60edc209e34849f6beea0e366eccc80b87c1c16f89e5608b96c176ccfaf6014a619b83d72c5a89749cf763fd76c6ae82b6a1322674838ab9e5f9a0db7aa8b7d27db308edb664fc0197756f6709df36d9f6ed678944e18455a8d49434f9a6f223cbf52b6a1ba266a55331ffe7e83fb4130c2f5528626c4e451d8bac1da046dd59249fe41b6c8a36e82346918e0177c876f44101ff9f7721d8fbe1eca04e13ba8db3f5bd01c3661df0d6c8a24d45a246e0ac80aed4178901a71a939da4622592b3a8d87b3ae35370530039d7d413455e9d61656b58a1e63aa9bf1a87d8bcc6605c3167836f82ba01f54934e2d31d7463e1848ee8a2cca55a029d5ed37236dda9f278981cdb330eabc6bfc33a7fee5678c38b8e0a9258fa8ce5cb8abc3320d44dd16098df1bbf9d3e3142ec1838ba81785e37dc97fda2797e3cf6b7d6c367737b4df96a242149bbba7af54da91b404fbf01f4ecfb7ebd97c67de2415b3bca3b5f21deae988733dcb547a17aa38c0b98aba60fbb1d57f9e8f005ae6233e5da68da32c7a2778944a2eacba03e3312fe968fa3be0e2ceb4d8526803e7a8f24618b1003860e424da518c9602cb092c9c6b930b72523bbf615ad8330e337e64ff82eb78d9a2384e86afece8aa9d9cb1b7ab27265261a3cf542e1655792ed66b28d27bf4f02d13e93413bfc5fae7dbec15aac85331ae3d4032679988ffd1c1750447f763ebc9ba8f8ba4521b74563af6ee8a996af3707dd03118c3f0d18d612a5105519310f7b8c5eb4b7e3a0d675374da18314d144b5d5d0ba2735dab4efdf68f70285ce4d35032427e23fe7c59c5844879550417dc93d2221fe0ff82c7e21ebba19c01fefc6f6eeb7078e7557f077ca089246e6f3901e127ca4685c191847ae720ce30d41939239b2835d9cfd126faabc88eb80d409d8ec1cdf6070c55109bdbbb668fd56c6ebd3503986cdf5ade19903a85516f0ed87872f397e6244b0f58c70b8dd0cbc408dd7a87c42d672d31fde7fbc31b3acff4be744b933ec0645f76b52481ba6f50a25a98f89d9989e347b682a459eb38004d0de0a7314f8319b1e0ce5152a4928d7f59769347a7f48af595d028b5012cf5b7fc081cbec3c5ad30801947b5d3f87a242b05691ef3f46f0ba35fa6ee28a966ad42e34ef6192cb6e5de41411df4638c825688abc1c8f1fa7b2eced5ae40a5d35d7cfd981f4dd46a91e8f123187d8e99a947020cdc4cfcb66ee004232ed5badfa694fd943ed59f01433989e5663a77fd2bbcdbfaad5ab482150f22ffa6b1ae9e99134b320c04444c3d5d71e37c6d4faf82b1297d75a520e6e6c5a0d7ab86dea5245a97b16a7690f50e9abd452da33c58974cb63e4711fece83cf1251c6eecc7c9a887b0a881f148b6c8fa3749ef09661488909a2f74e41a4968f5f1d1ebd9a511f5732ea60a18032d68dcf34a5914b1c24275e6c3d331a8c454e4c615dc5f6ce4de1b44fc755da73eef517bca08fa464443eabf4046961625ee82c406e08359b49785a1cbe9822cada3375da9adf55bd50e156a314f10107a3fb880a944fa3a0cdb4be2234c19ab26f8075c6389a0a6062e82050b493a30e617f728b8d0ced0b69da60c6fdadd95ee1c0e656b63ecc72a491e07bce4c3df3761e51bb327a86d55a375e4f5859a8b179a47f4b5b8b85fed0db916e31885d0ad185d6c7e79449e282a5d10a7cf86d0305a2673cd9aa834d130fcb1098c0f69771ae23e2b49cdd3d39be17fcc309a282486bf0e0829a0805a036b0b1e357f03a861857312dab3033f00957ff6f03a35240724bc6adf429090f555aca563ffb5e4b67c75486149f2495971bf653617f29e50d59da32288afeabc768787d2e830c70d5f0dbd8db5e9923b8893f32c4cdc0d8130caefade59d7f5e270f8b5487b69815dd8cec6d3dfa3ca308987f2970ab3e8714cdbae27dc22fa434805c9284b904840a92bc76490c15c6a04df137940d48f7ac6285f858611376f447ebaf11ce4014066d57e5fa579b588e0d795fb0322d1b8606faf9507092be3e320184a5324df47792e8b015ee27ace73b0bc05f3eff2c2a9ee45752df32a85b1ad5679aedbe40ac59511938929e210a409e538c139d1fb93891d2b9908f915b9c556788bb8926b6a96923038a119eb68bcb528a42e97f8fbd49e7d5bb3e51987cca590ea8a18e049f64d8c994d63a707c441e63509f909adf5f7c26d36714bd56307513003f8f85f20c8fea4248627d2f19891baef9b134a8ecb6e3da6232c5b818d7469645038312b6b952f782f28ccd199367a51f750927e5f11ef04cb299dc7ba0c24500134d3a9a0a4f62903ae930f5ba49c39855ffc4aba6cc9d400075f094875db9ebcbcbb35309421d08a928b0216dcbbf718761b01b4d41cf55b0b2bf4c89603a61e5ac2f5bf5236d4bee90617e1b2fdc3a4540db2c89561c1cb9b1e28436013546e654e36fa328097ce8a4baf5a2fd78f9bca617bd4de062dbbc38c7356232b385823b6c604a401f43f5864111eff29045c12b6c622182e097caa5a9945133375b46dc0e268e860dd58b62403c41393f02c7f1d23a1d0daad5d2eb7a085387ea6b81ceb6191d5ffa7f58848996caad4796ee8d9e1bad072455a37d8b64888cb4007f344783afca22db07a2ccb8531c6a9d69bffdf1f949e3fce89f223119595c5b9bfa51893ff36849be61ff02939360a5d5b0e05d22aa3a1f16c27103edeb00c0f763bd4251805ec8d894692cd1636b4b1c96ab613896c17b2fb8a414a91463d54f145e1d49378e726e5921d8cd34aeb176a36701c9b75311806efcf402d4345034d7fd5165857bd2cd07b32a18334a3cf358dadbc8144b806120805a07714d8d0029fe0db7958bbb69b9a216e5945fdf0b892665c0bad2cd822797d5c7223094cd54042c781fba9d7f05a169f390225385d5c055896dc8a620a637a7c73ee77fbf2152fb62af9bcbe01389dd846724fa24ca6088d2bddf9bcae4d9e11f86266e4d87f6b11f3721c30c3f48ddfecb7623802c7e3f595b088473747d25b70bbdf8920924c6bb9e202e6d54e340a469e8ecf66b49dda0036a7d071492742593c2e02bd7bd703774f2ac8c45dbfa1f8ce4c205a05064362bf2819e80bd406367a86ece3f5d54b43029b3f7fcc2378c5e33e8de66fa5f3c4974310c3ac4d2ab1234b1fea14d71512c578dfab154a74dc66c8a5ff983a41e02c57c58cd9c3a77d22f15f8a6abe41de51ce4a92151ee25c6f2c4feb0453b4f86fb4c7e19063b871ff6458b2ad51b992df6b16de3a5a2f5935c85d5a8709d82943c645f6199e76b38d718b86945638d92daa15aeb9beaa53028a425c6ee90dbd58b57f4a748ec0037fca725812aaac8e201d5121c06c9d3bfcbe799b9fa28440fceec78a5d39a112626bd0f9e530cb5573083e6b3b0ce5ef60e85ea643331d45663f309d75d36c88ed56abbac74672daa72c2f180ab5d117d2ab17db9e36a807bcaa62a07aa5486d39d63f64d23f03e58f6fa346b39005cde05121ecc2146ae982d02532a2deb90d8b9cfd32ff03a5294933292fb3d58760bc81a72df0e602b9b4b7e407bc542924e9763fe0d4bd5346ccb9e10b1ea7dade31d4bbc9"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:51:43 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

01:51:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x40}}, 0x0)

[ 1716.474082][ T1654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1716.533860][T20581] usb 2-1: new high-speed USB device number 65 using dummy_hcd
01:51:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0)

01:51:44 executing program 3:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0)
fallocate(r1, 0x0, 0x408, 0x1000)
r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup(0xffffffffffffffff)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='V', 0x1}], 0x1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x2000005)

01:51:44 executing program 5:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1716.894577][T20581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1716.997642][T20581] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1717.007437][T20581] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1717.015742][T20581] usb 2-1: Manufacturer: syz
[ 1717.138792][T20581] usb 2-1: config 0 descriptor??
[ 1717.176696][ T1676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1719.224990][T20581] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1719.235315][T20581] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input188
[ 1719.324643][T20581] input: failed to attach handler kbd to device input188, error: -5
[ 1720.861752][T20297] usb 2-1: USB disconnect, device number 65
01:51:48 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:51:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(r2, 0x4b4a, 0x0)

01:51:48 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

01:51:48 executing program 3:
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRESOCT], 0x1f)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
r2 = socket(0x2, 0x803, 0xff)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r3 = dup(r2)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

01:51:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0)

01:51:48 executing program 5:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1721.320247][ T1728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1721.342323][   T28] audit: type=1804 audit(1596851508.997:146): pid=1731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248197739/syzkaller.3K46lV/686/bus" dev="sda1" ino=16067 res=1
01:51:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0)

01:51:49 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

01:51:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1721.426599][   T28] audit: type=1804 audit(1596851509.087:147): pid=1741 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir248197739/syzkaller.3K46lV/686/bus" dev="sda1" ino=16067 res=1
01:51:49 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1721.574921][   T28] audit: type=1804 audit(1596851509.237:148): pid=1745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248197739/syzkaller.3K46lV/686/bus" dev="sda1" ino=16067 res=1
[ 1721.580027][   T28] audit: type=1804 audit(1596851509.237:149): pid=1731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir248197739/syzkaller.3K46lV/686/bus" dev="sda1" ino=16067 res=1
[ 1722.196733][T20297] usb 2-1: new high-speed USB device number 66 using dummy_hcd
01:51:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil)

[ 1722.557095][T20297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1722.705728][T20297] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1722.715138][T20297] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1722.723468][T20297] usb 2-1: Manufacturer: syz
[ 1722.756031][ T1763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:51:50 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

[ 1722.989482][T20297] usb 2-1: config 0 descriptor??
[ 1725.124644][T20297] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1725.134928][T20297] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input189
[ 1725.232573][T20297] input: failed to attach handler kbd to device input189, error: -5
01:51:54 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x2, "c2cb"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:51:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0)

01:51:54 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x3a, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:51:54 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:51:54 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:51:54 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

[ 1726.775021][ T8650] usb 2-1: USB disconnect, device number 66
[ 1727.231273][ T1811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:51:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:51:55 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:51:55 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:51:55 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

[ 1728.043871][ T8650] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1728.092307][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000040 data 0x6
[ 1728.117062][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007d data 0x41
[ 1728.141730][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000027 data 0x7c
01:51:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0)

[ 1728.188402][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000089 data 0xef
[ 1728.241499][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000005b data 0x88
[ 1728.288169][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000004d data 0xff
[ 1728.326953][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000027 data 0xbd
[ 1728.367715][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000076 data 0x26
[ 1728.424071][ T8650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1728.523967][ T8650] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1728.533495][ T8650] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1728.541684][ T8650] usb 2-1: Manufacturer: syz
[ 1728.554001][ T8650] usb 2-1: config 0 descriptor??
[ 1728.605053][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000032 data 0x77
[ 1728.746292][ T1827] kvm [1826]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000040 data 0x33
01:51:56 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1729.205102][ T1852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1730.634046][ T8650] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1730.644337][ T8650] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input190
[ 1730.737147][ T8650] input: failed to attach handler kbd to device input190, error: -5
01:52:00 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x2, "c2cb"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:00 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:00 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f00000001c0)={@void, @val={0x3}, @mpls={[], @ipv4=@gre={{0x5, 0x6, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x86dd, [], "fbb3"}}}}}, 0xfdef)

01:52:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0)

01:52:00 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

01:52:00 executing program 3:
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1732.335120][ T8650] usb 2-1: USB disconnect, device number 67
[ 1732.743490][ T1897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1732.751314][ T1897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
01:52:00 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:00 executing program 3:
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1733.072791][ T1897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1733.098578][ T1906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:00 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

01:52:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0)

[ 1733.293922][ T9780] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1733.466350][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
01:52:01 executing program 2:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

[ 1733.656067][ T9780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1733.678971][ T1890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1733.702722][ T1932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:01 executing program 3:
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1733.794843][ T9780] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1733.804203][ T9780] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1733.812326][ T9780] usb 2-1: Manufacturer: syz
[ 1733.925832][ T9780] usb 2-1: config 0 descriptor??
[ 1735.984206][ T9780] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1735.994594][ T9780] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input191
[ 1736.107462][ T9780] input: failed to attach handler kbd to device input191, error: -5
[ 1737.702205][ T9780] usb 2-1: USB disconnect, device number 68
01:52:05 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x2, "c2cb"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:05 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:05 executing program 4:
clone(0xe000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:52:05 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

01:52:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0)

01:52:05 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1737.989411][ T1983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:06 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:52:06 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:06 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5605, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100))
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1)

01:52:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0)

01:52:06 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r2, 0x48280)
fcntl$setstatus(r1, 0x4, 0x6100)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x87ffffc)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
write(r1, &(0x7f00000000c0)="82", 0x1)
ftruncate(r0, 0x200004)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r4, r4, 0x0, 0x8080fffffffe)

[ 1738.954615][ T8696] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1739.337631][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1739.444563][ T8696] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1739.453862][ T8696] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1739.461990][ T8696] usb 2-1: Manufacturer: syz
[ 1739.500983][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:07 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

[ 1739.611119][ T8696] usb 2-1: config 0 descriptor??
[ 1741.684036][ T8696] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1741.694845][ T8696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input192
[ 1741.874670][ T8696] input: failed to attach handler kbd to device input192, error: -5
[ 1743.421666][ T9780] usb 2-1: USB disconnect, device number 69
01:52:11 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:11 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000010000027465616d5f736c6176655f3100080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x3, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:52:11 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:11 executing program 3:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:52:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x40}}, 0x0)

01:52:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x7, 0x0, 0x201ffffe, 0x0, 0x3}})

[ 1743.858311][ T2056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:11 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:11 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c579b20b4796bf296a9c169caa8e7414097844aa0933a898858a6a8ba7f1f6f911b1e0debe2fd4c2be9d187fad0bc1bbedc3a19f51dcd4415a08fd2df4dba41b9cce6e1e903908de11c0c9a6ebd3b117d35c54d3ab735d6e975ecce7aa94bcb571963c26282f06d54e00892a91dff033b553ca46eb7d52ca9846bd645e3634498d62efcc72f81c3157eab86e791a701fd0952ad13bcdea31a6b6cbffb", 0x11f}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

01:52:11 executing program 3:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:52:11 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x1, 0x4)

01:52:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x40}}, 0x0)

[ 1744.483879][ T9046] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1744.844519][ T2077] ptrace attach of "/root/syz-executor.2"[2076] was attempted by "/root/syz-executor.2"[2077]
[ 1744.845482][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:52:12 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000010000027465616d5f736c6176655f3100080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x7, 0x3a, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[ 1744.980170][ T2080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1744.995321][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1745.004614][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1745.012746][ T9046] usb 2-1: Manufacturer: syz
[ 1745.121110][ T9046] usb 2-1: config 0 descriptor??
[ 1747.774427][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1747.784721][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input193
[ 1747.921424][ T9046] input: failed to attach handler kbd to device input193, error: -5
01:52:16 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:16 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:16 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x5, &(0x7f0000000240)={[{@commit={'commit'}}]})

01:52:16 executing program 3:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40000])

01:52:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x40}}, 0x0)

01:52:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000ffc000/0x4000)=nil)

[ 1749.026684][ T8650] usb 2-1: USB disconnect, device number 70
[ 1749.262926][ T2114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:52:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0)

[ 1749.531321][ T2113] EXT4-fs (loop4): Unrecognized mount option "$" or missing value
[ 1749.539591][ T2113] EXT4-fs (loop4): failed to parse options in superblock: $
[ 1749.627605][ T2113] EXT4-fs (loop4): #blocks per group too big: 770108
01:52:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x13}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

01:52:17 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1749.894556][ T9046] usb 2-1: new high-speed USB device number 71 using dummy_hcd
01:52:17 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x3b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:52:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0)

01:52:17 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fallocate(r0, 0x100000001, 0x61800, 0x2811ffff)

[ 1750.255785][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1750.345076][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1750.354374][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1750.362503][ T9046] usb 2-1: Manufacturer: syz
[ 1750.492504][ T9046] usb 2-1: config 0 descriptor??
[ 1750.826289][ T2153] FAT-fs (loop2): bogus number of reserved sectors
[ 1750.833012][ T2153] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1750.951787][ T2153] FAT-fs (loop2): bogus number of reserved sectors
[ 1750.958699][ T2153] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1753.134384][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1753.144661][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input194
[ 1753.189576][ T9046] input: failed to attach handler kbd to device input194, error: -5
01:52:22 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000012, 0x1f4}}], 0x1, 0x100, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66ba76b699d3a483904811c5709efa01fa13e4ddc813f76684d3d1529fea5d78b38267db0082270f62b41b50981b0313b668585ad32e8977c5f7c2dc112136b8f7392223205ad86f4a9de1cddbd119f26acc2f", 0xffffffcd, 0x11, 0x0, 0x170)

01:52:22 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:22 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x5, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "92"}, @fwd]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x8d}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:52:22 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000080)=0xfffffffffffffdec)

01:52:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0)

[ 1754.350925][ T9046] usb 2-1: USB disconnect, device number 71
01:52:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040))

01:52:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x100)

01:52:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCPKT(r0, 0x5420, 0x0)

01:52:23 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r0 = dup(0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1755.514791][ T9046] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1755.875407][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1755.964930][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1755.974403][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1755.982535][ T9046] usb 2-1: Manufacturer: syz
01:52:23 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x40, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e165224897ba"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:52:23 executing program 2:
epoll_create1(0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x125300)

[ 1756.149515][ T9046] usb 2-1: config 0 descriptor??
[ 1758.764144][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1758.774261][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input195
[ 1758.891491][ T9046] input: failed to attach handler kbd to device input195, error: -5
01:52:27 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040))

01:52:27 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3d, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e16522"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1759.981535][ T8696] usb 2-1: USB disconnect, device number 72
01:52:27 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r0 = dup(0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = memfd_create(&(0x7f0000000080)='ramfs\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000026000139"], 0x24}}, 0x0)

01:52:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x178, 0x200, 0x200, 0x178, 0x5, 0x240, 0x308, 0x308, 0x240, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)

01:52:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040))

01:52:28 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080), 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

01:52:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

01:52:28 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r0 = dup(0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1760.927671][ T8696] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1760.966891][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:52:28 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1761.394653][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:52:29 executing program 3:

[ 1761.554770][ T8696] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1761.564096][ T8696] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1761.572222][ T8696] usb 2-1: Manufacturer: syz
[ 1761.696040][ T8696] usb 2-1: config 0 descriptor??
[ 1764.434632][ T8696] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1764.445399][ T8696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input196
[ 1764.548432][ T8696] input: failed to attach handler kbd to device input196, error: -5
01:52:33 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

01:52:33 executing program 3:

01:52:33 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:33 executing program 4:

01:52:33 executing program 2:

[ 1765.599519][ T8699] usb 2-1: USB disconnect, device number 73
[ 1765.963952][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:52:33 executing program 2:

01:52:33 executing program 4:

01:52:34 executing program 3:

01:52:34 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1767.074359][ T3219] usb 2-1: new high-speed USB device number 74 using dummy_hcd
01:52:34 executing program 2:

01:52:34 executing program 4:

[ 1767.434778][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1767.524585][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1767.534121][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1767.542265][ T3219] usb 2-1: Manufacturer: syz
[ 1767.686889][ T3219] usb 2-1: config 0 descriptor??
[ 1770.324637][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1770.334999][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input197
[ 1770.405730][ T3219] input: failed to attach handler kbd to device input197, error: -5
01:52:39 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:39 executing program 3:

01:52:39 executing program 0:

01:52:39 executing program 2:

01:52:39 executing program 4:

01:52:39 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1771.589367][T27072] usb 2-1: USB disconnect, device number 74
01:52:39 executing program 0:

01:52:39 executing program 2:

01:52:40 executing program 3:

01:52:40 executing program 4:

01:52:40 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1772.633536][T27072] usb 2-1: new high-speed USB device number 75 using dummy_hcd
01:52:40 executing program 2:

[ 1773.034518][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1773.135225][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1773.147847][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1773.156159][T27072] usb 2-1: Manufacturer: syz
[ 1773.357468][T27072] usb 2-1: config 0 descriptor??
[ 1775.994396][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1776.004619][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input198
[ 1776.114961][T27072] input: failed to attach handler kbd to device input198, error: -5
01:52:44 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:44 executing program 0:

01:52:44 executing program 3:

01:52:44 executing program 4:

01:52:44 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:44 executing program 2:

[ 1777.256595][ T3219] usb 2-1: USB disconnect, device number 75
01:52:45 executing program 2:

01:52:45 executing program 4:

01:52:45 executing program 3:

01:52:45 executing program 0:

01:52:45 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1778.363596][T27072] usb 2-1: new high-speed USB device number 76 using dummy_hcd
01:52:46 executing program 2:

[ 1778.754944][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1778.855463][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1778.864796][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1778.872917][T27072] usb 2-1: Manufacturer: syz
[ 1778.976842][T27072] usb 2-1: config 0 descriptor??
[ 1781.574509][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1781.584807][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input199
[ 1781.704685][T27072] input: failed to attach handler kbd to device input199, error: -5
01:52:50 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:50 executing program 4:

01:52:50 executing program 0:

01:52:50 executing program 3:

01:52:50 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:50 executing program 2:

[ 1782.883884][T27072] usb 2-1: USB disconnect, device number 76
01:52:51 executing program 0:

01:52:51 executing program 3:

01:52:51 executing program 2:

01:52:51 executing program 4:

01:52:51 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1784.023820][ T3219] usb 2-1: new high-speed USB device number 77 using dummy_hcd
01:52:51 executing program 3:

[ 1784.384585][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1784.475407][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1784.485237][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1784.493579][ T3219] usb 2-1: Manufacturer: syz
[ 1784.560023][ T3219] usb 2-1: config 0 descriptor??
[ 1787.209534][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1787.219665][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input200
[ 1787.316859][ T3219] input: failed to attach handler kbd to device input200, error: -5
01:52:56 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:52:56 executing program 2:
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$FUSE(r0, 0x0, 0x0)

01:52:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0xafb)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8, 0xfdfdffff]})

01:52:56 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:52:56 executing program 3:
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$inet6(0xa, 0x2, 0x0)
munmap(&(0x7f00003cf000/0x4000)=nil, 0x4000)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0)

[ 1788.396338][ T3219] usb 2-1: USB disconnect, device number 77
[ 1788.797391][ T2489] kvm [2480]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
01:52:56 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1789.316664][ T8696] usb 2-1: new high-speed USB device number 78 using dummy_hcd
01:52:57 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:52:57 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:52:57 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8e, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e165224897ba4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e43112cfb22fcd74713b"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1789.704823][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1789.804780][ T8696] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1789.814136][ T8696] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1789.822280][ T8696] usb 2-1: Manufacturer: syz
[ 1789.997560][ T8696] usb 2-1: config 0 descriptor??
01:52:58 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

01:52:58 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

[ 1792.716970][ T8696] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1792.727135][ T8696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input201
[ 1792.818023][ T8696] input: failed to attach handler kbd to device input201, error: -5
01:53:01 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:01 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
sendfile(r0, r1, 0x0, 0x4000000000dc)

01:53:01 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:01 executing program 3:
r0 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x0)
pwritev2(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)="d6", 0x1}, {&(0x7f0000000400)="e7", 0x1}], 0x3, 0x0, 0x0, 0x0)

01:53:01 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000980)="b0ff03c66b0d698cb89e0bf088ca1f74ffff10000000632177fbac14140ce000000d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[ 1793.825460][ T9046] usb 2-1: USB disconnect, device number 78
[ 1794.090050][   T28] audit: type=1800 audit(1596851581.747:150): pid=2557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16369 res=0
[ 1794.249808][   T28] audit: type=1800 audit(1596851581.837:151): pid=2557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16369 res=0
01:53:02 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0, 0x0)

01:53:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20)

01:53:02 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:02 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:02 executing program 2:
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003cf000/0x4000)=nil, 0x4000)
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0)

[ 1795.193894][ T9046] usb 2-1: new high-speed USB device number 79 using dummy_hcd
01:53:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1795.584298][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1795.694566][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1795.704062][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1795.712203][ T9046] usb 2-1: Manufacturer: syz
[ 1795.836264][ T9046] usb 2-1: config 0 descriptor??
[ 1796.179165][ T2587] kvm [2586]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
[ 1796.252824][ T2587] kvm [2586]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040
[ 1796.325420][ T2587] kvm [2586]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000004e
[ 1798.454083][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1798.464655][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input203
[ 1798.480682][ T9046] input: failed to attach handler kbd to device input203, error: -5
01:53:07 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:07 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

01:53:07 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @const, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}, {0x0, [0x0]}}, 0x0, 0x8f}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:53:07 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:07 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)

01:53:07 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00')
dup3(r3, r2, 0x0)

[ 1799.499665][ T8699] usb 2-1: USB disconnect, device number 79
01:53:07 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x100, 0x4)

01:53:07 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

[ 1800.233808][ T8699] usb 2-1: new high-speed USB device number 80 using dummy_hcd
01:53:08 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:08 executing program 0:
exit(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$FUSE(r0, &(0x7f0000000280), 0xfffffed3)

[ 1800.614918][ T8699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:53:08 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @const, @array, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1800.715050][ T8699] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1800.724581][ T8699] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1800.732738][ T8699] usb 2-1: Manufacturer: syz
[ 1800.813673][ T8699] usb 2-1: config 0 descriptor??
01:53:08 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

[ 1803.413674][ T8699] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1803.422806][ T8699] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input204
[ 1803.434162][ T8699] input: failed to attach handler kbd to device input204, error: -5
01:53:12 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:12 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:12 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x2, [@const, @array, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}}, 0x0, 0x4e}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x7, r0, 0x0, 0x0)

01:53:12 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x48, &(0x7f0000000580)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e165224897ba4ecb40aa071d9059"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:53:12 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @private, 0x0, 0x200000001, 'lblcr\x00'}, 0x2c)

[ 1804.467986][ T8696] usb 2-1: USB disconnect, device number 80
01:53:12 executing program 2:

01:53:12 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

[ 1805.393821][ T8699] usb 2-1: new high-speed USB device number 81 using dummy_hcd
01:53:13 executing program 2:

01:53:13 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1805.785078][ T8699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1805.874507][ T8699] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1805.884600][ T8699] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1805.892968][ T8699] usb 2-1: Manufacturer: syz
01:53:13 executing program 2:

[ 1805.997932][ T8699] usb 2-1: config 0 descriptor??
01:53:13 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

[ 1808.643923][ T8699] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1808.653455][ T8699] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input205
[ 1808.668849][ T8699] input: failed to attach handler kbd to device input205, error: -5
01:53:17 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:17 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:17 executing program 2:
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:17 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0)

01:53:17 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61301926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a210da2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28)

[ 1809.708882][ T8699] usb 2-1: USB disconnect, device number 81
01:53:18 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:18 executing program 2:

[ 1810.824423][ T3219] usb 2-1: new high-speed USB device number 82 using dummy_hcd
01:53:18 executing program 0:

01:53:18 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:18 executing program 3:

[ 1811.187152][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:53:18 executing program 2:

[ 1811.275221][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1811.284624][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1811.292748][ T3219] usb 2-1: Manufacturer: syz
[ 1811.371642][ T3219] usb 2-1: config 0 descriptor??
01:53:19 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

[ 1813.984229][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1813.993425][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input206
[ 1814.009225][ T3219] input: failed to attach handler kbd to device input206, error: -5
01:53:23 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:23 executing program 0:

01:53:23 executing program 3:

01:53:23 executing program 2:

01:53:23 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:23 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1815.483916][T20581] usb 2-1: USB disconnect, device number 82
01:53:23 executing program 3:

01:53:23 executing program 2:

01:53:23 executing program 0:

01:53:23 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

[ 1816.364312][ T9780] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1816.734911][ T9780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:53:24 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1816.830664][ T9780] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1816.839937][ T9780] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1816.848313][ T9780] usb 2-1: Manufacturer: syz
01:53:24 executing program 0:

[ 1816.989608][ T9780] usb 2-1: config 0 descriptor??
[ 1819.633846][ T9780] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1819.642769][ T9780] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input207
[ 1819.667392][ T9780] input: failed to attach handler kbd to device input207, error: -5
01:53:28 executing program 2:

01:53:28 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240))

01:53:28 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:28 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:28 executing program 3:

01:53:28 executing program 0:

[ 1821.104936][ T9046] usb 2-1: USB disconnect, device number 83
01:53:29 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

01:53:29 executing program 2:

01:53:29 executing program 0:

01:53:29 executing program 3:

[ 1821.886578][ T9046] usb 2-1: new high-speed USB device number 84 using dummy_hcd
01:53:29 executing program 0:

[ 1822.256782][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:53:30 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), 0x0)
gettid()
keyctl$join(0x1, 0x0)
request_key(&(0x7f0000000140)='asymmetric\x00', 0x0, 0x0, 0x0)
openat$md(0xffffff9c, 0x0, 0x711000, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000040))
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3)

01:53:30 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1822.344633][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1822.354016][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1822.362147][ T9046] usb 2-1: Manufacturer: syz
01:53:30 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000004c0))
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4008002)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe306, 0x4, @perf_config_ext={0x4, 0x8}, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1822.481559][ T9046] usb 2-1: config 0 descriptor??
[ 1824.344239][    T0] NOHZ: local_softirq_pending 08
[ 1825.113911][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1825.122767][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input208
[ 1825.134660][ T9046] input: failed to attach handler kbd to device input208, error: -5
01:53:34 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x2, "4801"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:34 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

01:53:34 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x10000, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0x2000, 0x40, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001})
pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000240))
readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e1f9e8dd9375eb91cd75d9737be0feb110b537bd5ca75f954940a0cce1817a0853b2019f2bdde20be16d5d6c03140a4ec0cf14e7665481e270ce13035194e310e1aa368faa99923c6bb7040fde3569de514811b3db5715e57d8fcdd5c6a6bf6751dda777b44862304b05627b4a23cde595616fe134bf45dbc8ce2610dcf5e2991ed7206803407736a7c26bff2c3f37cb28da16cf779b84a3e2e997a0509456aa669d6a30d6adae4fef46cc61ad0d0fa6178b37269f4409ab72313d3f4331dd15b59f809039c34a82212aa1e1a7aeefaccba7f01480522595da84aee31ee2793b6b7db1626c496cfdab8734e7c8df73ce6953083a0750fa", @ANYBLOB], 0x2220}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:34 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80a}, 0x2880, 0x0, 0x0, 0x0, 0xfff, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
poll(&(0x7f00000011c0), 0x0, 0xe0fc)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0xb64, 0x5d8, 0x1})
openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000b604000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb89b9}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x74}}, 0x0)

01:53:34 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1826.623234][T20581] usb 2-1: USB disconnect, device number 84
[ 1826.834826][ T2913] mmap: syz-executor.2 (2913) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[ 1827.055996][ T2913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:53:35 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))

01:53:35 executing program 0:
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x4e21, @rand_addr=0x64010100}})
write(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
socket(0x2, 0xa, 0x8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private0, 0x0, 0xcb, 0x4e22, 0x0, 0xa}, {0x0, 0x8, 0x0, 0x5}, {0x400, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d2, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x9, 0x200000, 0xc, 0x1}}, 0xe4)
r3 = openat$bsg(0xffffff9c, 0x0, 0x300, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000004c0)={0x5, 0x7e2, 0xfffffbff, 0xfffffffe, 0xe, "45c4693edf7a65312f2cbe37f0fc4dbdbaa740"})
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x44800)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340082550000000000000800"/30, @ANYRES32=r5, @ANYBLOB="f7ffffff000000001400168010000180330003000100000003000000"], 0x34}}, 0x20004090)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf25150000000a000600aaaaaaaaaabb00000a000600a7ba46330a7800000c00990020cad816950000000a000600aaaaaaaaaa3800000a001a00ffffffffffff000008000300", @ANYRES32=r5, @ANYBLOB="0a000600aaaaaaaaaab73909"], 0x64}, 0x1, 0x0, 0x0, 0x40080c5}, 0x40081)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8feff7da9f52400020200000007200001800600034000000008000200e000000100cb73adf1400000000008000040000002800500010084000000060003400002000006000340000000001400018008000100ffffffff080002000000000014000180080001c07468ca026136a800000000000000000000fffffffffffffffd00"/158], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4004001)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x2}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x80000001}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)

[ 1827.544216][ T9046] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1827.660235][ T2934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:53:35 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1827.917770][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1828.004592][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1828.014058][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1828.022191][ T9046] usb 2-1: Manufacturer: syz
01:53:35 executing program 2:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x4002, @private0}}, 0x0, 0x0, 0x0, 0x0, "dec343194f9dd0c5540adc4ca2b99bbd9777bd23b3e3346143c78e66ec643ef0defd9bffae58b00fd958f8b773c34f4ea678118649ef2bb24ce641a5c193520a16dada16360683435b6d81b0169351f2"}, 0xd8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3601}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:35 executing program 0:
socket$inet(0x2, 0x0, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)

[ 1828.203994][ T9046] usb 2-1: config 0 descriptor??
[ 1830.824497][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1830.834827][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input209
[ 1830.872627][ T9046] input: failed to attach handler kbd to device input209, error: -5
01:53:39 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x2, "4801"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:39 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

01:53:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:39 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

01:53:39 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x17, 0x0, @scatter={0x1b3, 0x200000, &(0x7f0000000080)}, &(0x7f0000000080)="59a5be2a856f081130d586c3ab40bcf94dbe19fe942f9a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x1e4, 0x0, 0x118, 0x3e020005, 0x0, 0x188, 0x234, 0x1d0, 0x1d0, 0x234, 0x1d0, 0x5, 0x0, {[{{@ip={@multicast1=0xe0005100, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x240)
prctl$PR_CAPBSET_READ(0x17, 0x27)
r1 = getpid()
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000040))
migrate_pages(r1, 0xfff, &(0x7f0000000040), 0x0)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x0, 0x2, 0x3}}, 0x14)
arch_prctl$ARCH_GET_CPUID(0x1011)

01:53:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0)

[ 1832.082630][ T9046] usb 2-1: USB disconnect, device number 85
01:53:40 executing program 2:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc)

01:53:40 executing program 0:
clone(0x240900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x2e], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500}}], 0xf, 0x0, 0x0)

01:53:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:40 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

[ 1833.068017][ T8696] usb 2-1: new high-speed USB device number 86 using dummy_hcd
01:53:41 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, 0x0, 0x0)

[ 1833.454856][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:53:41 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0)

[ 1833.565433][ T8696] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1833.574817][ T8696] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1833.582940][ T8696] usb 2-1: Manufacturer: syz
[ 1833.666370][ T8696] usb 2-1: config 0 descriptor??
[ 1836.273929][ T8696] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1836.282766][ T8696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input210
[ 1836.300650][ T8696] input: failed to attach handler kbd to device input210, error: -5
01:53:45 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x2, "4801"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:45 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180))

01:53:45 executing program 4:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

01:53:45 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x10000}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180))

01:53:45 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, 0x0, 0x0)

[ 1837.702115][T20581] usb 2-1: USB disconnect, device number 86
01:53:46 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4008002)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
statx(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe306, 0x4, @perf_config_ext={0x4, 0x8}, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:46 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r3+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

01:53:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1838.453854][ T3219] usb 2-1: new high-speed USB device number 87 using dummy_hcd
01:53:46 executing program 5:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1fe}, 0x0, 0x0)

01:53:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43ae0727f0f011424f30f090f013a360f94c4c18d72d68366baa100ed", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x101, 0xc5e]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[ 1838.894913][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1838.985244][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1838.995228][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1839.003566][ T3219] usb 2-1: Manufacturer: syz
[ 1839.075688][ T3219] usb 2-1: config 0 descriptor??
01:53:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1841.725110][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1841.735271][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input211
[ 1841.828310][ T3219] input: failed to attach handler kbd to device input211, error: -5
01:53:50 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4c20a700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
write(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f00000011c0)='./bus\x00', 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6de, 0xf08b}, 0x14)
splice(r0, 0x0, r1, 0x0, 0x4ffe1, 0x0)
ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f00000000c0)={0x2, 0x1, 0x97, &(0x7f0000000000)="223f4e879912a8979b93a5d329fbebdb991c66d768ac0949e04c2296b315b5d2b33c3e1d69f2e2bcf076880262a9d769075ffd79b4fda8d997ab1dac4e1781abe07dfc7cef5b92d4471325888ec7b1e89f2130a8e0582b51f2d4a9f9bfbf19ddacffdcfa1e339172222c3b53a3cb98bbd6a512fe35173d55f4177d45fa3bfc4cc28c1c72ba99e61e000cfb4c5a3830d998224d31f3eea8"})
getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)
getdents64(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)

01:53:50 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r2+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

01:53:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0)

01:53:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:50 executing program 0:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f00000001c0))

[ 1843.144740][ T3219] usb 2-1: USB disconnect, device number 87
[ 1843.918021][ T3173] IPVS: ftp: loaded support on port[0] = 21
01:53:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1844.261551][ T3180] IPVS: ftp: loaded support on port[0] = 21
01:53:52 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300003a099a11fd40bc"], 0x1}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:52 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r2+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

01:53:52 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f00000000c0)={0x0, 0xe1f, 0x10de0000000})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1844.640445][ T8505] tipc: TX() has been purged, node left!
[ 1844.658157][T20581] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1845.046258][T20581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1845.242613][T20581] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1845.252038][T20581] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1845.260906][T20581] usb 2-1: Manufacturer: syz
01:53:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1845.361806][ T3227] kvm_hv_set_msr: 1 callbacks suppressed
[ 1845.361865][ T3227] kvm [3214]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xe
[ 1845.419999][T20581] usb 2-1: config 0 descriptor??
[ 1845.443933][ T3227] kvm [3214]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000000e data 0xc0
01:53:53 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)
ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000240))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1845.500212][ T3227] kvm [3214]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x90
[ 1848.057984][ T8505] tipc: TX() has been purged, node left!
[ 1848.593832][T20581] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1848.602706][T20581] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input212
[ 1848.730919][T20581] input: failed to attach handler kbd to device input212, error: -5
[ 1848.815529][T20581] usb 2-1: USB disconnect, device number 88
01:53:56 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:53:56 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="66b8b1fc09db0f23c80f21f86635080000000f23f866b95a09000066b89400000066ba000000000f300f00192e0f797b5f660f3a613d290f01d1263e3e0fc7ac0e2e643e0f01c30f350f20e06635020000000f22e0"}], 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000080))
syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3601}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:53:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:56 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r2+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

01:53:56 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)
ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000240))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

01:53:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x17, 0x0, @scatter={0x1b3, 0x200000, &(0x7f0000000080)}, &(0x7f0000000080)="59a5be2a856f081130d586c3ab40bcf94dbe19fe942f9a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x1e4, 0x0, 0x118, 0x3e020005, 0x0, 0x188, 0x234, 0x1d0, 0x1d0, 0x234, 0x1d0, 0x5, 0x0, {[{{@ip={@multicast1=0xe0005100, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x240)
prctl$PR_CAPBSET_READ(0x17, 0x27)
gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000000))
ptrace$getregset(0x4, r1, 0x8048000, 0x0)
sched_rr_get_interval(r1, 0x0)
migrate_pages(r1, 0xfff, 0x0, &(0x7f0000000180)=0x1)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x0, {0x1, 0x0, 0x3}}, 0x14)

01:53:57 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r2+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

01:53:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3601}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1850.406316][ T8650] usb 2-1: new high-speed USB device number 89 using dummy_hcd
01:53:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:53:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

[ 1850.774718][ T8650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1850.864887][ T8650] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1850.874703][ T8650] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1850.882835][ T8650] usb 2-1: Manufacturer: syz
[ 1851.092706][ T8650] usb 2-1: config 0 descriptor??
01:53:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3601}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1851.414330][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1851.501724][ T3368] IPVS: ftp: loaded support on port[0] = 21
[ 1851.517663][   T28] audit: type=1400 audit(1596851639.147:152): avc:  denied  { sys_admin } for  pid=3364 comm="syz-executor.0" capability=21  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1
[ 1854.233694][ T8650] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1854.242589][ T8650] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input213
[ 1854.253946][ T8650] input: failed to attach handler kbd to device input213, error: -5
[ 1854.294456][ T8650] usb 2-1: USB disconnect, device number 89
01:54:02 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:54:02 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r1+10000000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)

01:54:02 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)
ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000240))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

01:54:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

01:54:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

[ 1854.793143][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1854.910063][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1854.955344][ T3439] IPVS: ftp: loaded support on port[0] = 21
[ 1855.163424][ T3434] IPVS: ftp: loaded support on port[0] = 21
[ 1855.640769][ T3442] not chained 10000 origins
[ 1855.645341][ T3442] CPU: 0 PID: 3442 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0
[ 1855.653935][ T3442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1855.664084][ T3442] Call Trace:
[ 1855.667480][ T3442]  dump_stack+0x21c/0x280
[ 1855.671893][ T3442]  kmsan_internal_chain_origin+0x6f/0x130
[ 1855.677667][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.682895][ T3442]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1855.688729][ T3442]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1855.694866][ T3442]  ? update_load_avg+0x860/0x1340
[ 1855.699917][ T3442]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[ 1855.706094][ T3442]  ? rb_erase+0x2347/0x27b0
[ 1855.710625][ T3442]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1855.716461][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.721685][ T3442]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1855.727513][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.732739][ T3442]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1855.738309][ T3442]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1855.744462][ T3442]  ? _copy_from_user+0x201/0x310
[ 1855.749429][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.760813][ T3442]  __msan_chain_origin+0x50/0x90
[ 1855.766569][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1855.771736][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1855.776765][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1855.781498][ T3442]  ? kmsan_internal_check_memory+0xb1/0x3d0
[ 1855.787440][ T3442]  ? __msan_poison_alloca+0xf0/0x120
[ 1855.792768][ T3442]  ? kmsan_copy_to_user+0x81/0x90
[ 1855.797815][ T3442]  ? _copy_to_user+0x1bf/0x260
[ 1855.802676][ T3442]  ? put_old_timespec32+0x231/0x2d0
[ 1855.807904][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.813131][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.818382][ T3442]  ? kmsan_get_metadata+0x116/0x180
[ 1855.823613][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1855.829032][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1855.834650][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1855.839964][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1855.844857][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1855.849411][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1855.855747][ T3442] RIP: 0023:0xf7f01549
[ 1855.859817][ T3442] Code: Bad RIP value.
[ 1855.863885][ T3442] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[ 1855.872308][ T3442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001e00
[ 1855.880301][ T3442] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000000
[ 1855.888278][ T3442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1855.896258][ T3442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1855.904237][ T3442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1855.912237][ T3442] Uninit was stored to memory at:
[ 1855.917278][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1855.923019][ T3442]  __msan_chain_origin+0x50/0x90
[ 1855.928574][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1855.933693][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1855.938638][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1855.943322][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1855.948705][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1855.954259][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1855.959491][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1855.967845][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1855.972357][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1855.978675][ T3442] 
[ 1855.981001][ T3442] Uninit was stored to memory at:
[ 1855.986035][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1855.991758][ T3442]  __msan_chain_origin+0x50/0x90
[ 1855.996712][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.001830][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.006791][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.011490][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.016872][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.022428][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.027648][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.032503][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.037018][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.043336][ T3442] 
[ 1856.045661][ T3442] Uninit was stored to memory at:
[ 1856.050702][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1856.056427][ T3442]  __msan_chain_origin+0x50/0x90
[ 1856.061370][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.066487][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.071427][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.076115][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.081510][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.087081][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.092295][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.097153][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.101671][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.108008][ T3442] 
[ 1856.110349][ T3442] Uninit was stored to memory at:
[ 1856.115387][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1856.121111][ T3442]  __msan_chain_origin+0x50/0x90
[ 1856.126058][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.131177][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.136124][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.140808][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.146209][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.151764][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.156972][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.162319][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.166862][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.173181][ T3442] 
[ 1856.175531][ T3442] Uninit was stored to memory at:
[ 1856.180587][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1856.186312][ T3442]  __msan_chain_origin+0x50/0x90
[ 1856.191257][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.196376][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.201321][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.206010][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.211392][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.216947][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.222168][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.227480][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.231990][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.238307][ T3442] 
[ 1856.240633][ T3442] Uninit was stored to memory at:
[ 1856.245668][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1856.251399][ T3442]  __msan_chain_origin+0x50/0x90
[ 1856.256347][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.261463][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.266423][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.271110][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.276491][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.282046][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.287254][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.292128][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.296641][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.302966][ T3442] 
[ 1856.305292][ T3442] Uninit was stored to memory at:
[ 1856.310327][ T3442]  kmsan_internal_chain_origin+0xad/0x130
[ 1856.316053][ T3442]  __msan_chain_origin+0x50/0x90
[ 1856.321002][ T3442]  __get_compat_msghdr+0x6db/0x9d0
[ 1856.326121][ T3442]  get_compat_msghdr+0x108/0x2b0
[ 1856.331066][ T3442]  __sys_sendmmsg+0x755/0xf70
[ 1856.335754][ T3442]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1856.341160][ T3442]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1856.346749][ T3442]  __do_fast_syscall_32+0x2af/0x480
[ 1856.351958][ T3442]  do_fast_syscall_32+0x6b/0xd0
[ 1856.356820][ T3442]  do_SYSENTER_32+0x73/0x90
[ 1856.361332][ T3442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1856.367654][ T3442] 
[ 1856.369989][ T3442] Local variable ----msg_sys@__sys_sendmmsg created at:
[ 1856.376933][ T3442]  __sys_sendmmsg+0xbb/0xf70
[ 1856.381526][ T3442]  __sys_sendmmsg+0xbb/0xf70
01:54:04 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f39}, &(0x7f0000000180)={0x0, r1+10000000}, 0x0)

01:54:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

[ 1856.613760][ T8699] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1856.639801][ T8697] tipc: TX() has been purged, node left!
01:54:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

01:54:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1856.987219][ T8699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1857.107052][ T8699] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1857.116384][ T8699] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1857.124646][ T8699] usb 2-1: Manufacturer: syz
[ 1857.390303][ T3503] IPVS: ftp: loaded support on port[0] = 21
[ 1857.443824][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1857.555446][ T8699] usb 2-1: config 0 descriptor??
[ 1857.762933][ T3507] IPVS: ftp: loaded support on port[0] = 21
01:54:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

[ 1859.130612][ T3563] IPVS: ftp: loaded support on port[0] = 21
[ 1860.534932][ T8697] tipc: TX() has been purged, node left!
[ 1860.550159][ T8697] tipc: TX() has been purged, node left!
01:54:08 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:54:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, [], [{0xff, 0x7, 0xffffffff, 0xc4, 0x7, 0x3f}, {0x9, 0x0, 0x7f, 0x40, 0x3, 0x7}], [[]]})
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x101}}}, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1000, 0x0)
write$P9_RRENAMEAT(r4, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x547001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)

01:54:08 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
clock_gettime(0x0, &(0x7f0000000100))

01:54:08 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)
ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000240))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

01:54:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x17, 0x0, @scatter={0x1b3, 0x200000, &(0x7f0000000080)}, &(0x7f0000000080)="59a5be2a856f081130d586c3ab40bcf94dbe19fe942f9a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x27)
getpid()
migrate_pages(0x0, 0xfff, &(0x7f0000000040), 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)

[ 1860.634297][ T8699] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1860.644874][ T8699] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input214
[ 1860.776177][ T8699] input: failed to attach handler kbd to device input214, error: -5
01:54:08 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0x190, 0xf8, 0xf8, 0xf8, 0x0, 0x248, 0x248, 0x248, 0x248, 0x248, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_hsr\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000380)=0x8000, 0x4)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000000c0)=0x5, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$unix(r0, &(0x7f0000000200)="1d9b000000007675d706d94e590291c9900d3be5299d0a4d3d1891a1fe3d8edd715c9f981f7ddaefbae33fbd06698cc347008df8", 0x34, 0x0, &(0x7f0000000180)=@abs, 0x6e)

[ 1860.986561][ T8699] usb 2-1: USB disconnect, device number 90
[ 1861.170897][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1861.525096][ T3612] IPVS: ftp: loaded support on port[0] = 21
01:54:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:09 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:09 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1862.253860][ T8699] usb 2-1: new high-speed USB device number 91 using dummy_hcd
01:54:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1862.614635][ T8699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1862.705641][ T8699] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1862.715025][ T8699] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1862.723144][ T8699] usb 2-1: Manufacturer: syz
01:54:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)
ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000240))

[ 1862.861910][ T8699] usb 2-1: config 0 descriptor??
[ 1866.024110][ T8699] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1866.033156][ T8699] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input215
[ 1866.063821][ T8699] input: failed to attach handler kbd to device input215, error: -5
[ 1866.083283][ T8699] usb 2-1: USB disconnect, device number 91
01:54:14 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:54:14 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:14 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:14 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/75, 0x4b)

01:54:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a802000078010000780100000000000000000000780100001002000010020000100200001002000010020000040000000000000000000000ac141400ac1414bb00000000000000000000000000000000000000000000000065727370616e3000000100000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000001900000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe100000000000000000000000000000000000000000000000000b800e00000000000000000000000000000000000000000004800697076730000000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000f901280052454a45435400000000000000000000000000000000000000000000000008000000aa07000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14)
sendfile(r4, r3, 0x0, 0xe5bd)

01:54:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:14 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:14 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:14 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "c309388fe74f7e5810954852c1000000dc535b050000000000000061c4187abc00d5b6070000001c6ba7c54f14b4e000008116b90479df29fbac5c3c4b4fa00815"}}}}}}, 0x0)

[ 1867.013911][ T9046] usb 2-1: new high-speed USB device number 92 using dummy_hcd
01:54:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1867.417659][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1867.514709][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1867.524032][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1867.532158][ T9046] usb 2-1: Manufacturer: syz
[ 1867.644998][ T9046] usb 2-1: config 0 descriptor??
01:54:15 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1870.813801][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1870.822796][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input216
[ 1870.850312][ T9046] input: failed to attach handler kbd to device input216, error: -5
[ 1870.869936][ T9046] usb 2-1: USB disconnect, device number 92
01:54:18 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "d85772"}, 0x0, 0x0})

01:54:18 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x0, 0x0)

01:54:18 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:18 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:18 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000600)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @private1, @mcast2, {[], @mlv2_report}}}}}, 0x0)

01:54:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

01:54:19 executing program 5:
r0 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000002c0)=0x2000000, 0x4)

01:54:19 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1871.943683][ T9046] usb 2-1: new high-speed USB device number 93 using dummy_hcd
01:54:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

[ 1872.327093][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:54:20 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:20 executing program 5:
clone(0x18340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 1872.425684][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1872.434977][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1872.443102][ T9046] usb 2-1: Manufacturer: syz
[ 1872.548541][ T9046] usb 2-1: config 0 descriptor??
[ 1875.554534][    T0] NOHZ: local_softirq_pending 08
[ 1875.559758][    T0] NOHZ: local_softirq_pending 08
[ 1875.703961][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1875.714191][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input217
[ 1875.728922][ T9046] input: failed to attach handler kbd to device input217, error: -5
[ 1875.752248][ T9046] usb 2-1: USB disconnect, device number 93
01:54:23 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

01:54:23 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

01:54:23 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

01:54:23 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:54:23 executing program 4:
pipe(&(0x7f0000000140))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:24 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:24 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:24 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0xeb9}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

[ 1876.825769][T27072] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1877.194553][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1877.284679][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1877.294226][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1877.302335][T27072] usb 2-1: Manufacturer: syz
01:54:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

[ 1877.514241][T27072] usb 2-1: config 0 descriptor??
01:54:25 executing program 3:
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

[ 1880.693943][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1880.704118][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input218
[ 1880.724827][T27072] input: failed to attach handler kbd to device input218, error: -5
[ 1880.745746][T27072] usb 2-1: USB disconnect, device number 94
01:54:28 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

01:54:28 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x6)

01:54:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:28 executing program 0:
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:28 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:28 executing program 3:
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

01:54:29 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "090011", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0)

01:54:29 executing program 0:
syz_open_procfs(0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

01:54:29 executing program 3:
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

[ 1882.143907][ T9046] usb 2-1: new high-speed USB device number 95 using dummy_hcd
01:54:30 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7fe, 0x4)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x6b)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0xb15e2ac0d3828044}, 0x40002102)

01:54:30 executing program 0:
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1882.504567][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1882.597502][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1882.606900][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1882.615442][ T9046] usb 2-1: Manufacturer: syz
[ 1882.694126][ T9046] usb 2-1: config 0 descriptor??
[ 1885.785933][    T0] NOHZ: local_softirq_pending 08
[ 1885.874397][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1885.884688][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input219
[ 1885.898535][ T9046] input: failed to attach handler kbd to device input219, error: -5
[ 1885.935190][ T9046] usb 2-1: USB disconnect, device number 95
01:54:34 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

01:54:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

01:54:34 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)

01:54:34 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

01:54:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4)

01:54:34 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:34 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

01:54:34 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, &(0x7f00000001c0)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb3bd49a662db4d7224bf2e3460f83db56199f631f0000000000000000000000000000fe8740435800ed62e785f623365eed2c991dc675389cc03fc36706fd"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

01:54:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

[ 1887.228158][T27072] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1887.617749][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:54:35 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1887.714623][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1887.724199][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1887.732874][T27072] usb 2-1: Manufacturer: syz
01:54:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c74657200000000000005000000000000000000000000000000000000000e00000004000000a003000000000000d801000010010000d8010000d8020000d8020000d8020000d8020000d8020000d8020000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff30000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000d000100100000000000000000000000000000000000000042c007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000d9f49e8302a9dc7fcfb155ea254f4a0d76f31243b5f7aa700403ec38db600000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d00000004000000000000000000687372300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000240052454a454354000000000000a9ba48cf2a26c48400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000096000000000000000000000000000000000000000001010000000000000000dc0000010000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000240052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c80000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000060bc7d94007d2c0004010000000000000000000000000000ff020000000000000000000000000001"], 0xaf)

[ 1887.849536][T27072] usb 2-1: config 0 descriptor??
[ 1891.045279][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1891.055651][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input220
[ 1891.082195][T27072] input: failed to attach handler kbd to device input220, error: -5
[ 1891.115069][T27072] usb 2-1: USB disconnect, device number 96
01:54:39 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0})

01:54:39 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

01:54:39 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

01:54:39 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:39 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)
socket$inet(0x2, 0x0, 0x0)

01:54:39 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x6)

01:54:39 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:39 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, 0x0})

01:54:39 executing program 0:
syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:39 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001c00070cab0925000900f00007ab08000800000003000000210001c000000000000000000c00000000039815fa2c1ec28656aaa79bb94b46fe0000000a0002", 0x43)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c)
r2 = socket(0x10, 0x80002, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

[ 1892.304591][T27072] usb 2-1: new high-speed USB device number 97 using dummy_hcd
01:54:40 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, 0x0})

[ 1892.665348][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:54:40 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1892.755497][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1892.765239][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1892.773669][T27072] usb 2-1: Manufacturer: syz
[ 1892.804351][ T4034] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1892.871561][T27072] usb 2-1: config 0 descriptor??
[ 1896.063963][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1896.074683][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input221
[ 1896.102207][T27072] input: failed to attach handler kbd to device input221, error: -5
[ 1896.134505][T27072] usb 2-1: USB disconnect, device number 97
01:54:44 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0})

01:54:44 executing program 0:
syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, 0x0})

01:54:44 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)
socket(0x0, 0x800000003, 0x0)

01:54:44 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:44 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000380)=""/230)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240))

01:54:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, &(0x7f0000000280)})

01:54:44 executing program 0:
syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:44 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:45 executing program 5:

[ 1897.454194][T27072] usb 2-1: new high-speed USB device number 98 using dummy_hcd
01:54:45 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, &(0x7f0000000280)})

01:54:45 executing program 0:
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1897.844522][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1897.935185][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1897.948358][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1897.956673][T27072] usb 2-1: Manufacturer: syz
[ 1898.041940][T27072] usb 2-1: config 0 descriptor??
[ 1901.236203][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1901.246291][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input222
[ 1901.268171][T27072] input: failed to attach handler kbd to device input222, error: -5
[ 1901.308802][T27072] usb 2-1: USB disconnect, device number 98
01:54:49 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0})

01:54:49 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:49 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:54:49 executing program 5:

01:54:49 executing program 0:
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:49 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, &(0x7f0000000280)})

01:54:49 executing program 5:

01:54:49 executing program 0:
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:49 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x7fffffff}]})

[ 1902.238937][ T4150] not chained 20000 origins
[ 1902.243512][ T4150] CPU: 1 PID: 4150 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0
[ 1902.252827][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1902.262894][ T4150] Call Trace:
[ 1902.266213][ T4150]  dump_stack+0x21c/0x280
[ 1902.270585][ T4150]  kmsan_internal_chain_origin+0x6f/0x130
[ 1902.276335][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.281556][ T4150]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1902.287131][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.292357][ T4150]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1902.298188][ T4150]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1902.304397][ T4150]  ? unix_dgram_sendmsg+0x1616/0x4390
[ 1902.309799][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.315021][ T4150]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1902.320594][ T4150]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1902.326721][ T4150]  ? _copy_from_user+0x201/0x310
[ 1902.331698][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.336921][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.341892][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.347054][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.352033][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.356779][ T4150]  ? kmsan_internal_check_memory+0xb1/0x3d0
[ 1902.362696][ T4150]  ? __msan_poison_alloca+0xf0/0x120
[ 1902.368023][ T4150]  ? kmsan_copy_to_user+0x81/0x90
[ 1902.373068][ T4150]  ? _copy_to_user+0x1bf/0x260
[ 1902.377875][ T4150]  ? put_old_timespec32+0x231/0x2d0
[ 1902.383096][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.388316][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.393540][ T4150]  ? kmsan_get_metadata+0x116/0x180
[ 1902.398761][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.404162][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.409726][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.414954][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.419828][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.424357][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.430693][ T4150] RIP: 0023:0xf7f01549
[ 1902.434759][ T4150] Code: Bad RIP value.
[ 1902.438829][ T4150] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[ 1902.447279][ T4150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001e00
[ 1902.455256][ T4150] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000000
[ 1902.463234][ T4150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1902.471213][ T4150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1902.479192][ T4150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1902.487186][ T4150] Uninit was stored to memory at:
[ 1902.492224][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.497951][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.502901][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.508020][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.512964][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.517651][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.523029][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.528584][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.533822][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.538697][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.543223][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.549549][ T4150] 
[ 1902.551890][ T4150] Uninit was stored to memory at:
[ 1902.556924][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.562649][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.567597][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.572716][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.577659][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.582344][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.587756][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.593309][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.598521][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.603379][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.607919][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.614258][ T4150] 
[ 1902.616589][ T4150] Uninit was stored to memory at:
[ 1902.621616][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.627354][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.632298][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.637415][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.642357][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.647043][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.652421][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.657980][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.663185][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.668043][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.672567][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.678886][ T4150] 
[ 1902.681231][ T4150] Uninit was stored to memory at:
[ 1902.686267][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.691991][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.696938][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.702056][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.707007][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.711696][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.717077][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.722631][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.727860][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.732717][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.737236][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.743557][ T4150] 
[ 1902.745895][ T4150] Uninit was stored to memory at:
[ 1902.750929][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.756660][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.761605][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.766728][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.771674][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.776358][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.781736][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.787289][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.792493][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.797351][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.801861][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.808204][ T4150] 
[ 1902.810532][ T4150] Uninit was stored to memory at:
[ 1902.815569][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.821408][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.826357][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.831474][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.836417][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.841101][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.846481][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.852034][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.857241][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.862098][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.866611][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.872931][ T4150] 
[ 1902.875276][ T4150] Uninit was stored to memory at:
[ 1902.880310][ T4150]  kmsan_internal_chain_origin+0xad/0x130
[ 1902.886035][ T4150]  __msan_chain_origin+0x50/0x90
[ 1902.890979][ T4150]  __get_compat_msghdr+0x6db/0x9d0
[ 1902.896098][ T4150]  get_compat_msghdr+0x108/0x2b0
[ 1902.901128][ T4150]  __sys_sendmmsg+0x755/0xf70
[ 1902.905833][ T4150]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1902.911212][ T4150]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1902.916770][ T4150]  __do_fast_syscall_32+0x2af/0x480
[ 1902.921976][ T4150]  do_fast_syscall_32+0x6b/0xd0
[ 1902.926839][ T4150]  do_SYSENTER_32+0x73/0x90
[ 1902.931380][ T4150]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1902.937697][ T4150] 
[ 1902.940027][ T4150] Local variable ----msg_sys@__sys_sendmmsg created at:
[ 1902.946966][ T4150]  __sys_sendmmsg+0xbb/0xf70
[ 1902.951560][ T4150]  __sys_sendmmsg+0xbb/0xf70
01:54:50 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1903.114548][ T8699] usb 2-1: new high-speed USB device number 99 using dummy_hcd
01:54:51 executing program 5:

[ 1903.507205][ T8699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:54:51 executing program 0:
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1903.595065][ T8699] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1903.604493][ T8699] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1903.612687][ T8699] usb 2-1: Manufacturer: syz
[ 1903.687875][ T8699] usb 2-1: config 0 descriptor??
[ 1906.896854][ T8699] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1906.906093][ T8699] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input223
[ 1906.928983][ T8699] input: failed to attach handler kbd to device input223, error: -5
[ 1906.955888][ T8699] usb 2-1: USB disconnect, device number 99
01:54:54 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180), 0x0, 0x0})

01:54:54 executing program 5:

01:54:54 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:54:54 executing program 0:
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:54 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x7fffffff}]})

01:54:54 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:54:55 executing program 5:

01:54:55 executing program 0:
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:54:55 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1907.963639][T20297] usb 2-1: new high-speed USB device number 100 using dummy_hcd
01:54:55 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x7fffffff}]})

01:54:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1908.335545][T20297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1908.445426][T20297] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1908.454803][T20297] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1908.462949][T20297] usb 2-1: Manufacturer: syz
01:54:56 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1908.577587][T20297] usb 2-1: config 0 descriptor??
[ 1911.763829][T20297] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1911.772696][T20297] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input224
[ 1911.797375][T20297] input: failed to attach handler kbd to device input224, error: -5
[ 1911.974392][T20297] usb 2-1: USB disconnect, device number 100
01:55:00 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180), 0x0, 0x0})

01:55:00 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:00 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]})

01:55:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000400), 0xc)

01:55:00 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:00 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
socket(0x0, 0x6, 0x0)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1912.749181][   T28] audit: type=1326 audit(1596851700.407:153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f03549 code=0x0
01:55:00 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000001c0), &(0x7f0000000240)=0x8)

01:55:00 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1913.373771][ T3219] usb 2-1: new high-speed USB device number 101 using dummy_hcd
01:55:01 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:01 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
sendmsg(r0, &(0x7f00000019c0)={&(0x7f00000017c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001800)="c3", 0x1}], 0x1, &(0x7f0000001900)=[{0xfffffffffffffdcd}], 0x10}, 0x0)

01:55:01 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1913.744741][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1913.834721][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1913.844213][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1913.852353][ T3219] usb 2-1: Manufacturer: syz
[ 1913.974552][ T3219] usb 2-1: config 0 descriptor??
[ 1917.153871][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1917.162747][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input225
[ 1917.183843][ T3219] input: failed to attach handler kbd to device input225, error: -5
[ 1917.365371][T20297] usb 2-1: USB disconnect, device number 101
01:55:05 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180), 0x0, 0x0})

01:55:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]})

01:55:05 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:05 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:05 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:05 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@in6={0x0, 0x1c}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000040)="57531c088862e9426b5fc537b2b865e47c15c7b639157f6d20d09d0a098fe278a450433f84118250c459776e54aba23061aadb04b64012866ebd0ec3c5440de9231c486528252193e98c13ca5f502974173b1ebe1c0d1103f98aeab12637981b6ed78750ce1e0706e9eeed05e4089cbccfd457b4e5c29d462ac2f13c3153fa586015147b753bc4328619bddd25627469b8f52072837beba2e812ed3bbcb056ef20d18c92ffa0fad7ef"}], 0x1, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, "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"}], 0x20}, 0x100)

[ 1918.161734][   T28] audit: type=1326 audit(1596851705.817:154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4328 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f03549 code=0x0
01:55:06 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:06 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:06 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x18, &(0x7f0000000140), 0x4)

[ 1918.607021][T20297] usb 2-1: new high-speed USB device number 102 using dummy_hcd
01:55:06 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1918.985143][T20297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
01:55:06 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]})

[ 1919.082170][T20297] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1919.091593][T20297] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1919.099934][T20297] usb 2-1: Manufacturer: syz
01:55:06 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@dev}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[ 1919.221205][T20297] usb 2-1: config 0 descriptor??
[ 1919.601136][   T28] audit: type=1326 audit(1596851707.257:155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4371 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f03549 code=0x0
[ 1922.404087][T20297] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1922.413142][T20297] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input226
[ 1922.424333][T20297] input: failed to attach handler kbd to device input226, error: -5
[ 1922.610698][T20581] usb 2-1: USB disconnect, device number 102
01:55:10 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180)={0x0, 0x0, 0x2, "d857"}, 0x0, 0x0})

01:55:10 executing program 5:

01:55:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:10 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:10 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:10 executing program 4:

01:55:11 executing program 4:

01:55:11 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:11 executing program 5:

01:55:11 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1923.893935][ T9046] usb 2-1: new high-speed USB device number 103 using dummy_hcd
01:55:11 executing program 5:

01:55:11 executing program 4:

[ 1924.274768][ T9046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1924.387591][ T9046] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1924.396980][ T9046] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1924.405347][ T9046] usb 2-1: Manufacturer: syz
[ 1924.475051][ T9046] usb 2-1: config 0 descriptor??
[ 1927.633979][ T9046] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1927.643329][ T9046] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input227
[ 1927.657175][ T9046] input: failed to attach handler kbd to device input227, error: -5
[ 1927.852212][T27072] usb 2-1: USB disconnect, device number 103
01:55:16 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180)={0x0, 0x0, 0x2, "d857"}, 0x0, 0x0})

01:55:16 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:16 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:16 executing program 5:

01:55:16 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:16 executing program 4:

01:55:16 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:16 executing program 4:

01:55:16 executing program 5:

01:55:16 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1929.124240][T27072] usb 2-1: new high-speed USB device number 104 using dummy_hcd
01:55:16 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:17 executing program 4:

[ 1929.500117][T27072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1929.590515][T27072] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1929.599793][T27072] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1929.608065][T27072] usb 2-1: Manufacturer: syz
[ 1929.675816][T27072] usb 2-1: config 0 descriptor??
[ 1932.834126][T27072] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1932.843035][T27072] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input228
[ 1932.853865][T27072] input: failed to attach handler kbd to device input228, error: -5
[ 1933.047481][T27072] usb 2-1: USB disconnect, device number 104
01:55:21 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003141ec40ca082200004e0400000109021b000100000000090400000121e70d0009050d"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x3, "f654d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)=ANY=[@ANYBLOB="003903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "c2cbae"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "48016c"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180)={0x0, 0x0, 0x2, "d857"}, 0x0, 0x0})

01:55:21 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:21 executing program 5:

01:55:21 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:21 executing program 4:

01:55:21 executing program 0:
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

01:55:21 executing program 5:

01:55:21 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:21 executing program 4:

01:55:21 executing program 0:

[ 1934.344139][ T3219] usb 2-1: new high-speed USB device number 105 using dummy_hcd
01:55:22 executing program 5:

01:55:22 executing program 4:

[ 1934.735331][ T3219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1934.825365][ T3219] usb 2-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=4e.00
[ 1934.834793][ T3219] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1934.842945][ T3219] usb 2-1: Manufacturer: syz
[ 1934.948885][ T3219] usb 2-1: config 0 descriptor??
[ 1938.154202][ T3219] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1938.163230][ T3219] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input229
[ 1938.200362][ T3219] input: failed to attach handler kbd to device input229, error: -5
[ 1938.358589][T20297] usb 2-1: USB disconnect, device number 105
01:55:26 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
fcntl$getflags(r1, 0x0)

01:55:26 executing program 2:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:26 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5421, 0x8093d3)

01:55:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x5450, 0x0)

01:55:26 executing program 2:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:27 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8902, 0x71dffc)

01:55:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0)

01:55:27 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:27 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040), 0x657, 0xfeffffff)

01:55:27 executing program 5:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xd000}])

01:55:27 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000038c0)=""/180, 0xb4}], 0x1)
inotify_rm_watch(r0, r1)

01:55:27 executing program 2:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020100000000000000010000040000000200000000020000000b000000003000e299680032870b80ebcc6536a877536e1c01c6ee9661032bc6949cb297b80a25a129d7ee5b12e7b1297584b27c6ab8f24b74cd924019aca3b80333abb3b9c4cb95cfcf4f1c3425a1a97b82c1f7dde00046256e1b0a321f679d2a0bbb13ccef4a5b48b655461e366d640f91"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socket$inet(0x2, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
tkill(0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

01:55:27 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:27 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:28 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:28 executing program 5:
r0 = socket(0x840000000002, 0x3, 0x200000000000ff)
sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002f80)="1f2728e710591174c55180b1d9d3a3b5edd5c1bb", 0x14}], 0x1, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010)

01:55:28 executing program 1:
ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x1, &(0x7f0000000240)=' '})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a904000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])

[ 1940.462218][ T4574] BPF:	(anon) type_id=2 bits_offset=11
[ 1940.468178][ T4574] BPF: 
[ 1940.470999][ T4574] BPF:Member is not byte aligned
[ 1940.476183][ T4574] BPF:
[ 1940.476183][ T4574] 
[ 1940.538834][ T4579] BPF:	(anon) type_id=2 bits_offset=11
[ 1940.544577][ T4579] BPF: 
[ 1940.547413][ T4579] BPF:Member is not byte aligned
[ 1940.552408][ T4579] BPF:
[ 1940.552408][ T4579] 
01:55:28 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
getpid()
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000580)="c40262f5c10f01d10f78408dc4e18dfaeb64430f7817c4a3e15dec00b805000000b90a0000000f01d9660fc731b9800000c00f3235000800000f3048b80a000000000000000f23c80f21f835040010000f23f8", 0x53}], 0x1d, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[ 1940.842841][ T4588] kvm [4582]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:28 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x0, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1941.037478][ T4598] EXT4-fs (loop1): bad block size 16384
[ 1941.308948][ T4588] kvm [4582]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f00000001c0)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0xfdef)

01:55:29 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1941.432897][ T4588] kvm [4582]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:29 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x0, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:29 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fallocate(r0, 0x11, 0x0, 0x100007e00)

01:55:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
inotify_init1(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
tkill(0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

01:55:29 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1942.011181][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1942.019068][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1942.137065][ T4631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
01:55:29 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1942.195870][ T4639] BPF:	(anon) type_id=2 bits_offset=11
[ 1942.201667][ T4639] BPF: 
[ 1942.206560][ T4639] BPF:Member is not byte aligned
[ 1942.211678][ T4639] BPF:
[ 1942.211678][ T4639] 
01:55:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x5412, 0x2000000000000)

01:55:30 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x0, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1942.441020][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1942.549240][ T4637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1942.602398][ T4640] BPF:	(anon) type_id=2 bits_offset=11
[ 1942.608258][ T4640] BPF: 
[ 1942.611111][ T4640] BPF:Member is not byte aligned
[ 1942.616384][ T4640] BPF:
[ 1942.616384][ T4640] 
01:55:30 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x3, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:55:30 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94000000010101020000000000000000000000000c0019800800020000050000740002"], 0x94}}, 0x0)

01:55:30 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:30 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:31 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x3f)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = gettid()
sendmmsg$unix(r3, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0)
close(r0)
close(r1)

[ 1943.440034][ T4679] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'.
01:55:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1a0, 0x0, 0x0, 0x280, 0x280, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x7a]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_macvtap\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@loopback, @private0, [], [], 'veth1_to_hsr\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@local, @private2, [], [], 'macsec0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

01:55:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1943.766911][ T4682] kvm [4677]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1944.047596][ T4682] kvm [4677]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:31 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1944.201733][ T4682] kvm [4677]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:32 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1944.341299][ T4682] kvm [4677]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:55:32 executing program 4:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2088611, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0)

01:55:32 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:55:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:32 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:32 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:32 executing program 4:

[ 1945.084835][ T9046] usb 6-1: new high-speed USB device number 57 using dummy_hcd
01:55:32 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1945.258566][ T4719] kvm [4717]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1945.402084][ T4719] kvm [4717]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:33 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1945.444762][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1945.456393][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1945.466562][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1945.475846][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1945.516753][ T4719] kvm [4717]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:33 executing program 4:

[ 1945.661486][ T9046] usb 6-1: config 0 descriptor??
[ 1946.004399][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 1946.010855][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
01:55:33 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1946.081872][ T9046] usb 6-1: USB disconnect, device number 57
01:55:33 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1946.693956][ T9046] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1947.054765][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1947.066609][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1947.076753][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1947.086099][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.135042][ T9046] usb 6-1: config 0 descriptor??
[ 1947.227902][    T0] NOHZ: local_softirq_pending 08
[ 1947.596674][ T4709] udc-core: couldn't find an available UDC or it's busy
[ 1947.603958][ T4709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1947.640563][ T9046] kye 0003:0458:5019.0018: unknown main item tag 0x0
[ 1947.647800][ T9046] kye 0003:0458:5019.0018: unknown main item tag 0x0
[ 1947.655109][ T9046] kye 0003:0458:5019.0018: unknown main item tag 0x0
[ 1947.662052][ T9046] kye 0003:0458:5019.0018: unknown main item tag 0x0
[ 1947.669124][ T9046] kye 0003:0458:5019.0018: unknown main item tag 0x0
[ 1947.681607][ T9046] kye 0003:0458:5019.0018: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1947.692912][ T9046] kye 0003:0458:5019.0018: tablet-enabling feature report not found
[ 1947.701529][ T9046] kye 0003:0458:5019.0018: tablet enabling failed
[ 1947.844687][ T8699] usb 6-1: USB disconnect, device number 58
[ 1948.627691][T27072] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1949.004524][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1949.016367][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1949.026511][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1949.035784][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1949.176643][T27072] usb 6-1: config 0 descriptor??
01:55:37 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:37 executing program 4:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4092, 0xc462, 0x0, 0x0, 0xf4acd1e9c4fa5544)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000002240)="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", 0x824, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180), 0x4)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1e6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100)

01:55:37 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:37 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:37 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1949.376933][T27072] usb 6-1: can't set config #0, error -71
[ 1949.433221][T27072] usb 6-1: USB disconnect, device number 59
[ 1949.600899][ T4803] IPVS: ftp: loaded support on port[0] = 21
[ 1949.662332][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1949.672531][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1949.738138][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1949.771941][ T4815] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1949.782034][ T4815] device lo entered promiscuous mode
[ 1949.791540][ T4815] device tunl0 entered promiscuous mode
[ 1949.799720][ T4815] device gre0 entered promiscuous mode
[ 1949.808101][ T4815] device gretap0 entered promiscuous mode
[ 1949.816675][ T4815] device erspan0 entered promiscuous mode
[ 1949.825765][ T4815] device ip_vti0 entered promiscuous mode
[ 1949.834642][ T4815] device ip6_vti0 entered promiscuous mode
[ 1949.842937][ T4815] device sit0 entered promiscuous mode
[ 1949.852369][ T4815] device ip6tnl0 entered promiscuous mode
[ 1949.861359][ T4815] device ip6gre0 entered promiscuous mode
[ 1949.870536][ T4815] device syz_tun entered promiscuous mode
[ 1949.879458][ T4815] device ip6gretap0 entered promiscuous mode
[ 1949.888840][ T4815] device bridge0 entered promiscuous mode
[ 1949.897544][ T4815] device vcan0 entered promiscuous mode
[ 1949.904113][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1949.911851][ T4815] device bond0 entered promiscuous mode
[ 1949.918218][ T4815] device bond_slave_0 entered promiscuous mode
[ 1949.926296][ T4815] device bond_slave_1 entered promiscuous mode
[ 1949.936771][ T4815] device team0 entered promiscuous mode
[ 1949.942374][ T4815] device team_slave_0 entered promiscuous mode
[ 1949.949322][ T4815] device team_slave_1 entered promiscuous mode
[ 1949.959350][ T4815] device dummy0 entered promiscuous mode
[ 1949.967421][ T4815] device nlmon0 entered promiscuous mode
01:55:37 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:37 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:37 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1950.398153][ T4824] IPVS: ftp: loaded support on port[0] = 21
01:55:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1950.624153][ T8699] usb 6-1: new high-speed USB device number 60 using dummy_hcd
01:55:38 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:38 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1951.014859][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1951.026279][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1951.036421][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1951.045699][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1951.139703][ T4815] device caif0 entered promiscuous mode
[ 1951.145895][ T4815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
01:55:39 executing program 1:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1951.303115][ T8699] usb 6-1: config 0 descriptor??
[ 1951.654099][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 1951.660718][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 1951.747343][ T8699] usb 6-1: USB disconnect, device number 60
[ 1952.374304][ T8699] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1952.744456][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1952.755929][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1952.766102][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1952.775365][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1952.831363][ T8699] usb 6-1: config 0 descriptor??
01:55:40 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:40 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:40 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:40 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1953.309029][ T4822] udc-core: couldn't find an available UDC or it's busy
[ 1953.316484][ T4822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1953.399526][ T8699] kye 0003:0458:5019.0019: unknown main item tag 0x0
[ 1953.406831][ T8699] kye 0003:0458:5019.0019: unknown main item tag 0x0
[ 1953.413920][ T8699] kye 0003:0458:5019.0019: unknown main item tag 0x0
[ 1953.421507][ T8699] kye 0003:0458:5019.0019: unknown main item tag 0x0
[ 1953.428558][ T8699] kye 0003:0458:5019.0019: unknown main item tag 0x0
[ 1953.629371][ T4867] kvm_set_msr_common: 2 callbacks suppressed
[ 1953.629425][ T4867] kvm [4864]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1953.699175][ T8699] kye 0003:0458:5019.0019: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1953.711071][ T8699] kye 0003:0458:5019.0019: tablet-enabling feature report not found
[ 1953.719502][ T8699] kye 0003:0458:5019.0019: tablet enabling failed
[ 1953.817094][ T4867] kvm [4864]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1953.945046][ T8699] usb 6-1: USB disconnect, device number 61
[ 1954.046088][ T4867] kvm [4864]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:55:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:55:42 executing program 1:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:42 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:42 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:42 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:42 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1954.815013][ T4897] kvm [4894]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:42 executing program 1:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:42 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:42 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1955.001641][ T4897] kvm [4894]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1955.227429][ T4897] kvm [4894]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 1955.264760][ T8699] usb 6-1: new high-speed USB device number 62 using dummy_hcd
01:55:43 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:43 executing program 1:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:43 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1955.654767][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1955.666170][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1955.676312][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1955.686334][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1955.818991][ T8699] usb 6-1: config 0 descriptor??
[ 1956.177526][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 1956.188620][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 1956.229471][ T8699] usb 6-1: USB disconnect, device number 62
[ 1956.866810][ T8699] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1957.234541][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1957.246026][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1957.256120][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1957.265411][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1957.488258][ T8699] usb 6-1: config 0 descriptor??
[ 1957.957289][ T4904] udc-core: couldn't find an available UDC or it's busy
[ 1957.964579][ T4904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1958.089214][ T8699] kye 0003:0458:5019.001A: unknown main item tag 0x0
[ 1958.097286][ T8699] kye 0003:0458:5019.001A: unknown main item tag 0x0
[ 1958.104422][ T8699] kye 0003:0458:5019.001A: unknown main item tag 0x0
[ 1958.111366][ T8699] kye 0003:0458:5019.001A: unknown main item tag 0x0
[ 1958.118404][ T8699] kye 0003:0458:5019.001A: unknown main item tag 0x0
[ 1958.278175][ T8699] kye 0003:0458:5019.001A: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1958.289440][ T8699] kye 0003:0458:5019.001A: tablet-enabling feature report not found
[ 1958.298048][ T8699] kye 0003:0458:5019.001A: tablet enabling failed
[ 1958.501002][ T8699] usb 6-1: USB disconnect, device number 63
01:55:46 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:55:46 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:46 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:46 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:46 executing program 1:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1959.165640][ T4959] kvm [4954]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:55:47 executing program 1:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:47 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000), 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:47 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1959.369566][ T4959] kvm [4954]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1959.563848][ T4959] kvm [4954]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 1959.703724][T20297] usb 6-1: new high-speed USB device number 64 using dummy_hcd
01:55:47 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:47 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:47 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000), 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1960.075317][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1960.086744][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1960.096896][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1960.106172][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:55:47 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1960.289143][T20297] usb 6-1: config 0 descriptor??
[ 1960.634195][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1960.640698][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1960.706997][T20297] usb 6-1: USB disconnect, device number 64
[ 1961.363698][T20297] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1961.724952][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1961.736373][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1961.746451][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1961.755724][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1961.806066][T20297] usb 6-1: config 0 descriptor??
[ 1962.266278][ T4971] udc-core: couldn't find an available UDC or it's busy
[ 1962.273375][ T4971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1962.370360][T20297] kye 0003:0458:5019.001B: unknown main item tag 0x0
[ 1962.378048][T20297] kye 0003:0458:5019.001B: unknown main item tag 0x0
[ 1962.385198][T20297] kye 0003:0458:5019.001B: unknown main item tag 0x0
[ 1962.392139][T20297] kye 0003:0458:5019.001B: unknown main item tag 0x0
[ 1962.399686][T20297] kye 0003:0458:5019.001B: unknown main item tag 0x0
[ 1962.631603][T20297] kye 0003:0458:5019.001B: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1962.642820][T20297] kye 0003:0458:5019.001B: tablet-enabling feature report not found
[ 1962.651225][T20297] kye 0003:0458:5019.001B: tablet enabling failed
[ 1962.811431][T20297] usb 6-1: USB disconnect, device number 65
01:55:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

01:55:50 executing program 4:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:50 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

01:55:50 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:50 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000), 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:50 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:51 executing program 4:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:51 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

01:55:51 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820f", 0x8c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1963.624031][T20297] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1963.994736][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1964.006273][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1964.016437][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1964.025803][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:55:51 executing program 4:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:51 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820f", 0x8c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:51 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

[ 1964.302539][T20297] usb 6-1: config 0 descriptor??
[ 1964.644136][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1964.650584][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1964.686905][T20297] usb 6-1: USB disconnect, device number 66
[ 1965.227205][T20581] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1965.637537][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1965.648916][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1965.659671][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1965.669439][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1965.699057][T20581] usb 6-1: config 0 descriptor??
[ 1966.157277][ T5036] udc-core: couldn't find an available UDC or it's busy
[ 1966.164835][ T5036] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1966.264390][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 1966.270822][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 1966.345953][T20581] usb 6-1: USB disconnect, device number 67
01:55:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

01:55:54 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:54 executing program 4:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:54 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:54 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820f", 0x8c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:54 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:55:54 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:55:54 executing program 4:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:54 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c1", 0xd2)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1967.554011][T20297] usb 6-1: new high-speed USB device number 68 using dummy_hcd
01:55:55 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:55:55 executing program 4:
socket$inet6(0x10, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:55:55 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c1", 0xd2)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1967.914432][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1967.925851][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1967.935961][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1967.945387][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1968.069677][T20297] usb 6-1: config 0 descriptor??
[ 1968.414744][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1968.421188][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1968.460152][T20297] usb 6-1: USB disconnect, device number 68
[ 1968.993890][T20581] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1969.354995][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1969.367427][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1969.378596][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1969.387910][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1969.424401][T20581] usb 6-1: config 0 descriptor??
[ 1969.898393][ T5102] udc-core: couldn't find an available UDC or it's busy
[ 1969.906615][ T5102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1970.015129][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 1970.021747][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 1970.071030][T20581] usb 6-1: USB disconnect, device number 69
01:55:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

01:55:58 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:55:58 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

01:55:58 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

01:55:58 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:55:58 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c1", 0xd2)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:58 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

01:55:58 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

01:55:58 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4", 0xf5)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:55:58 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1971.204229][T20297] usb 6-1: new high-speed USB device number 70 using dummy_hcd
01:55:59 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

01:55:59 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

[ 1971.584574][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1971.597277][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1971.607365][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1971.616629][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1971.811330][T20297] usb 6-1: config 0 descriptor??
[ 1972.155054][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1972.161493][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1972.186574][T20297] usb 6-1: USB disconnect, device number 70
[ 1972.748398][T20297] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1973.155010][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1973.166666][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1973.176775][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1973.186067][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1973.366417][T20297] usb 6-1: config 0 descriptor??
[ 1973.827238][ T5165] udc-core: couldn't find an available UDC or it's busy
[ 1973.834409][ T5165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1973.924315][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1973.930612][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1973.945056][T20297] usb 6-1: USB disconnect, device number 71
01:56:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:02 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4", 0xf5)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:02 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:02 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:02 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:56:02 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

01:56:02 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4", 0xf5)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:02 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:56:02 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

01:56:02 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1975.153797][T20297] usb 6-1: new high-speed USB device number 72 using dummy_hcd
01:56:02 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

01:56:03 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x107)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1975.547888][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1975.559326][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1975.569678][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1975.578987][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1975.648910][T20297] usb 6-1: config 0 descriptor??
[ 1976.040214][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1976.046759][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1976.093299][T20297] usb 6-1: USB disconnect, device number 72
[ 1976.684558][T20297] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1977.044593][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1977.056090][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1977.066402][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1977.075657][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1977.139206][T20297] usb 6-1: config 0 descriptor??
[ 1977.617943][ T5232] udc-core: couldn't find an available UDC or it's busy
[ 1977.625519][ T5232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1977.671257][T20297] kye 0003:0458:5019.001C: unknown main item tag 0x0
[ 1977.678693][T20297] kye 0003:0458:5019.001C: unknown main item tag 0x0
[ 1977.685798][T20297] kye 0003:0458:5019.001C: unknown main item tag 0x0
[ 1977.692743][T20297] kye 0003:0458:5019.001C: unknown main item tag 0x0
[ 1977.699825][T20297] kye 0003:0458:5019.001C: unknown main item tag 0x0
[ 1977.734657][T20297] kye 0003:0458:5019.001C: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1977.745937][T20297] kye 0003:0458:5019.001C: tablet-enabling feature report not found
[ 1977.754256][T20297] kye 0003:0458:5019.001C: tablet enabling failed
[ 1977.878504][T20297] usb 6-1: USB disconnect, device number 73
01:56:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:06 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:06 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

01:56:06 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:06 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x107)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:06 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

01:56:06 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

01:56:06 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x107)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:06 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

01:56:06 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1979.174298][T27072] usb 6-1: new high-speed USB device number 74 using dummy_hcd
01:56:07 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

01:56:07 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}], 0x1}, 0x0)

[ 1979.534793][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1979.546261][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1979.556416][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1979.565729][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1979.696273][T27072] usb 6-1: config 0 descriptor??
[ 1980.035137][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 1980.041618][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 1980.073173][T27072] usb 6-1: USB disconnect, device number 74
[ 1980.626901][T20297] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1981.044378][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1981.055766][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1981.065867][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1981.075164][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1981.256225][T20297] usb 6-1: config 0 descriptor??
[ 1981.729314][ T5302] udc-core: couldn't find an available UDC or it's busy
[ 1981.736976][ T5302] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1981.829612][T20297] kye 0003:0458:5019.001D: unknown main item tag 0x0
[ 1981.837486][T20297] kye 0003:0458:5019.001D: unknown main item tag 0x0
[ 1981.844626][T20297] kye 0003:0458:5019.001D: unknown main item tag 0x0
[ 1981.851573][T20297] kye 0003:0458:5019.001D: unknown main item tag 0x0
[ 1981.858675][T20297] kye 0003:0458:5019.001D: unknown main item tag 0x0
[ 1981.905975][T20297] kye 0003:0458:5019.001D: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1981.917180][T20297] kye 0003:0458:5019.001D: tablet-enabling feature report not found
[ 1981.926172][T20297] kye 0003:0458:5019.001D: tablet enabling failed
[ 1982.031997][ T9602] usb 6-1: USB disconnect, device number 75
01:56:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000"], 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:10 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a5", 0x110)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:10 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:10 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

01:56:10 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

01:56:10 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x110)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:10 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

01:56:10 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:10 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1983.296784][ T9602] usb 6-1: new high-speed USB device number 76 using dummy_hcd
01:56:11 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:11 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {0x0}], 0x2}, 0x0)

[ 1983.664901][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1983.676408][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1983.687027][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1983.696307][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1983.908717][ T9602] usb 6-1: config 0 descriptor??
[ 1984.254202][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 1984.260401][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 1984.290608][ T9602] usb 6-1: USB disconnect, device number 76
[ 1984.834285][ T9602] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1985.194852][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1985.206113][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1985.216208][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1985.225578][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1985.244210][ T9602] usb 6-1: config 0 descriptor??
[ 1985.706606][ T5378] udc-core: couldn't find an available UDC or it's busy
[ 1985.714123][ T5378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1985.770632][ T9602] kye 0003:0458:5019.001E: unknown main item tag 0x0
[ 1985.778154][ T9602] kye 0003:0458:5019.001E: unknown main item tag 0x0
[ 1985.785298][ T9602] kye 0003:0458:5019.001E: unknown main item tag 0x0
[ 1985.792285][ T9602] kye 0003:0458:5019.001E: unknown main item tag 0x0
[ 1985.799422][ T9602] kye 0003:0458:5019.001E: unknown main item tag 0x0
[ 1985.936451][ T9602] kye 0003:0458:5019.001E: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1985.947715][ T9602] kye 0003:0458:5019.001E: tablet-enabling feature report not found
[ 1985.956137][ T9602] kye 0003:0458:5019.001E: tablet enabling failed
[ 1986.062635][ T9602] usb 6-1: USB disconnect, device number 77
01:56:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:14 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x110)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:14 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:14 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:14 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

01:56:14 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:14 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0", 0x114)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:14 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

01:56:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1987.277211][ T9602] usb 6-1: new high-speed USB device number 78 using dummy_hcd
01:56:15 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:15 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)}], 0x2}, 0x0)

[ 1987.645827][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1987.657341][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1987.667464][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1987.676746][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1987.757425][ T9602] usb 6-1: config 0 descriptor??
[ 1988.094262][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 1988.100716][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 1988.132044][ T9602] usb 6-1: USB disconnect, device number 78
[ 1988.686300][ T9602] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1989.054603][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1989.065973][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1989.076249][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1989.085595][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1989.248496][ T9602] usb 6-1: config 0 descriptor??
[ 1989.774441][ T9602] kye 0003:0458:5019.001F: unknown main item tag 0x0
[ 1989.781431][ T9602] kye 0003:0458:5019.001F: unknown main item tag 0x0
[ 1989.788964][ T9602] kye 0003:0458:5019.001F: unknown main item tag 0x0
[ 1989.796123][ T9602] kye 0003:0458:5019.001F: unknown main item tag 0x0
[ 1989.803071][ T9602] kye 0003:0458:5019.001F: unknown main item tag 0x0
[ 1989.847656][ T9602] kye 0003:0458:5019.001F: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 1989.858938][ T9602] kye 0003:0458:5019.001F: tablet-enabling feature report not found
[ 1989.867390][ T9602] kye 0003:0458:5019.001F: tablet enabling failed
[ 1989.929762][T20297] usb 6-1: USB disconnect, device number 79
01:56:18 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:18 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x114)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:18 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:18 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:18 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:56:18 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:18 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

01:56:18 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:18 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:56:18 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x114)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1991.243819][T20297] usb 6-1: new high-speed USB device number 80 using dummy_hcd
01:56:19 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="73025000010011", 0x7}], 0x2}, 0x0)

01:56:19 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

[ 1991.626119][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1991.637521][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1991.647629][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1991.656926][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1991.808301][T20297] usb 6-1: config 0 descriptor??
[ 1992.158567][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1992.165079][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1992.180507][T20297] usb 6-1: USB disconnect, device number 80
[ 1992.743995][T20297] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1993.104535][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1993.115982][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1993.126123][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1993.135631][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1993.277838][T20297] usb 6-1: config 0 descriptor??
[ 1993.837829][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1993.844385][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1993.874717][T20297] usb 6-1: USB disconnect, device number 81
01:56:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:21 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:21 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:21 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x116)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:21 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:21 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

01:56:22 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:22 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

01:56:22 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x116)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:22 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1995.083845][T20297] usb 6-1: new high-speed USB device number 82 using dummy_hcd
01:56:22 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

01:56:23 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x116)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1995.464205][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1995.475829][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1995.485962][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1995.495231][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1995.664514][T20297] usb 6-1: config 0 descriptor??
[ 1996.014554][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 1996.021000][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 1996.057607][T20297] usb 6-1: USB disconnect, device number 82
[ 1996.593974][T27072] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1996.954002][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1996.965467][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1996.975655][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1996.985037][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1997.024897][T27072] usb 6-1: config 0 descriptor??
[ 1997.564180][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 1997.570595][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 1997.634211][T27072] usb 6-1: USB disconnect, device number 83
01:56:25 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:25 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae5", 0xa}], 0x2}, 0x0)

01:56:25 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:25 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e38", 0x117)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:25 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

01:56:25 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1998.272567][ T5655] not chained 30000 origins
[ 1998.277141][ T5655] CPU: 0 PID: 5655 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0
[ 1998.280703][ T5652] kvm [5649]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 1998.286604][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1998.286614][ T5655] Call Trace:
[ 1998.286655][ T5655]  dump_stack+0x21c/0x280
[ 1998.286685][ T5655]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1998.286719][ T5655]  kmsan_internal_chain_origin+0x6f/0x130
[ 1998.286748][ T5655]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[ 1998.286777][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.286804][ T5655]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1998.286869][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.346925][ T5655]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1998.352759][ T5655]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1998.358845][ T5655]  ? unix_dgram_sendmsg+0x355e/0x4390
[ 1998.364244][ T5655]  ? kmsan_get_metadata+0x116/0x180
01:56:26 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 1998.369464][ T5655]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1998.375033][ T5655]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1998.381131][ T5655]  ? _copy_from_user+0x201/0x310
[ 1998.386275][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.391492][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.396458][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.402145][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.407126][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.411862][ T5655]  ? kmsan_internal_check_memory+0xb1/0x3d0
[ 1998.417779][ T5655]  ? __msan_poison_alloca+0xf0/0x120
01:56:26 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x117)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 1998.423103][ T5655]  ? kmsan_copy_to_user+0x81/0x90
[ 1998.428149][ T5655]  ? _copy_to_user+0x1bf/0x260
[ 1998.432975][ T5655]  ? put_old_timespec32+0x231/0x2d0
[ 1998.438205][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.443432][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.448656][ T5655]  ? kmsan_get_metadata+0x116/0x180
[ 1998.453879][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.459283][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.464861][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.470107][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.474979][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.479498][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.485832][ T5655] RIP: 0023:0xf7f01549
[ 1998.489909][ T5655] Code: Bad RIP value.
[ 1998.493979][ T5655] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[ 1998.502415][ T5655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001e00
[ 1998.510392][ T5655] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000000
[ 1998.518366][ T5655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1998.526344][ T5655] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1998.534331][ T5655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1998.542326][ T5655] Uninit was stored to memory at:
[ 1998.547363][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.553124][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.558098][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.563214][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.568156][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.572842][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.578220][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.583771][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.588980][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.593839][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.598353][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.604757][ T5655] 
[ 1998.607092][ T5655] Uninit was stored to memory at:
[ 1998.612147][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.617880][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.622826][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.627945][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.632901][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.637617][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.643027][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.648590][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.653800][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.658659][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.663174][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.669497][ T5655] 
[ 1998.671825][ T5655] Uninit was stored to memory at:
[ 1998.676866][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.682606][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.687554][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.692692][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.697640][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.702323][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.707708][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.713270][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.718483][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.723336][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.727847][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.734167][ T5655] 
[ 1998.736492][ T5655] Uninit was stored to memory at:
[ 1998.741523][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.747265][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.752211][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.757326][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.762275][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.766964][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.772361][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.777929][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.783134][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.787997][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.792505][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.798831][ T5655] 
[ 1998.801162][ T5655] Uninit was stored to memory at:
[ 1998.806200][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.811925][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.816869][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.821984][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.826925][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.831610][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.837004][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.842555][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.847773][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.852632][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.857143][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.863467][ T5655] 
[ 1998.865795][ T5655] Uninit was stored to memory at:
[ 1998.870841][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.876567][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.881509][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.886627][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.891572][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.896253][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.901630][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.907187][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.912393][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.917247][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.921756][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.928073][ T5655] 
[ 1998.930400][ T5655] Uninit was stored to memory at:
[ 1998.935433][ T5655]  kmsan_internal_chain_origin+0xad/0x130
[ 1998.941155][ T5655]  __msan_chain_origin+0x50/0x90
[ 1998.946102][ T5655]  __get_compat_msghdr+0x6db/0x9d0
[ 1998.951217][ T5655]  get_compat_msghdr+0x108/0x2b0
[ 1998.956179][ T5655]  __sys_sendmmsg+0x755/0xf70
[ 1998.961824][ T5655]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 1998.967204][ T5655]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 1998.972757][ T5655]  __do_fast_syscall_32+0x2af/0x480
[ 1998.977963][ T5655]  do_fast_syscall_32+0x6b/0xd0
[ 1998.982818][ T5655]  do_SYSENTER_32+0x73/0x90
[ 1998.987348][ T5655]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1998.993665][ T5655] 
[ 1998.995999][ T5655] Local variable ----msg_sys@__sys_sendmmsg created at:
[ 1999.002947][ T5655]  __sys_sendmmsg+0xbb/0xf70
[ 1999.007547][ T5655]  __sys_sendmmsg+0xbb/0xf70
01:56:26 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

01:56:27 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1999.583975][T27072] usb 6-1: new high-speed USB device number 84 using dummy_hcd
01:56:27 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e38", 0x117)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:27 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

[ 1999.944567][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1999.957595][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1999.968380][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 1999.977705][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2000.178529][T27072] usb 6-1: config 0 descriptor??
[ 2000.528543][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2000.535248][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2000.581371][T27072] usb 6-1: USB disconnect, device number 84
[ 2001.224288][T27072] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2001.584292][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2001.595731][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2001.606238][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2001.615645][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.649640][T27072] usb 6-1: config 0 descriptor??
[ 2002.194068][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2002.200548][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2002.282820][T27072] usb 6-1: USB disconnect, device number 85
01:56:30 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:30 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:30 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f00000000c0)="7302500001001169eae54a51", 0xc}], 0x2}, 0x0)

01:56:30 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:30 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:30 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:30 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:30 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:30 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

[ 2003.376264][T27072] usb 6-1: new high-speed USB device number 86 using dummy_hcd
01:56:31 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2003.744591][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2003.756110][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2003.766330][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2003.775626][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:56:31 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:31 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

01:56:31 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2004.013285][T27072] usb 6-1: config 0 descriptor??
01:56:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:32 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2004.355249][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2004.361750][T27072] usbhid: probe of 6-1:0.0 failed with error -71
01:56:32 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2004.431728][T27072] usb 6-1: USB disconnect, device number 86
01:56:32 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:32 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x1}, 0x0)

01:56:32 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:32 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

01:56:32 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

01:56:33 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:33 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:33 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2006.053918][ T8699] usb 6-1: new high-speed USB device number 87 using dummy_hcd
01:56:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:56:34 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2006.416292][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2006.428187][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2006.439291][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2006.448607][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2006.628730][ T8699] usb 6-1: config 0 descriptor??
[ 2006.984035][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 2006.990465][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 2007.027484][ T8699] usb 6-1: USB disconnect, device number 87
01:56:35 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:35 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:35 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:35 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:35 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:35 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:56:35 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:35 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:35 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:36 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2008.583814][ T3219] usb 6-1: new high-speed USB device number 88 using dummy_hcd
01:56:36 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:36 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2008.977820][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2008.989263][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2008.999488][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2009.008796][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2009.092822][ T3219] usb 6-1: config 0 descriptor??
[ 2009.443993][ T3219] usbhid 6-1:0.0: can't add hid device: -71
[ 2009.450250][ T3219] usbhid: probe of 6-1:0.0 failed with error -71
[ 2009.477574][ T3219] usb 6-1: USB disconnect, device number 88
01:56:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:38 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:38 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:38 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2010.737811][ T5869] kvm [5863]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:56:38 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:38 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:38 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2011.136434][T27072] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 2011.504631][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2011.516141][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2011.527376][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2011.536785][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:56:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:39 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:39 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2011.856421][T27072] usb 6-1: config 0 descriptor??
[ 2012.133047][ T5894] kvm [5892]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2012.184397][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2012.191110][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2012.261315][T27072] usb 6-1: USB disconnect, device number 89
[ 2012.708687][T27072] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 2013.074221][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2013.085733][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2013.096077][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2013.105407][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2013.151529][T27072] usb 6-1: config 0 descriptor??
[ 2013.639729][T27072] kye 0003:0458:5019.0020: unknown main item tag 0x0
[ 2013.646817][T27072] kye 0003:0458:5019.0020: unknown main item tag 0x0
[ 2013.654006][T27072] kye 0003:0458:5019.0020: unknown main item tag 0x0
[ 2013.660964][T27072] kye 0003:0458:5019.0020: unknown main item tag 0x0
[ 2013.668055][T27072] kye 0003:0458:5019.0020: unknown main item tag 0x0
[ 2013.848627][T27072] kye 0003:0458:5019.0020: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 2013.860725][T27072] kye 0003:0458:5019.0020: tablet-enabling feature report not found
[ 2013.869158][T27072] kye 0003:0458:5019.0020: tablet enabling failed
[ 2014.078879][T27072] usb 6-1: USB disconnect, device number 90
01:56:42 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:42 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:42 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:42 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:42 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2014.835164][ T5932] kvm [5929]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:56:42 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:42 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:42 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2015.414533][ T8699] usb 6-1: new high-speed USB device number 91 using dummy_hcd
01:56:43 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:43 executing program 0:
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:43 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c02", 0x24}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2015.777615][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2015.789499][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2015.799638][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2015.808985][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2016.002454][ T8699] usb 6-1: config 0 descriptor??
[ 2016.247499][ T5942] udc-core: couldn't find an available UDC or it's busy
[ 2016.254733][ T5942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2016.374194][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 2016.380643][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 2016.416201][ T5962] kvm [5955]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2016.444467][ T8699] usb 6-1: USB disconnect, device number 91
01:56:44 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:44 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:44 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:44 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:44 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:44 executing program 0:
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:44 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:45 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:45 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:45 executing program 0:
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2017.704400][ T8699] usb 6-1: new high-speed USB device number 92 using dummy_hcd
01:56:45 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338", 0x36}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:45 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2018.064709][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2018.076168][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2018.086288][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2018.095613][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2018.346057][ T8699] usb 6-1: config 0 descriptor??
[ 2018.589666][ T5995] udc-core: couldn't find an available UDC or it's busy
[ 2018.596976][ T5995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2018.755037][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 2018.761591][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 2018.806476][ T8699] usb 6-1: USB disconnect, device number 92
01:56:46 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:46 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:46 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:46 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:46 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:46 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:47 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:47 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:47 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:47 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:47 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2020.030022][ T3219] usb 6-1: new high-speed USB device number 93 using dummy_hcd
01:56:47 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef7", 0x3f}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2020.404830][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2020.416637][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2020.426717][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2020.435972][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.645413][ T3219] usb 6-1: config 0 descriptor??
[ 2020.891332][ T6043] udc-core: couldn't find an available UDC or it's busy
[ 2020.898627][ T6043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2021.044199][ T3219] usbhid 6-1:0.0: can't add hid device: -71
[ 2021.050700][ T3219] usbhid: probe of 6-1:0.0 failed with error -71
[ 2021.088531][ T3219] usb 6-1: USB disconnect, device number 93
01:56:49 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:49 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:49 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:49 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:49 executing program 1:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b0c123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:49 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:49 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:49 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:56:49 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000f8ffff"], 0x24}}, 0x0)

01:56:49 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

[ 2022.513889][ T8699] usb 6-1: new high-speed USB device number 94 using dummy_hcd
01:56:50 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x3f)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = gettid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r3, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB], 0x70}], 0x1, 0x0)
close(r0)
close(r1)

01:56:50 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44", 0x44}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2022.784695][ T8699] usb 6-1: device descriptor read/64, error 18
[ 2023.174156][ T8699] usb 6-1: device descriptor read/64, error 18
[ 2023.444196][ T8699] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 2023.714740][ T8699] usb 6-1: device descriptor read/64, error 18
[ 2024.104357][ T8699] usb 6-1: device descriptor read/64, error 18
[ 2024.224867][ T8699] usb usb6-port1: attempt power cycle
[ 2024.954252][ T8699] usb 6-1: new high-speed USB device number 96 using dummy_hcd
01:56:52 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:52 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:56:52 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0)

01:56:52 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:52 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:52 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0)
ftruncate(r2, 0x48280)
io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[ 2025.114029][ T8699] usb 6-1: device descriptor read/8, error -71
[ 2025.333879][ T8699] usb 6-1: device descriptor read/8, error -71
[ 2025.391534][   T28] audit: type=1804 audit(1596851813.047:156): pid=6126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir244794509/syzkaller.cEafSK/767/bus" dev="sda1" ino=16372 res=1
01:56:53 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:53 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2025.531583][   T28] audit: type=1804 audit(1596851813.187:157): pid=6126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir244794509/syzkaller.cEafSK/767/bus" dev="sda1" ino=16372 res=1
01:56:53 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0)

01:56:53 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de441100", 0x46}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2026.153975][ T8699] usb 6-1: new high-speed USB device number 97 using dummy_hcd
01:56:53 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:53 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0)

[ 2026.325305][ T8699] usb 6-1: device descriptor read/8, error -61
[ 2026.594887][ T8699] usb 6-1: device descriptor read/8, error -61
[ 2026.714724][ T8699] usb usb6-port1: unable to enumerate USB device
01:56:56 executing program 5:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:56 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$FUSE(r0, &(0x7f0000000280), 0xfffffed3)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed}, 0xa)
poll(&(0x7f00000000c0), 0x0, 0x0)

01:56:56 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:56 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0)

01:56:56 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:56 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x50042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
inotify_init1(0x0)
sendfile(r0, r1, 0x0, 0x4000000000010044)

01:56:56 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

01:56:56 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

01:56:56 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000340)='X', 0x1, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, r2)

[ 2029.584154][ T9602] usb 6-1: new high-speed USB device number 98 using dummy_hcd
01:56:57 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040200001301020b14123900090035000c020100000019000b40060c1101020622dc1338d54404139b84136ef75afb83de44110005", 0x47}, {&(0x7f00000000c0)="7302500001001169eae54a5115", 0xd}], 0x2}, 0x0)

[ 2029.853825][ T9602] usb 6-1: device descriptor read/64, error 18
[ 2030.244654][ T9602] usb 6-1: device descriptor read/64, error 18
[ 2030.514035][ T9602] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 2030.786003][ T9602] usb 6-1: device descriptor read/64, error 18
[ 2031.176866][ T9602] usb 6-1: device descriptor read/64, error 18
[ 2031.294253][ T9602] usb usb6-port1: attempt power cycle
01:56:59 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:56:59 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

01:56:59 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:56:59 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_mount_image$hfsplus(&(0x7f0000000900)='hfsplus\x00', &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00))

01:56:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:56:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010003904f5ffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0300f5ff000000002000128008000100736974001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300e0"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0)

[ 2032.024021][ T9602] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 2032.141372][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2032.347091][ T6230] hfsplus: unable to find HFS+ superblock
01:57:00 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 2032.486139][ T6240] hfsplus: unable to find HFS+ superblock
[ 2032.504651][ T9602] usb 6-1: device not accepting address 100, error -71
01:57:00 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:00 executing program 1:

01:57:00 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0)

[ 2032.903786][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:57:00 executing program 4:

[ 2033.224451][ T9602] usb 6-1: new high-speed USB device number 101 using dummy_hcd
01:57:00 executing program 1:

[ 2033.415266][ T9602] usb 6-1: device descriptor read/8, error -61
[ 2033.684644][ T9602] usb 6-1: device descriptor read/8, error -61
[ 2033.805503][ T9602] usb usb6-port1: unable to enumerate USB device
01:57:03 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:03 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)

01:57:03 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:03 executing program 1:

01:57:03 executing program 4:

01:57:03 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:57:03 executing program 4:

01:57:03 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

01:57:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)

01:57:03 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)

01:57:03 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:04 executing program 4:
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x70f2dacd9782a22f)

[ 2036.388939][ T6296] kvm [6291]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2036.574179][ T8650] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 2036.637309][ T6296] kvm [6291]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2036.735371][ T6296] kvm [6291]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2036.773887][ T6296] kvm [6291]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2036.815335][ T6296] kvm [6291]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2036.883913][ T8650] usb 6-1: device descriptor read/64, error 18
[ 2037.323885][ T8650] usb 6-1: device descriptor read/64, error 18
[ 2037.594064][ T8650] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 2037.887002][ T8650] usb 6-1: device descriptor read/64, error 18
[ 2038.297696][ T8650] usb 6-1: device descriptor read/64, error 18
[ 2038.434021][ T8650] usb usb6-port1: attempt power cycle
01:57:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:06 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x10)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)

01:57:06 executing program 1:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./control\x00', &(0x7f0000000140)='overlay\x00', 0x0, 0x0)

01:57:06 executing program 4:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f00000004c0)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "fe04dbfd"}]}})

01:57:06 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:06 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 2039.128238][ T6337] overlayfs: missing 'lowerdir'
01:57:07 executing program 1:
syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

01:57:07 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, 0x0, 0x0, 0x0)

01:57:07 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2039.484878][ T3219] usb 5-1: new high-speed USB device number 111 using dummy_hcd
01:57:07 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00')
write$uinput_user_dev(r0, 0x0, 0x0)

[ 2039.724237][ T3219] usb 5-1: Using ep0 maxpacket: 8
[ 2039.965360][ T3219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2039.976531][ T3219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2039.986606][ T3219] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2039.996582][ T3219] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2040.006626][ T3219] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2040.016501][ T3219] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2040.029438][ T8650] usb 6-1: new high-speed USB device number 104 using dummy_hcd
01:57:07 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)

01:57:07 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2040.124839][ T8699] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 2040.214495][ T8650] usb 6-1: device descriptor read/8, error -61
[ 2040.274821][ T3219] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2040.284126][ T3219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.292251][ T3219] usb 5-1: Product: syz
[ 2040.296713][ T3219] usb 5-1: Manufacturer: syz
[ 2040.301450][ T3219] usb 5-1: SerialNumber: syz
[ 2040.364240][ T8699] usb 2-1: Using ep0 maxpacket: 16
[ 2040.484915][ T8650] usb 6-1: device descriptor read/8, error -61
[ 2040.531292][ T8699] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2040.615819][ T8699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2040.626323][ T8699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2040.635622][ T8699] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2040.647339][ T8699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2040.714774][ T3219] cdc_ncm 5-1:1.0: bind() failure
[ 2040.738109][ T3219] cdc_ncm 5-1:1.1: bind() failure
[ 2040.757465][ T8650] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 2040.803060][ T3219] usb 5-1: USB disconnect, device number 111
[ 2040.826063][ T8699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2040.835620][ T8699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.843915][ T8699] usb 2-1: Product: syz
[ 2040.848214][ T8699] usb 2-1: Manufacturer: syz
[ 2040.852948][ T8699] usb 2-1: SerialNumber: syz
[ 2040.934980][ T8650] usb 6-1: device descriptor read/8, error -61
[ 2041.205095][ T8650] usb 6-1: device descriptor read/8, error -61
[ 2041.264375][ T8699] usb 2-1: 0:2 : does not exist
[ 2041.307418][ T8699] usb 2-1: USB disconnect, device number 106
[ 2041.340726][ T8650] usb usb6-port1: unable to enumerate USB device
[ 2041.443715][ T3219] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2041.704159][ T3219] usb 5-1: Using ep0 maxpacket: 8
[ 2041.945782][ T3219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2041.957083][ T3219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2041.967634][ T3219] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2041.977641][ T3219] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2041.987598][ T3219] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2041.994057][ T8650] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 2041.998453][ T3219] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2042.274843][ T8650] usb 2-1: Using ep0 maxpacket: 16
[ 2042.434867][ T8650] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2042.464963][ T3219] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2042.474669][ T3219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2042.482801][ T3219] usb 5-1: Product: syz
[ 2042.527075][ T8650] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2042.537479][ T8650] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2042.546684][ T8650] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2042.557368][ T8650] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2042.644841][ T3219] usb 5-1: can't set config #1, error -71
[ 2042.670361][ T3219] usb 5-1: USB disconnect, device number 112
01:57:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, 0x0, 0x0, 0x0)

01:57:10 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000010000003cc00b0079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x5, &(0x7f0000000240))

01:57:10 executing program 4:
syz_open_dev$usbmon(&(0x7f0000001180)='/dev/usbmon#\x00', 0x0, 0x7c1382)

[ 2042.902589][ T6421] EXT4-fs (loop3): Can't read superblock on 2nd try
01:57:10 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0)

[ 2042.995006][ T6421] EXT4-fs (loop3): Can't read superblock on 2nd try
[ 2043.075520][ T8650] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2043.084863][ T8650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
01:57:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x7}, &(0x7f0000001fee)='R\x10\x9cist\xe3cusgrVid:3e', 0x0)

[ 2043.194798][ T8650] usb 2-1: can't set config #1, error -71
[ 2043.232027][ T8650] usb 2-1: USB disconnect, device number 107
01:57:11 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)

01:57:11 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:11 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x8)
sendmmsg(r0, 0x0, 0x0, 0x0)

[ 2043.615918][T20581] usb 6-1: new high-speed USB device number 106 using dummy_hcd
01:57:11 executing program 3:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x87e)
close(r0)

[ 2043.854291][ T8650] usb 2-1: new high-speed USB device number 108 using dummy_hcd
01:57:11 executing program 4:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @const, @array, @int, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], 'u'}]}}, 0x0, 0xfe}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2043.903949][T20581] usb 6-1: device descriptor read/64, error 18
[ 2044.105077][ T8650] usb 2-1: Using ep0 maxpacket: 8
[ 2044.224911][ T8650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2044.236331][ T8650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2044.246465][ T8650] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 2044.276167][ T6468] ptrace attach of "/root/syz-executor.4"[6467] was attempted by "/root/syz-executor.4"[6468]
[ 2044.334549][T20581] usb 6-1: device descriptor read/64, error 18
[ 2044.474720][ T8650] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2044.484075][ T8650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2044.492178][ T8650] usb 2-1: Product: syz
[ 2044.496805][ T8650] usb 2-1: Manufacturer: syz
[ 2044.501538][ T8650] usb 2-1: SerialNumber: syz
[ 2044.576016][ T6445] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2044.604152][T20581] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 2044.819370][ T8650] cdc_ether: probe of 2-1:1.0 failed with error -71
[ 2044.851976][ T8650] usb 2-1: USB disconnect, device number 108
[ 2044.887473][T20581] usb 6-1: device descriptor read/64, error 18
[ 2045.291401][T20581] usb 6-1: device descriptor read/64, error 18
[ 2045.414269][T20581] usb usb6-port1: attempt power cycle
[ 2045.574219][T27072] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 2045.814888][T27072] usb 2-1: Using ep0 maxpacket: 8
[ 2045.934872][T27072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2045.946080][T27072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2045.956169][T27072] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 2046.136190][T20581] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 2046.264596][T27072] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2046.274034][T27072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2046.282151][T27072] usb 2-1: Product: syz
[ 2046.286662][T27072] usb 2-1: Manufacturer: syz
[ 2046.291396][T27072] usb 2-1: SerialNumber: syz
01:57:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="f2", 0xfffff, r2)

01:57:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5457, 0x0)

01:57:14 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0xc0481273, 0xffffffffffffffff)

[ 2046.424087][T20581] usb 6-1: device descriptor read/8, error -71
[ 2046.636683][T20581] usb 6-1: device descriptor read/8, error -71
01:57:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

[ 2046.734106][T27072] usb 2-1: can't set config #1, error -71
[ 2046.791032][T27072] usb 2-1: USB disconnect, device number 109
01:57:14 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x6}, 0xa)

01:57:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:14 executing program 3:
socket$kcm(0x2b, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200})
socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x20, 0xff, 0x0, 0x0, 0x0, 0x2, 0x15866, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x50000000000443)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4, 0x4, 0x0, 0x1, "89d419b944b676d92a9fb89ba60e6a7019d9ae2d4f5567435d05cb5f5ac9f2fa0955e8d4b57f2010f484d074dbc422e78547b1a13f26131419e54dc4dc003c46", "82411caec8e7dc9166e9d178aff2e5b1e91d823a8dbe356d16480da5f221de58", [0x0, 0x5]})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0)
recvmsg(r0, &(0x7f0000028a80)={&(0x7f0000028800)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000289c0)=[{0x0}], 0x1, &(0x7f0000028a00)=""/70, 0x46}, 0x2040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000029000)={&(0x7f0000028ac0)=@xdp={0x2c, 0x1, r3, 0x9}, 0x80, &(0x7f0000028c40)=[{&(0x7f0000028b40)="64adcc7a26e5afd79cff1ae84a757a99f947049cde2883ffc6ba1708541e7e9eadc6c2184e636b3898376bfce781fe47c1ca581a548d989a9e99aafa65d02f6f69385cbd02574b095fa4965521b42778779c35cdd93fabf51f00e157e565d189c7450ddf2f2aa4dbe5eee447629fe785ebd78a84ba4a50cebffd59209cecdea4b5eebb035bfeb1aa5aef241cdf05adecb3c2b4ec97341f66e84df3c85bfa642ca4a169b11be7b99d7ac67572060425c0ae6e28a26102aed3b77f3fcb28e916a8382517b736a806ce3f492c67b424e2ada8", 0xd1}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x350}, 0x4000)

01:57:14 executing program 4:
socket$inet6(0xa, 0x3, 0x7)
r0 = gettid()
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_vm_writev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f00006a1000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r2, r1, 0x0, 0x7fffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, 0xa7, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x34ff}}, 0xe8)

01:57:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

[ 2047.453924][T20581] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 2047.544833][T20581] usb 6-1: Invalid ep0 maxpacket: 0
[ 2047.560123][T20581] usb usb6-port1: unable to enumerate USB device
01:57:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRESDEC], 0x3c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))

01:57:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:17 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:17 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r1, r0, 0x0, 0x7fffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)

01:57:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, &(0x7f0000000080)='ip6tnl0\x00')
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

01:57:17 executing program 3:

01:57:18 executing program 3:

01:57:18 executing program 2:

[ 2050.356414][ T3219] usb 6-1: new high-speed USB device number 110 using dummy_hcd
01:57:18 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:18 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:18 executing program 4:

[ 2050.636914][ T3219] usb 6-1: device descriptor read/64, error 18
01:57:18 executing program 2:

[ 2051.035211][ T3219] usb 6-1: device descriptor read/64, error 18
[ 2051.310104][ T3219] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 2051.603689][ T3219] usb 6-1: device descriptor read/64, error 18
[ 2052.004158][ T3219] usb 6-1: device descriptor read/64, error 18
[ 2052.127443][ T3219] usb usb6-port1: attempt power cycle
[ 2052.843824][ T3219] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 2052.934436][ T3219] usb 6-1: Invalid ep0 maxpacket: 0
01:57:20 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:20 executing program 3:

01:57:20 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

01:57:20 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:20 executing program 4:

01:57:20 executing program 2:

01:57:21 executing program 2:

01:57:21 executing program 4:

01:57:21 executing program 3:

01:57:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

01:57:21 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:21 executing program 2:

[ 2053.824130][ T3219] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 2054.058109][ T3219] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2054.071188][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2054.080627][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2054.255168][ T3219] usb 6-1: config 0 descriptor??
[ 2054.304964][ T3219] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2054.509214][T20581] usb 6-1: USB disconnect, device number 113
[ 2055.094416][T20581] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 2055.455719][T20581] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2055.469429][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2055.478868][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2055.536406][T20581] usb 6-1: config 0 descriptor??
[ 2055.601685][T20581] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
01:57:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:24 executing program 4:

01:57:24 executing program 3:

01:57:24 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

01:57:24 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:24 executing program 2:

[ 2057.161202][ T3219] usb 6-1: USB disconnect, device number 114
01:57:25 executing program 4:

01:57:25 executing program 3:

01:57:25 executing program 2:

01:57:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:25 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2057.963815][ T8699] usb 6-1: new high-speed USB device number 115 using dummy_hcd
01:57:25 executing program 4:

[ 2058.327520][ T8699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2058.340708][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2058.350219][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2058.473148][ T8699] usb 6-1: config 0 descriptor??
[ 2058.528646][ T8699] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2058.722548][ T8699] usb 6-1: USB disconnect, device number 115
[ 2059.307276][ T8699] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2059.674107][ T8699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2059.687371][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2059.696787][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2059.758576][ T8699] usb 6-1: config 0 descriptor??
[ 2059.817622][ T8699] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
01:57:29 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:29 executing program 2:

01:57:29 executing program 3:

01:57:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:29 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:29 executing program 4:

[ 2061.445555][T20581] usb 6-1: USB disconnect, device number 116
01:57:29 executing program 3:

01:57:29 executing program 2:

01:57:29 executing program 4:

01:57:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:29 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2062.194869][T20581] usb 6-1: new high-speed USB device number 117 using dummy_hcd
01:57:29 executing program 2:

[ 2062.584906][T20581] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2062.598005][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2062.607963][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.716779][T20581] usb 6-1: config 0 descriptor??
[ 2062.774163][T20581] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2062.971449][ T3219] usb 6-1: USB disconnect, device number 117
[ 2063.544163][ T3219] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 2063.905507][ T3219] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2063.919385][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2063.928744][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2063.977380][ T3219] usb 6-1: config 0 descriptor??
[ 2064.019484][ T3219] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
01:57:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:33 executing program 3:

01:57:33 executing program 4:

01:57:33 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5435, 0x0)

01:57:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:33 executing program 2:

[ 2065.597493][T20581] usb 6-1: USB disconnect, device number 118
01:57:33 executing program 2:

01:57:33 executing program 4:

01:57:33 executing program 3:

01:57:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:33 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5435, 0x0)

[ 2066.403732][ T3219] usb 6-1: new high-speed USB device number 119 using dummy_hcd
01:57:34 executing program 2:

[ 2066.774623][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2066.786120][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2066.796253][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2066.805655][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.934137][ T3219] usb 6-1: config 0 descriptor??
[ 2066.992324][ T3219] usbhid 6-1:0.0: can't add hid device: -22
[ 2067.014414][ T3219] usbhid: probe of 6-1:0.0 failed with error -22
[ 2067.189054][ T9780] usb 6-1: USB disconnect, device number 119
[ 2067.794075][ T9780] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 2068.195125][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2068.206580][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2068.216675][ T9780] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2068.225946][ T9780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2068.455945][ T9780] usb 6-1: config 0 descriptor??
[ 2068.502115][ T9780] usbhid 6-1:0.0: can't add hid device: -22
[ 2068.510453][ T9780] usbhid: probe of 6-1:0.0 failed with error -22
01:57:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:37 executing program 4:

01:57:37 executing program 3:

01:57:37 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5435, 0x0)

01:57:37 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:37 executing program 2:

[ 2070.097673][ T8650] usb 6-1: USB disconnect, device number 120
01:57:38 executing program 4:

01:57:38 executing program 2:

01:57:38 executing program 3:

01:57:38 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:38 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2070.823723][ T8650] usb 6-1: new high-speed USB device number 121 using dummy_hcd
01:57:38 executing program 2:

[ 2071.184877][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2071.196572][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2071.206798][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2071.216166][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2071.371907][ T8650] usb 6-1: config 0 descriptor??
[ 2071.426320][ T8650] usbhid 6-1:0.0: can't add hid device: -22
[ 2071.432769][ T8650] usbhid: probe of 6-1:0.0 failed with error -22
[ 2071.624843][T20297] usb 6-1: USB disconnect, device number 121
[ 2072.253885][T20297] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 2072.616936][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2072.628905][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2072.639046][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2072.648390][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2072.838851][T20297] usb 6-1: config 0 descriptor??
[ 2072.898761][T20297] usbhid 6-1:0.0: can't add hid device: -22
[ 2072.905215][T20297] usbhid: probe of 6-1:0.0 failed with error -22
01:57:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:42 executing program 4:

01:57:42 executing program 3:

01:57:42 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:42 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45806729900e9015d30130000000002ca"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0)

01:57:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

[ 2074.465954][T20297] usb 6-1: USB disconnect, device number 122
01:57:42 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

01:57:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:42 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:42 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x8ec3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

01:57:42 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

[ 2075.368606][ T8650] usb 6-1: new high-speed USB device number 123 using dummy_hcd
01:57:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

[ 2075.774835][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2075.786557][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2075.796629][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2075.805922][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2075.897724][ T8650] usb 6-1: config 0 descriptor??
[ 2075.942426][ T8650] usbhid 6-1:0.0: can't add hid device: -22
[ 2075.949003][ T8650] usbhid: probe of 6-1:0.0 failed with error -22
[ 2076.139402][ T3219] usb 6-1: USB disconnect, device number 123
[ 2076.723876][ T3219] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 2077.084774][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 2077.096339][ T3219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2077.106703][ T3219] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2077.115985][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2077.168763][ T3219] usb 6-1: config 0 descriptor??
[ 2077.222731][ T3219] usbhid 6-1:0.0: can't add hid device: -22
[ 2077.230311][ T3219] usbhid: probe of 6-1:0.0 failed with error -22
01:57:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:46 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000"], 0x48}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x23, &(0x7f0000000180)={r2}, 0x8)

01:57:46 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:46 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:46 executing program 4:
syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@ikeep='ikeep'}]})

[ 2078.793638][ T8650] usb 6-1: USB disconnect, device number 124
[ 2079.196030][ T6990] XFS (loop4): Invalid superblock magic number
01:57:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x44140, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000800ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000025000100"/20, @ANYBLOB="00000000628465b300000000"], 0x24}, 0x8}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x54, 0x0, 0x809, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4854)

01:57:46 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

[ 2079.514274][ T8650] usb 6-1: new high-speed USB device number 125 using dummy_hcd
01:57:47 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0x80045518, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:57:47 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:47 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0)

[ 2079.904735][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2079.915974][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2079.926269][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2079.935672][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2080.130086][ T8650] usb 6-1: config 0 descriptor??
[ 2080.464292][ T8650] usbhid 6-1:0.0: can't add hid device: -71
[ 2080.470801][ T8650] usbhid: probe of 6-1:0.0 failed with error -71
[ 2080.534368][ T8650] usb 6-1: USB disconnect, device number 125
[ 2080.989262][ T8650] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 2081.374898][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2081.386109][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2081.396224][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2081.406268][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2081.465509][ T8650] usb 6-1: config 0 descriptor??
[ 2081.962877][ T8650] kye 0003:0458:5019.0021: unknown main item tag 0x0
[ 2081.970592][ T8650] kye 0003:0458:5019.0021: unknown main item tag 0x0
[ 2081.977795][ T8650] kye 0003:0458:5019.0021: unknown main item tag 0x0
[ 2081.984871][ T8650] kye 0003:0458:5019.0021: unknown main item tag 0x0
[ 2081.991827][ T8650] kye 0003:0458:5019.0021: unknown main item tag 0x0
[ 2082.281191][ T8650] kye 0003:0458:5019.0021: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[ 2082.292428][ T8650] kye 0003:0458:5019.0021: tablet-enabling feature report not found
[ 2082.300959][ T8650] kye 0003:0458:5019.0021: tablet enabling failed
[ 2082.343096][ T8650] usb 6-1: USB disconnect, device number 126
01:57:50 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:50 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:50 executing program 2:
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:50 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
io_uring_setup(0x1, &(0x7f0000000040))
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2000, @fd_index=0x9, 0x0, 0x0, 0x0, 0x18}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

01:57:50 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

01:57:50 executing program 2:
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f})

01:57:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c)

[ 2083.516603][ T9780] usb 6-1: new high-speed USB device number 127 using dummy_hcd
01:57:51 executing program 2:
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

[ 2083.717982][ T7104] overlayfs: overlapping lowerdir path
01:57:51 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2083.885246][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2083.896394][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2083.906519][ T9780] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2083.915845][ T9780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.173330][ T9780] usb 6-1: config 0 descriptor??
[ 2084.618563][ T7094] udc-core: couldn't find an available UDC or it's busy
[ 2084.625827][ T7094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2084.738198][ T9780] usbhid 6-1:0.0: can't add hid device: -71
[ 2084.745123][ T9780] usbhid: probe of 6-1:0.0 failed with error -71
[ 2084.760313][ T9780] usb 6-1: USB disconnect, device number 127
01:57:52 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:52 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

01:57:52 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c)

01:57:52 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:53 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:53 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:53 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x8038550a, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

01:57:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c)

01:57:53 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

[ 2086.133870][T20581] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 2086.644891][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2086.657002][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2086.667151][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2086.677054][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2086.849581][T20581] usb 6-1: config 0 descriptor??
[ 2087.308185][ T7156] udc-core: couldn't find an available UDC or it's busy
[ 2087.315415][ T7156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2087.434742][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2087.441163][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2087.475173][T20581] usb 6-1: USB disconnect, device number 2
01:57:55 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:55 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:55 executing program 3:
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)}, {0x0}, {0x0}, {&(0x7f0000000380)}, {&(0x7f00000004c0)}, {&(0x7f0000000400)="4ca50808d6e0f369ad12a48f0071ea07da8f72f45ee093d307c370409918ac2554e5c819243e4800cace9b", 0x2b}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f00000006c0)="fa0a12ef8ed7533f929d8ae98f043b9bc885dc2ba6c3cac1f96153a427711fd35921fa9bb2df91ef96e6bc398e7526415b00a135bcf932e4be5e27ccd437872f626bd66a18b60806c3dc1804594c3d53af914b77e42f54adc970c79d541429f0f68bd7d52cc9629d", 0x68}], 0x9, 0xe)

01:57:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:55 executing program 2:
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c)

01:57:56 executing program 2:
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

01:57:56 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0)

01:57:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5435, 0x0)

01:57:56 executing program 2:
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000100)={0xb, @output})

[ 2088.841524][ T9780] usb 6-1: new high-speed USB device number 3 using dummy_hcd
01:57:56 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

[ 2089.204868][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2089.216351][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2089.226556][ T9780] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2089.235848][ T9780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2089.466380][ T9780] usb 6-1: config 0 descriptor??
[ 2089.910597][ T7212] udc-core: couldn't find an available UDC or it's busy
[ 2089.917981][ T7212] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2090.064171][ T9780] usbhid 6-1:0.0: can't add hid device: -71
[ 2090.070702][ T9780] usbhid: probe of 6-1:0.0 failed with error -71
[ 2090.102896][ T9780] usb 6-1: USB disconnect, device number 3
01:57:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:57:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

01:57:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0)

01:57:58 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)

01:57:58 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:57:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)
socket$inet(0x2, 0x80001, 0x84)

01:57:58 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)

01:57:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0)

01:57:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

[ 2091.347020][ T8699] usb 6-1: new high-speed USB device number 4 using dummy_hcd
01:57:59 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)

01:57:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10)

[ 2091.764260][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2091.775514][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2091.785648][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2091.794910][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:57:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5435, 0x0)

[ 2092.009255][ T8699] usb 6-1: config 0 descriptor??
[ 2092.365135][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 2092.371570][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 2092.454212][ T8699] usb 6-1: USB disconnect, device number 4
01:58:00 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:00 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:00 executing program 3:
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'geneve0\x00'}}, 0x1e)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x6)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

01:58:00 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x0, @output})

01:58:00 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a7c3142638283ddbe252ac6"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)

01:58:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
readv(r5, &(0x7f00000000c0), 0x0)
shutdown(r4, 0x0)

[ 2093.386130][ T7306] not chained 40000 origins
[ 2093.390713][ T7306] CPU: 1 PID: 7306 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0
[ 2093.399303][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2093.409369][ T7306] Call Trace:
[ 2093.412688][ T7306]  dump_stack+0x21c/0x280
[ 2093.417060][ T7306]  kmsan_internal_chain_origin+0x6f/0x130
[ 2093.422805][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.428024][ T7306]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2093.433852][ T7306]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 2093.439937][ T7306]  ? sched_clock_cpu+0x65/0x8e0
[ 2093.444808][ T7306]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 2093.450891][ T7306]  ? sched_clock_cpu+0x65/0x8e0
[ 2093.455759][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.460990][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.466214][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.471439][ T7306]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2093.477270][ T7306]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
01:58:01 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x0, @output})

[ 2093.483358][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.488575][ T7306]  ? kmsan_set_origin_checked+0x95/0xf0
[ 2093.494141][ T7306]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 2093.500239][ T7306]  ? _copy_from_user+0x201/0x310
[ 2093.505204][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.510480][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.515460][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.520621][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.525597][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.530329][ T7306]  ? kmsan_internal_check_memory+0xb1/0x3d0
[ 2093.536245][ T7306]  ? __msan_poison_alloca+0xf0/0x120
[ 2093.541572][ T7306]  ? kmsan_copy_to_user+0x81/0x90
[ 2093.546637][ T7306]  ? _copy_to_user+0x1bf/0x260
[ 2093.551444][ T7306]  ? put_old_timespec32+0x231/0x2d0
[ 2093.556663][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.561882][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.567114][ T7306]  ? kmsan_get_metadata+0x116/0x180
[ 2093.572331][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.577734][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.583307][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.588531][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.593402][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.597944][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.604281][ T7306] RIP: 0023:0xf7f62549
[ 2093.608348][ T7306] Code: Bad RIP value.
[ 2093.612421][ T7306] RSP: 002b:00000000f555c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[ 2093.620844][ T7306] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000002000d180
[ 2093.628833][ T7306] RDX: 00000000000000eb RSI: 0000000000000000 RDI: 0000000000000000
[ 2093.636811][ T7306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2093.644789][ T7306] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2093.652767][ T7306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2093.660756][ T7306] Uninit was stored to memory at:
[ 2093.665794][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.671518][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.676474][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.681597][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.686540][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.691222][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.696600][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.702154][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.707364][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.712223][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.716734][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.723052][ T7306] 
[ 2093.725398][ T7306] Uninit was stored to memory at:
[ 2093.730433][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.736156][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.741105][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.746222][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.751166][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.755849][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.761252][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.766818][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.772024][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.776887][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.782270][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.788589][ T7306] 
[ 2093.790917][ T7306] Uninit was stored to memory at:
[ 2093.795953][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.801807][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.806756][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.811889][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.816839][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.821530][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.826957][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.832514][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.837720][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.842575][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.847091][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.853417][ T7306] 
[ 2093.855752][ T7306] Uninit was stored to memory at:
[ 2093.860803][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.866532][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.871478][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.876604][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.881560][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.886680][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.892088][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.897647][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.903809][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.908675][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.913195][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.919514][ T7306] 
[ 2093.921842][ T7306] Uninit was stored to memory at:
[ 2093.926886][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.932724][ T7306]  __msan_chain_origin+0x50/0x90
[ 2093.937695][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2093.942816][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2093.947763][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2093.952451][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2093.957831][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2093.963393][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2093.968599][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2093.973461][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2093.977977][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2093.984298][ T7306] 
[ 2093.986649][ T7306] Uninit was stored to memory at:
[ 2093.991689][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2093.997437][ T7306]  __msan_chain_origin+0x50/0x90
[ 2094.002390][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2094.007514][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2094.012457][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2094.017154][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
[ 2094.022534][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2094.028100][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2094.033315][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2094.038178][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2094.042696][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2094.049020][ T7306] 
[ 2094.051345][ T7306] Uninit was stored to memory at:
[ 2094.056383][ T7306]  kmsan_internal_chain_origin+0xad/0x130
[ 2094.062115][ T7306]  __msan_chain_origin+0x50/0x90
[ 2094.067078][ T7306]  __get_compat_msghdr+0x6db/0x9d0
[ 2094.072204][ T7306]  get_compat_msghdr+0x108/0x2b0
[ 2094.077150][ T7306]  __sys_sendmmsg+0x755/0xf70
[ 2094.081834][ T7306]  __se_compat_sys_sendmmsg+0xcd/0xf0
01:58:01 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2094.087219][ T7306]  __ia32_compat_sys_sendmmsg+0x56/0x70
[ 2094.092791][ T7306]  __do_fast_syscall_32+0x2af/0x480
[ 2094.098006][ T7306]  do_fast_syscall_32+0x6b/0xd0
[ 2094.102863][ T7306]  do_SYSENTER_32+0x73/0x90
[ 2094.107374][ T7306]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 2094.113694][ T7306] 
[ 2094.116025][ T7306] Local variable ----msg_sys@__sys_sendmmsg created at:
[ 2094.122966][ T7306]  __sys_sendmmsg+0xbb/0xf70
[ 2094.127566][ T7306]  __sys_sendmmsg+0xbb/0xf70
01:58:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
readv(r4, &(0x7f00000000c0), 0x0)

[ 2094.235483][T27072] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 2094.483873][T27072] usb 2-1: Using ep0 maxpacket: 8
[ 2094.575077][T20297] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 2094.618157][T27072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2094.629382][T27072] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2094.639715][T27072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024
[ 2094.651103][T27072] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2094.661412][T27072] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2094.674772][T27072] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2094.684110][T27072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:58:02 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x0, @output})

[ 2095.035533][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2095.047135][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2095.057793][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2095.067200][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2095.129211][ T7307] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2095.166626][ T7307] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2095.206536][T20297] usb 6-1: config 0 descriptor??
[ 2095.245883][T27072] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2095.252065][T27072] hub: probe of 2-1:1.0 failed with error -5
01:58:03 executing program 3:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r0, 0x0, 0x0, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

01:58:03 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2095.478117][ T7307] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2095.512850][ T7307] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2095.545670][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 2095.552201][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 2095.597668][T20297] usb 6-1: USB disconnect, device number 5
[ 2095.808272][T27072] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[ 2095.925396][T27072] usb 2-1: USB disconnect, device number 110
[ 2095.945674][T27072] usblp0: removed
01:58:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:04 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

01:58:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
readv(r4, &(0x7f00000000c0), 0x0)

01:58:04 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2096.563825][T20297] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 2096.845716][T20297] usb 2-1: Using ep0 maxpacket: 8
[ 2096.986288][T20297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2096.997647][T20297] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2097.007911][T20297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024
[ 2097.019191][T20297] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2097.029456][T20297] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2097.042710][T20297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2097.051987][T20297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.136660][ T8699] usb 6-1: new high-speed USB device number 6 using dummy_hcd
01:58:05 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r4, 0xd6}, &(0x7f0000000100)=0x8)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000)

01:58:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
dup3(r3, r0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

01:58:05 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}}, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)

01:58:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)

01:58:05 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2097.505610][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2097.516851][ T8699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2097.527093][ T8699] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2097.536950][ T8699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.544507][T20297] usb 2-1: can't set config #1, error -71
[ 2097.554223][T20297] usb 2-1: USB disconnect, device number 111
[ 2097.719174][ T8699] usb 6-1: config 0 descriptor??
01:58:05 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r4, 0xd6}, &(0x7f0000000100)=0x8)
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00')
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000)

[ 2098.064217][ T8699] usbhid 6-1:0.0: can't add hid device: -71
[ 2098.070708][ T8699] usbhid: probe of 6-1:0.0 failed with error -71
[ 2098.107488][ T8699] usb 6-1: USB disconnect, device number 6
01:58:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'geneve0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)

01:58:06 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:06 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41)
fadvise64(r0, 0xa, 0x0, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

01:58:06 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a7c3142638283ddbe252ac6"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 2099.774279][T27072] usb 6-1: new high-speed USB device number 7 using dummy_hcd
01:58:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)

01:58:07 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)

01:58:07 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2100.093866][T20297] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2100.199473][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2100.210629][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2100.220824][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2100.230108][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2100.334063][T20297] usb 4-1: Using ep0 maxpacket: 8
[ 2100.544965][T20297] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2100.556717][T20297] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2100.567155][T20297] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024
[ 2100.578679][T20297] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2100.588978][T20297] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2100.602259][T20297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2100.611539][T20297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2100.636017][T27072] usb 6-1: config 0 descriptor??
01:58:08 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88882, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa86dd60163dac00008900fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x3a)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r2, 0x0, r4, 0x0, 0x18100, 0x0)

[ 2100.984703][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2100.991138][T27072] usbhid: probe of 6-1:0.0 failed with error -71
01:58:08 executing program 2:
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x4000, 0x0)

[ 2101.093188][T27072] usb 6-1: USB disconnect, device number 7
[ 2101.145518][ T7454] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2101.152818][ T7454] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2101.247455][T20297] hub 4-1:1.0: bad descriptor, ignoring hub
[ 2101.254202][T20297] hub: probe of 4-1:1.0 failed with error -5
01:58:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)

[ 2101.448959][ T7454] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2101.534300][ T7454] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2101.545076][T27072] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2101.875468][T20297] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[ 2101.987368][T20297] usb 4-1: USB disconnect, device number 50
[ 2102.028897][T20297] usblp0: removed
[ 2102.065573][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2102.077124][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2102.087162][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2102.106231][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.164825][T27072] usb 6-1: config 0 descriptor??
01:58:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:10 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:10 executing program 2:
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x4000, 0x0)

01:58:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x4000, 0x0)

[ 2102.589485][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2102.596593][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2102.657902][T27072] usb 6-1: USB disconnect, device number 8
[ 2102.694997][T20297] usb 4-1: new high-speed USB device number 51 using dummy_hcd
01:58:10 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = memfd_create(&(0x7f0000000000)='-\'\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x200, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)

01:58:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)

01:58:10 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

01:58:10 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:10 executing program 1:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0x0, 0xb0, 0xb8, 0xb0, 0x1b0, 0x1a8, 0x1a8, 0x1b0, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'ip_vti0\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2, 0x3}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2103.273763][T27072] usb 6-1: new high-speed USB device number 9 using dummy_hcd
01:58:11 executing program 3:

01:58:11 executing program 2:
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000540)='\xb5\xe25\x95S\x00\x00\x00\x00\x93h0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$setown(r0, 0x8, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
execve(0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)

[ 2103.656124][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2103.667351][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2103.678449][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2103.687812][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:58:11 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2103.869404][T27072] usb 6-1: config 0 descriptor??
[ 2104.139911][ T7569] ERROR: Domain '<kernel> /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/3' not defined.
[ 2104.214039][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2104.220664][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2104.302490][T27072] usb 6-1: USB disconnect, device number 9
[ 2104.807037][T27072] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2105.184953][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2105.196056][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2105.206837][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2105.216125][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2105.278970][T27072] usb 6-1: config 0 descriptor??
[ 2105.834062][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2105.840485][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2105.868915][T27072] usb 6-1: USB disconnect, device number 10
01:58:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:14 executing program 3:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x9d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)

01:58:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0)

01:58:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:14 executing program 1:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x40c00)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xb, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x2, 0x1, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sco\x00')
lseek(r2, 0x80000001, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000080)={0x6, 'bridge_slave_0\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
eventfd(0x0)
sendto$inet(r1, &(0x7f0000000580)='\x00', 0x1, 0x75a535e198d7edf7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffd, 0x4, 0x80ffffffff}, 0x14)
shutdown(r1, 0x1)

01:58:14 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6)
sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000018c0)="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", 0x521}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="062bfbe5f6209c2696e25510267d712453e383734a30c8e713d4657199504068fed606960a84547beb68e4e80663b2eca686f3b7cf150a5f47df28c5c8dc46a6098c32288add0f1b5d974939fb1d75cb418eb893040f903f4292958231f66565b46f08d09fd939018bbbb3291e9620b6225a8bf4b2e74ffdd11fb6d6c10e83dcec3a0a475aae5efc14f75270e5e8fbf2a9ded7164fa810d6e16a487f8041a3840bb4404aa138ed99dfaee50607b77a89f0c1ed6e718f6c12159a4fa80f833391f9d69b5844907b74dc13ec83912fb2954bfa07f1d30efd07e19c3ad60e69096d", 0xe0}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000001ec0)="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", 0x141}, {0x0}, {&(0x7f0000000680)="5250b2d5836e9688f638b2cd93e1f3b73e31485c13ac03b33bb9b2c88496d39b14bb9d2ea98fc2770f203aa6ed4665cb744e649376206a04bc0f81592508eb28a950c76500c3f0029473f7bad9e82565f0561dc9b7391111c28b060a221153792752733438f9a5bb3b", 0x69}, {&(0x7f0000000700)="8b6fbe08b408c21d0605f444bf4298d69cd7beb72b781ffcd4b151bc", 0x1c}, {&(0x7f0000000780)="22f057126c99576fa4667ada6a658607633547db5d31177e1ec73032afd6ae3d70fa74775d19991a5d0be2a6fd26ecc6a98c2eff29536682d554841d6b874dcf9b3234309fd761c5efb147b5f1132ca56cce301947af2f08ca1374a178403b8f614be296b18c6e8dde7271b4f5a96bd2ca2b230cf2296a0480802056e522e59481eb062480e2c96b275f25c29280a64468146ab76369b4e17f7b367e5e797b41a3482474bbc58d4d6a1e5e86c7", 0xad}], 0x5}}], 0x3, 0x604d800)

01:58:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb)

01:58:14 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2107.474471][ T7635] dns_resolver: Unsupported server list version (0)
[ 2107.494206][ T9046] usb 6-1: new high-speed USB device number 11 using dummy_hcd
01:58:15 executing program 1:

[ 2107.528402][ T7636] dns_resolver: Unsupported server list version (0)
01:58:15 executing program 2:

01:58:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2107.855936][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2107.867258][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2107.877555][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2107.886966][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2108.196780][ T9046] usb 6-1: config 0 descriptor??
[ 2108.635362][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2108.641782][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2108.668927][ T9046] usb 6-1: USB disconnect, device number 11
[ 2109.103778][ T9046] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 2109.464978][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2109.476521][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.486625][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2109.496579][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2109.736136][ T9046] usb 6-1: config 0 descriptor??
[ 2110.265120][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2110.271569][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2110.392309][ T9046] usb 6-1: USB disconnect, device number 12
01:58:18 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:18 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:18 executing program 3:

01:58:18 executing program 1:

01:58:18 executing program 2:

01:58:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

01:58:19 executing program 3:

01:58:19 executing program 1:

01:58:19 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:19 executing program 2:

[ 2111.785378][ T9046] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 2112.144683][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2112.156249][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2112.166641][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2112.176237][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:58:19 executing program 3:

01:58:19 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2112.274761][ T9046] usb 6-1: config 0 descriptor??
[ 2112.614511][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2112.621371][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2112.645761][ T9046] usb 6-1: USB disconnect, device number 13
[ 2112.656394][ T7712] kvm [7710]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2112.698100][ T7712] kvm [7710]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2112.800447][ T7712] kvm [7710]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2113.073837][ T9046] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2113.434692][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2113.446544][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2113.456830][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2113.466159][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2113.540304][ T9046] usb 6-1: config 0 descriptor??
[ 2114.104234][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2114.110757][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2114.194503][ T9046] usb 6-1: USB disconnect, device number 14
01:58:22 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:22 executing program 1:

01:58:22 executing program 2:

01:58:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

01:58:22 executing program 3:

01:58:22 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2114.929805][ T7740] kvm [7735]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2115.011802][ T7740] kvm [7735]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:22 executing program 3:

01:58:22 executing program 2:

01:58:22 executing program 1:

[ 2115.214901][ T7740] kvm [7735]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:58:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)

[ 2115.524539][ T9046] usb 6-1: new high-speed USB device number 15 using dummy_hcd
01:58:23 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:23 executing program 3:

[ 2116.027493][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2116.039204][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2116.049436][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2116.059528][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2116.251985][ T9046] usb 6-1: config 0 descriptor??
[ 2116.352848][ T7762] kvm [7761]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2116.410247][ T7762] kvm [7761]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2116.503187][ T7762] kvm [7761]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2116.586021][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2116.592462][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2116.661103][ T9046] usb 6-1: USB disconnect, device number 15
[ 2117.074261][ T9046] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2117.434138][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2117.445361][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2117.455869][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2117.465329][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2117.504806][ T9046] usb 6-1: config 0 descriptor??
[ 2118.044273][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2118.050713][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2118.074577][ T9046] usb 6-1: USB disconnect, device number 16
01:58:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000806"], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:26 executing program 1:

01:58:26 executing program 2:

01:58:26 executing program 3:

01:58:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

01:58:26 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

[ 2118.896803][ T7795] kvm [7789]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:26 executing program 2:

01:58:26 executing program 3:

01:58:26 executing program 1:

[ 2119.002067][ T7795] kvm [7789]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2119.133901][T20581] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 2119.179234][ T7795] kvm [7789]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2119.504938][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2119.516243][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2119.526504][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2119.535869][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:58:27 executing program 2:

01:58:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

[ 2119.791257][T20581] usb 6-1: config 0 descriptor??
[ 2120.144254][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2120.150731][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2120.162426][T20581] usb 6-1: USB disconnect, device number 17
[ 2120.623783][T20581] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2121.034596][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2121.045870][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2121.055990][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2121.065317][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2121.115984][T20581] usb 6-1: config 0 descriptor??
[ 2121.654181][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2121.660694][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2121.723448][T20581] usb 6-1: USB disconnect, device number 18
01:58:29 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

01:58:29 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:29 executing program 1:

01:58:29 executing program 3:

01:58:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)

01:58:29 executing program 2:

01:58:30 executing program 2:

01:58:30 executing program 3:

01:58:30 executing program 1:

01:58:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)

01:58:30 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:30 executing program 2:

[ 2122.884043][T27072] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2123.124221][ T7864] kvm [7862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2123.199431][ T7864] kvm [7862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2123.286167][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2123.297517][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2123.307713][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2123.317027][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.346912][ T7864] kvm [7862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2123.436875][T27072] usb 6-1: config 0 descriptor??
[ 2123.774595][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2123.781019][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2123.832584][T27072] usb 6-1: USB disconnect, device number 19
[ 2124.256873][T27072] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2124.654522][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2124.665908][T27072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2124.676028][T27072] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2124.685294][T27072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2124.881959][T27072] usb 6-1: config 0 descriptor??
[ 2125.464307][T27072] usbhid 6-1:0.0: can't add hid device: -71
[ 2125.470818][T27072] usbhid: probe of 6-1:0.0 failed with error -71
[ 2125.486698][T27072] usb 6-1: USB disconnect, device number 20
01:58:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

01:58:33 executing program 1:

01:58:33 executing program 3:

01:58:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)

01:58:33 executing program 2:

01:58:33 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2126.157511][ T7909] kvm [7905]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:33 executing program 2:

01:58:33 executing program 3:

01:58:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45806729900e9015d30130000000002ca"], 0x1}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2126.299110][ T7909] kvm [7905]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2126.468196][ T7909] kvm [7905]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2126.614552][T20297] usb 6-1: new high-speed USB device number 21 using dummy_hcd
01:58:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000140)='\xdfrQ\xe5\x92\x00', 0x0)
write(r1, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r1, 0x0)
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)

01:58:34 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2126.974916][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2126.986171][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2126.996302][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2127.005594][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2127.127443][   T28] audit: type=1400 audit(1596851914.777:158): avc:  denied  { write } for  pid=7927 comm="syz-executor.2" name="fd" dev="proc" ino=116032 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[ 2127.151040][   T28] audit: type=1400 audit(1596851914.787:159): avc:  denied  { add_name } for  pid=7927 comm="syz-executor.2" name="i" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[ 2127.172825][   T28] audit: type=1400 audit(1596851914.787:160): avc:  denied  { create } for  pid=7927 comm="syz-executor.2" name="i" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1
[ 2127.250520][T20297] usb 6-1: config 0 descriptor??
[ 2127.429869][ T7932] kvm [7929]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2127.542306][ T7932] kvm [7929]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2127.594454][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 2127.600985][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 2127.662710][T20297] usb 6-1: USB disconnect, device number 21
[ 2127.732413][ T7932] kvm [7929]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2128.083847][T20297] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2128.444707][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2128.444885][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2128.466550][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2128.475917][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2128.492407][T20297] usb 6-1: config 0 descriptor??
[ 2129.074907][T20297] usbhid 6-1:0.0: can't add hid device: -71
[ 2129.081329][T20297] usbhid: probe of 6-1:0.0 failed with error -71
[ 2129.154628][T20297] usb 6-1: USB disconnect, device number 22
01:58:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

01:58:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:37 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

01:58:37 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = memfd_create(&(0x7f0000000000), 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
preadv(r3, &(0x7f00000017c0), 0x315, 0x800000, 0x0)

01:58:37 executing program 1:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x0, 0x0, 0x0, 0x7, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/142, 0x27, 0x8e, 0x8}, 0x20)

01:58:37 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2129.876344][ T7982] BPF:[1] FWD (anon) 
[ 2129.880560][ T7982] BPF:struct
[ 2129.884071][ T7982] BPF: 
[ 2129.886889][ T7982] BPF:type != 0
[ 2129.890394][ T7982] BPF:
[ 2129.890394][ T7982] 
[ 2129.923001][ T7984] BPF:[1] FWD (anon) 
[ 2129.927261][ T7984] BPF:struct
[ 2129.930544][ T7984] BPF: 
[ 2129.933371][ T7984] BPF:type != 0
[ 2129.937440][ T7984] BPF:
[ 2129.937440][ T7984] 
01:58:37 executing program 1:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123402)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0)
llistxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/143, 0x8f)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000040)={0x0, 0x2bd1df5f79010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x4000000)

01:58:37 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)

01:58:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:37 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:37 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0)

[ 2130.413830][ T9046] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2130.762494][ T8008] kvm [8005]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2130.794588][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
01:58:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)

[ 2130.805770][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2130.815939][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2130.825349][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2130.923835][ T8008] kvm [8005]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2131.036445][ T9046] usb 6-1: config 0 descriptor??
[ 2131.149357][ T8008] kvm [8005]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2131.485927][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2131.492357][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2131.516854][ T9046] usb 6-1: USB disconnect, device number 23
[ 2131.893990][ T9046] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2132.254125][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2132.265349][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2132.275493][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2132.284861][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2132.346302][ T9046] usb 6-1: config 0 descriptor??
[ 2132.884088][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2132.890607][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2132.966742][ T9046] usb 6-1: USB disconnect, device number 24
01:58:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:41 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
fallocate(r0, 0x11, 0x0, 0x100007e00)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:58:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]})

01:58:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df0a000000fee80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1)

01:58:41 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x0, 0x3}}, "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", "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"})

[ 2133.588031][ T8083] netlink: 'syz-executor.1': attribute type 13 has an invalid length.
[ 2133.739336][ T8084] kvm [8080]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

[ 2133.946358][ T8084] kvm [8080]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2134.213896][ T9046] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2134.317895][ T8084] kvm [8080]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:58:42 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}}})

01:58:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2134.575074][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2134.586471][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2134.596786][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2134.606079][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.804389][ T9046] usb 6-1: config 0 descriptor??
01:58:42 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

[ 2135.152132][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2135.158681][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2135.208831][ T9046] usb 6-1: USB disconnect, device number 25
[ 2135.347044][ T8131] kvm [8126]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2135.397864][ T8131] kvm [8126]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2135.481173][ T8131] kvm [8126]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2135.674165][ T9046] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2136.034553][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2136.046723][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2136.057050][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2136.066392][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2136.116836][ T9046] usb 6-1: config 0 descriptor??
[ 2136.654334][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2136.660661][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2136.686916][ T9046] usb 6-1: USB disconnect, device number 26
01:58:44 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c)

01:58:44 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xb, r0, 0x0, 0x0)

01:58:44 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

01:58:44 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0)

01:58:45 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
fallocate(r0, 0x11, 0x0, 0x100007e00)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

01:58:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000400)={"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"})

01:58:45 executing program 1:

01:58:45 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0)

01:58:45 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="22000000000000040100000000000000000003000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2138.154265][T20581] usb 6-1: new high-speed USB device number 27 using dummy_hcd
01:58:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x44140, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}})

[ 2138.664663][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2138.675913][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2138.686050][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2138.695327][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2138.859359][T20581] usb 6-1: config 0 descriptor??
[ 2138.989106][ T8220] kvm [8218]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000089 data 0xffffffff000000e2
[ 2139.010755][ T8220] kvm [8218]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000000d data 0xffffffff000000d1
[ 2139.224749][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2139.231175][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2139.281848][T20581] usb 6-1: USB disconnect, device number 27
[ 2139.714953][T20581] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2140.085821][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2140.097163][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2140.107304][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2140.116603][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2140.296312][T20581] usb 6-1: config 0 descriptor??
[ 2140.847265][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2140.853787][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2140.877403][T20581] usb 6-1: USB disconnect, device number 28
01:58:48 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:48 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0)

01:58:48 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088641fffffff07000021632f77fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x102, 0x60000000, 0x0, 0xfffffffffffffe48, &(0x7f0000000000), &(0x7f00000000c0)="61ae793cb58796e98bec67538e015077de7e272f4c58590e0a49abbb02864ce87f29c55242edc400de0f90b385e2f9c937fd3b232ab7c99460628f97e6d6f935e88684d642fd966756e2d8b5af7a9002d71c203c4dd9b55ae6eb91e77d823ca1a2de2496a532933552dfb5907808176243ef5971c1a9c84ebfbd113d1a233ed5490f124afc9b88bc97d734a20b1e"}, 0x28)

01:58:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x120, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@loopback, @dev, [], [0x0, 0xff], 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50, 'set\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ipv6={@mcast2, @local, [], [], 'macvlan1\x00', 'veth1\x00', {}, {0xff}}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0xff000000]}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
tkill(0x0, 0x0)

01:58:48 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="22000000000000040100000000000000000003000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:58:48 executing program 1:
open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x3080008000, 0x1604)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)

[ 2141.613597][ T8261] kvm [8254]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:49 executing program 1:
mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="000000186204018b002b06000000267e890053b5d1d090753dd40900a24e14da00af846ddacb33d8f3000000e1838f74a2e84567f810efc950550ca7f9a86a652d62e159c51bad5a8bf626d9dea3c20000000000000000", 0x84b}], 0x1)

01:58:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x32, &(0x7f0000000140)={0x0, 0x7a20}, &(0x7f0000000040)=0x10)

[ 2141.810098][ T8261] kvm [8254]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2141.931304][ T8261] kvm [8254]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:58:49 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="22000000000000040100000000000000000003000000"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2142.148112][ T9602] usb 6-1: new high-speed USB device number 29 using dummy_hcd
01:58:50 executing program 1:
r0 = socket(0x2, 0x10000001, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)
r1 = socket(0x2, 0x10000001, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10)

01:58:50 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x8006, &(0x7f0000000340), &(0x7f0000000380)=0x8)

[ 2142.605071][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2142.616365][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2142.626848][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2142.636188][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2142.760822][ T9602] usb 6-1: config 0 descriptor??
[ 2142.858804][ T8284] kvm [8283]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2142.940596][ T8284] kvm [8283]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2143.104541][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2143.111188][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2143.199682][ T9602] usb 6-1: USB disconnect, device number 29
[ 2143.290734][ T8284] kvm [8283]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2143.684088][ T9602] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2144.054198][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2144.066245][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2144.076448][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2144.086007][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2144.176790][ T9602] usb 6-1: config 0 descriptor??
[ 2144.724312][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2144.730748][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2144.785595][ T9602] usb 6-1: USB disconnect, device number 30
01:58:52 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:52 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000180)={0x0, 0x2, "9d8c"}, &(0x7f0000000240)=0xa)

01:58:52 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x32, &(0x7f0000000100), &(0x7f0000000040)=0x1e0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1202, &(0x7f0000000040)=ANY=[], 0x8)

01:58:52 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1202, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x8)

01:58:52 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2145.674591][ T8341] kvm [8333]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2145.869185][ T8341] kvm [8333]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:53 executing program 3:

01:58:53 executing program 2:

01:58:53 executing program 1:

[ 2146.167772][ T8341] kvm [8333]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2146.176200][ T9046] usb 6-1: new high-speed USB device number 31 using dummy_hcd
01:58:54 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2146.545586][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2146.557010][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2146.567232][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2146.576651][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
01:58:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2146.759679][ T9046] usb 6-1: config 0 descriptor??
[ 2147.100597][ T8375] kvm [8372]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2147.109986][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2147.116697][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2147.149412][ T9046] usb 6-1: USB disconnect, device number 31
[ 2147.189103][ T8375] kvm [8372]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2147.234662][ T8375] kvm [8372]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2147.584150][ T9046] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2147.944633][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2147.955871][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2147.966014][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2147.975330][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2148.047986][ T9046] usb 6-1: config 0 descriptor??
[ 2148.789834][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2148.797340][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2148.825099][ T9046] usb 6-1: USB disconnect, device number 32
01:58:56 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:58:56 executing program 3:

01:58:56 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

01:58:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$LOOP_SET_FD(r1, 0x5450, r2)

01:58:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:56 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2149.476775][ T8417] kvm [8413]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:57 executing program 3:

01:58:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2149.633680][ T8417] kvm [8413]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:58:57 executing program 1:

01:58:57 executing program 2:

[ 2149.920483][ T8417] kvm [8413]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2150.094155][ T9046] usb 6-1: new high-speed USB device number 33 using dummy_hcd
01:58:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:58:58 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fb"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2150.464621][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2150.476436][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2150.486580][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2150.495888][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2150.647424][ T9046] usb 6-1: config 0 descriptor??
[ 2150.790278][ T8442] kvm [8439]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2150.849177][ T8442] kvm [8439]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2150.930410][ T8442] kvm [8439]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2150.984510][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2150.991083][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2151.042996][ T9046] usb 6-1: USB disconnect, device number 33
[ 2151.473761][ T9046] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2151.834152][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2151.845290][ T9046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2151.855933][ T9046] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2151.865255][ T9046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.905922][ T9046] usb 6-1: config 0 descriptor??
[ 2152.634233][ T9046] usbhid 6-1:0.0: can't add hid device: -71
[ 2152.641471][ T9046] usbhid: probe of 6-1:0.0 failed with error -71
[ 2152.699902][ T9046] usb 6-1: USB disconnect, device number 34
01:59:00 executing program 3:

01:59:00 executing program 1:

01:59:00 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fb"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:00 executing program 2:

01:59:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:00 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:01 executing program 2:

[ 2153.456429][ T8489] kvm [8483]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
01:59:01 executing program 1:

01:59:01 executing program 3:

01:59:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2153.616459][ T8489] kvm [8483]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2153.817953][ T8489] kvm [8483]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
01:59:01 executing program 2:

[ 2153.866907][T20581] usb 6-1: new high-speed USB device number 35 using dummy_hcd
01:59:01 executing program 1:

01:59:01 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fb"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2154.235532][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2154.246731][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2154.256876][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2154.266291][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2154.468348][T20581] usb 6-1: config 0 descriptor??
[ 2154.656411][ T8512] kvm [8510]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2154.707625][ T8512] kvm [8510]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[ 2154.799055][ T8512] kvm [8510]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0
[ 2154.816779][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2154.823201][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2154.891830][T20581] usb 6-1: USB disconnect, device number 35
[ 2155.326852][T20581] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2155.734766][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2155.746074][T20581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2155.756220][T20581] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2155.765470][T20581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2155.809388][T20581] usb 6-1: config 0 descriptor??
[ 2156.524306][T20581] usbhid 6-1:0.0: can't add hid device: -71
[ 2156.530766][T20581] usbhid: probe of 6-1:0.0 failed with error -71
[ 2156.585509][T20581] usb 6-1: USB disconnect, device number 36
01:59:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:04 executing program 3:

01:59:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:04 executing program 1:

01:59:04 executing program 2:

01:59:04 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:05 executing program 3:

01:59:05 executing program 1:

01:59:05 executing program 2:

01:59:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2157.715423][ T9780] usb 6-1: new high-speed USB device number 37 using dummy_hcd
01:59:05 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:05 executing program 1:

[ 2158.074839][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2158.086066][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2158.096200][ T9780] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2158.105798][ T9780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2158.265545][ T9780] usb 6-1: config 0 descriptor??
[ 2158.605388][ T9780] usbhid 6-1:0.0: can't add hid device: -71
[ 2158.611965][ T9780] usbhid: probe of 6-1:0.0 failed with error -71
[ 2158.664267][ T9780] usb 6-1: USB disconnect, device number 37
[ 2159.114258][ T9780] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 2159.475729][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2159.486988][ T9780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2159.497338][ T9780] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2159.506752][ T9780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2159.555743][ T9780] usb 6-1: config 0 descriptor??
[ 2160.294332][ T9780] usbhid 6-1:0.0: can't add hid device: -71
[ 2160.300651][ T9780] usbhid: probe of 6-1:0.0 failed with error -71
[ 2160.419880][ T9780] usb 6-1: USB disconnect, device number 38
01:59:08 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:08 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)

01:59:08 executing program 3:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FIOCLEX(r0, 0x5451)

01:59:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:08 executing program 1:
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
pkey_free(0xffffffffffffffff)

01:59:08 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:08 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000000)=':{\'{/))-.)%\x00', 0x5)

01:59:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2161.554096][ T8650] usb 6-1: new high-speed USB device number 39 using dummy_hcd
01:59:09 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:59:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:09 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
exit_group(0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))

[ 2161.915074][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2161.926233][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2161.936357][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2161.946715][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2162.175055][ T8650] usb 6-1: config 0 descriptor??
[ 2162.514381][ T8650] usbhid 6-1:0.0: can't add hid device: -71
[ 2162.520824][ T8650] usbhid: probe of 6-1:0.0 failed with error -71
[ 2162.573398][ T8650] usb 6-1: USB disconnect, device number 39
[ 2163.024005][ T8650] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 2163.389215][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2163.400389][ T8650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2163.410597][ T8650] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2163.419880][ T8650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2163.508708][ T8650] usb 6-1: config 0 descriptor??
[ 2164.290082][ T8650] usbhid 6-1:0.0: can't add hid device: -71
[ 2164.297103][ T8650] usbhid: probe of 6-1:0.0 failed with error -71
[ 2164.344111][ T8650] usb 6-1: USB disconnect, device number 40
01:59:12 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00')
chdir(&(0x7f0000000000)='./file0\x00')

01:59:12 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:12 executing program 3:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000540)=""/188, 0x724)

01:59:12 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:59:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:59:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)

01:59:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:12 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0xf3b1}])

01:59:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200))
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200))
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080))

01:59:13 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="220000000000000401000000000000000000030000000001001c00fbff"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2165.434219][ T9602] usb 6-1: new high-speed USB device number 41 using dummy_hcd
01:59:13 executing program 1:
creat(0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x191)
close(0xffffffffffffffff)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$key(0xf, 0x3, 0x2)
request_key(0x0, 0x0, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

01:59:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2165.794819][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2165.806039][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2165.816336][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2165.825674][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.973490][ T9602] usb 6-1: config 0 descriptor??
[ 2166.314445][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2166.321781][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2166.380306][ T9602] usb 6-1: USB disconnect, device number 41
[ 2166.804746][ T9602] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2167.204181][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2167.215391][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2167.225907][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2167.235720][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2167.250511][ T9602] usb 6-1: config 0 descriptor??
[ 2167.995332][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2168.001762][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2168.089893][ T9602] usb 6-1: USB disconnect, device number 42
01:59:16 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

01:59:16 executing program 2:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00')
exit(0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1, 0x0, 0x0)

01:59:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:16 executing program 0:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00')
exit(0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1, 0x0, 0x0)

01:59:16 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
syncfs(r0)

01:59:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

01:59:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0xfffffffd}})

01:59:16 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x100020000)

01:59:16 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x108000}, 0x1c)

[ 2169.287721][ T9602] usb 6-1: new high-speed USB device number 43 using dummy_hcd
01:59:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

01:59:17 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0xfffffffd}})

[ 2169.462329][ T8808] SELinux:  Context binder state: is not valid (left unmapped).
[ 2169.654743][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2169.666316][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2169.676597][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2169.685977][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2169.883068][ T9602] usb 6-1: config 0 descriptor??
[ 2170.214891][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2170.221324][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2170.247399][ T9602] usb 6-1: USB disconnect, device number 43
[ 2170.724251][ T9602] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2171.096020][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2171.107174][ T9602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2171.117300][ T9602] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2171.126589][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2171.254715][ T9602] usb 6-1: config 0 descriptor??
[ 2171.994459][ T9602] usbhid 6-1:0.0: can't add hid device: -71
[ 2172.000774][ T9602] usbhid: probe of 6-1:0.0 failed with error -71
[ 2172.022572][ T9602] usb 6-1: USB disconnect, device number 44
01:59:20 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x5019, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000007c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000029002787bddb4543e396540d00000000", @ANYRES32=r2], 0x1ec}}, 0x0)

01:59:20 executing program 1:
syz_usb_connect(0x0, 0x15b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x8e, 0xc8, 0x11, 0x20, 0x1c9e, 0x9800, 0xd952, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1e, 0xdd, 0x0, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0x8d, 0xce, 0x76, 0x0, [@hid_hid={0x9, 0x21, 0x79c7}, @uac_as={[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "d3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "03d4d7d61d6e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "378dc2f259985bc76e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a675f9b4dc593e629c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x9, 0x0, "47c38fe1cd8dd3"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x19, 0x0, "2435561937163b500690a90235553b9b1adac79607cb24"}]}}]}}]}}]}}, 0x0)

01:59:20 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x84, {0x84, 0x0, "f731c184f533cd336ad13a62aaf8f27a865309ff4426dfa9ee8e08a4158c80d11f2913808c7078c62dfe886358d80d1c42d8c3473b7f00d24464ddb1ebf9bf9b72f330ec4629b8f217953469300e253788ecb252771642a9ec224e803bb1ab8f0f475bed05c941a65325be78cba84e61aa6145fc5052f470109bb8b3e0a2b3f5c6a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

01:59:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)

01:59:20 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0xfffffffd}})

[ 2172.628540][ T8861] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2172.700961][ T8864] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.0'.
01:59:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

01:59:20 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0xfffffffd}})

[ 2172.874674][T27072] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 2172.877196][ T9046] usb 4-1: new high-speed USB device number 52 using dummy_hcd
01:59:20 executing program 0:
syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x105182)
memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)

[ 2173.103686][T20297] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2173.118654][T27072] usb 2-1: Using ep0 maxpacket: 32
[ 2173.134793][ T9046] usb 4-1: Using ep0 maxpacket: 16
01:59:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

[ 2173.245077][T27072] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2173.254349][T27072] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 2173.268196][ T9046] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[ 2173.276620][ T9046] usb 4-1: config 0 has no interface number 0
[ 2173.282869][ T9046] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
01:59:20 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0xfffffffd}})

[ 2173.293133][ T9046] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[ 2173.302465][ T9046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2173.484857][T27072] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9800, bcdDevice=d9.52
[ 2173.494411][T27072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2173.502547][T27072] usb 2-1: Product: syz
[ 2173.505279][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2173.507022][T27072] usb 2-1: Manufacturer: syz
[ 2173.518094][T20297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2173.522513][T27072] usb 2-1: SerialNumber: syz
[ 2173.532434][T20297] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40
[ 2173.546394][T20297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2173.568553][ T9046] usb 4-1: config 0 descriptor??
01:59:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x78}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
mkdir(0x0, 0x26)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000340)={0x0, "119ce8c6e82332df8b6709347291df52457dbe50f80f3aa06748b2b65fcd3fd21dbeb9b2fc1ad35ae66ced05d630ec1da0bd9f22b58a756ddccbe1ed033b8d12fdabac9e60055722e75cf1fcaab70463e40747eded99895922270d46a606808ae66c41a9ed996b83b76b32ae3507aef3ead1874b1f3ab4ba53ec3299a974f7dd6df0088f994474e815da52f49a6603d1b3949110853f245577d4b239c8cd189b32ea05d4255d0c0894ae765b23ecdcb013912ef6fb7fa901cec2fe3aa51122ea64bdc82ca221dcdac7a48ea49d60c5ce21b52bff414a27a423d713a2001b2e09e8a0307fa14bf3a6e36b2ad4d2240eab7f3be0b9641096ac79082b22d9777d00000000f37094b9405d0ea6e357a43e9ce60478c318b88fd39b13a2e3cd9270d55dcc3dc7f5bda406c65a5bfae968192ad4fa5c1a08d18df0d322cda3c0cb20de007f8cf1ec6770a7b3b948bad34183f6f092aaa102088171379c3b80860195977917b5e5fa37173bcbee6fd8e7787087cdd708be56644a13b692e333277cd2032f21af4b7cb5da34ad627672737fda475cd401c92e1fa42daea4af04aa44855ce112da161d8cf28a1279be0a3da52f08434b2fd5d0531e6ea12c55826dc16835c9b8859da8a782ad6640e615874fc7468b31777d8c94b3888bcca57de3c9719e304d30bd622334419eb8c05bd4b0fe301ea78cd21b5700"})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00')
preadv(r4, &(0x7f00000017c0), 0x375, 0x40000000, 0x0)

[ 2173.740026][T27072] usb 2-1: config 0 descriptor??
[ 2173.798173][T27072] option 2-1:0.0: GSM modem (1-port) converter detected
[ 2173.827338][T20297] usb 6-1: config 0 descriptor??
[ 2173.834612][ T9046] gtco 4-1:0.219: Not enough data (need 133, have 129)
[ 2173.845609][ T9046] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input234
[ 2173.857445][ T9046] =====================================================
[ 2173.864478][ T9046] BUG: KMSAN: uninit-value in joydev_connect+0x10c0/0x1920
[ 2173.871698][ T9046] CPU: 1 PID: 9046 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0
[ 2173.880030][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2173.890137][ T9046] Workqueue: usb_hub_wq hub_event
[ 2173.895173][ T9046] Call Trace:
[ 2173.898494][ T9046]  dump_stack+0x21c/0x280
[ 2173.902859][ T9046]  kmsan_report+0xf7/0x1e0
[ 2173.907305][ T9046]  __msan_warning+0x58/0xa0
[ 2173.911839][ T9046]  joydev_connect+0x10c0/0x1920
[ 2173.916812][ T9046]  input_register_device+0x1d7b/0x21c0
[ 2173.922309][ T9046]  ? joydev_match+0x880/0x880
[ 2173.927075][ T9046]  gtco_probe+0x32ce/0x39b0
[ 2173.931685][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2173.936906][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2173.942749][ T9046]  ? store_tabletExecute+0x150/0x150
[ 2173.948111][ T9046]  usb_probe_interface+0xece/0x1550
[ 2173.953356][ T9046]  ? usb_register_driver+0x900/0x900
[ 2173.958749][ T9046]  really_probe+0xf20/0x20b0
[ 2173.963377][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2173.968625][ T9046]  driver_probe_device+0x293/0x390
[ 2173.973767][ T9046]  __device_attach_driver+0x63f/0x830
[ 2173.979176][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2173.984051][ T9046]  ? coredump_store+0xf0/0xf0
[ 2173.988762][ T9046]  __device_attach+0x4e2/0x7f0
[ 2173.993559][ T9046]  device_initial_probe+0x4a/0x60
[ 2173.998607][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.003478][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.009302][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.013860][ T9046]  usb_set_configuration+0x380f/0x3f10
[ 2174.019344][ T9046]  ? usb_set_configuration+0xb41/0x3f10
[ 2174.024952][ T9046]  usb_generic_driver_probe+0x138/0x300
[ 2174.030527][ T9046]  ? usb_choose_configuration+0xe70/0xe70
[ 2174.036273][ T9046]  usb_probe_device+0x311/0x490
[ 2174.042110][ T9046]  ? usb_register_device_driver+0x540/0x540
[ 2174.048024][ T9046]  really_probe+0xf20/0x20b0
[ 2174.052640][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.057862][ T9046]  driver_probe_device+0x293/0x390
[ 2174.062996][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.068399][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.073262][ T9046]  ? coredump_store+0xf0/0xf0
[ 2174.077968][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.082765][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.087808][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.092679][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.098501][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.103055][ T9046]  usb_new_device+0x1bd4/0x2a30
[ 2174.107952][ T9046]  hub_event+0x5e7b/0x8a70
[ 2174.112443][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.117658][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.123474][ T9046]  ? led_work+0x7c0/0x7c0
[ 2174.127905][ T9046]  process_one_work+0x1688/0x2140
[ 2174.132998][ T9046]  worker_thread+0x10bc/0x2730
[ 2174.137783][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.143027][ T9046]  kthread+0x551/0x590
[ 2174.147114][ T9046]  ? process_one_work+0x2140/0x2140
[ 2174.152330][ T9046]  ? kthread_blkcg+0x110/0x110
[ 2174.157114][ T9046]  ret_from_fork+0x1f/0x30
[ 2174.161552][ T9046] 
[ 2174.163886][ T9046] Uninit was stored to memory at:
[ 2174.168931][ T9046]  kmsan_internal_chain_origin+0xad/0x130
[ 2174.174667][ T9046]  __msan_chain_origin+0x50/0x90
[ 2174.179647][ T9046]  input_set_abs_params+0x352/0x540
[ 2174.184862][ T9046]  gtco_probe+0x2800/0x39b0
[ 2174.189400][ T9046]  usb_probe_interface+0xece/0x1550
[ 2174.194617][ T9046]  really_probe+0xf20/0x20b0
[ 2174.199218][ T9046]  driver_probe_device+0x293/0x390
[ 2174.204367][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.209756][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.214618][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.219391][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.224452][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.229311][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.233841][ T9046]  usb_set_configuration+0x380f/0x3f10
[ 2174.239311][ T9046]  usb_generic_driver_probe+0x138/0x300
[ 2174.244888][ T9046]  usb_probe_device+0x311/0x490
[ 2174.249751][ T9046]  really_probe+0xf20/0x20b0
[ 2174.254357][ T9046]  driver_probe_device+0x293/0x390
[ 2174.259507][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.264892][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.269758][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.274542][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.279583][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.284447][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.288964][ T9046]  usb_new_device+0x1bd4/0x2a30
[ 2174.293852][ T9046]  hub_event+0x5e7b/0x8a70
[ 2174.298284][ T9046]  process_one_work+0x1688/0x2140
[ 2174.303314][ T9046]  worker_thread+0x10bc/0x2730
[ 2174.308094][ T9046]  kthread+0x551/0x590
[ 2174.312176][ T9046]  ret_from_fork+0x1f/0x30
[ 2174.316587][ T9046] 
[ 2174.318913][ T9046] Uninit was stored to memory at:
[ 2174.323951][ T9046]  kmsan_internal_chain_origin+0xad/0x130
[ 2174.329705][ T9046]  __msan_chain_origin+0x50/0x90
[ 2174.334656][ T9046]  gtco_probe+0x1e77/0x39b0
[ 2174.339178][ T9046]  usb_probe_interface+0xece/0x1550
[ 2174.344394][ T9046]  really_probe+0xf20/0x20b0
[ 2174.348997][ T9046]  driver_probe_device+0x293/0x390
[ 2174.354127][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.359509][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.364382][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.369162][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.374204][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.379068][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.383586][ T9046]  usb_set_configuration+0x380f/0x3f10
[ 2174.389055][ T9046]  usb_generic_driver_probe+0x138/0x300
[ 2174.394630][ T9046]  usb_probe_device+0x311/0x490
[ 2174.399496][ T9046]  really_probe+0xf20/0x20b0
[ 2174.404100][ T9046]  driver_probe_device+0x293/0x390
[ 2174.409223][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.414606][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.419467][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.424244][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.429282][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.434142][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.438655][ T9046]  usb_new_device+0x1bd4/0x2a30
[ 2174.443517][ T9046]  hub_event+0x5e7b/0x8a70
[ 2174.447949][ T9046]  process_one_work+0x1688/0x2140
[ 2174.452980][ T9046]  worker_thread+0x10bc/0x2730
[ 2174.457751][ T9046]  kthread+0x551/0x590
[ 2174.461830][ T9046]  ret_from_fork+0x1f/0x30
[ 2174.466243][ T9046] 
[ 2174.468573][ T9046] Local variable ----globalval.i@gtco_probe created at:
[ 2174.475522][ T9046]  gtco_probe+0xda0/0x39b0
[ 2174.479967][ T9046]  gtco_probe+0xda0/0x39b0
[ 2174.484378][ T9046] =====================================================
[ 2174.491308][ T9046] Disabling lock debugging due to kernel taint
[ 2174.497468][ T9046] Kernel panic - not syncing: panic_on_warn set ...
[ 2174.504074][ T9046] CPU: 1 PID: 9046 Comm: kworker/1:4 Tainted: G    B             5.8.0-rc5-syzkaller #0
[ 2174.513788][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2174.523869][ T9046] Workqueue: usb_hub_wq hub_event
[ 2174.528901][ T9046] Call Trace:
[ 2174.532213][ T9046]  dump_stack+0x21c/0x280
[ 2174.536629][ T9046]  panic+0x4d7/0xef7
[ 2174.540566][ T9046]  ? add_taint+0x17c/0x210
[ 2174.545010][ T9046]  kmsan_report+0x1df/0x1e0
[ 2174.549542][ T9046]  __msan_warning+0x58/0xa0
[ 2174.554071][ T9046]  joydev_connect+0x10c0/0x1920
[ 2174.558972][ T9046]  input_register_device+0x1d7b/0x21c0
[ 2174.564461][ T9046]  ? joydev_match+0x880/0x880
[ 2174.569170][ T9046]  gtco_probe+0x32ce/0x39b0
[ 2174.573757][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.578970][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.584794][ T9046]  ? store_tabletExecute+0x150/0x150
[ 2174.590097][ T9046]  usb_probe_interface+0xece/0x1550
[ 2174.595329][ T9046]  ? usb_register_driver+0x900/0x900
[ 2174.600631][ T9046]  really_probe+0xf20/0x20b0
[ 2174.605242][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.610494][ T9046]  driver_probe_device+0x293/0x390
[ 2174.615638][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.621042][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.625907][ T9046]  ? coredump_store+0xf0/0xf0
[ 2174.630608][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.635406][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.646527][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.651400][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.657221][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.661774][ T9046]  usb_set_configuration+0x380f/0x3f10
[ 2174.667261][ T9046]  ? usb_set_configuration+0xb41/0x3f10
[ 2174.672863][ T9046]  usb_generic_driver_probe+0x138/0x300
[ 2174.678431][ T9046]  ? usb_choose_configuration+0xe70/0xe70
[ 2174.684168][ T9046]  usb_probe_device+0x311/0x490
[ 2174.689045][ T9046]  ? usb_register_device_driver+0x540/0x540
[ 2174.694958][ T9046]  really_probe+0xf20/0x20b0
[ 2174.699577][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.704798][ T9046]  driver_probe_device+0x293/0x390
[ 2174.709968][ T9046]  __device_attach_driver+0x63f/0x830
[ 2174.715379][ T9046]  bus_for_each_drv+0x2ca/0x3f0
[ 2174.720243][ T9046]  ? coredump_store+0xf0/0xf0
[ 2174.724948][ T9046]  __device_attach+0x4e2/0x7f0
[ 2174.729741][ T9046]  device_initial_probe+0x4a/0x60
[ 2174.734782][ T9046]  bus_probe_device+0x177/0x3d0
[ 2174.739652][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.745475][ T9046]  device_add+0x3b0e/0x40d0
[ 2174.750039][ T9046]  usb_new_device+0x1bd4/0x2a30
[ 2174.754934][ T9046]  hub_event+0x5e7b/0x8a70
[ 2174.759457][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.764674][ T9046]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 2174.770503][ T9046]  ? led_work+0x7c0/0x7c0
[ 2174.774850][ T9046]  process_one_work+0x1688/0x2140
[ 2174.779920][ T9046]  worker_thread+0x10bc/0x2730
[ 2174.784729][ T9046]  ? kmsan_get_metadata+0x116/0x180
[ 2174.789997][ T9046]  kthread+0x551/0x590
[ 2174.794085][ T9046]  ? process_one_work+0x2140/0x2140
[ 2174.799323][ T9046]  ? kthread_blkcg+0x110/0x110
[ 2174.804109][ T9046]  ret_from_fork+0x1f/0x30
[ 2174.809618][ T9046] Kernel Offset: disabled
[ 2174.814000][ T9046] Rebooting in 86400 seconds..