707e246b4336c2bf903f2eaf3e536cf"}]}, 0x9, [{0xb9, &(0x7f00000000c0)=@string={0xb9, 0x3, "3c8d5d45b5a7d45a224039800f212b8d5b6a3af4bd090a656c96a073643543142ef86afc62d9f8eceddc78d37e914d47bd47df994dc2350b37391d7ad34073d9f223011fbcc39cfeff85272cfd3feb789eda1242fcc5f1ba1408be1ee24c376b80101959b0be25274269b747d99f2431537c508d2a520620287b8c5216990ab19194c13f1a2a411a084a9ede0c878a3b2e29568bd9b9689aa5bb801591df3775a36bb77940da8d5bfdcbde28cc0ca1cebeca29183ccd28"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f00000003c0)=@string={0x7d, 0x3, "69667ce5a32663e145f9c3dabc099af83ac6e97c2689f3e19fa7f6651a986b038809905daa35fe6e0d02bf06d84d38c40c3b076a09e4d6e302c8ebbc3a1ed0c62b5764563abb5a20da63ca4f7a25e361c31f344bd672dba2fa428072e93a0a7672cb45243140ba8d1d37c07ffa995593084f487dcde96807b0f0e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41e}}, {0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "3b8c4c5da67a616f3a8df8d83f9027a6283165c0c2b7c138e37257486e1aaea113fc6c949d953efd6ab17cfd600d49e559e62dba83b6cfbb7405c5033f5749f6f66328b1a309ad38213fc529a71f9856aeaab66223deea189d702418bf3713cfe057b810"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x40, 0xa, 0xe0, {0xe0, 0x24, "8a85f1f111b5176a8c3fb872fcc28ecf51847f4f4153ca78c338c692e8c2c0e284767e7ff868ad5398e57080dd4653c1f45da29e33e5fd600f0ea5fc89024c0071daa139e5c8671f50471f74616b516e2f935050855a88f5a63d9b49c3ebf3e045a55f624c31f1ff77f74fb4826e9a8dbff70828f988d7691f38b27d24f04b4e6424535be5fce5a5731bae29b47838d741771aaaa35b2136c95ccd32584fb25334839b9fb480c1cb9e4f08f7bcd250f2b641f4d791006f36e9588df5d1de9f972c162e0d53d07804c6ac3ee37e1297bccfe9862ad060cd493720c4ed55a4"}}, &(0x7f0000000800)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "c8a520a3dcd2b279e236a2844a3b6068d26adc6d875bd57e9ade1743f19669cb7abfdb8dd4aea06e2c1bebc593a21c19b2302be05985958a5750094a190a7fadd5da1a0c321369f446a77aa2f85827e235f839423aae96b14ea9a953f48fb327cbb670b3255c9070a31244d1e6151ff33dd52031cd9b36eb45d842b14b31095059eb7e944ede2364253da48a9ad6abbff8cd4fbafb8fd4a284b2f1"}}, &(0x7f00000005c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "8a429653"}, @local=@item_4={0x3, 0x2, 0x5, "283c0ac9"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf48, 0x1, 0x1, {0x22, 0x21c}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x3, 0xa0, "49b249f087b3363b8e2c2408be7f6725775dd98e907d5d0127000e51af7c21e8baf44e25d3491c472ca431cf07d72ff8047e7d4b87b5340d48806758874e2afbe8fde5449747a7f50568a8dad739d8d3dea828fc9dd8c4234e308e9702d973a4ad8364e1bcf6cbcdbdbcde6401984bbf3277e95ff8c3c0e2d1b3c533aaa33781b37eba49824f11380ee4596ed64f912deff2760f6943bae4d90684fd2a17fc59"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000ac0)={0x20, 0x1, 0x8e, "08661102cfb05992adb5f65887a5b54ce8fe870e10552ab8607aa253e0ff547fca06b271faee63033b5e1ea3201686cc99a00965eeda59453a93ca7984293eb6d5d642812ff2e2779a15fac57e065ef72b01db8e993309b9079b2a6984607703b74cd6af7ebb5f3516038e27f731e44a67a827f3b4d0b8e624e5b4c4ca2b4a9c322d26674a64c6ea88c5689964a5"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0xca, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x8d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x81, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x16, 0x8, 0x10}, 0x148, &(0x7f0000000240)={0x5, 0xf, 0x148, 0x4, [@generic={0x4b, 0x10, 0x1, "cf23c0b36a45ba950274848c8399ed0521569a0822f5f4268eb71bb7b97ba0902207587e2c6e1edf22bf6418048fc41db93152207ad68cfae5a40707b2a5cc2864796355858ba7dc"}, @ssp_cap={0x10, 0x10, 0xa, 0x3a, 0x1, 0x10001, 0x0, 0x5, [0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x0, 0xff0f, 0x1f, [0x3fff, 0xff3ff0]}, @generic={0xd4, 0x10, 0x0, "dac3caf7df5d59771f0f486e1df6fdab215c80b949271f7b34fa885f3fe408897204b7fd3d0020436dc0f6e8f3b987879971c6a49909ad5b72e611b551a9caa347722e7236bcebdd43f7197b3022d93c8c589c2bed0b8abc7585492f808872dc15c139cc01e4ce8819ded0415010dbdf2332105452e75ae3975b98c49c03d39e917f1e761d6f11b67caba9965824f0bb1e26b0f64e553086010a34a493e21e67feec79183e4a62dfef62f7e788042c0990502de0ffa1bf48a9ffee81d517e96aff5707e246b4336c2bf903f2eaf3e536cf"}]}, 0x9, [{0xb9, &(0x7f00000000c0)=@string={0xb9, 0x3, "3c8d5d45b5a7d45a224039800f212b8d5b6a3af4bd090a656c96a073643543142ef86afc62d9f8eceddc78d37e914d47bd47df994dc2350b37391d7ad34073d9f223011fbcc39cfeff85272cfd3feb789eda1242fcc5f1ba1408be1ee24c376b80101959b0be25274269b747d99f2431537c508d2a520620287b8c5216990ab19194c13f1a2a411a084a9ede0c878a3b2e29568bd9b9689aa5bb801591df3775a36bb77940da8d5bfdcbde28cc0ca1cebeca29183ccd28"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f00000003c0)=@string={0x7d, 0x3, "69667ce5a32663e145f9c3dabc099af83ac6e97c2689f3e19fa7f6651a986b038809905daa35fe6e0d02bf06d84d38c40c3b076a09e4d6e302c8ebbc3a1ed0c62b5764563abb5a20da63ca4f7a25e361c31f344bd672dba2fa428072e93a0a7672cb45243140ba8d1d37c07ffa995593084f487dcde96807b0f0e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41e}}, {0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "3b8c4c5da67a616f3a8df8d83f9027a6283165c0c2b7c138e37257486e1aaea113fc6c949d953efd6ab17cfd600d49e559e62dba83b6cfbb7405c5033f5749f6f66328b1a309ad38213fc529a71f9856aeaab66223deea189d702418bf3713cfe057b810"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}]}) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x40, 0xa, 0xe0, {0xe0, 0x24, "8a85f1f111b5176a8c3fb872fcc28ecf51847f4f4153ca78c338c692e8c2c0e284767e7ff868ad5398e57080dd4653c1f45da29e33e5fd600f0ea5fc89024c0071daa139e5c8671f50471f74616b516e2f935050855a88f5a63d9b49c3ebf3e045a55f624c31f1ff77f74fb4826e9a8dbff70828f988d7691f38b27d24f04b4e6424535be5fce5a5731bae29b47838d741771aaaa35b2136c95ccd32584fb25334839b9fb480c1cb9e4f08f7bcd250f2b641f4d791006f36e9588df5d1de9f972c162e0d53d07804c6ac3ee37e1297bccfe9862ad060cd493720c4ed55a4"}}, &(0x7f0000000800)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "c8a520a3dcd2b279e236a2844a3b6068d26adc6d875bd57e9ade1743f19669cb7abfdb8dd4aea06e2c1bebc593a21c19b2302be05985958a5750094a190a7fadd5da1a0c321369f446a77aa2f85827e235f839423aae96b14ea9a953f48fb327cbb670b3255c9070a31244d1e6151ff33dd52031cd9b36eb45d842b14b31095059eb7e944ede2364253da48a9ad6abbff8cd4fbafb8fd4a284b2f1"}}, &(0x7f00000005c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "8a429653"}, @local=@item_4={0x3, 0x2, 0x5, "283c0ac9"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf48, 0x1, 0x1, {0x22, 0x21c}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x3, 0xa0, "49b249f087b3363b8e2c2408be7f6725775dd98e907d5d0127000e51af7c21e8baf44e25d3491c472ca431cf07d72ff8047e7d4b87b5340d48806758874e2afbe8fde5449747a7f50568a8dad739d8d3dea828fc9dd8c4234e308e9702d973a4ad8364e1bcf6cbcdbdbcde6401984bbf3277e95ff8c3c0e2d1b3c533aaa33781b37eba49824f11380ee4596ed64f912deff2760f6943bae4d90684fd2a17fc59"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000ac0)={0x20, 0x1, 0x8e, "08661102cfb05992adb5f65887a5b54ce8fe870e10552ab8607aa253e0ff547fca06b271faee63033b5e1ea3201686cc99a00965eeda59453a93ca7984293eb6d5d642812ff2e2779a15fac57e065ef72b01db8e993309b9079b2a6984607703b74cd6af7ebb5f3516038e27f731e44a67a827f3b4d0b8e624e5b4c4ca2b4a9c322d26674a64c6ea88c5689964a5"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7f}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)

00:19:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xe}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2, 0x3000, 0x3, 0x12, 0xfff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x10}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x13000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3386.850859][T26182] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 3387.090718][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3387.210843][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3387.218973][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3387.234982][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3387.244808][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3387.500880][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3387.507169][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3387.521749][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3387.991817][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3388.000550][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3388.014278][T26182] hid-generic 0003:057B:003F.0066: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:19:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2, 0x3000, 0x3, 0x12, 0xfff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2, 0x3000, 0x3, 0x12, 0xfff}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:19:30 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x11}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x0, 0x3, 0xe3, {0xe3, 0x21, "8a7696797bd1c7b872b5aa52eae0c8314e533f288edbad6d437baeb752cca0360494c303ae19fd3be9b5521d680327d0474f8ee5ede2544d383a9f2e7ca767a2d7a52d999e5ea7d179d680d9cb1a9c5ef5a04cd353ac9855afe525ae06b41a9820405ba83f1e42b597026f4be20e7eb51bd482fdffebe836e16f5b133479e8594f31e6a1d1aa9767202abd4ed7fb3a4bcfb597116725a1dc6d0506fd2e1a14bb6052ad454cde67d4f3da4cff362c1f8d619da6eb13641de4a3f2bbc1f1b76a871b302fc5116f8f9b9a394ad6f1df2211fd608c35368b1f12df11bd7047547e7c9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000b00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0xa, "521ad8ab"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x1a1}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x40, 0xe, 0xd6, "4195f4ae9eda05179ee47ada58c4c65ab3bcda3dd379cba2bfdb512234761380cb8a4e7ccb5ddc1650f38f79522107fcc7ab885f8b6d45eeb1e6136f4344ec98c14e7562b9340c401b2823c1fa546cbc2895bdc289cd000155c49d28f4a9b66eca65ea37bfb817a9fa4630152c0c1211e3138f2f4894ab5da5fb40143db0f60cfd920f31b79a02d2c88a6888b86c1f0f5c54b060a3f4218e0b0a9b486225843b5c14a99533808cffa3ad98e80af6a6acbd9973156028b2b821ff9061f5a92237013b8d5831f3059072d5b2dc034e7f6997a174a00084"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000d40)={0x20, 0x1, 0x13, "75ab129416186af363d5352832852d4af3c156"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x3c, {0x3c, 0x10, "f5dfd3a8410a337db2f93c39dff97d2db4a4977f40445c2ac0346b2d123d6931497996cdd348ad4bb4f9f5f6225bf6494a19c2632fff49d08dda"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "b7c68bc961b035f7fbfc65de6b3dd3d19231cabdbe0dabaf89c5ba3a73bf2c306eb0e64fcbbf4a369d517c1036437c17509e998c5bbb3291cf7a8c50161f171a0f78ceb7a4e0895f4fa19d0f8858bbc9cd267e30f1d7a8e3726fe3a3780dade781be3a6b7c6b8935bc3d87d70f99a460b58627a582a85f63e22d8320b08df4aafef253b953c655090ba778c2d0e86cb4b4e9545e49c71b6fe9d095c477b83623882df3b8c0cc5d7f3198bb844c03900e02714e1063910a71bf6bc3ae587bd1b4999942aa70086feab9afac1d060fd7345c48358ef2633c5f872bd7c04814e876943b1e24d3203eeee23f4e6269f1784f26b04760a81d8f7c5ef1a6"}}, &(0x7f0000000240)={0x0, 0xf, 0x169, {0x5, 0xf, 0x169, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xffff, 0x0, 0x2, [0x3fcf, 0xf, 0x30, 0x0, 0x0, 0xc00f]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x10000, 0x0, 0x7fff, [0xffc0, 0xc000, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1a, 0xc0, 0x9, 0x1f, 0x81}, @generic={0xff, 0x10, 0x3, "4e7a43611837df279f538807366911ee0c579d2f19affa7bc8b980f6258f23ee1fe1dce0025dfefca80dc81d0e8bea186a0b1b0ef5c9fdda1f68462045f33e719f4d620f313603e9db5927be24fca0367b1f544dce94fcfc5ec316d9b122e702c07c662c081fba80fe6942b3c08fd29dee26b15d824910797610d8f13b460a48b85de82dc4afc6d944d5af57a6b50a363f015f1c20ca5dd53fe28e13d0a53ec8109a73e1148e5c28f18c4352413b5078bdeb09369db587ded7e86ccaa96a250f5c6f3109d2bd44e5175e5058f0f1e935f726a042cc6bdc7ab1b162f04f74f879fa12e07cdd44036b9b866d1ef47a789cf3765c5ee4926069c0511aa6"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5d4eb7ee5db6eddfe2eb6f6be7d4a1e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x95, 0x1, 0x6000}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x46, 0x2, "834c7411", "c24175a9"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xcc, 0x0, 0xf1, 0x8, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x17, 0x38, "5b2cbe596f69a549d5e13f4337367c4f321d317800621690b10a565782468f38c03c5dc54f6afa5090610f14726813f32b61fdc28583ed11"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1c00, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6a90"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "5193"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x18}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022060000008790fde2eb04"], 0x0}, 0x0)

[ 3388.217563][T29455] usb 2-1: USB disconnect, device number 32
00:19:30 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x12}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:30 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2, 0x3000, 0x3, 0x12, 0xfff}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x18}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3388.730746][T29455] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 3388.851637][ T1235] ieee802154 phy0 wpan0: encryption failed: -22
[ 3388.857953][ T1235] ieee802154 phy1 wpan1: encryption failed: -22
[ 3388.980673][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3389.100883][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3389.109161][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3389.120461][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3389.130504][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3389.370898][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3389.377190][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3389.387128][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3389.852927][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3389.861999][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3389.911399][T29455] hid (null): report_id 3957521808 is invalid
[ 3389.920006][T29455] hid-generic 0003:057B:003F.0067: report_id 3957521808 is invalid
[ 3389.928225][T29455] hid-generic 0003:057B:003F.0067: item 0 4 1 8 parsing failed
[ 3389.936333][T29455] hid-generic: probe of 0003:057B:003F.0067 failed with error -22
[ 3390.114074][T29455] usb 2-1: USB disconnect, device number 33
00:19:33 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x0, 0x3, 0xe3, {0xe3, 0x21, "8a7696797bd1c7b872b5aa52eae0c8314e533f288edbad6d437baeb752cca0360494c303ae19fd3be9b5521d680327d0474f8ee5ede2544d383a9f2e7ca767a2d7a52d999e5ea7d179d680d9cb1a9c5ef5a04cd353ac9855afe525ae06b41a9820405ba83f1e42b597026f4be20e7eb51bd482fdffebe836e16f5b133479e8594f31e6a1d1aa9767202abd4ed7fb3a4bcfb597116725a1dc6d0506fd2e1a14bb6052ad454cde67d4f3da4cff362c1f8d619da6eb13641de4a3f2bbc1f1b76a871b302fc5116f8f9b9a394ad6f1df2211fd608c35368b1f12df11bd7047547e7c9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000b00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0xa, "521ad8ab"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x1a1}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x40, 0xe, 0xd6, "4195f4ae9eda05179ee47ada58c4c65ab3bcda3dd379cba2bfdb512234761380cb8a4e7ccb5ddc1650f38f79522107fcc7ab885f8b6d45eeb1e6136f4344ec98c14e7562b9340c401b2823c1fa546cbc2895bdc289cd000155c49d28f4a9b66eca65ea37bfb817a9fa4630152c0c1211e3138f2f4894ab5da5fb40143db0f60cfd920f31b79a02d2c88a6888b86c1f0f5c54b060a3f4218e0b0a9b486225843b5c14a99533808cffa3ad98e80af6a6acbd9973156028b2b821ff9061f5a92237013b8d5831f3059072d5b2dc034e7f6997a174a00084"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000d40)={0x20, 0x1, 0x13, "75ab129416186af363d5352832852d4af3c156"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x3c, {0x3c, 0x10, "f5dfd3a8410a337db2f93c39dff97d2db4a4977f40445c2ac0346b2d123d6931497996cdd348ad4bb4f9f5f6225bf6494a19c2632fff49d08dda"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000240)={0x0, 0xf, 0x169, {0x5, 0xf, 0x169, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xffff, 0x0, 0x2, [0x3fcf, 0xf, 0x30, 0x0, 0x0, 0xc00f]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x10000, 0x0, 0x7fff, [0xffc0, 0xc000, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1a, 0xc0, 0x9, 0x1f, 0x81}, @generic={0xff, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5d4eb7ee5db6eddfe2eb6f6be7d4a1e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x95, 0x1, 0x6000}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x46, 0x2, "834c7411", "c24175a9"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xcc, 0x0, 0xf1, 0x8, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x17, 0x38, "5b2cbe596f69a549d5e13f4337367c4f321d317800621690b10a565782468f38c03c5dc54f6afa5090610f14726813f32b61fdc28583ed11"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1c00, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6a90"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "5193"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x18}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022060000008790fde2eb04"], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x0, 0x3, 0xe3, {0xe3, 0x21, "8a7696797bd1c7b872b5aa52eae0c8314e533f288edbad6d437baeb752cca0360494c303ae19fd3be9b5521d680327d0474f8ee5ede2544d383a9f2e7ca767a2d7a52d999e5ea7d179d680d9cb1a9c5ef5a04cd353ac9855afe525ae06b41a9820405ba83f1e42b597026f4be20e7eb51bd482fdffebe836e16f5b133479e8594f31e6a1d1aa9767202abd4ed7fb3a4bcfb597116725a1dc6d0506fd2e1a14bb6052ad454cde67d4f3da4cff362c1f8d619da6eb13641de4a3f2bbc1f1b76a871b302fc5116f8f9b9a394ad6f1df2211fd608c35368b1f12df11bd7047547e7c9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000b00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0xa, "521ad8ab"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x1a1}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x40, 0xe, 0xd6, "4195f4ae9eda05179ee47ada58c4c65ab3bcda3dd379cba2bfdb512234761380cb8a4e7ccb5ddc1650f38f79522107fcc7ab885f8b6d45eeb1e6136f4344ec98c14e7562b9340c401b2823c1fa546cbc2895bdc289cd000155c49d28f4a9b66eca65ea37bfb817a9fa4630152c0c1211e3138f2f4894ab5da5fb40143db0f60cfd920f31b79a02d2c88a6888b86c1f0f5c54b060a3f4218e0b0a9b486225843b5c14a99533808cffa3ad98e80af6a6acbd9973156028b2b821ff9061f5a92237013b8d5831f3059072d5b2dc034e7f6997a174a00084"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000d40)={0x20, 0x1, 0x13, "75ab129416186af363d5352832852d4af3c156"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x7f}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x3c, {0x3c, 0x10, "f5dfd3a8410a337db2f93c39dff97d2db4a4977f40445c2ac0346b2d123d6931497996cdd348ad4bb4f9f5f6225bf6494a19c2632fff49d08dda"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "b7c68bc961b035f7fbfc65de6b3dd3d19231cabdbe0dabaf89c5ba3a73bf2c306eb0e64fcbbf4a369d517c1036437c17509e998c5bbb3291cf7a8c50161f171a0f78ceb7a4e0895f4fa19d0f8858bbc9cd267e30f1d7a8e3726fe3a3780dade781be3a6b7c6b8935bc3d87d70f99a460b58627a582a85f63e22d8320b08df4aafef253b953c655090ba778c2d0e86cb4b4e9545e49c71b6fe9d095c477b83623882df3b8c0cc5d7f3198bb844c03900e02714e1063910a71bf6bc3ae587bd1b4999942aa70086feab9afac1d060fd7345c48358ef2633c5f872bd7c04814e876943b1e24d3203eeee23f4e6269f1784f26b04760a81d8f7c5ef1a6"}}, &(0x7f0000000240)={0x0, 0xf, 0x169, {0x5, 0xf, 0x169, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xffff, 0x0, 0x2, [0x3fcf, 0xf, 0x30, 0x0, 0x0, 0xc00f]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x10000, 0x0, 0x7fff, [0xffc0, 0xc000, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1a, 0xc0, 0x9, 0x1f, 0x81}, @generic={0xff, 0x10, 0x3, "4e7a43611837df279f538807366911ee0c579d2f19affa7bc8b980f6258f23ee1fe1dce0025dfefca80dc81d0e8bea186a0b1b0ef5c9fdda1f68462045f33e719f4d620f313603e9db5927be24fca0367b1f544dce94fcfc5ec316d9b122e702c07c662c081fba80fe6942b3c08fd29dee26b15d824910797610d8f13b460a48b85de82dc4afc6d944d5af57a6b50a363f015f1c20ca5dd53fe28e13d0a53ec8109a73e1148e5c28f18c4352413b5078bdeb09369db587ded7e86ccaa96a250f5c6f3109d2bd44e5175e5058f0f1e935f726a042cc6bdc7ab1b162f04f74f879fa12e07cdd44036b9b866d1ef47a789cf3765c5ee4926069c0511aa6"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5d4eb7ee5db6eddfe2eb6f6be7d4a1e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x95, 0x1, 0x6000}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x46, 0x2, "834c7411", "c24175a9"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xcc, 0x0, 0xf1, 0x8, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x17, 0x38, "5b2cbe596f69a549d5e13f4337367c4f321d317800621690b10a565782468f38c03c5dc54f6afa5090610f14726813f32b61fdc28583ed11"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1c00, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6a90"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "5193"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x18}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022060000008790fde2eb04"], 0x0}, 0x0) (async)

00:19:33 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x25}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f792866420fe74b4ac4a1b9676a000f20e035010000000f22e06736816300c7000000c4e1c171e482b9800000c00f3235000100000f3036364f0fc76e0067f2400f7d16f266f3f0f75d0f", 0x4b}], 0x1, 0x9, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3390.767029][ T6606] binder: 6605:6606 ioctl 4018620d 0 returned -22
[ 3390.840307][ T6629] binder: 6605:6629 ioctl 8138ae83 7fdb2d114bd0 returned -22
[ 3391.010662][T29455] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 3391.250754][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3391.390848][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3391.399092][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3391.410922][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3391.421222][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3391.690820][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3391.698375][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3391.707608][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3392.181923][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3392.190465][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3392.241087][T29455] hid (null): report_id 3957521808 is invalid
[ 3392.254527][T29455] hid-generic 0003:057B:003F.0068: report_id 3957521808 is invalid
[ 3392.262663][T29455] hid-generic 0003:057B:003F.0068: item 0 4 1 8 parsing failed
[ 3392.270556][T29455] hid-generic: probe of 0003:057B:003F.0068 failed with error -22
00:19:35 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x0, 0x3, 0xe3, {0xe3, 0x21, "8a7696797bd1c7b872b5aa52eae0c8314e533f288edbad6d437baeb752cca0360494c303ae19fd3be9b5521d680327d0474f8ee5ede2544d383a9f2e7ca767a2d7a52d999e5ea7d179d680d9cb1a9c5ef5a04cd353ac9855afe525ae06b41a9820405ba83f1e42b597026f4be20e7eb51bd482fdffebe836e16f5b133479e8594f31e6a1d1aa9767202abd4ed7fb3a4bcfb597116725a1dc6d0506fd2e1a14bb6052ad454cde67d4f3da4cff362c1f8d619da6eb13641de4a3f2bbc1f1b76a871b302fc5116f8f9b9a394ad6f1df2211fd608c35368b1f12df11bd7047547e7c9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000b00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0xa, "521ad8ab"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x1a1}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x40, 0xe, 0xd6, "4195f4ae9eda05179ee47ada58c4c65ab3bcda3dd379cba2bfdb512234761380cb8a4e7ccb5ddc1650f38f79522107fcc7ab885f8b6d45eeb1e6136f4344ec98c14e7562b9340c401b2823c1fa546cbc2895bdc289cd000155c49d28f4a9b66eca65ea37bfb817a9fa4630152c0c1211e3138f2f4894ab5da5fb40143db0f60cfd920f31b79a02d2c88a6888b86c1f0f5c54b060a3f4218e0b0a9b486225843b5c14a99533808cffa3ad98e80af6a6acbd9973156028b2b821ff9061f5a92237013b8d5831f3059072d5b2dc034e7f6997a174a00084"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000d40)={0x20, 0x1, 0x13, "75ab129416186af363d5352832852d4af3c156"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x7f}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x3c, {0x3c, 0x10, "f5dfd3a8410a337db2f93c39dff97d2db4a4977f40445c2ac0346b2d123d6931497996cdd348ad4bb4f9f5f6225bf6494a19c2632fff49d08dda"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000240)={0x0, 0xf, 0x169, {0x5, 0xf, 0x169, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xffff, 0x0, 0x2, [0x3fcf, 0xf, 0x30, 0x0, 0x0, 0xc00f]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x10000, 0x0, 0x7fff, [0xffc0, 0xc000, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1a, 0xc0, 0x9, 0x1f, 0x81}, @generic={0xff, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5d4eb7ee5db6eddfe2eb6f6be7d4a1e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x95, 0x1, 0x6000}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x46, 0x2, "834c7411", "c24175a9"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xcc, 0x0, 0xf1, 0x8, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x17, 0x38, "5b2cbe596f69a549d5e13f4337367c4f321d317800621690b10a565782468f38c03c5dc54f6afa5090610f14726813f32b61fdc28583ed11"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1c00, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6a90"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "5193"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x18}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022060000008790fde2eb04"], 0x0}, 0x0)

00:19:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x300}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f792866420fe74b4ac4a1b9676a000f20e035010000000f22e06736816300c7000000c4e1c171e482b9800000c00f3235000100000f3036364f0fc76e0067f2400f7d16f266f3f0f75d0f", 0x4b}], 0x1, 0x9, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r4, r3) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f792866420fe74b4ac4a1b9676a000f20e035010000000f22e06736816300c7000000c4e1c171e482b9800000c00f3235000100000f3036364f0fc76e0067f2400f7d16f266f3f0f75d0f", 0x4b}], 0x1, 0x9, &(0x7f0000000200), 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

[ 3392.451236][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3392.463622][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3392.477272][ T8081] usb 2-1: USB disconnect, device number 34
00:19:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x500}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x600}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3392.617044][ T6640] binder: 6638:6640 ioctl 4018620d 0 returned -22
[ 3392.722373][ T6653] binder: 6638:6653 ioctl 8138ae83 7fdb2d115bd0 returned -22
[ 3392.930746][ T8081] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 3393.181003][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3393.310779][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3393.318925][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3393.330011][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3393.340037][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3393.580831][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3393.587222][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3393.596396][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:19:36 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x700}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f792866420fe74b4ac4a1b9676a000f20e035010000000f22e06736816300c7000000c4e1c171e482b9800000c00f3235000100000f3036364f0fc76e0067f2400f7d16f266f3f0f75d0f", 0x4b}], 0x1, 0x9, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r4, r3) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f792866420fe74b4ac4a1b9676a000f20e035010000000f22e06736816300c7000000c4e1c171e482b9800000c00f3235000100000f3036364f0fc76e0067f2400f7d16f266f3f0f75d0f", 0x4b}], 0x1, 0x9, &(0x7f0000000200), 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

[ 3393.843389][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3393.852194][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:36 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x900}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xa00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000ac0)={0x20, 0x1c, 0x24, {0x24, 0xc, "803336e907eb4f7562277e04245f634e82ec7600f8ed916116651068fa5dd18e3eda"}}, &(0x7f0000000b00)={0x0, 0x3, 0x38, @string={0x38, 0x3, "07808c3cbcfb32e8c39e23f35ed5112a488f960d802a2c550818467023a518abcac7e372ad954abede1ac9dd406cbad9eaee767b7af0"}}, &(0x7f0000000b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "ce9f"}, @global=@item_4={0x3, 0x1, 0xb, "39db6506"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x4f2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x17, 0x20, "2d197e0ffc4d8d52c17e65cfbf9c5154359136a75c783c1242539127d8a124c1"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000cc0)={0x20, 0x1, 0xb, "8ba577341830bae398e457"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x80}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x2, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x1, 0x5, 0x40, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "869ea831b556"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x50, 0x7, 0xffa}, {0x6, 0x24, 0x1a, 0x6, 0x33}, [@mbim={0xc, 0x24, 0x1b, 0x2b79, 0x2, 0x9, 0x7f, 0x720f, 0x9}, @mdlm_detail={0x3e, 0x24, 0x13, 0x81, "cd16116f4980e44fc9cd2a4c50df6594cf1e6a925eb007028aff8e96cfc97a51bae13682cd65910f5489cb97f7822067710ffd76d828e78a17f7"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x800}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1864, [0x1f, 0x4, 0x17e, 0xcf4, 0x6, 0xb7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0x95c3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0x0, 0x13, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0xc, 0x1000}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0x36, {0x36, 0xf, "1e2f2e722aba53a15f202ffb6a18b0d14812592321e03df3c0941aeb34e614e50451ba51c469f6e917c2d3ecdfb591c55831a0e6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "c4479b3e9ecb0d602fd23c69b6694b565d22b75d650f46df0d8cafdde2d8389e2e71c92c4b4bd09525d87f76556d9faf91e3bebcf10d9013990475f3325b01eba3a8c8c2aa5b593d8582c8d0c35a09f9cb14d1a15e873e8316047fe6d2eba9ca75e395eb22575372594d31e6f9985b7224ae1cb8e9c2ed8d5bebdeb704564d47844821c2e5c3da7ab2d408a40944f6d9d956de44b92f9335f32bf4176968f8d4db3c9215c968b098c69918a8849713504464ebf668aa2dc1c321625ec547da6cadf22a881c19c048a36db72256eab9f1db6de8d948047d328c56865900e1c9c41d58cc8c372ec14191923d73ebae674010747f800404"}}, &(0x7f00000003c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf000, 0x3f, [0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x0, 0x40, "de1b81fd", "665d42d2"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x7, 0xb7, 0x2, 0x5}}}, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x20, 0x9, 0xe9, "5f457f3729da9695271877acc674c732bf7d21d446f79978c88f4c11859eeae397d8422a6daeac101ff046914c758ea6e3eb75e2192983b1c901310863cbaa51e3a2332cdaf96499a447948a15bec6cf7819dc7d87f6b66d31594c478efb082faa4f43b8939581f82dd731e794cb6650f7192f8a205cff2b00e02ffd26479a01953aa9132319791aba810b0a53df390d22ca7aca71521f982942c367d97367082e1186a821aa9a6e815d8bbf9368b3cdf7b2ab82741b210e22f1e01243bcab46d3553330bf1eb9c8b90a4f120296e2aa5912b821abc89cec0a3c92a8a222ad2f5a72b7d38201d87982"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e1f8"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xc18}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e76a"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}})

00:19:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3393.940811][ T8081] usbhid 2-1:1.0: can't add hid device: -71
[ 3393.946826][ T8081] usbhid: probe of 2-1:1.0 failed with error -71
[ 3393.963534][ T8081] usb 2-1: USB disconnect, device number 35
00:19:36 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3394.036408][ T6684] binder: 6681:6684 ioctl 4018620d 0 returned -22
00:19:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xb00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3394.116074][ T6705] binder: 6681:6705 ioctl 8138ae83 7fdb2d114bd0 returned -22
00:19:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="018000bb", @ANYRESOCT=r5, @ANYRES32=0xee01, @ANYRES64=r1])
sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x4, 0x488, 0x9, {}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "1081f9892148bd2e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x40040)

00:19:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xc00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3394.420932][ T8081] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 3394.660822][ T8081] usb 2-1: Using ep0 maxpacket: 8
[ 3394.791457][ T8081] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3394.803268][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3394.824620][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3394.840732][ T8081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3395.110897][ T8081] usb 2-1: string descriptor 0 read error: -22
[ 3395.117192][ T8081] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3395.136951][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3395.402636][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3395.412146][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3395.666077][ T8081] hid-generic 0003:057B:003F.0069: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3395.868906][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3395.877594][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3395.887555][ T8081] usb 2-1: USB disconnect, device number 36
00:19:39 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000ac0)={0x20, 0x1c, 0x24, {0x24, 0xc, "803336e907eb4f7562277e04245f634e82ec7600f8ed916116651068fa5dd18e3eda"}}, &(0x7f0000000b00)={0x0, 0x3, 0x38, @string={0x38, 0x3, "07808c3cbcfb32e8c39e23f35ed5112a488f960d802a2c550818467023a518abcac7e372ad954abede1ac9dd406cbad9eaee767b7af0"}}, &(0x7f0000000b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "ce9f"}, @global=@item_4={0x3, 0x1, 0xb, "39db6506"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x4f2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x17, 0x20, "2d197e0ffc4d8d52c17e65cfbf9c5154359136a75c783c1242539127d8a124c1"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000cc0)={0x20, 0x1, 0xb, "8ba577341830bae398e457"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x80}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x2, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x1, 0x5, 0x40, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "869ea831b556"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x50, 0x7, 0xffa}, {0x6, 0x24, 0x1a, 0x6, 0x33}, [@mbim={0xc, 0x24, 0x1b, 0x2b79, 0x2, 0x9, 0x7f, 0x720f, 0x9}, @mdlm_detail={0x3e, 0x24, 0x13, 0x81, "cd16116f4980e44fc9cd2a4c50df6594cf1e6a925eb007028aff8e96cfc97a51bae13682cd65910f5489cb97f7822067710ffd76d828e78a17f7"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x800}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1864, [0x1f, 0x4, 0x17e, 0xcf4, 0x6, 0xb7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0x95c3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0x0, 0x13, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0xc, 0x1000}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0x36, {0x36, 0xf, "1e2f2e722aba53a15f202ffb6a18b0d14812592321e03df3c0941aeb34e614e50451ba51c469f6e917c2d3ecdfb591c55831a0e6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "c4479b3e9ecb0d602fd23c69b6694b565d22b75d650f46df0d8cafdde2d8389e2e71c92c4b4bd09525d87f76556d9faf91e3bebcf10d9013990475f3325b01eba3a8c8c2aa5b593d8582c8d0c35a09f9cb14d1a15e873e8316047fe6d2eba9ca75e395eb22575372594d31e6f9985b7224ae1cb8e9c2ed8d5bebdeb704564d47844821c2e5c3da7ab2d408a40944f6d9d956de44b92f9335f32bf4176968f8d4db3c9215c968b098c69918a8849713504464ebf668aa2dc1c321625ec547da6cadf22a881c19c048a36db72256eab9f1db6de8d948047d328c56865900e1c9c41d58cc8c372ec14191923d73ebae674010747f800404"}}, &(0x7f00000003c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf000, 0x3f, [0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x0, 0x40, "de1b81fd", "665d42d2"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x7, 0xb7, 0x2, 0x5}}}, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x20, 0x9, 0xe9, "5f457f3729da9695271877acc674c732bf7d21d446f79978c88f4c11859eeae397d8422a6daeac101ff046914c758ea6e3eb75e2192983b1c901310863cbaa51e3a2332cdaf96499a447948a15bec6cf7819dc7d87f6b66d31594c478efb082faa4f43b8939581f82dd731e794cb6650f7192f8a205cff2b00e02ffd26479a01953aa9132319791aba810b0a53df390d22ca7aca71521f982942c367d97367082e1186a821aa9a6e815d8bbf9368b3cdf7b2ab82741b210e22f1e01243bcab46d3553330bf1eb9c8b90a4f120296e2aa5912b821abc89cec0a3c92a8a222ad2f5a72b7d38201d87982"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e1f8"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xc18}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e76a"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000ac0)={0x20, 0x1c, 0x24, {0x24, 0xc, "803336e907eb4f7562277e04245f634e82ec7600f8ed916116651068fa5dd18e3eda"}}, &(0x7f0000000b00)={0x0, 0x3, 0x38, @string={0x38, 0x3, "07808c3cbcfb32e8c39e23f35ed5112a488f960d802a2c550818467023a518abcac7e372ad954abede1ac9dd406cbad9eaee767b7af0"}}, &(0x7f0000000b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "ce9f"}, @global=@item_4={0x3, 0x1, 0xb, "39db6506"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x4f2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x17, 0x20, "2d197e0ffc4d8d52c17e65cfbf9c5154359136a75c783c1242539127d8a124c1"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000cc0)={0x20, 0x1, 0xb, "8ba577341830bae398e457"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x80}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_connect$cdc_ncm(0x2, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x1, 0x5, 0x40, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "869ea831b556"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x50, 0x7, 0xffa}, {0x6, 0x24, 0x1a, 0x6, 0x33}, [@mbim={0xc, 0x24, 0x1b, 0x2b79, 0x2, 0x9, 0x7f, 0x720f, 0x9}, @mdlm_detail={0x3e, 0x24, 0x13, 0x81, "cd16116f4980e44fc9cd2a4c50df6594cf1e6a925eb007028aff8e96cfc97a51bae13682cd65910f5489cb97f7822067710ffd76d828e78a17f7"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x800}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1864, [0x1f, 0x4, 0x17e, 0xcf4, 0x6, 0xb7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0x95c3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0x0, 0x13, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0xc, 0x1000}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}]}) (async)
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0x36, {0x36, 0xf, "1e2f2e722aba53a15f202ffb6a18b0d14812592321e03df3c0941aeb34e614e50451ba51c469f6e917c2d3ecdfb591c55831a0e6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "c4479b3e9ecb0d602fd23c69b6694b565d22b75d650f46df0d8cafdde2d8389e2e71c92c4b4bd09525d87f76556d9faf91e3bebcf10d9013990475f3325b01eba3a8c8c2aa5b593d8582c8d0c35a09f9cb14d1a15e873e8316047fe6d2eba9ca75e395eb22575372594d31e6f9985b7224ae1cb8e9c2ed8d5bebdeb704564d47844821c2e5c3da7ab2d408a40944f6d9d956de44b92f9335f32bf4176968f8d4db3c9215c968b098c69918a8849713504464ebf668aa2dc1c321625ec547da6cadf22a881c19c048a36db72256eab9f1db6de8d948047d328c56865900e1c9c41d58cc8c372ec14191923d73ebae674010747f800404"}}, &(0x7f00000003c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf000, 0x3f, [0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x0, 0x40, "de1b81fd", "665d42d2"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x7, 0xb7, 0x2, 0x5}}}, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x20, 0x9, 0xe9, "5f457f3729da9695271877acc674c732bf7d21d446f79978c88f4c11859eeae397d8422a6daeac101ff046914c758ea6e3eb75e2192983b1c901310863cbaa51e3a2332cdaf96499a447948a15bec6cf7819dc7d87f6b66d31594c478efb082faa4f43b8939581f82dd731e794cb6650f7192f8a205cff2b00e02ffd26479a01953aa9132319791aba810b0a53df390d22ca7aca71521f982942c367d97367082e1186a821aa9a6e815d8bbf9368b3cdf7b2ab82741b210e22f1e01243bcab46d3553330bf1eb9c8b90a4f120296e2aa5912b821abc89cec0a3c92a8a222ad2f5a72b7d38201d87982"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e1f8"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xc18}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e76a"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}}) (async)

00:19:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xd00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="018000bb", @ANYRESOCT=r5, @ANYRES32=0xee01, @ANYRES64=r1]) (async)
sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x4, 0x488, 0x9, {}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "1081f9892148bd2e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x40040)

00:19:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xe00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1100}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3396.755290][T26182] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 3397.000775][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3397.125715][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3397.133898][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3397.149882][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3397.159688][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3397.400832][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3397.407090][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3397.416411][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3397.671576][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3397.681521][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3397.918723][T26182] hid-generic 0003:057B:003F.006A: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3398.111570][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3398.120556][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3398.131703][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3398.140496][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:19:40 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, "fa"}, @local=@item_4={0x3, 0x2, 0x0, "17bf22fb"}, @main=@item_012={0x2, 0x0, 0xa, "aa26"}, @global=@item_4={0x3, 0x1, 0x0, "54354bfd"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000ac0)={0x20, 0x1c, 0x24, {0x24, 0xc, "803336e907eb4f7562277e04245f634e82ec7600f8ed916116651068fa5dd18e3eda"}}, &(0x7f0000000b00)={0x0, 0x3, 0x38, @string={0x38, 0x3, "07808c3cbcfb32e8c39e23f35ed5112a488f960d802a2c550818467023a518abcac7e372ad954abede1ac9dd406cbad9eaee767b7af0"}}, &(0x7f0000000b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "ce9f"}, @global=@item_4={0x3, 0x1, 0xb, "39db6506"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x4f2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x17, 0x20, "2d197e0ffc4d8d52c17e65cfbf9c5154359136a75c783c1242539127d8a124c1"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000cc0)={0x20, 0x1, 0xb, "8ba577341830bae398e457"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x80}})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x2, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x1, 0x5, 0x40, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "869ea831b556"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x50, 0x7, 0xffa}, {0x6, 0x24, 0x1a, 0x6, 0x33}, [@mbim={0xc, 0x24, 0x1b, 0x2b79, 0x2, 0x9, 0x7f, 0x720f, 0x9}, @mdlm_detail={0x3e, 0x24, 0x13, 0x81, "cd16116f4980e44fc9cd2a4c50df6594cf1e6a925eb007028aff8e96cfc97a51bae13682cd65910f5489cb97f7822067710ffd76d828e78a17f7"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x800}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1864, [0x1f, 0x4, 0x17e, 0xcf4, 0x6, 0xb7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0x95c3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0x0, 0x13, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0xc, 0x1000}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0x36, {0x36, 0xf, "1e2f2e722aba53a15f202ffb6a18b0d14812592321e03df3c0941aeb34e614e50451ba51c469f6e917c2d3ecdfb591c55831a0e6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "c4479b3e9ecb0d602fd23c69b6694b565d22b75d650f46df0d8cafdde2d8389e2e71c92c4b4bd09525d87f76556d9faf91e3bebcf10d9013990475f3325b01eba3a8c8c2aa5b593d8582c8d0c35a09f9cb14d1a15e873e8316047fe6d2eba9ca75e395eb22575372594d31e6f9985b7224ae1cb8e9c2ed8d5bebdeb704564d47844821c2e5c3da7ab2d408a40944f6d9d956de44b92f9335f32bf4176968f8d4db3c9215c968b098c69918a8849713504464ebf668aa2dc1c321625ec547da6cadf22a881c19c048a36db72256eab9f1db6de8d948047d328c56865900e1c9c41d58cc8c372ec14191923d73ebae674010747f800404"}}, &(0x7f00000003c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf000, 0x3f, [0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x0, 0x40, "de1b81fd", "665d42d2"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x7, 0xb7, 0x2, 0x5}}}, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x20, 0x9, 0xe9, "5f457f3729da9695271877acc674c732bf7d21d446f79978c88f4c11859eeae397d8422a6daeac101ff046914c758ea6e3eb75e2192983b1c901310863cbaa51e3a2332cdaf96499a447948a15bec6cf7819dc7d87f6b66d31594c478efb082faa4f43b8939581f82dd731e794cb6650f7192f8a205cff2b00e02ffd26479a01953aa9132319791aba810b0a53df390d22ca7aca71521f982942c367d97367082e1186a821aa9a6e815d8bbf9368b3cdf7b2ab82741b210e22f1e01243bcab46d3553330bf1eb9c8b90a4f120296e2aa5912b821abc89cec0a3c92a8a222ad2f5a72b7d38201d87982"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e1f8"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xc18}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e76a"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}})

00:19:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1200}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0}) (rerun: 32)
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="018000bb", @ANYRESOCT=r5, @ANYRES32=0xee01, @ANYRES64=r1])
sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x4, 0x488, 0x9, {}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "1081f9892148bd2e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x40040)

[ 3398.157483][T26182] usb 2-1: USB disconnect, device number 37
00:19:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1800}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3398.620707][T26182] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 3398.866334][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3398.990759][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3398.998903][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3399.010089][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3399.020122][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3399.280782][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3399.287183][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3399.296932][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3399.543570][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3399.552455][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3399.783010][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3399.791682][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3399.860799][T26182] usbhid 2-1:1.0: can't add hid device: -71
[ 3399.866817][T26182] usbhid: probe of 2-1:1.0 failed with error -71
[ 3399.880242][T26182] usb 2-1: USB disconnect, device number 38
00:19:42 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x7, 0x68, {0x68, 0x7, "52d3bd7c47353f5faa43051833a91102a4f6416a2bfa9166def598d3cf00d5982c5371f8687aeeb8a4a8220457b93042aa04a09be9d514d2cc2df1c8f7ca8416e54a34be27ee8d4e093a3b366944378e9c3dc01ab3298612ec399f72cca7740677d305ca6256"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x18, 0x93, "6dbab939836d703c328ec9a718b80119723b6394b133bb314a28a23024995b54e0ed4b95dc3f279818a5a2d26989da3f0982fe426eee026c4209836ee971440a011cfba13c176f60c2f292a8ad70c70c7293e938c4443d41382d659e54e7162615a523bba13f18b212fde0e1e6ab2125db0eaf23f46cb6e64b7311058d18b33d42a23288e334b7cea004ee8f39b359490637cd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0xf77cf2fb9d0d29fa, 0x28, 0x37, {0x37, 0xa, "deb2537870418a09673586fe9a31071e9a379d6722821ce2f3f6bb6f6c534c23de129fe799b74ee6763abc8ce8cc9f6297d9e96bdb"}}, &(0x7f0000000340)={0x0, 0x3, 0x32, @string={0x32, 0x3, "e6b5de8df9f7cec69d267f2ab5eb21460b942f9063dbd260489726f2658fe9b94b02a26dcdbbdbef613ec78e839553ba"}}, &(0x7f0000000380)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x8, "84721af1"}, @main=@item_4={0x3, 0x0, 0xa, "3fe42575"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xa, "282c3eb8"}, @local=@item_4={0x3, 0x2, 0xd, "e207d93b"}, @main=@item_012={0x1, 0x0, 0xa, "1b"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x8f9}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xaf, "a1ff378dbf0b822dff891c6af4bdce82335750f438bff735f0fe343170d87f4ad4cc8f9e64c47f122d7db7e7b45620367748e78906869c4a12d2219859cb5af157b3e49d62e2c625f90fee197e56f11a207ccbe22a1e2cdc0e0d8b8cbe64ccb608d252e5c983f5c19b4c3d6e0ecfa3fc6f6286fb93fd8119120e035fb4a64926071e6f86b4416fca25efb547d9fb6af89b0a14684ea06fcff32c2598eb5f892fb21edaa7762b2cc3cc2f42d3b57c45"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000580)={0x20, 0x1, 0x4f, "04b54cbb3f51e35e88e08fa15417f5be3ab1b8db6ac1bbf0fd280d8d1e79bc46e3bea32c79ebb3b2703ece891c1f9bec4f61708c3bc2335639fcf2708b007b075f92dd8f9ba00a4ff21c2f80465105"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}})

00:19:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x2500}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10006, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0xd000, 0xd000, 0x2, 0xff, 0x10000})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:43 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5c00}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3400.710685][T26182] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 3400.970650][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3401.091803][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3401.099911][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3401.115939][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3401.126088][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3401.380838][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3401.387070][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3401.401338][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3401.900993][T26182] hid-generic 0003:057B:003F.006B: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:19:46 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x7, 0x68, {0x68, 0x7, "52d3bd7c47353f5faa43051833a91102a4f6416a2bfa9166def598d3cf00d5982c5371f8687aeeb8a4a8220457b93042aa04a09be9d514d2cc2df1c8f7ca8416e54a34be27ee8d4e093a3b366944378e9c3dc01ab3298612ec399f72cca7740677d305ca6256"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x18, 0x93, "6dbab939836d703c328ec9a718b80119723b6394b133bb314a28a23024995b54e0ed4b95dc3f279818a5a2d26989da3f0982fe426eee026c4209836ee971440a011cfba13c176f60c2f292a8ad70c70c7293e938c4443d41382d659e54e7162615a523bba13f18b212fde0e1e6ab2125db0eaf23f46cb6e64b7311058d18b33d42a23288e334b7cea004ee8f39b359490637cd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0xf77cf2fb9d0d29fa, 0x28, 0x37, {0x37, 0xa, "deb2537870418a09673586fe9a31071e9a379d6722821ce2f3f6bb6f6c534c23de129fe799b74ee6763abc8ce8cc9f6297d9e96bdb"}}, &(0x7f0000000340)={0x0, 0x3, 0x32, @string={0x32, 0x3, "e6b5de8df9f7cec69d267f2ab5eb21460b942f9063dbd260489726f2658fe9b94b02a26dcdbbdbef613ec78e839553ba"}}, &(0x7f0000000380)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x8, "84721af1"}, @main=@item_4={0x3, 0x0, 0xa, "3fe42575"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xa, "282c3eb8"}, @local=@item_4={0x3, 0x2, 0xd, "e207d93b"}, @main=@item_012={0x1, 0x0, 0xa, "1b"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x8f9}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xaf, "a1ff378dbf0b822dff891c6af4bdce82335750f438bff735f0fe343170d87f4ad4cc8f9e64c47f122d7db7e7b45620367748e78906869c4a12d2219859cb5af157b3e49d62e2c625f90fee197e56f11a207ccbe22a1e2cdc0e0d8b8cbe64ccb608d252e5c983f5c19b4c3d6e0ecfa3fc6f6286fb93fd8119120e035fb4a64926071e6f86b4416fca25efb547d9fb6af89b0a14684ea06fcff32c2598eb5f892fb21edaa7762b2cc3cc2f42d3b57c45"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000580)={0x20, 0x1, 0x4f, "04b54cbb3f51e35e88e08fa15417f5be3ab1b8db6ac1bbf0fd280d8d1e79bc46e3bea32c79ebb3b2703ece891c1f9bec4f61708c3bc2335639fcf2708b007b075f92dd8f9ba00a4ff21c2f80465105"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}})

00:19:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10006, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0xd000, 0xd000, 0x2, 0xff, 0x10000})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10006, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0xd000, 0xd000, 0x2, 0xff, 0x10000}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

[ 3403.375088][T29462] usb 2-1: USB disconnect, device number 39
00:19:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x2000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3403.830683][T29462] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 3404.070662][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3404.190764][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3404.198898][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3404.215646][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3404.225607][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3404.470812][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3404.477123][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3404.492248][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:19:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x7, 0x68, {0x68, 0x7, "52d3bd7c47353f5faa43051833a91102a4f6416a2bfa9166def598d3cf00d5982c5371f8687aeeb8a4a8220457b93042aa04a09be9d514d2cc2df1c8f7ca8416e54a34be27ee8d4e093a3b366944378e9c3dc01ab3298612ec399f72cca7740677d305ca6256"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x18, 0x93, "6dbab939836d703c328ec9a718b80119723b6394b133bb314a28a23024995b54e0ed4b95dc3f279818a5a2d26989da3f0982fe426eee026c4209836ee971440a011cfba13c176f60c2f292a8ad70c70c7293e938c4443d41382d659e54e7162615a523bba13f18b212fde0e1e6ab2125db0eaf23f46cb6e64b7311058d18b33d42a23288e334b7cea004ee8f39b359490637cd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0xf77cf2fb9d0d29fa, 0x28, 0x37, {0x37, 0xa, "deb2537870418a09673586fe9a31071e9a379d6722821ce2f3f6bb6f6c534c23de129fe799b74ee6763abc8ce8cc9f6297d9e96bdb"}}, &(0x7f0000000340)={0x0, 0x3, 0x32, @string={0x32, 0x3, "e6b5de8df9f7cec69d267f2ab5eb21460b942f9063dbd260489726f2658fe9b94b02a26dcdbbdbef613ec78e839553ba"}}, &(0x7f0000000380)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x8, "84721af1"}, @main=@item_4={0x3, 0x0, 0xa, "3fe42575"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xa, "282c3eb8"}, @local=@item_4={0x3, 0x2, 0xd, "e207d93b"}, @main=@item_012={0x1, 0x0, 0xa, "1b"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x8f9}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xaf, "a1ff378dbf0b822dff891c6af4bdce82335750f438bff735f0fe343170d87f4ad4cc8f9e64c47f122d7db7e7b45620367748e78906869c4a12d2219859cb5af157b3e49d62e2c625f90fee197e56f11a207ccbe22a1e2cdc0e0d8b8cbe64ccb608d252e5c983f5c19b4c3d6e0ecfa3fc6f6286fb93fd8119120e035fb4a64926071e6f86b4416fca25efb547d9fb6af89b0a14684ea06fcff32c2598eb5f892fb21edaa7762b2cc3cc2f42d3b57c45"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000580)={0x20, 0x1, 0x4f, "04b54cbb3f51e35e88e08fa15417f5be3ab1b8db6ac1bbf0fd280d8d1e79bc46e3bea32c79ebb3b2703ece891c1f9bec4f61708c3bc2335639fcf2708b007b075f92dd8f9ba00a4ff21c2f80465105"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}})

00:19:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x3000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10006, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0xd000, 0xd000, 0x2, 0xff, 0x10000})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:19:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x4000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3404.830885][T29462] usbhid 2-1:1.0: can't add hid device: -71
[ 3404.836955][T29462] usbhid: probe of 2-1:1.0 failed with error -71
00:19:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3404.917676][T29462] usb 2-1: USB disconnect, device number 40
[ 3404.935844][ T6896] binder: BINDER_SET_CONTEXT_MGR already set
[ 3404.944304][ T6896] binder: 6893:6896 ioctl 4018620d 20002840 returned -16
[ 3405.330728][T29462] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 3405.570821][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3405.690989][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3405.699129][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3405.710384][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3405.720420][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3405.970804][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3405.977301][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3405.986712][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3406.473599][T29462] hid-generic 0003:057B:003F.006C: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:19:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x6000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xec, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5f, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x1a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x4, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x81}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x14, 0x68, 0xfa}, 0xc8, &(0x7f00000000c0)={0x5, 0xf, 0xc8, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x2, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x6, [0x0]}, @generic={0x86, 0x10, 0x3, "f5f08620fbb7c8dfc23c644cae1bb0abca345b6c330e05a5ca1d56ce3ab8aa53dffd1c6aa00ef991212165dbf0cc48e64186f9307bb19e2ad45be59965f78ac18eb4a5f6b29c8ad2d7cada01f38b57dad2eb6970fc46abc02d1414d0d12b0943b16bec3ff63ade2032aaa086c9dd58964657b4db2f609726bfe824c18a7e249e3770d9"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x0, 0xf9, 0x7, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d4560404ff366b03c32aee5040c1e7f0"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0xff}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x38, &(0x7f0000000240)=@string={0x38, 0x3, "2ddaf11842184e8d9cd469a41c2351414452b6c49aec91ccb577935d81ea84b5b994ff0b78a4de0c1ef073f7efb1a82d95f2d9b09bd0"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x40, 0xc, 0x58, {0x58, 0x22, "caf5a2f22be4edb474f0369da049e38cc2ac0260f0eff70f683436a3f7856c3ee5f563d14d5524657392202092359153a7dac5f3fa5a48459120efb09ce41ebd8c5d5c475fea734bcf6276100e49f35a26b46bdbec16"}}, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "dde33448"}, @global=@item_4={0x3, 0x1, 0x3, "ee281423"}, @main=@item_012={0x2, 0x0, 0x9, 'T\r'}, @global=@item_012={0x1, 0x1, 0xb, "e1"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x376}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x0, 0x13, 0xff, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000740)={0x20, 0x1, 0x85, "39dce3c69abe0192e6be6744f0565187d8c3e65e69249915d12ff0802d5438ad8007b17add73fb27c1a3eeba6537392065951b3b2842ef8405a263506164e4a2c05e3034aeb9c466b81470bce2a3c7cda225f0d6231b3b31f46f57bb2fbc035757583143ed13869971d81cfe3436252535d198a2ff2cb58338505c1ae3147de4e67069fe0c"}, &(0x7f0000000800)={0x20, 0x3, 0x1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:19:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3407.840331][T29462] usb 2-1: USB disconnect, device number 41
00:19:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x7000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:19:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x8000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3408.250895][T29462] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 3408.500676][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3408.622204][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3408.630451][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3408.641714][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3408.651772][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3408.900772][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3408.907254][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3408.916658][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3409.163181][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3409.173151][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3409.470952][T29462] usbhid 2-1:1.0: can't add hid device: -71
[ 3409.476971][T29462] usbhid: probe of 2-1:1.0 failed with error -71
[ 3409.495836][T29462] usb 2-1: USB disconnect, device number 42
00:19:52 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xec, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5f, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x1a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x4, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x81}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x14, 0x68, 0xfa}, 0xc8, &(0x7f00000000c0)={0x5, 0xf, 0xc8, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x2, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x6, [0x0]}, @generic={0x86, 0x10, 0x3, "f5f08620fbb7c8dfc23c644cae1bb0abca345b6c330e05a5ca1d56ce3ab8aa53dffd1c6aa00ef991212165dbf0cc48e64186f9307bb19e2ad45be59965f78ac18eb4a5f6b29c8ad2d7cada01f38b57dad2eb6970fc46abc02d1414d0d12b0943b16bec3ff63ade2032aaa086c9dd58964657b4db2f609726bfe824c18a7e249e3770d9"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x0, 0xf9, 0x7, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d4560404ff366b03c32aee5040c1e7f0"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0xff}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x38, &(0x7f0000000240)=@string={0x38, 0x3, "2ddaf11842184e8d9cd469a41c2351414452b6c49aec91ccb577935d81ea84b5b994ff0b78a4de0c1ef073f7efb1a82d95f2d9b09bd0"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x40, 0xc, 0x58, {0x58, 0x22, "caf5a2f22be4edb474f0369da049e38cc2ac0260f0eff70f683436a3f7856c3ee5f563d14d5524657392202092359153a7dac5f3fa5a48459120efb09ce41ebd8c5d5c475fea734bcf6276100e49f35a26b46bdbec16"}}, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "dde33448"}, @global=@item_4={0x3, 0x1, 0x3, "ee281423"}, @main=@item_012={0x2, 0x0, 0x9, 'T\r'}, @global=@item_012={0x1, 0x1, 0xb, "e1"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x376}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x0, 0x13, 0xff, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000740)={0x20, 0x1, 0x85, "39dce3c69abe0192e6be6744f0565187d8c3e65e69249915d12ff0802d5438ad8007b17add73fb27c1a3eeba6537392065951b3b2842ef8405a263506164e4a2c05e3034aeb9c466b81470bce2a3c7cda225f0d6231b3b31f46f57bb2fbc035757583143ed13869971d81cfe3436252535d198a2ff2cb58338505c1ae3147de4e67069fe0c"}, &(0x7f0000000800)={0x20, 0x3, 0x1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:19:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x9000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:19:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xa000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xb000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3410.250673][T29455] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 3410.490683][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3410.611532][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3410.619729][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3410.635871][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3410.645686][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3410.890697][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3410.897089][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3410.906242][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3411.151809][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3411.160399][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3411.450770][T29455] usbhid 2-1:1.0: can't add hid device: -71
[ 3411.456804][T29455] usbhid: probe of 2-1:1.0 failed with error -71
[ 3411.470495][T29455] usb 2-1: USB disconnect, device number 43
00:19:54 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xec, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5f, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x1a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x4, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x81}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x14, 0x68, 0xfa}, 0xc8, &(0x7f00000000c0)={0x5, 0xf, 0xc8, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x2, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x6, [0x0]}, @generic={0x86, 0x10, 0x3, "f5f08620fbb7c8dfc23c644cae1bb0abca345b6c330e05a5ca1d56ce3ab8aa53dffd1c6aa00ef991212165dbf0cc48e64186f9307bb19e2ad45be59965f78ac18eb4a5f6b29c8ad2d7cada01f38b57dad2eb6970fc46abc02d1414d0d12b0943b16bec3ff63ade2032aaa086c9dd58964657b4db2f609726bfe824c18a7e249e3770d9"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x0, 0xf9, 0x7, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d4560404ff366b03c32aee5040c1e7f0"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0xff}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x38, &(0x7f0000000240)=@string={0x38, 0x3, "2ddaf11842184e8d9cd469a41c2351414452b6c49aec91ccb577935d81ea84b5b994ff0b78a4de0c1ef073f7efb1a82d95f2d9b09bd0"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x40, 0xc, 0x58, {0x58, 0x22, "caf5a2f22be4edb474f0369da049e38cc2ac0260f0eff70f683436a3f7856c3ee5f563d14d5524657392202092359153a7dac5f3fa5a48459120efb09ce41ebd8c5d5c475fea734bcf6276100e49f35a26b46bdbec16"}}, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "dde33448"}, @global=@item_4={0x3, 0x1, 0x3, "ee281423"}, @main=@item_012={0x2, 0x0, 0x9, 'T\r'}, @global=@item_012={0x1, 0x1, 0xb, "e1"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x376}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x0, 0x13, 0xff, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000740)={0x20, 0x1, 0x85, "39dce3c69abe0192e6be6744f0565187d8c3e65e69249915d12ff0802d5438ad8007b17add73fb27c1a3eeba6537392065951b3b2842ef8405a263506164e4a2c05e3034aeb9c466b81470bce2a3c7cda225f0d6231b3b31f46f57bb2fbc035757583143ed13869971d81cfe3436252535d198a2ff2cb58338505c1ae3147de4e67069fe0c"}, &(0x7f0000000800)={0x20, 0x3, 0x1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:19:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_io_uring_complete(0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = memfd_secret(0x80000)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f0fcdbb653e0f1edb440f20c066350b000000440f22c066b9000a00000f32360f01c966b8002000000f23c00f21f8663500000c000f23f8f30fbd2eab1a0f01b5fb00f2d9f2f3a4", 0x48}], 0x1, 0x40, &(0x7f0000000200)=[@flags={0x3, 0x100000}], 0x1)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32])

00:19:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xc000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xd000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3412.230748][T29462] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 3412.480676][T29462] usb 2-1: Using ep0 maxpacket: 8
[ 3412.600843][T29462] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3412.608984][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3412.620158][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3412.630102][T29462] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3412.880906][T29462] usb 2-1: string descriptor 0 read error: -22
[ 3412.887198][T29462] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3412.896502][T29462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3413.141966][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3413.150528][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3413.450789][T29462] usbhid 2-1:1.0: can't add hid device: -71
[ 3413.456785][T29462] usbhid: probe of 2-1:1.0 failed with error -71
[ 3413.470065][T29462] usb 2-1: USB disconnect, device number 44
00:19:56 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xe000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32)
r2 = syz_io_uring_complete(0x0) (rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = memfd_secret(0x80000)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f0fcdbb653e0f1edb440f20c066350b000000440f22c066b9000a00000f32360f01c966b8002000000f23c00f21f8663500000c000f23f8f30fbd2eab1a0f01b5fb00f2d9f2f3a4", 0x48}], 0x1, 0x40, &(0x7f0000000200)=[@flags={0x3, 0x100000}], 0x1)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32])

00:19:56 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x40, 0x6c, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x69, {0x9, 0x21, 0x5122, 0x9, 0x1, {0x22, 0xa13}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x20, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x9, 0x80, 0x17, 0x8, 0x3}, 0x33, &(0x7f0000000680)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xff00, 0x80, [0xff3f07, 0xbe00, 0x18000, 0x0, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x46, 0x1f, 0x9, 0x20}, @generic={0x3, 0x10, 0xb}]}, 0x2, [{0x69, &(0x7f00000006c0)=@string={0x69, 0x3, "2292d87403299e9abf741b58edb6d709c60d802ec7709962de929b6eab417bfa01b75f20f65dce86c74c07ec0476805df14374a147169fe9b547a99b77040f3fd1cb220c1d30a062f499013b82968725506cfeb986f4c457a60420ce777a02f09ea5640df830bd"}}, {0xb1, &(0x7f0000000740)=@string={0xb1, 0x3, "a3723fc93847bff45480c51979ed3c3a0d21902eccc531e25ed497d73168666926cf1e900a9193f02954737822877889a2923b175c373839ea26f30d385f65962a836036cdefe85c31bb3bc752e56e3bac4f09296fec07e684833d323726f290bcd25484fbdec5726d4c0d1adec37429c3c05b2367e6f27dc64e928d8541b533da7e59007492d86e61ada4abdf6aee9acf299a8d892ac1930eac4497db3ecf50e674db94519a6ffcf663b71fc45513"}}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b17bf22fb00000600000000000000090000cf1c21336ff7000000000000"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x40, 0xb, 0xc8, {0xc8, 0x8, "72e4b2ffe049bd2174ff25ac110cab361bb662c0ef77f0330586ee4d1086da9307a191f3c620e7141d27b01e537062d25ef18f3bbcfdb227643d27da3963c62b06dce59a3e957d78b75cae470b6789921ee135a18e90a827fd67bec6c8a7841de28ca475ab6df5f6d33a925179210c986b642f91fd3186a2f9373ee9a680970f123b1d40fbd85bcb497fbd1d7608e0df983f925106b29e8cef178b8cbc4c99a265ae8f8a6b6690f5108ac599a4b61bbe3ce6ede6d1c4207b5091404376d7207d702d7c1eef37"}}, &(0x7f0000000240)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "090b040074a719b6c9eb49c253c09d611392c165a35a13c83fe9084945d23333bd337539cbaa58b19aa9821853107744f3ac7eff6dfc3d1e9bb4d947b44944ff61c46002d479e57baf794b33c415ec9d0a9fd239041c60524bd5bf2f02264b389212ca02cd346097832486e93b00ed7842df91a666c9cc40ee4410670d05758c291c31dd11ec0b0a00c9c9804f7f836de38359b9e1bee483fcfcb2bc5782598ecddd18c49b09f73145218c1dd15153e6fe95a2e9fafa1755ed"}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, '@,\nU'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x473}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x14, 0x44, "bb9995a53363b36b4e2d68caac186f51244214a0717700a1b00d3d437be695ac0cbc40a1f13dbcf1072baa32a0e8041c6c29ca7965c461ce1f1075c5081baa5052efd556"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0x50, "56ffa53bc93cef954ef67e90b589b5aa74aded8613a0b41c66883a204f3ee15de6bb3fe7fa457f986c7c8b8f82ad06b2570d1608e38fea1ac36db83e0f6cb790a9470442a3a4ff8f2f16441446434ff5"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf8}})
syz_usb_ep_write(r0, 0x20, 0x2a, &(0x7f0000000040)="f85ff9b3c5adcd5b86877ce8eed43375ff773bb664f39a01731b5f43953ac12674cd4cf8825c33ae79cd")

00:19:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x10000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_io_uring_complete(0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = memfd_secret(0x80000)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f0fcdbb653e0f1edb440f20c066350b000000440f22c066b9000a00000f32360f01c966b8002000000f23c00f21f8663500000c000f23f8f30fbd2eab1a0f01b5fb00f2d9f2f3a4", 0x48}], 0x1, 0x40, &(0x7f0000000200)=[@flags={0x3, 0x100000}], 0x1)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_io_uring_complete(0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
memfd_secret(0x80000) (async)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f0fcdbb653e0f1edb440f20c066350b000000440f22c066b9000a00000f32360f01c966b8002000000f23c00f21f8663500000c000f23f8f30fbd2eab1a0f01b5fb00f2d9f2f3a4", 0x48}], 0x1, 0x40, &(0x7f0000000200)=[@flags={0x3, 0x100000}], 0x1) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32]) (async)

00:19:56 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x11000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x12000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3414.272310][ T3222] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 3414.530828][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3414.650988][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3414.659154][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3414.670534][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3414.680335][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3414.930877][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3414.937157][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3414.947052][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3415.443810][ T3222] hid-generic 0003:057B:003F.006D: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3415.648079][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3415.656880][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3415.668643][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3415.678416][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3415.707444][T26182] usb 2-1: USB disconnect, device number 45
00:19:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x40, 0x6c, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x69, {0x9, 0x21, 0x5122, 0x9, 0x1, {0x22, 0xa13}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x20, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x9, 0x80, 0x17, 0x8, 0x3}, 0x33, &(0x7f0000000680)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xff00, 0x80, [0xff3f07, 0xbe00, 0x18000, 0x0, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x46, 0x1f, 0x9, 0x20}, @generic={0x3, 0x10, 0xb}]}, 0x2, [{0x69, &(0x7f00000006c0)=@string={0x69, 0x3, "2292d87403299e9abf741b58edb6d709c60d802ec7709962de929b6eab417bfa01b75f20f65dce86c74c07ec0476805df14374a147169fe9b547a99b77040f3fd1cb220c1d30a062f499013b82968725506cfeb986f4c457a60420ce777a02f09ea5640df830bd"}}, {0xb1, &(0x7f0000000740)=@string={0xb1, 0x3, "a3723fc93847bff45480c51979ed3c3a0d21902eccc531e25ed497d73168666926cf1e900a9193f02954737822877889a2923b175c373839ea26f30d385f65962a836036cdefe85c31bb3bc752e56e3bac4f09296fec07e684833d323726f290bcd25484fbdec5726d4c0d1adec37429c3c05b2367e6f27dc64e928d8541b533da7e59007492d86e61ada4abdf6aee9acf299a8d892ac1930eac4497db3ecf50e674db94519a6ffcf663b71fc45513"}}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b17bf22fb00000600000000000000090000cf1c21336ff7000000000000"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x40, 0xb, 0xc8, {0xc8, 0x8, "72e4b2ffe049bd2174ff25ac110cab361bb662c0ef77f0330586ee4d1086da9307a191f3c620e7141d27b01e537062d25ef18f3bbcfdb227643d27da3963c62b06dce59a3e957d78b75cae470b6789921ee135a18e90a827fd67bec6c8a7841de28ca475ab6df5f6d33a925179210c986b642f91fd3186a2f9373ee9a680970f123b1d40fbd85bcb497fbd1d7608e0df983f925106b29e8cef178b8cbc4c99a265ae8f8a6b6690f5108ac599a4b61bbe3ce6ede6d1c4207b5091404376d7207d702d7c1eef37"}}, &(0x7f0000000240)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "090b040074a719b6c9eb49c253c09d611392c165a35a13c83fe9084945d23333bd337539cbaa58b19aa9821853107744f3ac7eff6dfc3d1e9bb4d947b44944ff61c46002d479e57baf794b33c415ec9d0a9fd239041c60524bd5bf2f02264b389212ca02cd346097832486e93b00ed7842df91a666c9cc40ee4410670d05758c291c31dd11ec0b0a00c9c9804f7f836de38359b9e1bee483fcfcb2bc5782598ecddd18c49b09f73145218c1dd15153e6fe95a2e9fafa1755ed"}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, '@,\nU'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x473}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x14, 0x44, "bb9995a53363b36b4e2d68caac186f51244214a0717700a1b00d3d437be695ac0cbc40a1f13dbcf1072baa32a0e8041c6c29ca7965c461ce1f1075c5081baa5052efd556"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0x50, "56ffa53bc93cef954ef67e90b589b5aa74aded8613a0b41c66883a204f3ee15de6bb3fe7fa457f986c7c8b8f82ad06b2570d1608e38fea1ac36db83e0f6cb790a9470442a3a4ff8f2f16441446434ff5"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf8}})
syz_usb_ep_write(r0, 0x20, 0x2a, &(0x7f0000000040)="f85ff9b3c5adcd5b86877ce8eed43375ff773bb664f39a01731b5f43953ac12674cd4cf8825c33ae79cd")
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x40, 0x6c, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x69, {0x9, 0x21, 0x5122, 0x9, 0x1, {0x22, 0xa13}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x20, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x9, 0x80, 0x17, 0x8, 0x3}, 0x33, &(0x7f0000000680)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xff00, 0x80, [0xff3f07, 0xbe00, 0x18000, 0x0, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x46, 0x1f, 0x9, 0x20}, @generic={0x3, 0x10, 0xb}]}, 0x2, [{0x69, &(0x7f00000006c0)=@string={0x69, 0x3, "2292d87403299e9abf741b58edb6d709c60d802ec7709962de929b6eab417bfa01b75f20f65dce86c74c07ec0476805df14374a147169fe9b547a99b77040f3fd1cb220c1d30a062f499013b82968725506cfeb986f4c457a60420ce777a02f09ea5640df830bd"}}, {0xb1, &(0x7f0000000740)=@string={0xb1, 0x3, "a3723fc93847bff45480c51979ed3c3a0d21902eccc531e25ed497d73168666926cf1e900a9193f02954737822877889a2923b175c373839ea26f30d385f65962a836036cdefe85c31bb3bc752e56e3bac4f09296fec07e684833d323726f290bcd25484fbdec5726d4c0d1adec37429c3c05b2367e6f27dc64e928d8541b533da7e59007492d86e61ada4abdf6aee9acf299a8d892ac1930eac4497db3ecf50e674db94519a6ffcf663b71fc45513"}}]}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b17bf22fb00000600000000000000090000cf1c21336ff7000000000000"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x40, 0xb, 0xc8, {0xc8, 0x8, "72e4b2ffe049bd2174ff25ac110cab361bb662c0ef77f0330586ee4d1086da9307a191f3c620e7141d27b01e537062d25ef18f3bbcfdb227643d27da3963c62b06dce59a3e957d78b75cae470b6789921ee135a18e90a827fd67bec6c8a7841de28ca475ab6df5f6d33a925179210c986b642f91fd3186a2f9373ee9a680970f123b1d40fbd85bcb497fbd1d7608e0df983f925106b29e8cef178b8cbc4c99a265ae8f8a6b6690f5108ac599a4b61bbe3ce6ede6d1c4207b5091404376d7207d702d7c1eef37"}}, &(0x7f0000000240)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "090b040074a719b6c9eb49c253c09d611392c165a35a13c83fe9084945d23333bd337539cbaa58b19aa9821853107744f3ac7eff6dfc3d1e9bb4d947b44944ff61c46002d479e57baf794b33c415ec9d0a9fd239041c60524bd5bf2f02264b389212ca02cd346097832486e93b00ed7842df91a666c9cc40ee4410670d05758c291c31dd11ec0b0a00c9c9804f7f836de38359b9e1bee483fcfcb2bc5782598ecddd18c49b09f73145218c1dd15153e6fe95a2e9fafa1755ed"}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, '@,\nU'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x473}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x14, 0x44, "bb9995a53363b36b4e2d68caac186f51244214a0717700a1b00d3d437be695ac0cbc40a1f13dbcf1072baa32a0e8041c6c29ca7965c461ce1f1075c5081baa5052efd556"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0x50, "56ffa53bc93cef954ef67e90b589b5aa74aded8613a0b41c66883a204f3ee15de6bb3fe7fa457f986c7c8b8f82ad06b2570d1608e38fea1ac36db83e0f6cb790a9470442a3a4ff8f2f16441446434ff5"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf8}}) (async)
syz_usb_ep_write(r0, 0x20, 0x2a, &(0x7f0000000040)="f85ff9b3c5adcd5b86877ce8eed43375ff773bb664f39a01731b5f43953ac12674cd4cf8825c33ae79cd") (async)

00:19:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="0000000001"], 0x80}}, 0x0)
ftruncate(r2, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x7, 0x1, 0xb1, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x4, 0x0, 0x0, 0x0, "631959dd8e669659"}}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32, @ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT])
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

00:19:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x18000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x25000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:19:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3416.620740][ T3222] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 3416.870756][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3417.020804][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3417.029418][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3417.041069][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3417.051342][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3417.340844][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3417.347170][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3417.356697][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3417.855937][ T3222] hid-generic 0003:057B:003F.006E: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3418.051669][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3418.060236][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3418.069249][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3418.079192][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:20:00 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (rerun: 64)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x40, 0x6c, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x69, {0x9, 0x21, 0x5122, 0x9, 0x1, {0x22, 0xa13}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x20, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x9, 0x80, 0x17, 0x8, 0x3}, 0x33, &(0x7f0000000680)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xff00, 0x80, [0xff3f07, 0xbe00, 0x18000, 0x0, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x46, 0x1f, 0x9, 0x20}, @generic={0x3, 0x10, 0xb}]}, 0x2, [{0x69, &(0x7f00000006c0)=@string={0x69, 0x3, "2292d87403299e9abf741b58edb6d709c60d802ec7709962de929b6eab417bfa01b75f20f65dce86c74c07ec0476805df14374a147169fe9b547a99b77040f3fd1cb220c1d30a062f499013b82968725506cfeb986f4c457a60420ce777a02f09ea5640df830bd"}}, {0xb1, &(0x7f0000000740)=@string={0xb1, 0x3, "a3723fc93847bff45480c51979ed3c3a0d21902eccc531e25ed497d73168666926cf1e900a9193f02954737822877889a2923b175c373839ea26f30d385f65962a836036cdefe85c31bb3bc752e56e3bac4f09296fec07e684833d323726f290bcd25484fbdec5726d4c0d1adec37429c3c05b2367e6f27dc64e928d8541b533da7e59007492d86e61ada4abdf6aee9acf299a8d892ac1930eac4497db3ecf50e674db94519a6ffcf663b71fc45513"}}]}) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b17bf22fb00000600000000000000090000cf1c21336ff7000000000000"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x40, 0xb, 0xc8, {0xc8, 0x8, "72e4b2ffe049bd2174ff25ac110cab361bb662c0ef77f0330586ee4d1086da9307a191f3c620e7141d27b01e537062d25ef18f3bbcfdb227643d27da3963c62b06dce59a3e957d78b75cae470b6789921ee135a18e90a827fd67bec6c8a7841de28ca475ab6df5f6d33a925179210c986b642f91fd3186a2f9373ee9a680970f123b1d40fbd85bcb497fbd1d7608e0df983f925106b29e8cef178b8cbc4c99a265ae8f8a6b6690f5108ac599a4b61bbe3ce6ede6d1c4207b5091404376d7207d702d7c1eef37"}}, &(0x7f0000000240)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "090b040074a719b6c9eb49c253c09d611392c165a35a13c83fe9084945d23333bd337539cbaa58b19aa9821853107744f3ac7eff6dfc3d1e9bb4d947b44944ff61c46002d479e57baf794b33c415ec9d0a9fd239041c60524bd5bf2f02264b389212ca02cd346097832486e93b00ed7842df91a666c9cc40ee4410670d05758c291c31dd11ec0b0a00c9c9804f7f836de38359b9e1bee483fcfcb2bc5782598ecddd18c49b09f73145218c1dd15153e6fe95a2e9fafa1755ed"}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, '@,\nU'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x473}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x14, 0x44, "bb9995a53363b36b4e2d68caac186f51244214a0717700a1b00d3d437be695ac0cbc40a1f13dbcf1072baa32a0e8041c6c29ca7965c461ce1f1075c5081baa5052efd556"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0x50, "56ffa53bc93cef954ef67e90b589b5aa74aded8613a0b41c66883a204f3ee15de6bb3fe7fa457f986c7c8b8f82ad06b2570d1608e38fea1ac36db83e0f6cb790a9470442a3a4ff8f2f16441446434ff5"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf8}}) (async)
syz_usb_ep_write(r0, 0x20, 0x2a, &(0x7f0000000040)="f85ff9b3c5adcd5b86877ce8eed43375ff773bb664f39a01731b5f43953ac12674cd4cf8825c33ae79cd")

00:20:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5c000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
ftruncate(r2, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x7, 0x1, 0xb1, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x4, 0x0, 0x0, 0x0, "631959dd8e669659"}}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000000) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32, @ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT])
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

00:20:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3418.111431][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3418.122541][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3418.138129][T29455] usb 2-1: USB disconnect, device number 46
00:20:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfcffffff}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfdfdffff}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3418.630702][T29455] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 3418.870675][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3418.990877][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3418.999043][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3419.010254][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3419.020043][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3419.260826][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3419.267109][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3419.276464][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3419.583925][T29455] hid-generic 0003:057B:003F.006F: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
[ 3419.874193][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3419.884572][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3419.894586][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3419.905124][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:20:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfffffdfd}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x5e, {0x5e, 0xd, "347db7562de0d34d96b4c975eee94e52d977a58ec38ed8e6141d5be8568d508f3ffd3721a5a1be4fe3cb628e34e331f7c9472dcf943d90b2b95f9b25707b951dfe3784e5e08522551129ffb7b9957085b290d653a239a35b8a6fbb9a"}}, &(0x7f0000000080)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "ad9abf1bb061c0dd9fc19e2d580e4493b49573ff15516624e6a45e546aba0088321812a15f0efb883130c932eca1effb27ecda77e32c16e00493ba108e449dd72fadb3fa84a593b83f89be510683fffae904d2295db64891f665c3fa49"}}, &(0x7f0000000100)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x8, "381f9547"}, @local=@item_4={0x3, 0x2, 0x2, "2e5f6f80"}, @global=@item_012={0x1, 0x1, 0x2, ':'}, @main=@item_4={0x3, 0x0, 0xa, "80f30cde"}, @local=@item_4={0x3, 0x2, 0x3, "58d1ebe2"}, @global=@item_4={0x3, 0x1, 0xa, "7cb48e6d"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xdcf}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x3, 0x4c, "d3e7cb7d7bdfb45bd6568c0523251b211c40273f03d54b831aad10f0c846994cd0848582a843a01cf8119839bf68770d48a67d27b83eae59c82bb6b0a4cb1d3c94fa2fd3c8925aad26abb62e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xe4, "80f1d08121a57f32e91787bd28029132f0998239717d9e051ac421f286601912839f767c0a1f4473173ccca4368152d6369443de7de5dc60a727e5ef0c424a51e058407f7967dfb77efd4b487e86892642d7cc3685c85e9502fd9103932a455e6197703d41e151c65573b4f6e80309c37162c7142f23e28d26f589aafd259eec498a3b5265ec4a3624fdebe0972774fac0ba41a5c4943cce4ffd6abc66460eecd5bd7bc708a9df8076551d8731467e82ca0e7a6b26f3d7d2e259a2fdbb031b84bee1a2cf1a7ad6ce82286518f65e9f5b1f5933c15b2b4765d584e8f8d0605176c9ef669f"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xe9}})

00:20:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
ftruncate(r2, 0x3) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async, rerun: 64)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0) (async, rerun: 64)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000400)={0x7, 0x1, 0xb1, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x4, 0x0, 0x0, 0x0, "631959dd8e669659"}}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000000) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32, @ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT]) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 3419.919565][T31937] usb 2-1: USB disconnect, device number 47
00:20:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfffffffc}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="0f01ca66660f0016ac54f30fc737f64038f2ba2100b000eef3ad66b8010000000f01d927de656766b9800000c00f326635000100000f30", 0x37}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3420.264882][ T7156] binder: 7154:7156 ioctl 4018620d 0 returned -22
[ 3420.324561][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.332147][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.339595][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.347670][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.356175][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.364461][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.372701][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.380342][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.388365][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.396584][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.404290][T31937] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 3420.409456][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.419444][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.427191][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.434810][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.442296][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.449757][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.457947][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.465501][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.473335][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.483078][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.490979][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.498556][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.506092][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.513605][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114d10 returned -22
[ 3420.521111][ T7163] binder: 7154:7163 ioctl 4020ae46 7fdb2d114a10 returned -22
[ 3420.600784][T31937] usb 2-1: device descriptor read/64, error 18
[ 3420.880687][T31937] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 3421.080899][T31937] usb 2-1: device descriptor read/64, error 18
[ 3421.211120][T31937] usb usb2-port1: attempt power cycle
[ 3421.620673][T31937] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 3421.790840][T31937] usb 2-1: device descriptor read/8, error -61
[ 3422.060767][T31937] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 3422.230822][T31937] usb 2-1: device descriptor read/8, error -61
[ 3422.351768][T31937] usb usb2-port1: unable to enumerate USB device
00:20:05 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x5e, {0x5e, 0xd, "347db7562de0d34d96b4c975eee94e52d977a58ec38ed8e6141d5be8568d508f3ffd3721a5a1be4fe3cb628e34e331f7c9472dcf943d90b2b95f9b25707b951dfe3784e5e08522551129ffb7b9957085b290d653a239a35b8a6fbb9a"}}, &(0x7f0000000080)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "ad9abf1bb061c0dd9fc19e2d580e4493b49573ff15516624e6a45e546aba0088321812a15f0efb883130c932eca1effb27ecda77e32c16e00493ba108e449dd72fadb3fa84a593b83f89be510683fffae904d2295db64891f665c3fa49"}}, &(0x7f0000000100)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x8, "381f9547"}, @local=@item_4={0x3, 0x2, 0x2, "2e5f6f80"}, @global=@item_012={0x1, 0x1, 0x2, ':'}, @main=@item_4={0x3, 0x0, 0xa, "80f30cde"}, @local=@item_4={0x3, 0x2, 0x3, "58d1ebe2"}, @global=@item_4={0x3, 0x1, 0xa, "7cb48e6d"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xdcf}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x3, 0x4c, "d3e7cb7d7bdfb45bd6568c0523251b211c40273f03d54b831aad10f0c846994cd0848582a843a01cf8119839bf68770d48a67d27b83eae59c82bb6b0a4cb1d3c94fa2fd3c8925aad26abb62e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xe4, "80f1d08121a57f32e91787bd28029132f0998239717d9e051ac421f286601912839f767c0a1f4473173ccca4368152d6369443de7de5dc60a727e5ef0c424a51e058407f7967dfb77efd4b487e86892642d7cc3685c85e9502fd9103932a455e6197703d41e151c65573b4f6e80309c37162c7142f23e28d26f589aafd259eec498a3b5265ec4a3624fdebe0972774fac0ba41a5c4943cce4ffd6abc66460eecd5bd7bc708a9df8076551d8731467e82ca0e7a6b26f3d7d2e259a2fdbb031b84bee1a2cf1a7ad6ce82286518f65e9f5b1f5933c15b2b4765d584e8f8d0605176c9ef669f"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xe9}}) (rerun: 32)

00:20:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x100000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="0f01ca66660f0016ac54f30fc737f64038f2ba2100b000eef3ad66b8010000000f01d927de656766b9800000c00f326635000100000f30", 0x37}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x200000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3423.430635][ T3222] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 3423.620686][ T3222] usb 2-1: device descriptor read/64, error 18
[ 3423.890751][ T3222] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 3424.080683][ T3222] usb 2-1: device descriptor read/64, error 18
[ 3424.200882][ T3222] usb usb2-port1: attempt power cycle
[ 3424.610794][ T3222] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 3424.780747][ T3222] usb 2-1: device descriptor read/8, error -61
[ 3425.050680][ T3222] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 3425.225736][ T3222] usb 2-1: device descriptor read/8, error -61
[ 3425.350834][ T3222] usb usb2-port1: unable to enumerate USB device
00:20:08 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x5e, {0x5e, 0xd, "347db7562de0d34d96b4c975eee94e52d977a58ec38ed8e6141d5be8568d508f3ffd3721a5a1be4fe3cb628e34e331f7c9472dcf943d90b2b95f9b25707b951dfe3784e5e08522551129ffb7b9957085b290d653a239a35b8a6fbb9a"}}, &(0x7f0000000080)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "ad9abf1bb061c0dd9fc19e2d580e4493b49573ff15516624e6a45e546aba0088321812a15f0efb883130c932eca1effb27ecda77e32c16e00493ba108e449dd72fadb3fa84a593b83f89be510683fffae904d2295db64891f665c3fa49"}}, &(0x7f0000000100)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x8, "381f9547"}, @local=@item_4={0x3, 0x2, 0x2, "2e5f6f80"}, @global=@item_012={0x1, 0x1, 0x2, ':'}, @main=@item_4={0x3, 0x0, 0xa, "80f30cde"}, @local=@item_4={0x3, 0x2, 0x3, "58d1ebe2"}, @global=@item_4={0x3, 0x1, 0xa, "7cb48e6d"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xdcf}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x3, 0x4c, "d3e7cb7d7bdfb45bd6568c0523251b211c40273f03d54b831aad10f0c846994cd0848582a843a01cf8119839bf68770d48a67d27b83eae59c82bb6b0a4cb1d3c94fa2fd3c8925aad26abb62e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xe4, "80f1d08121a57f32e91787bd28029132f0998239717d9e051ac421f286601912839f767c0a1f4473173ccca4368152d6369443de7de5dc60a727e5ef0c424a51e058407f7967dfb77efd4b487e86892642d7cc3685c85e9502fd9103932a455e6197703d41e151c65573b4f6e80309c37162c7142f23e28d26f589aafd259eec498a3b5265ec4a3624fdebe0972774fac0ba41a5c4943cce4ffd6abc66460eecd5bd7bc708a9df8076551d8731467e82ca0e7a6b26f3d7d2e259a2fdbb031b84bee1a2cf1a7ad6ce82286518f65e9f5b1f5933c15b2b4765d584e8f8d0605176c9ef669f"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xe9}})

00:20:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x300000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="0f01ca66660f0016ac54f30fc737f64038f2ba2100b000eef3ad66b8010000000f01d927de656766b9800000c00f326635000100000f30", 0x37}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x400000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3426.510690][T29455] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 3426.700668][T29455] usb 2-1: device descriptor read/64, error 18
[ 3426.970665][T29455] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 3427.160668][T29455] usb 2-1: device descriptor read/64, error 18
[ 3427.280879][T29455] usb usb2-port1: attempt power cycle
[ 3427.690754][T29455] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 3427.860809][T29455] usb 2-1: device descriptor read/8, error -61
[ 3428.130769][T29455] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 3428.300769][T29455] usb 2-1: device descriptor read/8, error -61
[ 3428.421240][T29455] usb usb2-port1: unable to enumerate USB device
00:20:11 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x2, 0x1, 0x0, "b393"}]}}, 0x0}, 0x0)

00:20:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x500000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x2, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x600000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x700000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3429.480680][T31937] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 3429.720676][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3429.840840][T31937] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3429.849421][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3429.869736][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3429.879882][T31937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3430.141280][T31937] usb 2-1: string descriptor 0 read error: -22
[ 3430.148764][T31937] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3430.166924][T31937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3430.673429][T31937] hid-generic 0003:057B:003F.0070: item fetching failed at offset 5/6
[ 3430.682188][T31937] hid-generic: probe of 0003:057B:003F.0070 failed with error -22
[ 3430.877766][T26182] usb 2-1: USB disconnect, device number 60
00:20:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x2, 0x1, 0x0, "b393"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x2, 0x1, 0x0, "b393"}]}}, 0x0}, 0x0) (async)

00:20:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x800000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x2, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (rerun: 64)

00:20:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x900000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xa00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x2, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (rerun: 64)

[ 3431.780673][T29455] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 3432.020836][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3432.140781][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3432.148910][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3432.160203][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3432.170241][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3432.410921][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3432.417222][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3432.426998][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3432.923573][T29455] hid-generic 0003:057B:003F.0071: item fetching failed at offset 5/6
[ 3432.932137][T29455] hid-generic: probe of 0003:057B:003F.0071 failed with error -22
[ 3433.125939][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3433.134566][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:20:17 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x2, 0x1, 0x0, "b393"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x2, 0x1, 0x0, "b393"}]}}, 0x0}, 0x0) (async)

00:20:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xb00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], 0x4000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0xd621f000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

[ 3434.473412][T26182] usb 2-1: USB disconnect, device number 61
00:20:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xc00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xd00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3434.931004][T26182] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 3435.170956][T26182] usb 2-1: Using ep0 maxpacket: 8
[ 3435.300800][T26182] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3435.308991][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3435.325138][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3435.335409][T26182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3435.580761][T26182] usb 2-1: string descriptor 0 read error: -22
[ 3435.587050][T26182] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3435.597089][T26182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3436.092250][T26182] hid-generic 0003:057B:003F.0072: item fetching failed at offset 5/6
[ 3436.101042][T26182] hid-generic: probe of 0003:057B:003F.0072 failed with error -22
[ 3436.293317][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3436.302558][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:20:20 executing program 1:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000087b053f007a085cc78fc705d240000102030109023d0001010000000904000002030100000921000000012206000905810312aae8d742b02065a97b2246553efe51d5ffe7535856d0df8bc55bdc5200"/102], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7e, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x37, 0xdd, 0x5, 0x10, 0x7f}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x200, 0x1e00f, 0xb8b, [0x30, 0xff00, 0xff3fff, 0xc030, 0xff00]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x411}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "64fc3fe73077bac0ac86310372f27edef4b9717fe7d8b22e4444c9a38d7fe3472e6fd26a9ed7930d32e78edc19f0682fcdace976d6a6488fb32a41629382dfd7fe98101234ac6f6a10a1448e846d7fa5a62fd33c59eebef4e5b6b98b9f3bf536984f9c50ef61bba3c0fcaccd50a46d1349cd75d1ceb3e1cc3eff59cbd5186b790ba1239b767e3cbc9b72519475f14aa2472e69496e238871c1218869167ab7b8a1deff045f9d2d426c080fcfbf45643d66b5f1b14c28ab56720c3a03d2791db861919a6d725ea84497faa676c6e74d5b2edf8565e5edc1b95f68d5d0c9ebb238aa8c3ed29e21c2f1677d804f71d87f1c62fa8af8e3"}}, {0xd4, &(0x7f0000000340)=@string={0xd4, 0x3, "077da84317f31146ca9f3ad3a3a778365439876c0d8cadc0d9929c33f6c97cebdcab2fb774d06ebb84a0fe8b5bd99b8f80d8f7f8d8a59d887f55adda5c6e46a30deb28d4b34451e3912f0605a36818a447f5fb9b2f5d199a8009466c33b3c447dcb14404cc361a941418c441d4a1261805f78d95a30e964ef78be0f2d031cfd5016c129de4f40736f91ef4bf7bc284654077bf62dfe08c32f538e36c941c46e851fa7fdfc92a781acaf1c0551c696cd1fabbb56e929000d3462f7985db5fe1bfed8d49fbbd4f5a9587e990fde2eccf9c1238"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0)

00:20:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xe00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], 0x4000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0xd621f000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3437.588715][T26182] usb 2-1: USB disconnect, device number 62
00:20:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1000000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1100000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1200000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3438.030685][T26182] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[ 3438.310785][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3438.430702][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3438.438464][T26182] usb 2-1: can't read configurations, error -61
[ 3438.590674][T26182] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 3438.880916][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3439.000836][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3439.008535][T26182] usb 2-1: can't read configurations, error -61
[ 3439.015283][T26182] usb usb2-port1: attempt power cycle
[ 3439.440685][T26182] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 3439.590988][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3439.710907][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3439.718523][T26182] usb 2-1: can't read configurations, error -61
[ 3439.870706][T26182] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[ 3440.000737][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3440.120821][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3440.128555][T26182] usb 2-1: can't read configurations, error -61
[ 3440.135620][T26182] usb usb2-port1: unable to enumerate USB device
00:20:23 executing program 1:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000087b053f007a085cc78fc705d240000102030109023d0001010000000904000002030100000921000000012206000905810312aae8d742b02065a97b2246553efe51d5ffe7535856d0df8bc55bdc5200"/102], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7e, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x37, 0xdd, 0x5, 0x10, 0x7f}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x200, 0x1e00f, 0xb8b, [0x30, 0xff00, 0xff3fff, 0xc030, 0xff00]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x411}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "64fc3fe73077bac0ac86310372f27edef4b9717fe7d8b22e4444c9a38d7fe3472e6fd26a9ed7930d32e78edc19f0682fcdace976d6a6488fb32a41629382dfd7fe98101234ac6f6a10a1448e846d7fa5a62fd33c59eebef4e5b6b98b9f3bf536984f9c50ef61bba3c0fcaccd50a46d1349cd75d1ceb3e1cc3eff59cbd5186b790ba1239b767e3cbc9b72519475f14aa2472e69496e238871c1218869167ab7b8a1deff045f9d2d426c080fcfbf45643d66b5f1b14c28ab56720c3a03d2791db861919a6d725ea84497faa676c6e74d5b2edf8565e5edc1b95f68d5d0c9ebb238aa8c3ed29e21c2f1677d804f71d87f1c62fa8af8e3"}}, {0xd4, &(0x7f0000000340)=@string={0xd4, 0x3, "077da84317f31146ca9f3ad3a3a778365439876c0d8cadc0d9929c33f6c97cebdcab2fb774d06ebb84a0fe8b5bd99b8f80d8f7f8d8a59d887f55adda5c6e46a30deb28d4b34451e3912f0605a36818a447f5fb9b2f5d199a8009466c33b3c447dcb14404cc361a941418c441d4a1261805f78d95a30e964ef78be0f2d031cfd5016c129de4f40736f91ef4bf7bc284654077bf62dfe08c32f538e36c941c46e851fa7fdfc92a781acaf1c0551c696cd1fabbb56e929000d3462f7985db5fe1bfed8d49fbbd4f5a9587e990fde2eccf9c1238"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000087b053f007a085cc78fc705d240000102030109023d0001010000000904000002030100000921000000012206000905810312aae8d742b02065a97b2246553efe51d5ffe7535856d0df8bc55bdc5200"/102], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7e, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x37, 0xdd, 0x5, 0x10, 0x7f}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x200, 0x1e00f, 0xb8b, [0x30, 0xff00, 0xff3fff, 0xc030, 0xff00]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x411}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "64fc3fe73077bac0ac86310372f27edef4b9717fe7d8b22e4444c9a38d7fe3472e6fd26a9ed7930d32e78edc19f0682fcdace976d6a6488fb32a41629382dfd7fe98101234ac6f6a10a1448e846d7fa5a62fd33c59eebef4e5b6b98b9f3bf536984f9c50ef61bba3c0fcaccd50a46d1349cd75d1ceb3e1cc3eff59cbd5186b790ba1239b767e3cbc9b72519475f14aa2472e69496e238871c1218869167ab7b8a1deff045f9d2d426c080fcfbf45643d66b5f1b14c28ab56720c3a03d2791db861919a6d725ea84497faa676c6e74d5b2edf8565e5edc1b95f68d5d0c9ebb238aa8c3ed29e21c2f1677d804f71d87f1c62fa8af8e3"}}, {0xd4, &(0x7f0000000340)=@string={0xd4, 0x3, "077da84317f31146ca9f3ad3a3a778365439876c0d8cadc0d9929c33f6c97cebdcab2fb774d06ebb84a0fe8b5bd99b8f80d8f7f8d8a59d887f55adda5c6e46a30deb28d4b34451e3912f0605a36818a447f5fb9b2f5d199a8009466c33b3c447dcb14404cc361a941418c441d4a1261805f78d95a30e964ef78be0f2d031cfd5016c129de4f40736f91ef4bf7bc284654077bf62dfe08c32f538e36c941c46e851fa7fdfc92a781acaf1c0551c696cd1fabbb56e929000d3462f7985db5fe1bfed8d49fbbd4f5a9587e990fde2eccf9c1238"}}]}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) (async)

00:20:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x1800000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], 0x4000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0xd621f000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x2500000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:23 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3441.150674][ T3221] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[ 3441.430776][ T3221] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3441.550847][ T3221] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3441.558462][ T3221] usb 2-1: can't read configurations, error -61
[ 3441.710705][ T3221] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[ 3442.030924][ T3221] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3442.160822][ T3221] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3442.168777][ T3221] usb 2-1: can't read configurations, error -61
[ 3442.175561][ T3221] usb usb2-port1: attempt power cycle
[ 3442.620790][ T3221] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[ 3442.750902][ T3221] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3442.870856][ T3221] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3442.878454][ T3221] usb 2-1: can't read configurations, error -61
[ 3443.030673][ T3221] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[ 3443.170755][ T3221] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3443.290860][ T3221] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3443.298469][ T3221] usb 2-1: can't read configurations, error -61
[ 3443.304962][ T3221] usb usb2-port1: unable to enumerate USB device
00:20:26 executing program 1:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000087b053f007a085cc78fc705d240000102030109023d0001010000000904000002030100000921000000012206000905810312aae8d742b02065a97b2246553efe51d5ffe7535856d0df8bc55bdc5200"/102], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7e, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x37, 0xdd, 0x5, 0x10, 0x7f}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x200, 0x1e00f, 0xb8b, [0x30, 0xff00, 0xff3fff, 0xc030, 0xff00]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x411}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "64fc3fe73077bac0ac86310372f27edef4b9717fe7d8b22e4444c9a38d7fe3472e6fd26a9ed7930d32e78edc19f0682fcdace976d6a6488fb32a41629382dfd7fe98101234ac6f6a10a1448e846d7fa5a62fd33c59eebef4e5b6b98b9f3bf536984f9c50ef61bba3c0fcaccd50a46d1349cd75d1ceb3e1cc3eff59cbd5186b790ba1239b767e3cbc9b72519475f14aa2472e69496e238871c1218869167ab7b8a1deff045f9d2d426c080fcfbf45643d66b5f1b14c28ab56720c3a03d2791db861919a6d725ea84497faa676c6e74d5b2edf8565e5edc1b95f68d5d0c9ebb238aa8c3ed29e21c2f1677d804f71d87f1c62fa8af8e3"}}, {0xd4, &(0x7f0000000340)=@string={0xd4, 0x3, "077da84317f31146ca9f3ad3a3a778365439876c0d8cadc0d9929c33f6c97cebdcab2fb774d06ebb84a0fe8b5bd99b8f80d8f7f8d8a59d887f55adda5c6e46a30deb28d4b34451e3912f0605a36818a447f5fb9b2f5d199a8009466c33b3c447dcb14404cc361a941418c441d4a1261805f78d95a30e964ef78be0f2d031cfd5016c129de4f40736f91ef4bf7bc284654077bf62dfe08c32f538e36c941c46e851fa7fdfc92a781acaf1c0551c696cd1fabbb56e929000d3462f7985db5fe1bfed8d49fbbd4f5a9587e990fde2eccf9c1238"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0)

00:20:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0x5c00000000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1dc2", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01050001320b00117000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000000f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"/80], 0x80}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000e", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES64=r4])

00:20:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x13000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfcffffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xfdfdffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3444.190822][T26182] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[ 3444.471015][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3444.590885][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3444.598573][T26182] usb 2-1: can't read configurations, error -61
[ 3444.750669][T26182] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[ 3445.030932][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3445.150825][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3445.158431][T26182] usb 2-1: can't read configurations, error -61
[ 3445.165177][T26182] usb usb2-port1: attempt power cycle
[ 3445.590730][T26182] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[ 3445.731300][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3445.850864][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3445.858454][T26182] usb 2-1: can't read configurations, error -61
[ 3446.010659][T26182] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[ 3446.140935][T26182] usb 2-1: too many configurations: 199, using maximum allowed: 8
[ 3446.260906][T26182] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3446.268522][T26182] usb 2-1: can't read configurations, error -61
[ 3446.275413][T26182] usb usb2-port1: unable to enumerate USB device
00:20:29 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="f021063df8ae3c9520c9be11"], 0x0}, 0x0)

00:20:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x0, 0xffffffff00000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1dc2", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01050001320b00117000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000000f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"/80], 0x80}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000e", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES64=r4])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) (async)
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1dc2", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01050001320b00117000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000000f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"/80], 0x80}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000e", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES64=r4]) (async)

00:20:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3446.892855][ T7423] binder: 7422:7423 unknown command 0
[ 3446.898385][ T7423] binder: 7422:7423 ioctl c0306201 20000940 returned -22
00:20:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3447.009971][ T7435] binder: 7434:7435 unknown command 0
[ 3447.037864][ T7435] binder: 7434:7435 ioctl c0306201 20000940 returned -22
[ 3447.270700][ T3221] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 3447.510690][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3447.630878][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3447.639062][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3447.650324][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3447.660502][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3447.910818][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3447.917055][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3447.926528][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3448.490824][ T3221] usbhid 2-1:1.0: can't add hid device: -71
[ 3448.497061][ T3221] usbhid: probe of 2-1:1.0 failed with error -71
[ 3448.517479][ T3221] usb 2-1: USB disconnect, device number 75
00:20:31 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="f021063df8ae3c9520c9be11"], 0x0}, 0x0)

00:20:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1dc2", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01050001320b00117000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000000f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"/80], 0x80}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000e", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES64=r4])

00:20:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3448.951399][ T7449] binder: 7448:7449 unknown command 0
[ 3448.970744][ T7449] binder: 7448:7449 ioctl c0306201 20000940 returned -22
00:20:31 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3449.165561][ T7476] binder: BC_ACQUIRE_RESULT not supported
[ 3449.187953][ T7476] binder: 7475:7476 ioctl c0306201 20000940 returned -22
[ 3449.260796][ T3221] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 3449.510776][ T3221] usb 2-1: Using ep0 maxpacket: 8
[ 3449.650774][ T3221] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3449.661222][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3449.672339][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3449.682185][ T3221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3449.930756][ T3221] usb 2-1: string descriptor 0 read error: -22
[ 3449.937038][ T3221] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3449.946698][ T3221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3450.291720][ T1235] ieee802154 phy0 wpan0: encryption failed: -22
[ 3450.298057][ T1235] ieee802154 phy1 wpan1: encryption failed: -22
[ 3450.470892][ T3221] usbhid 2-1:1.0: can't add hid device: -71
[ 3450.476911][ T3221] usbhid: probe of 2-1:1.0 failed with error -71
[ 3450.495859][ T3221] usb 2-1: USB disconnect, device number 76
00:20:33 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="f021063df8ae3c9520c9be11"], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="f021063df8ae3c9520c9be11"], 0x0}, 0x0) (async)

00:20:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="f0450fba6982f10fc71fc4e1e37c1bb9dd0b00000f320f01c23666660f38804bcd0f06470f71f500b9800000c00f3235000400000f3065d95d0a", 0x3a}], 0x1, 0x60, &(0x7f00000001c0)=[@flags={0x3, 0x22000}, @cstype0={0x4, 0x4}], 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3450.943502][ T7485] binder: 7478:7485 ioctl c0306201 20000940 returned -22
00:20:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3450.995016][ T7492] binder: 7480:7492 ioctl 4018620d 0 returned -22
00:20:33 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3451.048296][ T7500] binder: 7497:7500 ioctl c0306201 20000940 returned -22
[ 3451.137675][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.154566][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.166954][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.175686][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.185879][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.194198][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.202334][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.210076][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.217842][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.225939][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.233753][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.241724][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.249162][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.256875][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.264651][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.273080][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.280517][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.288465][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.296950][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.304623][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.312362][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.319797][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.327759][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.335732][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136d10 returned -22
[ 3451.340751][ T3222] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 3451.343626][ T7483] binder: 7480:7483 ioctl 4020ae46 7fdb2d136a10 returned -22
[ 3451.590699][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3451.710836][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3451.719014][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3451.729993][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3451.739988][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3451.980857][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3451.987104][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3451.996356][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3452.472707][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3452.487375][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3452.580874][ T3222] usbhid 2-1:1.0: can't add hid device: -71
[ 3452.586899][ T3222] usbhid: probe of 2-1:1.0 failed with error -71
[ 3452.595447][ T3222] usb 2-1: USB disconnect, device number 77
00:20:35 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0x102, {0x102, 0x30, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x67, @string={0x67, 0x3, "bfefd9d9450fdf755991634bdb92aca3dfb51001deeafe87f08960cf0e27109da37656481245877a94416418cdb16f03f7c21172860a9e0827930f47e0f68388900054dd4d7c1e933a1a392680f629bd325d4e2f88315533eb1de476caa9cb16a17a061893"}}, &(0x7f0000000240)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "66c8b38c4f16795afdbd676fbfe245a6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xfb7c50bf5226710e, 0x1, 0x6, 0x878c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xc0, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x8, 0x2, "5b151834", "a0274930"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x3f, 0x1f, 0x8, 0x6, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x8, 0x6, "f5891ccf2b3b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "8974"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="38a8b3b2a0e8"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "34d8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb2}})

00:20:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="f0450fba6982f10fc71fc4e1e37c1bb9dd0b00000f320f01c23666660f38804bcd0f06470f71f500b9800000c00f3235000400000f3065d95d0a", 0x3a}], 0x1, 0x60, &(0x7f00000001c0)=[@flags={0x3, 0x22000}, @cstype0={0x4, 0x4}], 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3453.073335][ T7515] binder: 7510:7515 unknown command 0
[ 3453.106701][ T7515] binder: 7510:7515 ioctl c0306201 20000940 returned -22
[ 3453.158740][ T7523] binder: 7511:7523 ioctl 4018620d 0 returned -22
00:20:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3453.238772][ T7537] binder: 7531:7537 unknown command 0
[ 3453.259879][ T7537] binder: 7531:7537 ioctl c0306201 20000940 returned -22
[ 3453.390726][ T3222] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 3453.630637][ T3222] usb 2-1: Using ep0 maxpacket: 8
[ 3453.750786][ T3222] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3453.758988][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3453.769951][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3453.779833][ T3222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3454.020858][ T3222] usb 2-1: string descriptor 0 read error: -22
[ 3454.027140][ T3222] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3454.036246][ T3222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3454.525185][ T3222] hid-generic 0003:057B:003F.0073: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:20:38 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0x102, {0x102, 0x30, "96fab2fd69ef29b383bb1e018ba3730d54c8a7c7d2ac6b96d99afb3cc2a24256dc49f182a85038f26aa7a37e2faf330f7168b880135711c5596ad7c99bdf6682d97ef269f9d6e222fc8394595881b080012cdf3af64b4fa4c3e2c1f08b14fbf1766f19e6efbc937771dcd27d68b9956273ff02195db21b5c7accb1a0f1add0c43d4f2fedc6c7d4f99f39dd799c442ae453d7a4be8b77d568fe85705a4c5623df7e4a011f265c99f7aaa52adf9d24359135299b5c8e8c3e32b60f061dd066569c71ca21eb2968e7505eefc1ded63267a2884b396e8e8c242ee0c311d4a9d9c3fb1677fa3bdbccf68e7a9730fe459ea9ec2bf1b902ca92ca69139bf495e69b3df7"}}, &(0x7f0000000180)={0x0, 0x3, 0x67, @string={0x67, 0x3, "bfefd9d9450fdf755991634bdb92aca3dfb51001deeafe87f08960cf0e27109da37656481245877a94416418cdb16f03f7c21172860a9e0827930f47e0f68388900054dd4d7c1e933a1a392680f629bd325d4e2f88315533eb1de476caa9cb16a17a061893"}}, &(0x7f0000000240)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "66c8b38c4f16795afdbd676fbfe245a6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xfb7c50bf5226710e, 0x1, 0x6, 0x878c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xc0, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x8, 0x2, "5b151834", "a0274930"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x3f, 0x1f, 0x8, 0x6, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x8, 0x6, "f5891ccf2b3b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "8974"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="38a8b3b2a0e8"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "34d8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb2}})

00:20:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="f0450fba6982f10fc71fc4e1e37c1bb9dd0b00000f320f01c23666660f38804bcd0f06470f71f500b9800000c00f3235000400000f3065d95d0a", 0x3a}], 0x1, 0x60, &(0x7f00000001c0)=[@flags={0x3, 0x22000}, @cstype0={0x4, 0x4}], 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r4, r3) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="f0450fba6982f10fc71fc4e1e37c1bb9dd0b00000f320f01c23666660f38804bcd0f06470f71f500b9800000c00f3235000400000f3065d95d0a", 0x3a}], 0x1, 0x60, &(0x7f00000001c0)=[@flags={0x3, 0x22000}, @cstype0={0x4, 0x4}], 0x2) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

[ 3456.097682][T29455] usb 2-1: USB disconnect, device number 78
00:20:38 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3456.165318][ T7551] binder: 7541:7551 unknown command 0
[ 3456.181805][ T7551] binder: 7541:7551 ioctl c0306201 20000940 returned -22
00:20:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:38 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3456.215340][ T7558] binder: 7544:7558 ioctl 4018620d 0 returned -22
00:20:38 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3456.340769][ T7558] binder: 7544:7558 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3456.351788][ T7566] binder: BC_ATTEMPT_ACQUIRE not supported
[ 3456.357789][ T7558] binder: 7544:7558 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3456.367113][ T7566] binder: 7563:7566 ioctl c0306201 20000940 returned -22
[ 3456.370352][ T7558] binder: 7544:7558 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3456.388861][ T7558] binder: 7544:7558 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3456.397495][ T7558] binder: 7544:7558 ioctl 4020ae46 7fdb2d115d10 returned -22
[ 3456.560799][T29455] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 3456.810735][T29455] usb 2-1: Using ep0 maxpacket: 8
[ 3456.930864][T29455] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3456.938966][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3456.950377][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3456.960510][T29455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3457.200868][T29455] usb 2-1: string descriptor 0 read error: -22
[ 3457.207115][T29455] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3457.216621][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3457.524033][T29455] hid-generic 0003:057B:003F.0074: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:20:41 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0x102, {0x102, 0x30, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x67, @string={0x67, 0x3, "bfefd9d9450fdf755991634bdb92aca3dfb51001deeafe87f08960cf0e27109da37656481245877a94416418cdb16f03f7c21172860a9e0827930f47e0f68388900054dd4d7c1e933a1a392680f629bd325d4e2f88315533eb1de476caa9cb16a17a061893"}}, &(0x7f0000000240)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "66c8b38c4f16795afdbd676fbfe245a6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xfb7c50bf5226710e, 0x1, 0x6, 0x878c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xc0, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x8, 0x2, "5b151834", "a0274930"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x3f, 0x1f, 0x8, 0x6, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x8, 0x6, "f5891ccf2b3b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "8974"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="38a8b3b2a0e8"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "34d8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb2}})

00:20:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYRES32=0xee01, @ANYRES32])

00:20:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3459.140914][T26183] usb 2-1: USB disconnect, device number 79
00:20:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3459.185662][ T7586] binder: 7582:7586 unknown command 0
[ 3459.202292][ T7586] binder: 7582:7586 ioctl c0306201 20000940 returned -22
00:20:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3459.353276][ T7602] binder: 7594:7602 unknown command 0
[ 3459.364882][ T7602] binder: 7594:7602 ioctl c0306201 20000940 returned -22
[ 3459.680668][T26183] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 3459.920687][T26183] usb 2-1: Using ep0 maxpacket: 8
[ 3460.040940][T26183] usb 2-1: config index 0 descriptor too short (expected 61, got 45)
[ 3460.059917][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3460.071383][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3460.081296][T26183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3460.365943][T26183] usb 2-1: string descriptor 0 read error: -22
[ 3460.372320][T26183] usb 2-1: New USB device found, idVendor=057b, idProduct=003f, bcdDevice= 0.40
[ 3460.386920][T26183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3460.706240][T26183] hid-generic 0003:057B:003F.0075: hidraw0: USB HID v0.00 Device [HID 057b:003f] on usb-dummy_hcd.1-1/input0
00:20:44 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010080a50000087b053f0040e20002e00200"/31], &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe3a, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x172}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x3f, 0x8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x81, 0x9, 0x20, 0x6}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xff, 0xf9, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xac, 0x76, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x9, 0x1f, 0x6, 0x57}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "6e0aa79e006868d8c75d7e299ebd1c40"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bdc3940b7046c7fd5955702640286dd4"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "fe29e444c3c25e2da367b551d4445ba40aa03ded6a97b44c8884d155816a3dc8b1c651d045c8deee0a71d2fe5e763123830760d6181964ed307114ea5f5bd3d74a5fed841bad1297a97d49b3e404abe20bb61eb11c0331bb08a997f70d960626f5523dcdbada3767effe6fa551e102b3a5d18dde70a1702b11a1b3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "c76b143a4fccae"}}, {0xed, &(0x7f00000002c0)=@string={0xed, 0x3, "52db4e7e21322075b17d78bd6c809bd4368d9015ac3e44b5d14007a18caa9eb378e8715dd2e00b3090893bbae9e93bda6c06910ce2219151db1ac3e0b4916f0ce3a778d8072ed2642e72b4c2bdc708e0ac35c2506180d217cb2b1177502bc66fafd065801b827e5ce44f5704b2d9ffe73ad42d1b6553863e4130fbfc4033077dbc6e0a961be8f62feaa5cbcc35a7f8bdb3bdb26888f6547f68e6edcbf46acf6bd78f34d409e87dc6d157b54c351bf80d232e0d70c65e9adbdf05948ab4f4872b610353a9d8ba442819e502e02f14ea333575e1e29f780c759d590ea4d493adfe9c3849a3329c921172945b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}, {0x44, &(0x7f0000000400)=@string={0x44, 0x3, "09a7c3b9cbc01735d81eb4041f682fd5525c45e6caf93038c399ff6d8d0d97e16583c2ed44f7014dd42cf32b975d61a4204a0113b1facdcd27aee96daa5ea767aae4"}}, {0x76, &(0x7f0000000480)=@string={0x76, 0x3, "0a10e9190829b2ed6c79a62dc9f26c77d7478e8b3c2abc104cb669a4fe70a5432b82bda9b0066d97b998577d7561e994395cfc1dbecdd6bd188993a51a95eb81a7c4c70b0db1d833e63b8d00abb231e411da72ad5c90c2a1e08f5f4f49900b35ff39d6dd45f9251c9679c5061ff33c8426b8e74b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x40, 0xe, 0xf7, {0xf7, 0x22, "9a4b38020f3f67bc781b9a2a8be7986c9a1871cc809a53b5746f8e3dd5b2cf4d362c59fe222b64263ed176af63891ae8fa7a811be36659999c7e8de5196915d6230bb0ea3cd5029434f18c4f7e55b4f0006fdc8f4742e31dc844e278432c49fd68b57ef6ed8ef95b6b321a20e99a2f5efa816802b069721f08b09d127cec85d74b55b89fd90cec6e08f98f6d70d72b401242044139261d3fb6898e050b8f6ee88a1aafee1e009703597ee794fead65d79b3247a1f136c5079bd036b5471aeb6a9ed6aa1f273b90ad03e579b7693fc95c1f5187ccf4c4c66ce1ba40383b79e8bd31b37802c0f7bd00debdf22fe86cf7fa981eeb1f4e"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "7ad6131b"}, @local=@item_4={0x3, 0x2, 0x5, "69fe0c7f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0x661}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x46, "a805e438920265c14cd9d1309c7491a9a2bcf2892f7470feebb67ec789f61c5f5390a2272d6e352988c1922872f707fb79575a26ccc10ade53d70592638d0969cf526a8dcccb"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x1f, "9a052078b70ee50b230c18f79d452a8885f80cfd7272eab63e23169c9decf5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}})

00:20:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 64)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYRES32=0xee01, @ANYRES32])

[ 3462.220893][T31937] usb 2-1: USB disconnect, device number 80
[ 3462.250632][ T7613] binder: 7612:7613 unknown command 0
00:20:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3462.286510][ T7613] binder: 7612:7613 ioctl c0306201 20000940 returned -22
00:20:45 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:45 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3462.469048][ T7633] binder: 7626:7633 unknown command 0
[ 3462.488053][ T7633] binder: 7626:7633 ioctl c0306201 20000940 returned -22
[ 3462.690722][T31937] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 3462.930670][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3463.092772][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3463.210727][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3463.218352][T31937] usb 2-1: can't read configurations, error -61
[ 3463.380674][T31937] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 3463.620707][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3463.800789][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3463.920848][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3463.928521][T31937] usb 2-1: can't read configurations, error -61
[ 3463.935252][T31937] usb usb2-port1: attempt power cycle
[ 3464.350669][T31937] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 3464.440928][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3464.600860][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3464.740926][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3464.748522][T31937] usb 2-1: can't read configurations, error -61
[ 3464.900767][T31937] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 3465.020863][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3465.190755][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
00:20:47 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010080a50000087b053f0040e20002e00200"/31], &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe3a, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x172}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x3f, 0x8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x81, 0x9, 0x20, 0x6}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xff, 0xf9, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xac, 0x76, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x9, 0x1f, 0x6, 0x57}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "6e0aa79e006868d8c75d7e299ebd1c40"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bdc3940b7046c7fd5955702640286dd4"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "fe29e444c3c25e2da367b551d4445ba40aa03ded6a97b44c8884d155816a3dc8b1c651d045c8deee0a71d2fe5e763123830760d6181964ed307114ea5f5bd3d74a5fed841bad1297a97d49b3e404abe20bb61eb11c0331bb08a997f70d960626f5523dcdbada3767effe6fa551e102b3a5d18dde70a1702b11a1b3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "c76b143a4fccae"}}, {0xed, &(0x7f00000002c0)=@string={0xed, 0x3, "52db4e7e21322075b17d78bd6c809bd4368d9015ac3e44b5d14007a18caa9eb378e8715dd2e00b3090893bbae9e93bda6c06910ce2219151db1ac3e0b4916f0ce3a778d8072ed2642e72b4c2bdc708e0ac35c2506180d217cb2b1177502bc66fafd065801b827e5ce44f5704b2d9ffe73ad42d1b6553863e4130fbfc4033077dbc6e0a961be8f62feaa5cbcc35a7f8bdb3bdb26888f6547f68e6edcbf46acf6bd78f34d409e87dc6d157b54c351bf80d232e0d70c65e9adbdf05948ab4f4872b610353a9d8ba442819e502e02f14ea333575e1e29f780c759d590ea4d493adfe9c3849a3329c921172945b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}, {0x44, &(0x7f0000000400)=@string={0x44, 0x3, "09a7c3b9cbc01735d81eb4041f682fd5525c45e6caf93038c399ff6d8d0d97e16583c2ed44f7014dd42cf32b975d61a4204a0113b1facdcd27aee96daa5ea767aae4"}}, {0x76, &(0x7f0000000480)=@string={0x76, 0x3, "0a10e9190829b2ed6c79a62dc9f26c77d7478e8b3c2abc104cb669a4fe70a5432b82bda9b0066d97b998577d7561e994395cfc1dbecdd6bd188993a51a95eb81a7c4c70b0db1d833e63b8d00abb231e411da72ad5c90c2a1e08f5f4f49900b35ff39d6dd45f9251c9679c5061ff33c8426b8e74b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x40, 0xe, 0xf7, {0xf7, 0x22, "9a4b38020f3f67bc781b9a2a8be7986c9a1871cc809a53b5746f8e3dd5b2cf4d362c59fe222b64263ed176af63891ae8fa7a811be36659999c7e8de5196915d6230bb0ea3cd5029434f18c4f7e55b4f0006fdc8f4742e31dc844e278432c49fd68b57ef6ed8ef95b6b321a20e99a2f5efa816802b069721f08b09d127cec85d74b55b89fd90cec6e08f98f6d70d72b401242044139261d3fb6898e050b8f6ee88a1aafee1e009703597ee794fead65d79b3247a1f136c5079bd036b5471aeb6a9ed6aa1f273b90ad03e579b7693fc95c1f5187ccf4c4c66ce1ba40383b79e8bd31b37802c0f7bd00debdf22fe86cf7fa981eeb1f4e"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "7ad6131b"}, @local=@item_4={0x3, 0x2, 0x5, "69fe0c7f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0x661}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x46, "a805e438920265c14cd9d1309c7491a9a2bcf2892f7470feebb67ec789f61c5f5390a2272d6e352988c1922872f707fb79575a26ccc10ade53d70592638d0969cf526a8dcccb"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x1f, "9a052078b70ee50b230c18f79d452a8885f80cfd7272eab63e23169c9decf5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010080a50000087b053f0040e20002e00200"/31], &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe3a, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0) (async)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x172}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x3f, 0x8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x81, 0x9, 0x20, 0x6}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xff, 0xf9, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xac, 0x76, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x9, 0x1f, 0x6, 0x57}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "6e0aa79e006868d8c75d7e299ebd1c40"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bdc3940b7046c7fd5955702640286dd4"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "fe29e444c3c25e2da367b551d4445ba40aa03ded6a97b44c8884d155816a3dc8b1c651d045c8deee0a71d2fe5e763123830760d6181964ed307114ea5f5bd3d74a5fed841bad1297a97d49b3e404abe20bb61eb11c0331bb08a997f70d960626f5523dcdbada3767effe6fa551e102b3a5d18dde70a1702b11a1b3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "c76b143a4fccae"}}, {0xed, &(0x7f00000002c0)=@string={0xed, 0x3, "52db4e7e21322075b17d78bd6c809bd4368d9015ac3e44b5d14007a18caa9eb378e8715dd2e00b3090893bbae9e93bda6c06910ce2219151db1ac3e0b4916f0ce3a778d8072ed2642e72b4c2bdc708e0ac35c2506180d217cb2b1177502bc66fafd065801b827e5ce44f5704b2d9ffe73ad42d1b6553863e4130fbfc4033077dbc6e0a961be8f62feaa5cbcc35a7f8bdb3bdb26888f6547f68e6edcbf46acf6bd78f34d409e87dc6d157b54c351bf80d232e0d70c65e9adbdf05948ab4f4872b610353a9d8ba442819e502e02f14ea333575e1e29f780c759d590ea4d493adfe9c3849a3329c921172945b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}, {0x44, &(0x7f0000000400)=@string={0x44, 0x3, "09a7c3b9cbc01735d81eb4041f682fd5525c45e6caf93038c399ff6d8d0d97e16583c2ed44f7014dd42cf32b975d61a4204a0113b1facdcd27aee96daa5ea767aae4"}}, {0x76, &(0x7f0000000480)=@string={0x76, 0x3, "0a10e9190829b2ed6c79a62dc9f26c77d7478e8b3c2abc104cb669a4fe70a5432b82bda9b0066d97b998577d7561e994395cfc1dbecdd6bd188993a51a95eb81a7c4c70b0db1d833e63b8d00abb231e411da72ad5c90c2a1e08f5f4f49900b35ff39d6dd45f9251c9679c5061ff33c8426b8e74b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x40, 0xe, 0xf7, {0xf7, 0x22, "9a4b38020f3f67bc781b9a2a8be7986c9a1871cc809a53b5746f8e3dd5b2cf4d362c59fe222b64263ed176af63891ae8fa7a811be36659999c7e8de5196915d6230bb0ea3cd5029434f18c4f7e55b4f0006fdc8f4742e31dc844e278432c49fd68b57ef6ed8ef95b6b321a20e99a2f5efa816802b069721f08b09d127cec85d74b55b89fd90cec6e08f98f6d70d72b401242044139261d3fb6898e050b8f6ee88a1aafee1e009703597ee794fead65d79b3247a1f136c5079bd036b5471aeb6a9ed6aa1f273b90ad03e579b7693fc95c1f5187ccf4c4c66ce1ba40383b79e8bd31b37802c0f7bd00debdf22fe86cf7fa981eeb1f4e"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "7ad6131b"}, @local=@item_4={0x3, 0x2, 0x5, "69fe0c7f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0x661}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x46, "a805e438920265c14cd9d1309c7491a9a2bcf2892f7470feebb67ec789f61c5f5390a2272d6e352988c1922872f707fb79575a26ccc10ade53d70592638d0969cf526a8dcccb"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x1f, "9a052078b70ee50b230c18f79d452a8885f80cfd7272eab63e23169c9decf5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}}) (async)

00:20:47 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfcffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYRES32=0xee01, @ANYRES32])

00:20:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:47 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3465.303107][T31937] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 3465.339382][ T7645] binder: 7643:7645 unknown command 0
00:20:48 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:48 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3465.360123][T31937] usb 2-1: can't read configurations, error -71
[ 3465.360401][ T7645] binder: 7643:7645 ioctl c0306201 20000940 returned -22
[ 3465.398001][T31937] usb usb2-port1: unable to enumerate USB device
00:20:48 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:48 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfcffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3465.453934][ T7660] binder: BINDER_SET_CONTEXT_MGR already set
[ 3465.484099][ T7660] binder: 7658:7660 ioctl 4018620d 20002840 returned -16
[ 3465.810781][T31937] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 3466.060695][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3466.230732][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3466.350890][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3466.358485][T31937] usb 2-1: can't read configurations, error -61
[ 3466.520665][T31937] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 3466.760682][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3466.920820][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3467.041492][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3467.049105][T31937] usb 2-1: can't read configurations, error -61
[ 3467.056391][T31937] usb usb2-port1: attempt power cycle
[ 3467.470735][T31937] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 3467.560861][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3467.731421][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3467.850956][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3467.858562][T31937] usb 2-1: can't read configurations, error -61
[ 3468.010709][T31937] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 3468.100855][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3468.260805][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
00:20:51 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010080a50000087b053f0040e20002e00200"/31], &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe3a, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x172}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x3f, 0x8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x81, 0x9, 0x20, 0x6}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xff, 0xf9, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xac, 0x76, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x9, 0x1f, 0x6, 0x57}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "6e0aa79e006868d8c75d7e299ebd1c40"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bdc3940b7046c7fd5955702640286dd4"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "fe29e444c3c25e2da367b551d4445ba40aa03ded6a97b44c8884d155816a3dc8b1c651d045c8deee0a71d2fe5e763123830760d6181964ed307114ea5f5bd3d74a5fed841bad1297a97d49b3e404abe20bb61eb11c0331bb08a997f70d960626f5523dcdbada3767effe6fa551e102b3a5d18dde70a1702b11a1b3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "c76b143a4fccae"}}, {0xed, &(0x7f00000002c0)=@string={0xed, 0x3, "52db4e7e21322075b17d78bd6c809bd4368d9015ac3e44b5d14007a18caa9eb378e8715dd2e00b3090893bbae9e93bda6c06910ce2219151db1ac3e0b4916f0ce3a778d8072ed2642e72b4c2bdc708e0ac35c2506180d217cb2b1177502bc66fafd065801b827e5ce44f5704b2d9ffe73ad42d1b6553863e4130fbfc4033077dbc6e0a961be8f62feaa5cbcc35a7f8bdb3bdb26888f6547f68e6edcbf46acf6bd78f34d409e87dc6d157b54c351bf80d232e0d70c65e9adbdf05948ab4f4872b610353a9d8ba442819e502e02f14ea333575e1e29f780c759d590ea4d493adfe9c3849a3329c921172945b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}, {0x44, &(0x7f0000000400)=@string={0x44, 0x3, "09a7c3b9cbc01735d81eb4041f682fd5525c45e6caf93038c399ff6d8d0d97e16583c2ed44f7014dd42cf32b975d61a4204a0113b1facdcd27aee96daa5ea767aae4"}}, {0x76, &(0x7f0000000480)=@string={0x76, 0x3, "0a10e9190829b2ed6c79a62dc9f26c77d7478e8b3c2abc104cb669a4fe70a5432b82bda9b0066d97b998577d7561e994395cfc1dbecdd6bd188993a51a95eb81a7c4c70b0db1d833e63b8d00abb231e411da72ad5c90c2a1e08f5f4f49900b35ff39d6dd45f9251c9679c5061ff33c8426b8e74b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x40, 0xe, 0xf7, {0xf7, 0x22, "9a4b38020f3f67bc781b9a2a8be7986c9a1871cc809a53b5746f8e3dd5b2cf4d362c59fe222b64263ed176af63891ae8fa7a811be36659999c7e8de5196915d6230bb0ea3cd5029434f18c4f7e55b4f0006fdc8f4742e31dc844e278432c49fd68b57ef6ed8ef95b6b321a20e99a2f5efa816802b069721f08b09d127cec85d74b55b89fd90cec6e08f98f6d70d72b401242044139261d3fb6898e050b8f6ee88a1aafee1e009703597ee794fead65d79b3247a1f136c5079bd036b5471aeb6a9ed6aa1f273b90ad03e579b7693fc95c1f5187ccf4c4c66ce1ba40383b79e8bd31b37802c0f7bd00debdf22fe86cf7fa981eeb1f4e"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "7ad6131b"}, @local=@item_4={0x3, 0x2, 0x5, "69fe0c7f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0x661}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x46, "a805e438920265c14cd9d1309c7491a9a2bcf2892f7470feebb67ec789f61c5f5390a2272d6e352988c1922872f707fb79575a26ccc10ade53d70592638d0969cf526a8dcccb"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x1f, "9a052078b70ee50b230c18f79d452a8885f80cfd7272eab63e23169c9decf5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}})

00:20:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0xfffffffffffffffc], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0178205de595bea9c60a000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])

00:20:51 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3468.376115][T31937] usb 2-1: unable to read config index 0 descriptor/start: -71
00:20:51 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1300000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:51 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3468.439560][T31937] usb 2-1: can't read configurations, error -71
[ 3468.494536][T31937] usb usb2-port1: unable to enumerate USB device
[ 3468.900673][T31937] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 3469.140669][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3469.300719][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3469.421607][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3469.429200][T31937] usb 2-1: can't read configurations, error -61
[ 3469.580663][T31937] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 3469.820700][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3469.980863][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3470.100834][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3470.108432][T31937] usb 2-1: can't read configurations, error -61
[ 3470.115253][T31937] usb usb2-port1: attempt power cycle
[ 3470.542004][T31937] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 3470.640899][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3470.800738][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3470.920772][T31937] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 3470.928361][T31937] usb 2-1: can't read configurations, error -61
[ 3471.090751][T31937] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 3471.190837][T31937] usb 2-1: Using ep0 maxpacket: 8
[ 3471.350738][T31937] usb 2-1: unable to get BOS descriptor or descriptor too short
00:20:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x2500000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0xfffffffffffffffc], 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0178205de595bea9c60a000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0xfffffffffffffffc], 0x10000}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0178205de595bea9c60a000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32]) (async)

00:20:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3471.453461][T31937] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 3471.486816][ T7698] binder: 7697:7698 unknown command 1078485779
00:20:54 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087b053f0040000102030109023d000101000000090400000203010000092100000001220600090581030000000000090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "4b27e2eb"}, @global]}}, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e105550009058b0b40"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000500)={0x40, 0x10, 0xdd, {0xdd, 0xf, "2d658031071ada483083eceb6889974bc7b6c2505ec3ffbc407b49071cfa3a5e025afededa3b6b6b0bb0a6838d26c7cff2ae190313dff68467b10a04c828aee0dcf835a617ead3aa017a2fd255553c57baecd26f63c1997bfd88f2e8608efec85df2a4259fb77319c56277d139583c2b7ada77834dcb15e63d9dcf56fda4d5d38ec55a432ba9249319ecdaa3e46b1559591fdb072573a07bab50010c4a823d30ed6ccafed87f7b7b152cfd307632ae1ab14edbfb83304dcf73e2ded436d596f97b9ad064e075d7e759f72057194737fc6f71973cdcd6431f88c271"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000680)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x77, 0x16, 0x1, {0x22, 0x883}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x40, 0x17, 0x72, "4a01844343ce532a9ef5f960cbe554e06fc85830f7e53624408372e7a10f742fdc33ec8d77645828f0d6c8699df14e99d7b75a3b365ecbf9a6a953b9185b5df7dd1d835466f2e6798ae45df7bbae8af51260dd330a1cab1ed44757a4d255dfc7316d63c0ccdbd2f90cc62adbdfb972dbc3a7"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x1, 0x49, "eb1f1f402ec4fbd9e3bb31b95e679d24af22dcc4c5502e658f7a2ed755e3483037cfa1e89513f9f05d53ce4fd4d70e0006c97406aba3ebf388a6122b81ecf158ef90ef3aa9c4813258"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x9}})
syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0002cc000000cc221262fca90f533220a4046605ff0da2af40d3463bf136515c070200e5195c1f348cc42086301b4d3edbf9da78f6ddb8995c9ae7907139f52709dfab0b923cd73f79c2012dce6d5fd29743f65fec637bff04be11b65d946d11e3252c87444ef72f728ec6883bad332d7202fa95aee8f4ae801bfcc7e39133e3c8431676df4e03bd4c723ae2ae3fbc5bacc3e2a861332b776d7800e68a2496917e5ea2a6bf1d2ff0042577e5448c9f5e96b8b275cb64851cb5074136251a3e63efc3d620e02d66134c9716a1ae48b5298a6e"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0x0, 0xc3, "c380fcee9b910a4fd3ccdca45cc4e1384588406777ef80a995d2df9d6dfaa94cfcdd8153dac059d2330eae2af071051eee3f2f4405b3c05e495e10cbe829a914c77c2c0c1ade476e69b2a73f71cb20bcf82bc279abef91f0d0ffe42224571eaf7b16dd4d2222841ab12f47f96978e6310d684122e6c67d84b5a625c56d12e2f98d8a1c66794eb56b5d5dec4aca0cb0ef8b488745c7e6c7b3ce516650582fb46ea3786ebd4061a011b3f5417fb79fbc2385781e493cbb13addba74a62f667a36e9a63da"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x70}, &(0x7f0000000380)={0x20, 0x0, 0xb4, {0xb2, "68bedf765dd19bb6abe5474a4cb16969b7ae39979d9f718df940440c836ba57427401bd9b22c04e23be6b49171fa2849fb18ded8523aa8dade89d41b59545dc7ef6f575943b79f0d1d2119f9f5be0ef41c51e3c7bf64817c5182383fada11127096409a1b85720f8ce887274d638aa10487856418d8095f6b052eecddf0de89e437fa015022fd911b5c036118ffd6986573dc42541b9ac4d8eb0739315e80216ea4c54b4c32f1c3715d1548ca87a0de63549"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x7a}})

00:20:54 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002840))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000780)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3471.525606][T31937] usb 2-1: can't read configurations, error -71
[ 3471.535860][ T7698] binder: 7697:7698 ioctl c0306201 20000940 returned -22
00:20:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfcffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3471.593248][ T7718] binder: BINDER_SET_CONTEXT_MGR already set
[ 3471.599508][ T7718] binder: 7717:7718 ioctl 4018620d 20002840 returned -16
[ 3471.601072][T31937] usb usb2-port1: unable to enumerate USB device
[ 3471.609518][ T7718] general protection fault, probably for non-canonical address 0xdffffc0000000025: 0000 [#1] PREEMPT SMP KASAN
[ 3471.624585][ T7718] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f]
[ 3471.633006][ T7718] CPU: 0 PID: 7718 Comm: syz-executor.3 Not tainted 6.0.0-rc3-syzkaller-00041-g2880e1a175b9 #0
00:20:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:20:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3471.643344][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 3471.653406][ T7718] RIP: 0010:__lock_acquire+0x6b/0x1f60
[ 3471.659063][ T7718] Code: ff df 8a 04 10 84 c0 0f 85 62 16 00 00 83 3d bf 51 bc 0c 00 0f 84 13 15 00 00 83 3d 7e 93 55 0b 00 74 2c 4c 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ef e8 17 f3 73 00 48 ba 00 00 00 00 00 fc
[ 3471.678689][ T7718] RSP: 0018:ffffc90009b2efa8 EFLAGS: 00010002
[ 3471.684776][ T7718] RAX: 0000000000000025 RBX: 0000000000000000 RCX: 0000000000000001
00:20:54 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 3471.692761][ T7718] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000128
[ 3471.700742][ T7718] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 3471.708814][ T7718] R10: fffffbfff1c4ae2e R11: 1ffffffff1c4ae2d R12: 0000000000000001
[ 3471.716783][ T7718] R13: 0000000000000128 R14: 0000000000000000 R15: 0000000000000001
[ 3471.724761][ T7718] FS:  00007f6cb2312700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 3471.733682][ T7718] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3471.740267][ T7718] CR2: 0000001b2ef21000 CR3: 0000000020f48000 CR4: 00000000003526f0
[ 3471.748232][ T7718] Call Trace:
[ 3471.751504][ T7718]  <TASK>
[ 3471.754427][ T7718]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 3471.760423][ T7718]  lock_acquire+0x1a7/0x400
[ 3471.764919][ T7718]  ? binder_alloc_new_buf_locked+0x9d/0x15f0
[ 3471.770893][ T7718]  ? read_lock_is_recursive+0x10/0x10
[ 3471.776260][ T7718]  ? __might_sleep+0xc0/0xc0
[ 3471.780843][ T7718]  ? binder_alloc_new_buf+0x2b/0x60
[ 3471.786045][ T7718]  down_read+0x39/0x50
[ 3471.790107][ T7718]  ? binder_alloc_new_buf_locked+0x9d/0x15f0
[ 3471.796073][ T7718]  binder_alloc_new_buf_locked+0x9d/0x15f0
[ 3471.801872][ T7718]  ? rcu_read_lock_sched_held+0x89/0x130
[ 3471.807501][ T7718]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 3471.813474][ T7718]  binder_alloc_new_buf+0x42/0x60
[ 3471.818488][ T7718]  binder_transaction+0x284b/0x72e0
[ 3471.823707][ T7718]  ? __lock_acquire+0x1292/0x1f60
[ 3471.828726][ T7718]  ? binder_free_buf+0x830/0x830
[ 3471.833653][ T7718]  ? rcu_read_lock_sched_held+0x89/0x130
[ 3471.839277][ T7718]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 3471.845253][ T7718]  ? __might_sleep+0xc0/0xc0
[ 3471.849833][ T7718]  ? __might_fault+0xb6/0x110
[ 3471.854562][ T7718]  ? __lock_acquire+0x1f60/0x1f60
[ 3471.859577][ T7718]  ? rcu_read_lock_sched_held+0x89/0x130
[ 3471.865221][ T7718]  ? do_raw_spin_unlock+0x134/0x8a0
[ 3471.870408][ T7718]  ? __might_fault+0xb2/0x110
[ 3471.875078][ T7718]  binder_ioctl_write_read+0xd9a/0x8e50
[ 3471.880631][ T7718]  ? arch_stack_walk+0xf8/0x140
[ 3471.885480][ T7718]  ? stack_trace_snprint+0xf0/0xf0
[ 3471.890602][ T7718]  ? __stack_depot_save+0x33/0x490
[ 3471.895710][ T7718]  ? trace_binder_ioctl+0x220/0x220
[ 3471.900898][ T7718]  ? mark_lock+0x9a/0x350
[ 3471.905218][ T7718]  ? binder_get_thread+0x17a/0x6f0
[ 3471.910317][ T7718]  ? rcu_read_lock_sched_held+0x89/0x130
[ 3471.915941][ T7718]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 3471.921917][ T7718]  ? __lock_acquire+0x1f60/0x1f60
[ 3471.927022][ T7718]  ? do_raw_spin_unlock+0x134/0x8a0
[ 3471.932212][ T7718]  ? _raw_spin_unlock+0x24/0x40
[ 3471.937058][ T7718]  ? binder_get_thread+0x184/0x6f0
[ 3471.942164][ T7718]  binder_ioctl+0x385/0x18c0
[ 3471.946744][ T7718]  ? kfree+0xda/0x210
[ 3471.950719][ T7718]  ? tomoyo_path_number_perm+0x657/0x7b0
[ 3471.956348][ T7718]  ? binder_poll+0x3b0/0x3b0
[ 3471.960924][ T7718]  ? smack_log+0x11f/0x530
[ 3471.965344][ T7718]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 3471.970793][ T7718]  ? smk_access+0x490/0x490
[ 3471.975286][ T7718]  ? smk_tskacc+0x304/0x370
[ 3471.979800][ T7718]  ? smack_file_ioctl+0x2f7/0x3a0
[ 3471.984837][ T7718]  ? smack_file_alloc_security+0xd0/0xd0
[ 3471.990466][ T7718]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 3471.995395][ T7718]  ? security_file_ioctl+0x9d/0xb0
[ 3472.000498][ T7718]  ? binder_poll+0x3b0/0x3b0
[ 3472.005077][ T7718]  __se_sys_ioctl+0xfb/0x170
[ 3472.009659][ T7718]  do_syscall_64+0x2b/0x70
[ 3472.014066][ T7718]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3472.019956][ T7718] RIP: 0033:0x7f6cb1289279
[ 3472.024398][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 3472.043993][ T7718] RSP: 002b:00007f6cb2312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3472.052410][ T7718] RAX: ffffffffffffffda RBX: 00007f6cb139bf80 RCX: 00007f6cb1289279
[ 3472.060390][ T7718] RDX: 0000000020000940 RSI: 00000000c0306201 RDI: 0000000000000003
[ 3472.068368][ T7718] RBP: 00007f6cb12e32e9 R08: 0000000000000000 R09: 0000000000000000
[ 3472.076335][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3472.084393][ T7718] R13: 00007ffff65ae6ef R14: 00007f6cb2312300 R15: 0000000000022000
[ 3472.092382][ T7718]  </TASK>
[ 3472.095396][ T7718] Modules linked in:
[ 3472.099291][ T7718] ---[ end trace 0000000000000000 ]---
[ 3472.104733][ T7718] RIP: 0010:__lock_acquire+0x6b/0x1f60
[ 3472.110198][ T7718] Code: ff df 8a 04 10 84 c0 0f 85 62 16 00 00 83 3d bf 51 bc 0c 00 0f 84 13 15 00 00 83 3d 7e 93 55 0b 00 74 2c 4c 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ef e8 17 f3 73 00 48 ba 00 00 00 00 00 fc
[ 3472.129801][ T7718] RSP: 0018:ffffc90009b2efa8 EFLAGS: 00010002
[ 3472.135871][ T7718] RAX: 0000000000000025 RBX: 0000000000000000 RCX: 0000000000000001
[ 3472.143849][ T7718] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000128
[ 3472.151809][ T7718] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 3472.159771][ T7718] R10: fffffbfff1c4ae2e R11: 1ffffffff1c4ae2d R12: 0000000000000001
[ 3472.167732][ T7718] R13: 0000000000000128 R14: 0000000000000000 R15: 0000000000000001
[ 3472.175719][ T7718] FS:  00007f6cb2312700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 3472.184654][ T7718] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3472.191257][ T7718] CR2: 0000001b2ef21000 CR3: 0000000020f48000 CR4: 00000000003526f0
[ 3472.199232][ T7718] Kernel panic - not syncing: Fatal exception
[ 3472.205471][ T7718] Kernel Offset: disabled
[ 3472.209786][ T7718] Rebooting in 86400 seconds..