scriptor, different from the interface descriptor's value: 0
[ 2145.868389][ T8533] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2145.895070][ T8533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2145.897541][T23187] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 2145.916561][ T8533] usb 6-1: config 0 descriptor??
[ 2145.958404][ T8533] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2146.165539][T29367] usb 6-1: USB disconnect, device number 33
[ 2146.171838][T23187] usb 1-1: Using ep0 maxpacket: 32
[ 2146.297537][T23187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2146.316058][T23187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2146.335995][T23187] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2146.346564][T23187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2146.378900][T23187] usb 1-1: config 0 descriptor??
[ 2146.428169][T23187] hub 1-1:0.0: USB hub found
[ 2146.537235][T32589] usb 5-1: new high-speed USB device number 33 using dummy_hcd
23:23:47 executing program 3:
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af23, &(0x7f0000000340))

23:23:47 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x8, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:23:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400080, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xa4, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8710}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, "1138"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0xb, 0x1b]}, {0x8, 0x0, [0x1b, 0x13, 0x1a, 0xd]}, {0x5, 0x0, [0xa]}, {0xd, 0x0, [0x12, 0x1e, 0x3, 0x1, 0xf, 0x6, 0x1e, 0xb, 0x11]}, {0xa, 0x0, [0x1c, 0x1d, 0x1, 0x10, 0x1a, 0xe]}, {0x7, 0x0, [0xb, 0x1, 0x1d]}, {0x7, 0x0, [0x3, 0x2, 0x13]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x400a0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x805)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:23:47 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00')
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffffc}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x80000000}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40091}, 0x820)
r8 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

[ 2146.647335][T23187] hub 1-1:0.0: 1 port detected
[ 2146.705890][T11728] IPVS: ftp: loaded support on port[0] = 21
[ 2146.737122][T29367] usb 6-1: new high-speed USB device number 34 using dummy_hcd
23:23:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}], 0xffffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2146.977276][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2147.037202][T32589] usb 5-1: device not accepting address 33, error -71
23:23:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000000))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[ 2147.097456][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2147.128430][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2147.146708][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2147.165138][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2147.196605][T29367] usb 6-1: config 0 descriptor??
[ 2147.268334][T29367] hub 6-1:0.0: USB hub found
[ 2147.377651][ T7884] usb 1-1: USB disconnect, device number 35
[ 2147.392926][T23187] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2147.417227][T32589] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2147.487307][T29367] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2147.538783][T32589] usb 5-1: Using ep0 maxpacket: 16
[ 2147.621513][T11728] IPVS: ftp: loaded support on port[0] = 21
[ 2147.667906][T32589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2147.716238][T32589] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2147.774288][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2147.839995][T32589] usb 5-1: config 0 descriptor??
23:23:49 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
recvmmsg(r2, &(0x7f0000007f80)=[{{0x0, 0xc000000, &(0x7f0000000140)=[{&(0x7f0000000600)=""/128, 0x80}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1200}], 0x3}}], 0xc, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0907000000000000000001"], 0x14}}, 0x0)

23:23:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2147.918544][T32589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2148.123021][T32589] usb 5-1: USB disconnect, device number 34
[ 2148.347291][T29367] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 2148.597131][T29367] usb 1-1: Using ep0 maxpacket: 16
23:23:49 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:23:49 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x9, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:23:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0)

23:23:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x44400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x0, 0x25dfdbfd}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1ffffe, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0xffffffff, 0x0, 0x0, 0x80000000]})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x75)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2148.717143][T32589] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 2148.720039][T29367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2148.747579][T29367] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2148.779745][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2148.813361][T11855] IPVS: ftp: loaded support on port[0] = 21
[ 2148.826198][T29367] usb 1-1: config 0 descriptor??
[ 2148.888862][T29367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
23:23:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, 0x3fa, 0x205, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2148.988855][T32589] usb 5-1: Using ep0 maxpacket: 16
[ 2149.095942][T24361] usb 1-1: USB disconnect, device number 36
[ 2149.117381][ T7884] usb 6-1: reset high-speed USB device number 34 using dummy_hcd
[ 2149.137779][T32589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
23:23:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0)

[ 2149.180726][T32589] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2149.220128][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2149.257628][T32589] usb 5-1: config 0 descriptor??
[ 2149.318386][T32589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2149.360152][ T7884] usb 6-1: Using ep0 maxpacket: 16
[ 2149.398452][ T7884] usb 6-1: device firmware changed
[ 2149.416144][ T7884] usb 6-1: USB disconnect, device number 34
23:23:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0)

[ 2149.574219][T11855] IPVS: ftp: loaded support on port[0] = 21
[ 2149.657264][T24361] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 2149.817271][ T7884] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2149.907305][T24361] usb 1-1: Using ep0 maxpacket: 32
[ 2150.027434][T24361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2150.038513][  T323] tipc: TX() has been purged, node left!
[ 2150.044236][T24361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2150.054450][T24361] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2150.063598][ T7884] usb 6-1: Using ep0 maxpacket: 16
[ 2150.068910][T24361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2150.078255][T24361] usb 1-1: config 0 descriptor??
[ 2150.117929][T24361] hub 1-1:0.0: USB hub found
[ 2150.187297][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2150.200361][  T323] tipc: TX() has been purged, node left!
[ 2150.206057][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2150.215698][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2150.228017][ T7884] usb 6-1: config 0 descriptor??
[ 2150.275928][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2150.337383][T24361] hub 1-1:0.0: 1 port detected
[ 2150.367211][  T323] tipc: TX() has been purged, node left!
[ 2150.474076][T31849] usb 6-1: USB disconnect, device number 35
23:23:51 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x7, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:23:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast1, 0x7fff}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:23:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000001c0))
accept4$alg(r2, 0x0, 0x0, 0x1000)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe(&(0x7f0000000040))
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}})

23:23:51 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xa, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2150.537299][  T323] tipc: TX() has been purged, node left!
[ 2150.555442][T24583] usb 5-1: USB disconnect, device number 35
[ 2150.664102][T11976] IPVS: ftp: loaded support on port[0] = 21
[ 2151.037297][T31849] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2151.063132][ T8533] usb 1-1: USB disconnect, device number 37
[ 2151.067489][T24361] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2151.147314][T24583] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2151.254817][T11976] IPVS: ftp: loaded support on port[0] = 21
[ 2151.277186][T31849] usb 6-1: Using ep0 maxpacket: 32
[ 2151.390946][T24583] usb 5-1: Using ep0 maxpacket: 16
[ 2151.457412][T31849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2151.469019][T31849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2151.480223][T31849] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2151.490654][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.500229][T31849] usb 6-1: config 0 descriptor??
[ 2151.512342][T24583] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2151.525308][T24583] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2151.538294][T31849] hub 6-1:0.0: USB hub found
[ 2151.543103][T24583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.559335][T24583] usb 5-1: config 0 descriptor??
23:23:52 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2151.598729][T24583] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2151.757270][T31849] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2151.803911][T31849] usb 5-1: USB disconnect, device number 36
[ 2151.897259][T24583] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 2152.137225][T24583] usb 1-1: Using ep0 maxpacket: 16
[ 2152.257476][T24583] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2152.279233][T24583] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2152.294007][T24583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.306371][T24583] usb 1-1: config 0 descriptor??
[ 2152.358671][T24583] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2152.410661][T31849] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 2152.565342][T24583] usb 1-1: USB disconnect, device number 38
[ 2152.707164][T31849] usb 5-1: Using ep0 maxpacket: 32
[ 2152.847891][T31849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2152.867080][T31849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2152.876836][T31849] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2152.888611][T31849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.898944][T31849] usb 5-1: config 0 descriptor??
[ 2152.938093][T31849] hub 5-1:0.0: USB hub found
23:23:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:23:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPTPEER(r6, 0x5441, 0xb5d5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:23:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000001c0))
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe(&(0x7f0000000040))
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20004)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}})

23:23:54 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xb, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2153.076886][T12092] IPVS: ftp: loaded support on port[0] = 21
[ 2153.098050][T29367] usb 6-1: USB disconnect, device number 36
[ 2153.127285][T24583] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 2153.157415][T31849] hub 5-1:0.0: 4 ports detected
23:23:54 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

[ 2153.368459][T24583] usb 1-1: Using ep0 maxpacket: 32
[ 2153.437277][ T7884] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2153.492737][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2153.520007][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:23:54 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
close(r0)

[ 2153.562880][T24583] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2153.585487][T24583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2153.612997][T24583] usb 1-1: config 0 descriptor??
[ 2153.672475][T24583] hub 1-1:0.0: USB hub found
[ 2153.697280][ T7884] usb 6-1: Using ep0 maxpacket: 16
23:23:54 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
close(r0)

[ 2153.787951][T12092] IPVS: ftp: loaded support on port[0] = 21
[ 2153.822648][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2153.877378][T24583] hub 1-1:0.0: 1 port detected
[ 2153.895422][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2153.947263][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2154.001574][ T7884] usb 6-1: config 0 descriptor??
[ 2154.012096][T12093] debugfs: Directory '12093-4' with parent 'kvm' already present!
[ 2154.069359][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2154.256196][T31849] usb 5-1: USB disconnect, device number 37
[ 2154.277581][ T7884] usb 6-1: USB disconnect, device number 37
[ 2154.397278][  T323] tipc: TX() has been purged, node left!
[ 2154.547343][  T323] tipc: TX() has been purged, node left!
[ 2154.603107][T29367] usb 1-1: USB disconnect, device number 39
[ 2154.609302][T24583] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2154.707227][  T323] tipc: TX() has been purged, node left!
[ 2154.847187][ T7884] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 2154.887119][  T323] tipc: TX() has been purged, node left!
[ 2155.007193][T31849] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 2155.067195][  T323] tipc: TX() has been purged, node left!
[ 2155.087173][ T7884] usb 6-1: Using ep0 maxpacket: 32
[ 2155.207257][ T7884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2155.218296][ T7884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2155.230079][ T7884] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2155.240002][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2155.254033][ T7884] usb 6-1: config 0 descriptor??
[ 2155.267194][T31849] usb 5-1: Using ep0 maxpacket: 16
[ 2155.299261][ T7884] hub 6-1:0.0: USB hub found
[ 2155.407279][T31849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2155.420206][T31849] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2155.433759][T31849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2155.443495][T31849] usb 5-1: config 0 descriptor??
[ 2155.498360][T31849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2155.517367][ T7884] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
23:23:56 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xc, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:23:56 executing program 3:

23:23:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x2}}, 0x18, &(0x7f0000000300)={&(0x7f00000002c0)="ff403d942cf2", 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000d4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x4001, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x30402, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x8100)
ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:23:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:23:56 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0xfffffffffffffd09, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x0, 0x0, 0x3, "c09893e1", "fae9c917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 2155.554902][T29367] usb 5-1: USB disconnect, device number 38
[ 2155.702801][T12234] IPVS: ftp: loaded support on port[0] = 21
[ 2155.915123][T31849] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 2156.049009][T12234] IPVS: ftp: loaded support on port[0] = 21
[ 2156.167225][T31849] usb 1-1: Using ep0 maxpacket: 16
[ 2156.187252][T32592] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 2156.298509][T31849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2156.312237][T31849] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2156.322893][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2156.332888][T31849] usb 1-1: config 0 descriptor??
[ 2156.408529][T31849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2156.457238][T32592] usb 5-1: Using ep0 maxpacket: 32
[ 2156.577867][T32592] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2156.597165][T32592] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2156.616136][T32592] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2156.637122][T32592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2156.661039][ T8533] usb 1-1: USB disconnect, device number 40
[ 2156.673823][T32592] usb 5-1: config 0 descriptor??
23:23:57 executing program 3:

23:23:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$x25(r6, &(0x7f0000000440)=""/131, 0x83, 0x40000100, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xb5f3, 0x800000000, 0x0, 0xfb], 0x6000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0xc09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x240000000000], 0x0, 0x22004})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2156.728221][T32592] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2156.734236][T32592] hub: probe of 5-1:0.0 failed with error -5
23:23:57 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:23:57 executing program 3:

[ 2156.887773][ T7884] usb 6-1: USB disconnect, device number 38
[ 2156.951437][T12324] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
23:23:58 executing program 3:

23:23:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000440)={0x3, [0x1, 0x9, 0x100], [{0x5, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x8001, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x8}, {0x20, 0x10001, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x8, 0xffff7fff, 0x1, 0x0, 0x1, 0x1}, {0xf9, 0x1, 0x1, 0x0, 0x1}, {0x8001, 0xc1e, 0x0, 0x0, 0x1}, {0x0, 0xfffffff8, 0x0, 0x1}, {0x5, 0x10000, 0x0, 0x1, 0x1, 0x1}, {0xfffffff8, 0x257e, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x0, 0x1}], 0x9})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3]})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

23:23:58 executing program 3:

[ 2157.193366][ T8533] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 2157.277327][T29367] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 2157.437148][ T8533] usb 1-1: Using ep0 maxpacket: 32
[ 2157.517266][T29367] usb 6-1: Using ep0 maxpacket: 16
[ 2157.557597][ T8533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2157.581010][ T8533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2157.613322][ T8533] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2157.637564][T29367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2157.642929][ T8533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2157.659498][T29367] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2157.678778][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2157.701081][ T8533] usb 1-1: config 0 descriptor??
[ 2157.701279][T29367] usb 6-1: config 0 descriptor??
[ 2157.768350][T29367] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2157.784463][ T8533] hub 1-1:0.0: USB hub found
[ 2157.976159][T29367] usb 6-1: USB disconnect, device number 39
[ 2157.992078][ T8533] hub 1-1:0.0: 1 port detected
[ 2158.537248][T29367] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 2158.711285][T23035] usb 1-1: USB disconnect, device number 41
[ 2158.717467][ T8533] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2158.797218][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2158.917443][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2158.937117][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2158.946914][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2158.977114][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2158.998507][T29367] usb 6-1: config 0 descriptor??
[ 2159.038182][T29367] hub 6-1:0.0: USB hub found
[ 2159.257239][T29367] hub 6-1:0.0: 1 port detected
23:24:00 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xd, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:00 executing program 3:

23:24:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = msgget(0x2, 0x41)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000780)=""/4096)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:00 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d75001220000090581033523a0ada57266768a2e6c5d2cd286bec7adddb2e0213946ac3d9291d58fcbda83b5d6bd411bb0c666c75e576a5c98e2fd852ea22345cdee38a1a45af54d145314fc4a82b291d8fe80ac949fc254f56817fdd040"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, "c09aaee1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
dup3(r4, r5, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000180)={0xa, 0x4c67, 0x1})
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r7 = socket$inet6(0xa, 0x1, 0x10000000)
dup(r7)

23:24:00 executing program 3:

[ 2159.505387][T12412] IPVS: ftp: loaded support on port[0] = 21
[ 2159.557472][T32591] usb 5-1: USB disconnect, device number 39
23:24:00 executing program 3:

[ 2159.657346][ T7145] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 2159.739666][T29367] usb 6-1: USB disconnect, device number 40
[ 2159.887326][T32591] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2159.908817][ T7145] usb 1-1: Using ep0 maxpacket: 16
[ 2159.998140][  T323] tipc: TX() has been purged, node left!
[ 2160.029353][ T7145] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2160.050298][ T7145] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2160.073154][ T7145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2160.108278][ T7145] usb 1-1: config 0 descriptor??
[ 2160.146329][T12412] IPVS: ftp: loaded support on port[0] = 21
[ 2160.157185][T32591] usb 5-1: Using ep0 maxpacket: 16
[ 2160.159923][ T7145] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
23:24:01 executing program 3:

23:24:01 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2160.277836][T32591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2160.335712][T32591] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2160.368775][ T7145] usb 1-1: USB disconnect, device number 42
[ 2160.394836][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:24:01 executing program 3:

[ 2160.439588][T32591] usb 5-1: config 0 descriptor??
23:24:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20041, 0x0)

[ 2160.508756][T32591] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:24:01 executing program 3:

[ 2160.712715][ T7408] usb 5-1: USB disconnect, device number 40
[ 2160.737975][T31849] usb 6-1: new high-speed USB device number 41 using dummy_hcd
23:24:02 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xe, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:02 executing program 3:

23:24:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2160.953401][ T7145] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 2160.977148][T31849] usb 6-1: Using ep0 maxpacket: 16
[ 2161.107412][T31849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2161.130785][T31849] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2161.149326][T12532] IPVS: ftp: loaded support on port[0] = 21
[ 2161.155383][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2161.173132][T31849] usb 6-1: config 0 descriptor??
[ 2161.197188][ T7145] usb 1-1: Using ep0 maxpacket: 32
[ 2161.228678][T31849] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2161.287286][ T7408] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2161.317492][ T7145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2161.361736][ T7145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2161.406220][ T7145] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2161.426748][ T7145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2161.430903][T23035] usb 6-1: USB disconnect, device number 41
[ 2161.466663][ T7145] usb 1-1: config 0 descriptor??
[ 2161.528502][ T7145] hub 1-1:0.0: USB hub found
[ 2161.557186][ T7408] usb 5-1: Using ep0 maxpacket: 16
[ 2161.561480][T12532] IPVS: ftp: loaded support on port[0] = 21
[ 2161.677925][ T7408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2161.707776][ T7408] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2161.731049][ T7408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2161.747412][ T7145] hub 1-1:0.0: 1 port detected
[ 2161.765506][ T7408] usb 5-1: config 0 descriptor??
[ 2161.818362][ T7408] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2162.037124][T23035] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2162.277195][T23035] usb 6-1: Using ep0 maxpacket: 32
[ 2162.407517][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2162.427068][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2162.436826][T23035] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2162.449879][T23035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2162.463618][T23035] usb 6-1: config 0 descriptor??
[ 2162.475031][T29367] usb 1-1: USB disconnect, device number 43
[ 2162.481248][ T7145] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2162.518138][T23035] hub 6-1:0.0: USB hub found
[ 2162.727244][T23035] hub 6-1:0.0: 1 port detected
23:24:04 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2162.967136][  T323] tipc: TX() has been purged, node left!
[ 2163.127200][  T323] tipc: TX() has been purged, node left!
[ 2163.210555][T23035] usb 6-1: USB disconnect, device number 42
[ 2163.267592][  T323] tipc: TX() has been purged, node left!
[ 2163.297145][T23034] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 2163.427168][  T323] tipc: TX() has been purged, node left!
[ 2163.547175][T23034] usb 1-1: Using ep0 maxpacket: 16
[ 2163.677516][T23034] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2163.690352][T23034] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2163.714364][T23034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:24:04 executing program 3:
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x560a, &(0x7f0000000080))

23:24:04 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xf, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x260002, 0x0)
write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x6, 0x1, 0x83, 0x3f, 0x81}, 0x33, "7ea83e90395b4fc097c460dffe9a479ced8bbdfa92a3d80f3861b2dd4c3c3fc08d3127ad777ad112b5f3315e65f76a31879be6"}, 0x45)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000], 0x0, 0x28000})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2163.738544][T23034] usb 1-1: config 0 descriptor??
[ 2163.754192][T23035] usb 5-1: USB disconnect, device number 41
[ 2163.798249][T23034] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2163.876371][T12644] IPVS: ftp: loaded support on port[0] = 21
23:24:05 executing program 3:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
dup3(r1, r0, 0x0)

23:24:05 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x20, 0x10000}]}, 0xc, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000440)={0xfff, 0x4, 0x1, 0x1f})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[ 2163.990089][T29367] usb 1-1: USB disconnect, device number 44
23:24:05 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000180)=0x10001, 0x4)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a9f647197b083edc5857e00000982d0300", @ANYRES16, @ANYBLOB="08000500704de00000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004840)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x240000c0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}}, 0x20000000)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="006500060000005e9f90f1394fbb0b10471da2af66f61915b6e535c4bf19d38ea4197127374150916a5e8fa540c7c4d8280928be7c0dd2421f95589b024a7b964c750ef9c2f2023a2fa58c75138516ecffe53fe9f30990da4bfa7665476f2ac5393ba6e85c8ccf4d910f972110496fbd2591011f1ec0c5cbb854f5dd892dbb7bc2ddb654f4522057da"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:24:05 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$VT_RESIZE(r0, 0x560a, &(0x7f0000000080))

[ 2164.257170][T23034] usb 6-1: new high-speed USB device number 43 using dummy_hcd
23:24:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x10001, 0x0, &(0x7f0000000000/0x3000)=nil})
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRESDEC=r3], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x3c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}}, 0x4004080)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = semget(0x2, 0x1, 0x681)
semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f00000001c0)=""/45)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$unix(0x1, 0x5, 0x0)

[ 2164.447263][ T7408] usb 5-1: new high-speed USB device number 42 using dummy_hcd
23:24:05 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x202002)
keyctl$chown(0x4, r5, r3, r4)
fchown(0xffffffffffffffff, 0x0, r4)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[ 2164.497627][T12644] IPVS: ftp: loaded support on port[0] = 21
[ 2164.515033][T23034] usb 6-1: Using ep0 maxpacket: 16
[ 2164.557575][T29367] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 2164.647685][T23034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2164.693176][T23034] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2164.698052][ T7408] usb 5-1: Using ep0 maxpacket: 16
[ 2164.733373][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2164.778969][T23034] usb 6-1: config 0 descriptor??
[ 2164.797888][T29367] usb 1-1: Using ep0 maxpacket: 32
23:24:05 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shutdown(r0, 0x0)

[ 2164.838783][T23034] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2164.858174][ T7408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2164.905911][ T7408] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2164.917756][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2164.950586][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2164.974604][ T7408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.004378][T29367] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2165.026831][ T7408] usb 5-1: config 0 descriptor??
[ 2165.062163][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.098403][ T7408] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2165.126514][T29367] usb 1-1: config 0 descriptor??
[ 2165.179112][T24584] usb 6-1: USB disconnect, device number 43
[ 2165.192783][T29367] hub 1-1:0.0: USB hub found
[ 2165.309169][ T7408] usb 5-1: USB disconnect, device number 42
[ 2165.400555][T29367] hub 1-1:0.0: 1 port detected
[ 2165.433117][T12726] debugfs: Directory '12726-4' with parent 'kvm' already present!
[ 2165.610387][T24584] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2165.857123][T24584] usb 6-1: Using ep0 maxpacket: 32
[ 2165.867183][ T7408] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 2165.977456][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2165.997109][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2166.006857][T24584] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2166.027283][T24584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2166.043145][T24584] usb 6-1: config 0 descriptor??
[ 2166.098135][T24584] hub 6-1:0.0: USB hub found
[ 2166.107361][ T7408] usb 5-1: Using ep0 maxpacket: 16
[ 2166.237367][ T7408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2166.262912][ T7408] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2166.273726][ T7408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2166.286757][T24361] usb 1-1: USB disconnect, device number 45
[ 2166.303515][ T7408] usb 5-1: config 0 descriptor??
[ 2166.321738][T24584] hub 6-1:0.0: 1 port detected
[ 2166.368169][ T7408] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:24:07 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:07 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x0, {0x2, 0x0, @private}, 'ipvlan1\x00'})

23:24:07 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x12, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x8124, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r4, &(0x7f0000000040), 0x240)
r5 = fcntl$dupfd(r3, 0x406, r4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x3, 0x81, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)

[ 2166.800211][T24584] usb 6-1: USB disconnect, device number 44
[ 2166.805333][T12805] IPVS: ftp: loaded support on port[0] = 21
[ 2167.185142][T12805] IPVS: ftp: loaded support on port[0] = 21
[ 2167.191268][T31849] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 2167.259438][  T323] tipc: TX() has been purged, node left!
[ 2167.271530][  T323] tipc: TX() has been purged, node left!
23:24:08 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:08 executing program 3:
ptrace$cont(0x7, 0x0, 0x40000002, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4, 0x2})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0xfff, 0x4, 0x11, 0x58}, {0x0, 0x8, 0x7, 0xff}, {0x9, 0x1, 0x7}, {0x4, 0x9, 0x7, 0x4e}, {0xfffe, 0x7, 0x5, 0xad0}, {0x0, 0x1, 0x1, 0xf622}]})
clock_gettime(0x0, 0x0)
getpid()
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, 0x0, 0x0)
gettid()
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$RTC_UIE_OFF(r1, 0x7004)

23:24:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x1, 0x0, 0x40, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[ 2167.447706][T31849] usb 1-1: Using ep0 maxpacket: 16
[ 2167.577785][T31849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2167.598050][T31849] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2167.607696][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2167.627645][T31849] usb 1-1: config 0 descriptor??
[ 2167.667381][T24361] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2167.669143][T31849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2167.871665][T31849] usb 1-1: USB disconnect, device number 46
[ 2167.907145][T24361] usb 6-1: Using ep0 maxpacket: 16
23:24:09 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000400)="e6e8", 0x2, r2)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000180)='\x00', &(0x7f00000001c0))
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00M'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:24:09 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x13, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:09 executing program 3:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wg1\x00'}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

23:24:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x41})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2167.995509][T24583] usb 5-1: USB disconnect, device number 43
[ 2168.027643][T24361] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2168.057409][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2168.085324][T24361] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2168.131404][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2168.145120][T12928] IPVS: ftp: loaded support on port[0] = 21
[ 2168.156375][T24361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2168.207822][T24361] usb 6-1: config 0 descriptor??
23:24:09 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x0, 0x20803)

[ 2168.269701][T24361] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2168.471868][T32591] usb 6-1: USB disconnect, device number 45
[ 2168.478118][T31849] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 2168.497186][T24583] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 2168.711923][T12928] IPVS: ftp: loaded support on port[0] = 21
[ 2168.737119][T31849] usb 1-1: Using ep0 maxpacket: 32
[ 2168.767224][T24583] usb 5-1: Using ep0 maxpacket: 16
[ 2168.857642][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2168.875410][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2168.887875][T24583] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2168.899190][T31849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2168.916332][T24583] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2168.923692][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2168.943375][T24583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2168.950021][T31849] usb 1-1: config 0 descriptor??
[ 2169.007537][T31849] hub 1-1:0.0: USB hub found
[ 2169.008406][T24583] usb 5-1: config 0 descriptor??
[ 2169.079434][T24583] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2169.107770][T32591] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2169.217321][T31849] hub 1-1:0.0: 1 port detected
[ 2169.282685][T32589] usb 5-1: USB disconnect, device number 44
[ 2169.377133][T32591] usb 6-1: Using ep0 maxpacket: 32
[ 2169.497206][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2169.517099][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2169.526856][T32591] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2169.557319][T32591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2169.577812][T32591] usb 6-1: config 0 descriptor??
[ 2169.618150][T32591] hub 6-1:0.0: USB hub found
[ 2169.837288][T32591] hub 6-1:0.0: 1 port detected
[ 2169.897234][T32589] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 2170.082242][T32588] usb 1-1: USB disconnect, device number 47
[ 2170.157277][T32589] usb 5-1: Using ep0 maxpacket: 32
[ 2170.298023][T32589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2170.309153][T32589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2170.322405][T32589] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2170.332362][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2170.342462][T32589] usb 5-1: config 0 descriptor??
[ 2170.354724][T32591] usb 6-1: USB disconnect, device number 46
[ 2170.408138][T32589] hub 5-1:0.0: USB hub found
[ 2170.437385][ T8914] tipc: TX() has been purged, node left!
23:24:11 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:11 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x80, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$KVM_NMI(r1, 0xae9a)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc1c1, 0x0)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f00000001c0)={0x2, 0x5, 0x2e3eb6c, 0x9f8, 0x7d48, 0x2, 0x4})
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x200, 0x1, 0xfffffd8e})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

23:24:11 executing program 3:
r0 = inotify_init1(0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x10000)

23:24:11 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x14, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2170.607294][ T8914] tipc: TX() has been purged, node left!
[ 2170.617771][T32589] hub 5-1:0.0: 1 port detected
[ 2170.661173][T13046] IPVS: ftp: loaded support on port[0] = 21
[ 2170.730872][ T8914] tipc: TX() has been purged, node left!
[ 2170.743483][ T8914] tipc: TX() has been purged, node left!
23:24:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:11 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x2000, 0x0, 0x0})

23:24:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x20044830)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x56ffbdfbe46f8d21, 0x1, 0x2000, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfdc, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x18, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x2}, @timestamp, @window={0x3, 0x275e, 0x5}], 0x3)

[ 2170.947198][T24584] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 2171.061448][T13046] IPVS: ftp: loaded support on port[0] = 21
[ 2171.197291][T24584] usb 1-1: Using ep0 maxpacket: 16
[ 2171.257481][T32589] hub 5-1:0.0: activate --> -90
[ 2171.262455][T23034] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2171.317348][T24584] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2171.330348][T24584] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2171.341119][T24584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2171.354239][T24584] usb 1-1: config 0 descriptor??
[ 2171.403171][T24584] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2171.517117][T23034] usb 6-1: Using ep0 maxpacket: 16
[ 2171.604751][T24583] usb 1-1: USB disconnect, device number 48
[ 2171.657682][T23034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2171.671277][T23034] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2171.682134][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2171.691723][T23034] usb 6-1: config 0 descriptor??
[ 2171.738489][T23034] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2171.760606][T23034] usb 5-1: USB disconnect, device number 45
[ 2171.944775][T32591] usb 6-1: USB disconnect, device number 47
[ 2172.037268][T32589] usb 5-1-port1: config error
[ 2172.167103][T24583] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 2172.407103][T24583] usb 1-1: Using ep0 maxpacket: 32
[ 2172.527195][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2172.527415][T32591] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 2172.545696][T23034] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 2172.547105][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2172.576228][T24583] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2172.586108][T24583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2172.598164][T24583] usb 1-1: config 0 descriptor??
[ 2172.644638][T24583] hub 1-1:0.0: USB hub found
[ 2172.817174][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2172.822432][T32591] usb 6-1: Using ep0 maxpacket: 32
[ 2172.847225][T24583] hub 1-1:0.0: 1 port detected
[ 2172.947258][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2172.958260][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2172.977058][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2172.986797][T32591] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2173.007135][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2173.016197][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2173.027202][T32591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2173.040746][T23034] usb 5-1: config 0 descriptor??
[ 2173.046862][T32591] usb 6-1: config 0 descriptor??
23:24:14 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000040), 0x240)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000400000003000000097a52d7500122000009058103", @ANYBLOB="dd76ac8f2dc623b565be89faa3715026d1a97434b2ec45f29ef4f43077da4261bfb5534eb22eff554e57884b8c5caabcda5317eaf5712c863c55f4a06939c7f08af9190463bd014e", @ANYRESDEC, @ANYRES64=r0], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="beacaa44fd9a6fd454e9e25df57b5fd1463eece52857c215ac9e59ff226b7dba61be580500"/50], 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
fdatasync(r3)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

23:24:14 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x34}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x560a, &(0x7f0000000080))

23:24:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r5, 0xae9a)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00')
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000440)="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", &(0x7f0000000540)=""/170, &(0x7f0000000600)="3abe9df825170b19fdf2e90a60cd253ff86433630d8e1baa62730f2e7d96917fbc1d849069acc21efc109c2b3f1cfc3ef27bd5d385ae3f6ea75d9c65d4b6580c316d7c5ae44eba3e38a786af964d2f15d2c95c1634a2d7c7feea287e382139f7890df548f2b38e0ee1b5386f53bbcbac6c42e73334c74c40106903692a6059c6646f31a0fb", &(0x7f0000000000)="22cf718e79a0446c78c4b210dacd665e6fa31036ab0321fd803bc8e4c5a5223521eddd66cfb8ea53cb1923aba55f3392b163f87a0f61966378aad4b9977a0c", 0x7, r6, 0x4}, 0x38)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

23:24:14 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x15, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2173.097300][T23034] usb 5-1: can't set config #0, error -71
[ 2173.121867][T32591] hub 6-1:0.0: USB hub found
[ 2173.132924][T23034] usb 5-1: USB disconnect, device number 46
[ 2173.210472][T13172] IPVS: ftp: loaded support on port[0] = 21
23:24:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x3], 0x6000, 0x20000})
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x7a, &(0x7f0000000000/0x4000)=nil, 0x0)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x22}, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x3}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x8c}, @in={0x2, 0x4e24, @private=0xa010102}], 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2173.327251][T32591] hub 6-1:0.0: 1 port detected
[ 2173.637145][T23034] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2173.699893][T29367] usb 1-1: USB disconnect, device number 49
[ 2173.761976][T13214] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2173.782526][T13214] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2173.850779][T32591] usb 6-1: USB disconnect, device number 48
[ 2173.897174][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2173.972407][T13172] IPVS: ftp: loaded support on port[0] = 21
[ 2174.017800][T23034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2174.059662][T23034] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 4
[ 2174.108049][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2174.136359][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2174.165515][T23034] usb 5-1: config 0 descriptor??
23:24:15 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:15 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x41395527)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x34}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x560a, &(0x7f0000000080))

23:24:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r6, 0xc0045004, &(0x7f0000000000))
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x338}, 0xd9ae590d888d9731}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000001c0)=0xd8f8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:15 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2174.438968][T13177] udc-core: couldn't find an available UDC or it's busy
[ 2174.445973][T13177] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
23:24:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000340)={0x3, 0xc153, 0x200, 0x8001, 0x1})

[ 2174.587443][T29367] usb 1-1: new high-speed USB device number 50 using dummy_hcd
23:24:15 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x16, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2174.787216][T24583] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 2174.808276][ T8914] tipc: TX() has been purged, node left!
[ 2174.838025][T29367] usb 1-1: Using ep0 maxpacket: 16
23:24:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r2, &(0x7f0000000040), 0x240)
write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x136)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000580)={0x89b, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffe], 0x0, 0x200000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 2174.875754][T13297] IPVS: ftp: loaded support on port[0] = 21
[ 2174.943678][ T8914] tipc: TX() has been purged, node left!
[ 2174.951851][ T8914] tipc: TX() has been purged, node left!
[ 2174.961546][T29367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2174.991187][T29367] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2175.025940][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2175.037126][T24583] usb 6-1: Using ep0 maxpacket: 16
[ 2175.076943][T29367] usb 1-1: config 0 descriptor??
[ 2175.156521][T29367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2175.164649][T24583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2175.219903][T24583] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2175.280224][T24583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2175.300676][T24583] usb 6-1: config 0 descriptor??
[ 2175.348514][T24583] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2175.375094][T24583] usb 1-1: USB disconnect, device number 50
[ 2175.453297][T13297] IPVS: ftp: loaded support on port[0] = 21
[ 2175.556273][T29367] usb 6-1: USB disconnect, device number 49
[ 2175.917237][T24583] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 2176.107376][T29367] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 2176.157116][T24583] usb 1-1: Using ep0 maxpacket: 32
23:24:17 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x14, 0x1d, 0x1d2, &(0x7f00000005c0)="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"})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:24:17 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x4000)
write(r2, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

23:24:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r5, &(0x7f0000000440)=[{0x40, 0x7f, 0x20, 0x7, @time={0x0, 0x7}, {0xf8, 0xcd}, {0x1}, @addr={0x6, 0x3}}, {0xc0, 0x1f, 0x5, 0x6e, @time={0xd74, 0x8001}, {0x1, 0x50}, {0x4, 0x80}, @control={0x2b, 0x7, 0x9}}, {0x5, 0x2, 0x20, 0x40, @time={0x8000, 0x4}, {0x40, 0x1f}, {0x1, 0x36}, @control={0x9, 0x800, 0x8}}], 0x54)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x4]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00'}, &(0x7f0000000000)=0x54)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2176.277452][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2176.282047][T23034] usb 5-1: USB disconnect, device number 47
[ 2176.297629][T24583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2176.347104][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2176.356979][T24583] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2176.379056][T24583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2176.402755][T24583] usb 1-1: config 0 descriptor??
[ 2176.458048][T24583] hub 1-1:0.0: USB hub found
[ 2176.469836][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2176.497178][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2176.517254][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2176.531320][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2176.556552][T29367] usb 6-1: config 0 descriptor??
[ 2176.608212][T29367] hub 6-1:0.0: USB hub found
[ 2176.677431][T24583] hub 1-1:0.0: 1 port detected
23:24:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r3, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x4080000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 2176.827245][T29367] hub 6-1:0.0: 1 port detected
[ 2176.827257][T23034] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2177.099266][T23034] usb 5-1: device descriptor read/64, error 18
23:24:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000c62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2177.342669][T29367] usb 6-1: USB disconnect, device number 50
[ 2177.517322][T23034] usb 5-1: device descriptor read/64, error 18
[ 2177.533356][ T7145] usb 1-1: USB disconnect, device number 51
[ 2177.796969][T23034] usb 5-1: new high-speed USB device number 49 using dummy_hcd
23:24:19 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x0)

23:24:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvme-fabrics\x00', 0x100, 0x0)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000340)='./file0\x00', r4)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:19 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2178.107416][T23034] usb 5-1: device descriptor read/64, error 18
23:24:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/udp\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

[ 2178.377319][ T7145] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 2178.456688][T13502] splice write not supported for file /tty1 (pid: 13502 comm: syz-executor.3)
[ 2178.469885][T29367] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 2178.489763][T13503] splice write not supported for file /tty1 (pid: 13503 comm: syz-executor.3)
[ 2178.515469][T23034] usb 5-1: device descriptor read/64, error 18
[ 2178.630526][ T7145] usb 6-1: Using ep0 maxpacket: 16
[ 2178.637630][T23034] usb usb5-port1: attempt power cycle
[ 2178.717118][T29367] usb 1-1: Using ep0 maxpacket: 16
[ 2178.747470][ T7145] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2178.768328][ T7145] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2178.789538][ T7145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2178.820482][ T7145] usb 6-1: config 0 descriptor??
[ 2178.840965][T29367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2178.862890][T29367] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2178.874910][ T7145] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2178.898255][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2178.928798][T29367] usb 1-1: config 0 descriptor??
[ 2178.978382][T29367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2179.076700][ T7145] usb 6-1: USB disconnect, device number 51
[ 2179.186282][T29367] usb 1-1: USB disconnect, device number 52
[ 2179.347134][T23034] usb 5-1: new high-speed USB device number 50 using dummy_hcd
23:24:20 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x17, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x0, 0x20000000400, 0x5, 0x0, 0x100000001, 0x2, 0x20, 0x6, 0x6, 0x7, 0x3, 0x1, 0x10001, 0x3, 0x3], 0x5000, 0x60000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:20 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r2)
syz_open_procfs(0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

23:24:20 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2179.417090][    C1] raw-gadget gadget: ignoring, device is not running
[ 2179.471721][T23034] usb 5-1: device descriptor read/8, error -71
[ 2179.497358][ T8914] tipc: TX() has been purged, node left!
[ 2179.657165][ T7145] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 2179.662432][T13541] IPVS: ftp: loaded support on port[0] = 21
[ 2179.707395][T23034] usb 5-1: device descriptor read/8, error -71
23:24:20 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r2)
syz_open_procfs(0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[ 2179.757302][T29367] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 2179.907140][ T7145] usb 6-1: Using ep0 maxpacket: 32
[ 2180.007411][T29367] usb 1-1: Using ep0 maxpacket: 32
[ 2180.027769][ T7145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2180.044765][ T7145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2180.070793][ T7145] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2180.087404][ T7145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2180.110183][ T7145] usb 6-1: config 0 descriptor??
[ 2180.138172][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2180.156410][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2180.169142][ T7145] hub 6-1:0.0: USB hub found
[ 2180.191612][T29367] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2180.197293][T13541] IPVS: ftp: loaded support on port[0] = 21
[ 2180.202752][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2180.217316][T23034] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 2180.229866][T29367] usb 1-1: config 0 descriptor??
[ 2180.279921][T29367] hub 1-1:0.0: USB hub found
[ 2180.321066][T23034] usb 5-1: Invalid ep0 maxpacket: 23
[ 2180.326668][T23034] usb usb5-port1: unable to enumerate USB device
[ 2180.387163][ T7145] hub 6-1:0.0: 1 port detected
[ 2180.497291][T29367] hub 1-1:0.0: 1 port detected
23:24:21 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x18, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40a081, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000340)={0x14, 0x3c, &(0x7f00000001c0)="f2356c91582930d4decd1cd8d9d000a813098b47f10258bce2aa1b7ddc2dbf1f9eb54ac1e4c86cc361727dafe1792c376ea03c5d83be8934fda9a649"})
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2180.660373][T13611] IPVS: ftp: loaded support on port[0] = 21
[ 2180.909929][ T7145] usb 6-1: USB disconnect, device number 52
[ 2181.071782][T13611] IPVS: ftp: loaded support on port[0] = 21
[ 2181.349801][T23034] usb 1-1: USB disconnect, device number 53
23:24:22 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
uselib(&(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:22 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x19, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:22 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2181.934097][T13689] IPVS: ftp: loaded support on port[0] = 21
23:24:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x4080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x6, 0x9a, &(0x7f0000000440)="50ede370cdc35ea2fb36cdcf5d0f8ad6792b50a84ac783b0fd9ea01027475a87129918609a2eec75966a2422b110c37f618bf2dc7555612e9147eca1c987e9ade20e64cb9d1a0e805a96d829d7542a4a470918b09a57d14be8a5be65966ba91ea2d8b59a55b16aba4f0e2c141771e47c4750585fbc2ec7092cd2f3bf9eeb3434f9444b0a2714a9b5c7ceb9e09504cc54618961c609fb66234e02"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2182.197338][ T7145] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 2182.247258][T32591] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 2182.419649][T13689] IPVS: ftp: loaded support on port[0] = 21
[ 2182.451569][ T7145] usb 6-1: Using ep0 maxpacket: 16
23:24:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x581180, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x4000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000000)={0x1, 0x200, 0x2340})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000780)=""/4096)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x141e0}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x9], 0x1000, 0x81})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2182.466452][ T8914] tipc: TX() has been purged, node left!
[ 2182.475991][ T8914] tipc: TX() has been purged, node left!
[ 2182.498413][ T8914] tipc: TX() has been purged, node left!
[ 2182.517153][T32591] usb 1-1: Using ep0 maxpacket: 16
[ 2182.534248][ T8914] tipc: TX() has been purged, node left!
23:24:23 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100ffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103000000000000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r8, &(0x7f0000000040), 0x240)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f00000001c0)=0x8)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000180)={0x3, 0x6})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2182.567513][ T7145] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2182.613822][ T7145] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2182.657649][T32591] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2182.666525][ T7145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2182.707801][T32591] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2182.715196][ T7145] usb 6-1: config 0 descriptor??
[ 2182.740908][T32591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2182.764511][T32591] usb 1-1: config 0 descriptor??
[ 2182.773606][ T7145] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:24:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:23 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r2)
syz_open_procfs(0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[ 2182.808882][T32591] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2182.833336][ T8914] tipc: TX() has been purged, node left!
[ 2182.976678][ T7145] usb 6-1: USB disconnect, device number 53
[ 2183.012605][T32592] usb 1-1: USB disconnect, device number 54
[ 2183.067165][T23034] usb 5-1: new high-speed USB device number 52 using dummy_hcd
23:24:24 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x21, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2183.363429][T23034] usb 5-1: device descriptor read/64, error 18
[ 2183.469673][T13805] IPVS: ftp: loaded support on port[0] = 21
[ 2183.554281][ T7145] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 2183.597896][T32592] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 2183.773269][T23034] usb 5-1: device descriptor read/64, error 18
[ 2183.797360][ T7145] usb 6-1: Using ep0 maxpacket: 32
[ 2183.858452][T32592] usb 1-1: Using ep0 maxpacket: 32
[ 2183.876687][T13805] IPVS: ftp: loaded support on port[0] = 21
23:24:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x2000})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2183.917488][ T7145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2183.931305][ T7145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2183.941207][ T7145] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2183.966085][ T7145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2183.986527][ T7145] usb 6-1: config 0 descriptor??
[ 2183.998043][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2184.019742][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2184.028365][ T7145] hub 6-1:0.0: USB hub found
[ 2184.047233][T23034] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 2184.092637][T32592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2184.144642][T32592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2184.184933][T32592] usb 1-1: config 0 descriptor??
23:24:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000000)=0x5, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2184.247565][ T7145] hub 6-1:0.0: 1 port detected
[ 2184.248273][T32592] hub 1-1:0.0: USB hub found
[ 2184.337173][T23034] usb 5-1: device descriptor read/64, error 18
[ 2184.457299][T32592] hub 1-1:0.0: 1 port detected
[ 2184.727175][T23034] usb 5-1: device descriptor read/64, error 18
[ 2184.770107][ T7145] usb 6-1: USB disconnect, device number 54
[ 2184.847645][T23034] usb usb5-port1: attempt power cycle
[ 2185.309019][T32592] usb 1-1: USB disconnect, device number 55
[ 2185.558374][T23034] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 2185.717181][T23034] usb 5-1: device descriptor read/8, error -71
23:24:26 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
getrlimit(0x6, &(0x7f00000001c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:26 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x22, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:26 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="b272d61e2d39d51b0e873dd22663066096280afbff5e9f5ccddd72f09893e9bc774bcd268b30009982d30f632ea0db8e4ba8ded509eaf3ac5a74bfc57f8ed7cf69bd5e76101b20d187140374f548245af514ceeea3f759d97881fe0ac031e3a307fec8f83b50ba27a04188bc3486ce10e26bb21d3f91d39966cea2d385ce35f9908882273923c7bfd903747c6bb6773da4a963cd06e75826a69aeaa400d254418c371ffa"], 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000040)=0xfffeffff)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2185.927270][T23034] usb 5-1: device descriptor read/8, error -71
[ 2185.941041][T13909] IPVS: ftp: loaded support on port[0] = 21
23:24:27 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000e0000000000000000000000850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000440)="37716b98ef91d5012543dd52e3d0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

23:24:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x34)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000580)={0xa, 0x4, {0x51, 0x5, 0x2, {0x8, 0x8000}, {0xffff, 0x1f}, @period={0x5d, 0x3, 0x63eb, 0x1, 0x4, {0x800, 0x7ff, 0x2, 0x20}, 0x6, &(0x7f0000000500)=[0x6743, 0x0, 0x401, 0x7f, 0x1, 0x241c]}}, {0x57, 0x1ff, 0xfff7, {0xb26, 0x6d6}, {0x4, 0x43}, @period={0x0, 0xfe33, 0x3, 0x80, 0x200, {0x9, 0xd4b3, 0x0, 0x3}, 0x5, &(0x7f0000000540)=[0x401, 0x2, 0x9c4, 0x2, 0xf800]}}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x12002, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", ""]}, 0x14}}, 0x8000)

[ 2186.187409][T32592] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 2186.257324][T32591] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 2186.427321][T23034] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 2186.435043][T32592] usb 6-1: Using ep0 maxpacket: 16
23:24:27 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0)
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

[ 2186.513348][T32591] usb 1-1: Using ep0 maxpacket: 16
[ 2186.529503][T23034] usb 5-1: Using ep0 maxpacket: 16
23:24:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf25180000000a000600aaaaaaaaaabb000008000300", @ANYRES32=0x0, @ANYBLOB="0a39000000aaaaaaaaaa00a817180032dac37d21ae26180f2998efe8c65c859e0e487087d01abb92bc913f50aa57d2f408f2bc056cba0dc649daeca9e4749f464330ec1da180a7fe3ac6dc79f4004768501ca25ba71ccd9940ec81d8c73c37d4aed39043a1608433feca7de4b149b5b4e6efb0cf790e154e636dbfd535c19588bc077ae86fc9e52c616d242ddcc0fc5e564adc1581b638d914ef2b2b52", @ANYRES32=r5, @ANYBLOB="0c0099000000008004000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004854}, 0x8044000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x2000000000, 0x4000000000000, 0x0, 0x0, 0xdb, 0x0, 0x100], 0x10000, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2186.568313][T32592] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2186.598315][T32592] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2186.642250][T32592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2186.642300][T13909] IPVS: ftp: loaded support on port[0] = 21
[ 2186.669168][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2186.683579][T32591] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2186.715215][T32592] usb 6-1: config 0 descriptor??
[ 2186.739625][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2186.754633][T32591] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2186.769549][T32592] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2186.795842][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2186.820033][T32591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2186.852531][T23034] usb 5-1: config 0 descriptor??
[ 2186.875736][T32591] usb 1-1: config 0 descriptor??
23:24:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)={0x2, 0x0, [{0x1}, {0xd}]})

[ 2186.939148][T23034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2186.950057][T32591] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2187.018305][T32591] usb 6-1: USB disconnect, device number 55
23:24:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000000))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x1, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
syncfs(r0)
msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 2187.147613][T32592] usb 1-1: USB disconnect, device number 56
[ 2187.207537][T23034] usb 5-1: USB disconnect, device number 55
23:24:28 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
ftruncate(r2, 0xa)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x87ffffc)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
pipe(0x0)

[ 2187.411481][T14046] FAT-fs (loop3): bogus number of FAT sectors
[ 2187.433460][T14046] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2187.519153][   T29] audit: type=1800 audit(1594509868.585:32): pid=14051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16380 res=0
[ 2187.547439][T32591] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 2187.587424][   T29] audit: type=1800 audit(1594509868.585:33): pid=14051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16380 res=0
[ 2187.620011][T14046] FAT-fs (loop3): bogus number of FAT sectors
[ 2187.626118][T14046] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2187.667394][ T8914] tipc: TX() has been purged, node left!
[ 2187.733632][T32592] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 2187.772816][T23034] usb 5-1: new low-speed USB device number 56 using dummy_hcd
[ 2187.827153][T32591] usb 6-1: Using ep0 maxpacket: 32
[ 2187.850299][ T8914] tipc: TX() has been purged, node left!
[ 2187.957706][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2187.969247][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2187.981288][T32591] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2187.987833][ T8914] tipc: TX() has been purged, node left!
[ 2187.992820][T32591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2188.004672][T32592] usb 1-1: Using ep0 maxpacket: 32
[ 2188.011238][T32591] usb 6-1: config 0 descriptor??
[ 2188.026902][T23034] usb 5-1: Invalid ep0 maxpacket: 16
[ 2188.068509][T32591] hub 6-1:0.0: USB hub found
[ 2188.137294][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2188.148306][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2188.148327][ T8914] tipc: TX() has been purged, node left!
[ 2188.160622][T32592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2188.173348][T32592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2188.185401][T32592] usb 1-1: config 0 descriptor??
[ 2188.193579][T23034] usb 5-1: new low-speed USB device number 57 using dummy_hcd
[ 2188.239207][T32592] hub 1-1:0.0: USB hub found
[ 2188.277291][T32591] hub 6-1:0.0: 1 port detected
[ 2188.317149][ T8914] tipc: TX() has been purged, node left!
[ 2188.437125][T23034] usb 5-1: Invalid ep0 maxpacket: 16
[ 2188.442639][T23034] usb usb5-port1: attempt power cycle
[ 2188.449902][T32592] hub 1-1:0.0: 1 port detected
[ 2188.819271][T32591] usb 6-1: USB disconnect, device number 56
[ 2189.338282][T32591] usb 1-1: USB disconnect, device number 57
23:24:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:30 executing program 3:
ftruncate(0xffffffffffffffff, 0x8200)
ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000780)=""/4096)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000380)=ANY=[@ANYBLOB="f6f1c3"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="004e7c7c5b8a00001c0012000c000100626f"], 0x3c}}, 0x0)

23:24:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r4, &(0x7f0000000040), 0x240)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000340)={0x990000, 0x4, 0x3f, <r5=>r4, 0x0, &(0x7f00000001c0)={0x9a090f, 0x101, [], @p_u16=&(0x7f0000000000)=0x800}})
accept4$rose(r5, &(0x7f0000000440)=@short={0xb, @dev}, &(0x7f0000000480)=0x1c, 0x1800)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffd}, 0x0, 0x3, 0x0, 0x0, 0x10000000000000, 0x8000010}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:30 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x29, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:30 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x2, 0x6, 0x6, 0x4, 0xfffffffc, 0x3bd})
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r5, &(0x7f0000000040), 0x240)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:24:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2189.940463][T14095] IPVS: ftp: loaded support on port[0] = 21
[ 2190.217521][T23186] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 2190.228214][T23034] usb 6-1: new high-speed USB device number 57 using dummy_hcd
23:24:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xfffffffc}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0xfffa, 'FF\x00', 0x9f, 0x80})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3], 0x0, 0x111041})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x6, 0x0, 0x0, 0xd, 0x0, 0x41c2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20000000000000d, 0xfffffffffffffffb}, 0x20, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$RTC_WIE_ON(r4, 0x700f)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x800000000000, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001], 0x0, 0x340})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2190.357897][T32588] usb 1-1: new high-speed USB device number 58 using dummy_hcd
23:24:31 executing program 3:
r0 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0)
ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0)

[ 2190.457194][T23186] usb 5-1: Using ep0 maxpacket: 16
[ 2190.487300][T23034] usb 6-1: Using ep0 maxpacket: 16
[ 2190.584294][T23186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2190.615663][T23186] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2190.627234][T23034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2190.640394][T32588] usb 1-1: Using ep0 maxpacket: 16
[ 2190.643590][T23186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.675200][T23034] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2190.723471][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.733119][T23186] usb 5-1: config 0 descriptor??
[ 2190.777836][T32588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2190.793134][T23186] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2190.808167][T14095] IPVS: ftp: loaded support on port[0] = 21
[ 2190.819278][T23034] usb 6-1: config 0 descriptor??
23:24:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xdc85}, 0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x42c000, 0x0)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000700)=[0x0, 0x1], 0x2)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x800)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
socket$caif_stream(0x25, 0x1, 0x2)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2190.834947][T32588] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:24:31 executing program 3:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x8caf, <r0=>0xffffffffffffffff}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x2, 0x14}, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
creat(&(0x7f00000004c0)='./file0\x00', 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x574)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 2190.882012][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.908410][T23034] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2190.949722][T32588] usb 1-1: config 0 descriptor??
[ 2190.997993][T23186] usb 5-1: USB disconnect, device number 59
[ 2191.010239][T32588] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2191.089067][T14185] FAT-fs (loop3): bogus number of FAT sectors
[ 2191.097388][T14185] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2191.113102][T32588] usb 6-1: USB disconnect, device number 57
23:24:32 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x30, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2191.210995][T32589] usb 1-1: USB disconnect, device number 58
[ 2191.230822][   T29] audit: type=1804 audit(1594509872.295:34): pid=14219 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1254/file0/bus" dev="sda1" ino=16378 res=1
23:24:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2080, 0x0)
read$midi(r3, &(0x7f0000000440)=""/85, 0x55)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2191.353209][   T29] audit: type=1800 audit(1594509872.295:35): pid=14219 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16378 res=0
[ 2191.379611][T14222] IPVS: ftp: loaded support on port[0] = 21
[ 2191.617658][T23186] usb 5-1: new low-speed USB device number 60 using dummy_hcd
[ 2191.707229][T32588] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2191.797337][T32589] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 2191.829174][T14185] FAT-fs (loop3): bogus number of FAT sectors
[ 2191.863274][   T29] audit: type=1804 audit(1594509872.925:36): pid=14263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1254/file0/bus" dev="sda1" ino=16378 res=1
[ 2191.880276][T14185] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2191.893165][T23186] usb 5-1: Invalid ep0 maxpacket: 16
[ 2191.977149][T32588] usb 6-1: Using ep0 maxpacket: 32
[ 2192.057111][T23186] usb 5-1: new low-speed USB device number 61 using dummy_hcd
[ 2192.057251][T32589] usb 1-1: Using ep0 maxpacket: 32
[ 2192.070617][   T29] audit: type=1804 audit(1594509872.995:37): pid=14262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1254/file0/file0" dev="sda1" ino=16368 res=1
[ 2192.117717][T32588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2192.161250][T32588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2192.197203][   T29] audit: type=1804 audit(1594509873.055:38): pid=14264 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1254/file0/bus" dev="sda1" ino=16378 res=1
[ 2192.199059][T32588] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2192.237585][T32589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2192.256110][T32589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2192.279695][T32589] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2192.302629][T32589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2192.307237][T23186] usb 5-1: Invalid ep0 maxpacket: 16
[ 2192.313817][T32588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2192.316301][T23186] usb usb5-port1: attempt power cycle
[ 2192.328376][T32589] usb 1-1: config 0 descriptor??
[ 2192.337184][   T29] audit: type=1800 audit(1594509873.055:39): pid=14264 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16378 res=0
[ 2192.344113][T32588] usb 6-1: config 0 descriptor??
[ 2192.373907][T14222] IPVS: ftp: loaded support on port[0] = 21
[ 2192.418353][T32589] hub 1-1:0.0: USB hub found
[ 2192.434937][T32588] hub 6-1:0.0: USB hub found
[ 2192.627463][T32589] hub 1-1:0.0: 1 port detected
[ 2192.647319][T32588] hub 6-1:0.0: 1 port detected
[ 2193.285185][T32592] usb 6-1: USB disconnect, device number 58
[ 2193.297571][T31849] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2193.528317][T32592] usb 1-1: USB disconnect, device number 59
[ 2193.640073][ T8914] tipc: TX() has been purged, node left!
[ 2193.807107][ T8914] tipc: TX() has been purged, node left!
[ 2193.967194][ T8914] tipc: TX() has been purged, node left!
23:24:35 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
r1 = dup2(r0, r0)
connect$netlink(r1, &(0x7f0000000280)=@unspec, 0x6)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:24:35 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x31, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:35 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="d4e67d966d4ecb20f9a992eab64c7c931962bfbc3078bf77e8c2e6c0e69abfb515f2474f35301191d39c78e4d90832e8dae0e194f1b59007aefd98f2709fed0658e9e3b92d976f1ea77615e364e094af3ab3984af7d783c34f33151aae0dbd996462bd99420cc7668837e6c1d2f56127766b38c378f9f3c007a615b2f07614b2b925810722b7b325509e58db3172c7750e10229ddfeec96570d8181483756d", 0x9f)

23:24:35 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0))
r1 = dup(r0)
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = gettid()
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0)
tkill(r2, 0x14)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

[ 2194.127358][ T8914] tipc: TX() has been purged, node left!
[ 2194.156067][T14328] IPVS: ftp: loaded support on port[0] = 21
[ 2194.248931][ T8914] tipc: TX() has been purged, node left!
[ 2194.397143][T23186] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 2194.417295][   T12] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 2194.467613][T29367] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 2194.577857][T14328] IPVS: ftp: loaded support on port[0] = 21
[ 2194.648324][T23186] usb 5-1: Using ep0 maxpacket: 16
[ 2194.677780][   T12] usb 6-1: Using ep0 maxpacket: 16
[ 2194.730038][T29367] usb 1-1: Using ep0 maxpacket: 16
[ 2194.767919][T23186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2194.782466][T23186] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2194.792174][T23186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.804423][   T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2194.819766][   T12] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2194.834578][T23186] usb 5-1: config 0 descriptor??
[ 2194.840323][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.860459][T29367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2194.879845][T23186] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2194.898007][   T12] usb 6-1: config 0 descriptor??
[ 2194.918010][T29367] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2194.931164][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.948326][   T12] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2194.965084][T29367] usb 1-1: config 0 descriptor??
[ 2195.008571][T29367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2195.082558][T29367] usb 5-1: USB disconnect, device number 63
23:24:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0)
mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[ 2195.154237][T32588] usb 6-1: USB disconnect, device number 59
[ 2195.213643][   T12] usb 1-1: USB disconnect, device number 60
[ 2195.647468][T29367] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 2195.727119][T32588] usb 6-1: new high-speed USB device number 60 using dummy_hcd
23:24:36 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/57)
ioctl$int_in(r0, 0x4b66, 0x0)

[ 2195.797327][   T12] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 2195.897196][T29367] usb 5-1: Using ep0 maxpacket: 32
[ 2195.967134][T32588] usb 6-1: Using ep0 maxpacket: 32
[ 2196.017952][T29367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.041986][T29367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2196.057149][   T12] usb 1-1: Using ep0 maxpacket: 32
23:24:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x30, 0x4)
bind$inet(r0, &(0x7f0000000940)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2196.088092][T29367] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2196.107453][T32588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.138103][T29367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.139377][T32588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2196.177432][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.202504][T29367] usb 5-1: config 0 descriptor??
[ 2196.223377][T32588] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2196.229325][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2196.268608][T32588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.299186][T29367] hub 5-1:0.0: USB hub found
[ 2196.316394][T32588] usb 6-1: config 0 descriptor??
[ 2196.348027][   T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2196.398043][T32588] hub 6-1:0.0: USB hub found
[ 2196.407654][   T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.472778][   T12] usb 1-1: config 0 descriptor??
[ 2196.521673][T29367] hub 5-1:0.0: 1 port detected
[ 2196.548664][   T12] hub 1-1:0.0: USB hub found
[ 2196.607366][T32588] hub 6-1:0.0: 1 port detected
23:24:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x12511, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x0, 0x20000})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x800)

[ 2196.767529][   T12] hub 1-1:0.0: 1 port detected
[ 2196.821974][T14448] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
23:24:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000000))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x2000000000000000, 0x4, 0x0, 0x115, 0x0, 0x0, 0x4]})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

23:24:38 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1}, 0x10)
write(r0, &(0x7f0000000040)="1c0000004a00bd7c5e99f407001904000a000000000074f87ba9117b", 0x1c)

[ 2197.167466][T29367] hub 5-1:0.0: activate --> -90
[ 2197.254989][ T7884] usb 6-1: USB disconnect, device number 60
[ 2197.267213][T32588] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2197.658676][ T7884] usb 1-1: USB disconnect, device number 61
[ 2197.714978][T32588] usb 5-1: USB disconnect, device number 64
[ 2197.970528][T29367] usb 5-1-port1: config error
23:24:39 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001e000902000000000000000007", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)

[ 2198.242099][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2198.281757][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2198.530620][T32588] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 2198.577116][ T7884] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 2198.807268][T32588] usb 1-1: Using ep0 maxpacket: 16
[ 2198.817286][ T7884] usb 5-1: Using ep0 maxpacket: 16
23:24:39 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x32, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2198.927575][T32588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2198.937270][ T7884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2198.955705][T32588] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2198.957300][ T7884] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2198.988548][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2198.990808][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2198.999014][T14517] IPVS: ftp: loaded support on port[0] = 21
[ 2199.018391][ T7884] usb 5-1: config 0 descriptor??
[ 2199.056567][T32588] usb 1-1: config 0 descriptor??
[ 2199.058391][ T7884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:24:40 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4, "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"})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:24:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:40 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:40 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000e2ffffff001f00000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a45435400000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc18795000000000000000000000000000000000040000000000000000000000000000000000000010000000000000000000000a800d0000000000000000000000000000000000000000000380074696d650000000000554e8269000000000000000000000000000000000000000000ffffffff4f970000001b000000000000f9000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000ffff000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380071756f7461000000000000000000000000000000000000000000000000000100000000deffff460d0000000000000000000000000000280052454a45435400000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000001ec500000000000000000000000000feffffff"], 0x1)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x34)
sendto$inet(r1, &(0x7f0000000640)="dd8a59ee44155d31bbc943357379636530cf95a741ea27efae1e515c4e8022042954c0a67801affcd45dfa7638329947a3b6a25a64555f2f74daf16da4cd166301e594df730d7294bdb459ffa543818c0fad7d45275a3947884589b252930026121ef435d303e65fdb340536917de6e0da09b4927606a0442e2c4cdb6c6723cad24312b0b638479ca028e116a1c59876a131fa57dddb5d9a7ed87c0b23a413caa50226d6cbdfbfb1352830b8a482d549164391a3909680a790979e29fa0a613892ddc061393d0199a0aff322c375abec7422d9039461916cf25a2d", 0xfffffffffffffc6d, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x38000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5000, 0x9d8d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x68, 0x0, 0x10, 0x0, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2180, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x27, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, 0x0, 0x8012)
socket$netlink(0x10, 0x3, 0x0)

[ 2199.141526][T32588] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2199.168780][T31849] usb 5-1: USB disconnect, device number 65
[ 2199.344055][T32588] usb 1-1: USB disconnect, device number 62
[ 2199.372180][T14562] x_tables: duplicate underflow at hook 2
[ 2199.537236][ T7884] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2199.572104][T14517] IPVS: ftp: loaded support on port[0] = 21
23:24:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x1}, 0x10)

[ 2199.777307][ T7884] usb 6-1: Using ep0 maxpacket: 16
[ 2199.797539][T31849] usb 5-1: new high-speed USB device number 66 using dummy_hcd
23:24:41 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2199.907931][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2199.935302][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2199.947267][T32588] usb 1-1: new high-speed USB device number 63 using dummy_hcd
23:24:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
tkill(0x0, 0x3d)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00')
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2199.964471][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2199.986200][ T7884] usb 6-1: config 0 descriptor??
23:24:41 executing program 3:
open(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
fchdir(r0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0)
r3 = fanotify_init(0x0, 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r3, 0x1, 0x20, r4, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000340)=ANY=[], 0x44)
sendfile(r5, r5, &(0x7f0000000240), 0x7fff)

[ 2200.038454][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2200.041079][T14609] IPVS: ftp: loaded support on port[0] = 21
[ 2200.062889][T14616] x_tables: duplicate underflow at hook 2
[ 2200.077355][T31849] usb 5-1: Using ep0 maxpacket: 16
[ 2200.198064][T31849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2200.211058][T32588] usb 1-1: Using ep0 maxpacket: 32
[ 2200.243649][ T7884] usb 6-1: USB disconnect, device number 61
[ 2200.252313][T31849] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2200.321386][T31849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2200.347571][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2200.383286][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2200.409826][T31849] usb 5-1: config 0 descriptor??
23:24:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x311243, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
fcntl$setflags(r1, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x8, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, r6, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2200.445722][T32588] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2200.468582][T31849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2200.525603][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2200.562491][T32588] usb 1-1: config 0 descriptor??
[ 2200.587391][T14609] IPVS: ftp: loaded support on port[0] = 21
[ 2200.628509][T32588] hub 1-1:0.0: USB hub found
[ 2200.672186][   T29] audit: type=1804 audit(1594509881.735:40): pid=14666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1263/file0/file0" dev="ramfs" ino=296413 res=1
[ 2200.696743][ T7145] usb 5-1: USB disconnect, device number 66
[ 2200.837430][T32588] hub 1-1:0.0: 1 port detected
[ 2200.848243][ T7884] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 2201.087153][ T7884] usb 6-1: Using ep0 maxpacket: 32
[ 2201.207473][ T7884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2201.239399][ T7884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2201.257929][ T7884] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2201.268418][ T7145] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 2201.276586][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2201.295550][ T7884] usb 6-1: config 0 descriptor??
[ 2201.338149][ T7884] hub 6-1:0.0: USB hub found
[ 2201.517295][ T7145] usb 5-1: Using ep0 maxpacket: 32
[ 2201.557345][ T7884] hub 6-1:0.0: 1 port detected
[ 2201.567296][ T8914] tipc: TX() has been purged, node left!
[ 2201.637368][ T7145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2201.648729][ T7145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2201.660538][ T7145] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2201.671206][ T7145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2201.681326][ T7145] usb 5-1: config 0 descriptor??
[ 2201.718308][ T7145] hub 5-1:0.0: USB hub found
[ 2201.723257][ T8914] tipc: TX() has been purged, node left!
[ 2201.759431][T31070] usb 1-1: USB disconnect, device number 63
[ 2201.877211][ T8914] tipc: TX() has been purged, node left!
[ 2201.937320][ T7145] hub 5-1:0.0: 1 port detected
[ 2202.047202][ T8914] tipc: TX() has been purged, node left!
[ 2202.202769][T23187] usb 6-1: USB disconnect, device number 62
[ 2202.209095][ T7884] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2202.217119][ T8914] tipc: TX() has been purged, node left!
23:24:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:43 executing program 3:
open(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
fchdir(r0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0)
r3 = fanotify_init(0x0, 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r3, 0x1, 0x20, r4, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000340)=ANY=[], 0x44)
sendfile(r5, r5, &(0x7f0000000240), 0x7fff)

23:24:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x0, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[ 2202.587324][T23187] hub 5-1:0.0: activate --> -90
[ 2202.657398][ T7145] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 2202.897497][ T7145] usb 1-1: Using ep0 maxpacket: 16
[ 2203.023482][ T7145] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2203.047235][ T7145] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2203.056300][ T7145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2203.068926][ T7145] usb 1-1: config 0 descriptor??
[ 2203.108446][ T7145] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2203.244062][ T7145] usb 5-1: USB disconnect, device number 67
[ 2203.315935][T23189] usb 1-1: USB disconnect, device number 64
[ 2203.487673][ T7884] usb 5-1-port1: config error
[ 2203.877161][T23189] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 2204.047219][ T7145] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 2204.127222][T23189] usb 1-1: Using ep0 maxpacket: 32
[ 2204.247344][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2204.258808][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2204.272090][T23189] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2204.282297][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:24:45 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socket(0x0, 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0)
r3 = fanotify_init(0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r3, 0x1, 0x20, r4, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000340)=ANY=[], 0x44)
sendfile(r5, r5, &(0x7f0000000240), 0x7fff)

23:24:45 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x42, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:45 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:45 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000001c0))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @null}, [@netrom, @remote, @default, @netrom, @netrom, @default, @default, @netrom]}, &(0x7f0000000280)=0x48)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 2204.307230][ T7145] usb 5-1: Using ep0 maxpacket: 16
[ 2204.313805][T23189] usb 1-1: config 0 descriptor??
[ 2204.359714][T23189] hub 1-1:0.0: USB hub found
[ 2204.367293][ T7145] usb 5-1: device descriptor read/all, error -71
[ 2204.454181][T14797] IPVS: ftp: loaded support on port[0] = 21
[ 2204.577573][T23189] hub 1-1:0.0: 1 port detected
[ 2204.739351][ T7884] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 2204.817317][ T7145] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 2204.997181][ T7884] usb 6-1: Using ep0 maxpacket: 16
[ 2205.067792][ T7145] usb 5-1: Using ep0 maxpacket: 16
[ 2205.117596][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2205.161551][T14797] IPVS: ftp: loaded support on port[0] = 21
[ 2205.172947][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2205.187940][ T7145] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2205.237185][ T7145] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2205.251708][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2205.275199][ T7145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2205.290956][ T7884] usb 6-1: config 0 descriptor??
[ 2205.323755][ T7145] usb 5-1: config 0 descriptor??
[ 2205.348504][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2205.408455][ T7145] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2205.447941][   T29] audit: type=1804 audit(1594509886.505:41): pid=14870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir906894891/syzkaller.DYO92f/1265/file0/file0" dev="ramfs" ino=296847 res=1
23:24:46 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x43, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:46 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0xfffffe96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2205.559484][   T12] usb 6-1: USB disconnect, device number 63
[ 2205.612410][T23189] usb 5-1: USB disconnect, device number 69
[ 2205.659368][T32592] usb 1-1: USB disconnect, device number 65
[ 2205.706796][T14886] IPVS: ftp: loaded support on port[0] = 21
23:24:46 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x6, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xff, 0x0, 0x80000000000, 0x0, 0x0, 0x8001, 0xfffffffffffff498, 0x0, 0x0, 0x0, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={<r6=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r6, 0xa533}, &(0x7f0000000440)=0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:47 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:47 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2206.150541][   T12] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 2206.227312][T23189] usb 5-1: new high-speed USB device number 70 using dummy_hcd
23:24:47 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2206.317816][T14886] IPVS: ftp: loaded support on port[0] = 21
[ 2206.407213][   T12] usb 6-1: Using ep0 maxpacket: 32
[ 2206.477147][T23189] usb 5-1: Using ep0 maxpacket: 32
23:24:47 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2206.527569][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2206.564598][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:24:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2, 0x0, 0x0, 0x84ea, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r2, &(0x7f0000001400), 0x0, 0x4)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a4070000020001090224000101e2ff000904000012070101000905010200ffe000000905820218"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x0, 0x400, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x81)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000480)={0x0, &(0x7f0000000440)=[&(0x7f00000002c0)="4480905ccdd393ae2b3ff7994e1b20c359c6f4237e8fc1804016853ae0b0b25bba79469c56c146de701c7de08dbab1034d55e7c469a058b86fbe0efd5f4f1f80671df089a59e3de22f4d715a06c08826b4ffa12c0e9e0b2bf720f28d751f0c4d1e67d4dac9eab66f204fc3e77ffb312a38f196097404b09adc42cccaae88d8e873", &(0x7f0000000380)="fa89cdf3f74c65047e9d59dd26e6d8cf912f040c553e442d0a8ae16dc8920bd7650271701f7b6a330baa6570b6efabd6b022273a36a56bca7685067b41ad6157c77cc268d1f266f55b379faa400df3f4c8b2488f87e3d7d7b11661b67573d292668296b60c7269c0bd3da9f36071f704e1ba93d62e0e4655b88549f84912b9d097b4c05aa48f6be38710e2302802b4a3706ca8a86142740fa9142acd5f54ff02", &(0x7f0000000500)="3b3ce2ffedc510b6df4cc5bc6851ac853ec6f545e451a8a98637534bbb983b7d15b18c22e719cc6ab6610afffc04f7f133d6233bd2cfba2dbbc9d76bdcf49626e59e430d1bc588378bc4a32944c03f710fdb16c48783685c963117951a556c3b7f7425dabd591a7be7862773245d2be9a98c5249f26f5a20dd62edb4a2873a78bb06cda2bd1869c4e690e4f25393e30a975f02723d7aee5694bb3d957d8f77c55684801aa197d195e508884e74", &(0x7f0000000f80)="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"]})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 2206.577773][ T7884] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 2206.598064][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2206.625819][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2206.647796][   T12] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2206.693043][T23189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2206.714112][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2206.750623][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2206.768166][   T12] usb 6-1: config 0 descriptor??
[ 2206.802515][T23189] usb 5-1: config 0 descriptor??
[ 2206.831016][   T12] hub 6-1:0.0: USB hub found
[ 2206.847324][ T7884] usb 1-1: Using ep0 maxpacket: 16
[ 2206.853856][T23189] hub 5-1:0.0: USB hub found
[ 2206.977568][ T7884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2207.011027][ T7884] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2207.042185][T32592] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 2207.044500][ T7884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2207.059965][   T12] hub 6-1:0.0: 1 port detected
[ 2207.077281][T23189] hub 5-1:0.0: 1 port detected
[ 2207.110871][ T7884] usb 1-1: config 0 descriptor??
[ 2207.168432][ T7884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2207.337082][T32592] usb 2-1: Using ep0 maxpacket: 8
[ 2207.370697][T31849] usb 1-1: USB disconnect, device number 66
[ 2207.457502][ T8914] tipc: TX() has been purged, node left!
[ 2207.477330][T32592] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2207.488718][T32592] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2207.501728][T32592] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[ 2207.512373][T32592] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2207.597413][T32592] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2207.606653][ T8914] tipc: TX() has been purged, node left!
[ 2207.612583][T32592] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 2207.622940][T32592] usb 2-1: Product: syz
[ 2207.658716][T14980] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2207.665867][T14980] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2207.702838][T32591] usb 6-1: USB disconnect, device number 64
[ 2207.707349][T23189] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2207.727286][   T12] hub 5-1:0.0: activate --> -90
[ 2207.767897][ T8914] tipc: TX() has been purged, node left!
[ 2207.927230][ T8914] tipc: TX() has been purged, node left!
[ 2207.968206][T32592] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2207.974217][T32592] hub: probe of 2-1:1.0 failed with error -5
[ 2207.980430][T31849] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2208.017399][T32592] usblp: can't set desired altsetting 0 on interface 0
[ 2208.058079][T32592] usb 2-1: USB disconnect, device number 50
[ 2208.151957][ T7884] usb 5-1: USB disconnect, device number 70
23:24:49 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x44, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2208.247140][T31849] usb 1-1: Using ep0 maxpacket: 32
[ 2208.295765][T15029] IPVS: ftp: loaded support on port[0] = 21
[ 2208.378862][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2208.397070][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2208.406854][T31849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2208.407196][   T12] usb 5-1-port1: config error
[ 2208.442529][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2208.471237][T31849] usb 1-1: config 0 descriptor??
[ 2208.508559][T31849] hub 1-1:0.0: USB hub found
[ 2208.583137][T15029] IPVS: ftp: loaded support on port[0] = 21
[ 2208.592052][T32592] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2208.728183][T31849] hub 1-1:0.0: 1 port detected
[ 2208.857275][T32592] usb 2-1: Using ep0 maxpacket: 8
[ 2208.947153][ T7884] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 2208.997354][T32592] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[ 2209.012589][T32592] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 2209.022993][T32592] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[ 2209.036534][T32592] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2209.127269][T32592] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2209.136439][T32592] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 2209.145477][T32592] usb 2-1: Product: syz
[ 2209.198446][T14974] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2209.206707][T14974] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 2209.214161][ T7884] usb 5-1: Using ep0 maxpacket: 16
[ 2209.337374][ T7884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2209.350677][ T7884] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2209.361447][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2209.376998][ T7884] usb 5-1: config 0 descriptor??
23:24:50 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2209.427247][ T7884] usb 5-1: can't set config #0, error -71
[ 2209.449866][ T7884] usb 5-1: USB disconnect, device number 71
23:24:50 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="af4f863c08d3609c62fa6a3ad9bd74476a31d19231999f465d83e5801787566c3e7ad7a4da190c6ce3dfd478d9ad4a0f25e0e2e8d6bbe83d5b73a939061e8beff55b76f8e1d94a1ab26af7daf98a8cc4f8d431f740aa76a838c82ae2ab8f22ff84f02961"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3d)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x10, 0xa0}}, 0x18}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@ipv4={[], [], @empty}, @empty, @mcast2, 0x141, 0x5, 0xbd20, 0xc00, 0x9, 0x2000218})
ptrace$cont(0x16, r2, 0x100, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 2209.588005][T32592] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2209.594025][T32592] hub: probe of 2-1:1.0 failed with error -5
[ 2209.642975][T29367] usb 1-1: USB disconnect, device number 67
[ 2209.657856][T32592] usblp: can't set desired altsetting 0 on interface 0
23:24:50 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2209.738206][T32592] usb 2-1: USB disconnect, device number 51
[ 2209.787281][T31849] usb 6-1: new high-speed USB device number 65 using dummy_hcd
23:24:50 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:24:51 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

[ 2210.037179][T31849] usb 6-1: Using ep0 maxpacket: 16
[ 2210.093811][ T7884] usb 5-1: new high-speed USB device number 72 using dummy_hcd
23:24:51 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:24:51 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2210.197463][T31849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2210.213440][T14980] udc-core: couldn't find an available UDC or it's busy
[ 2210.236261][T14980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2210.250616][T31849] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:24:51 executing program 3:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2210.302428][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2210.337210][ T7884] usb 5-1: Using ep0 maxpacket: 16
[ 2210.356683][T31849] usb 6-1: config 0 descriptor??
[ 2210.418919][T31849] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:24:51 executing program 3:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2210.467246][ T7884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2210.502133][ T7884] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2210.527258][T32592] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2210.533049][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2210.569379][ T7884] usb 5-1: config 0 descriptor??
[ 2210.621718][T31849] usb 6-1: USB disconnect, device number 65
[ 2210.628489][ T7884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2210.707141][T23189] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 2210.813474][T32592] usb 2-1: device descriptor read/64, error 18
[ 2210.837916][ T7884] usb 5-1: USB disconnect, device number 72
[ 2210.957182][T23189] usb 1-1: Using ep0 maxpacket: 16
[ 2211.077656][T23189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2211.138056][T23189] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2211.187161][T31849] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 2211.199521][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.260217][T23189] usb 1-1: config 0 descriptor??
[ 2211.328743][T23189] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2211.408007][ T7884] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 2211.477070][T31849] usb 6-1: Using ep0 maxpacket: 32
[ 2211.535916][T32588] usb 1-1: USB disconnect, device number 68
[ 2211.618784][T31849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2211.657314][ T7884] usb 5-1: Using ep0 maxpacket: 32
[ 2211.667637][T31849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2211.696974][T31849] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
23:24:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfb, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x10000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2211.715994][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.738192][T31849] usb 6-1: config 0 descriptor??
[ 2211.777807][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2211.778049][T31849] hub 6-1:0.0: USB hub found
[ 2211.813148][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2211.851773][ T7884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2211.873528][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.901182][ T7884] usb 5-1: config 0 descriptor??
[ 2211.948485][ T7884] hub 5-1:0.0: USB hub found
[ 2211.987289][T31849] hub 6-1:0.0: 1 port detected
[ 2212.087155][T32588] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 2212.167234][ T7884] hub 5-1:0.0: 1 port detected
[ 2212.328150][T32588] usb 1-1: Using ep0 maxpacket: 32
[ 2212.459540][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2212.477606][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2212.496942][T32588] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2212.506847][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2212.521000][T32588] usb 1-1: config 0 descriptor??
[ 2212.558132][T32588] hub 1-1:0.0: USB hub found
[ 2212.636597][T31849] usb 6-1: USB disconnect, device number 66
[ 2212.642719][T31069] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2212.777280][T32588] hub 1-1:0.0: 1 port detected
[ 2212.857954][   T12] usb 5-1: USB disconnect, device number 73
[ 2212.885069][ T7884] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
23:24:54 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:54 executing program 3:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2213.138995][T15235] IPVS: ftp: loaded support on port[0] = 21
23:24:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:24:54 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000600)={0x7fff, "20919a4ff68ebc4b0c10ede5cd227188b38f917c47268694626242673bc06b90", 0x1, 0x8, 0xff, 0xff, 0x4, 0x4, 0x9a, 0x4458be5c})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r5, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x20, 0x23, 0x15, {0x15, 0x10, "cd6097785d03f725e904eb27797f64b0b45157"}}, &(0x7f0000000200)={0x0, 0x3, 0x34, @string={0x34, 0x3, "3d2604cffa3d5c489e9b07cca870078fd187b3626e77d646ee21b561dc619c9fcf2c494013ecd3ad6d6f40564566e70489ef"}}, &(0x7f0000000240)={0x0, 0x22, 0x1d, {[@local=@item_012={0x2, 0x2, 0x0, "54e0"}, @main=@item_4={0x3, 0x0, 0x0, "a54bacc4"}, @main=@item_4={0x3, 0x0, 0xb, "8377c00a"}, @local=@item_4={0x3, 0x2, 0x5, "5c7c4690"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x2, 0x1, 0x5, "a9d1"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "92a5734b"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x59, 0x81, 0x1, {0x22, 0xedf}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0xd, 0xa5, "4ad852fabf6bc11b7855a606dcc6819566b5b56f30f3bede01f02c033a2db03e629ad7baeac14dd3f3ee24da3a141f710b4c6b454cba6cd11367b07665e5c648b064a81adad862bb8213db5b3cf75b6a0cdce98d40ad1d93a5e3a25a2f0511058c1a6475452ca61da0034d98c3f1c87a9bec07104b3e6f436a83b234bf4c39099b87c33289923e7472e38bc1214a418325254b82be35b12af9998c7bd4e9c714ccdea4e3bc"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x1, 0xdc, "8b00088c624072e22ecccacd3c495f35dc83b2e22907954c18f12e4869fc5f7085df1f010c31267df7f2066b538ba2373841f12c7b86f41bdd2af0a6a9396b365b1e9ca1c0a82db9ac586adbcfc95a0f6b6b54ec475eb465c9a2f904aaca3294ca5223375aadf7d19795787daa82c712552b1a8b8323bf2a885726160452e224966a32e113a798b4e7d6eaab2c520dbe387ad0ca14efd8a6dd4dbed2c7724ced78558e771fd78f013c97312d46987fe625e74f20a0d8a5397727909d89629011895e4a17cd961f68fe4d14481b1a7a45554e72423f3da8dffbd35b53"}, &(0x7f0000000540)={0x20, 0x3, 0x1}})
syz_usb_control_io$hid(r5, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000680)=0x2, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0x8b8)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:24:54 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:54 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2213.427349][T32588] hub 1-1:0.0: activate --> -90
23:24:54 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2213.607275][   T12] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2213.615022][ T7884] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 2213.782754][T15235] IPVS: ftp: loaded support on port[0] = 21
[ 2213.817564][ T8914] tipc: TX() has been purged, node left!
[ 2213.867185][   T12] usb 6-1: Using ep0 maxpacket: 16
[ 2213.872453][ T7884] usb 5-1: Using ep0 maxpacket: 16
[ 2213.998054][   T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2214.011749][ T7884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2214.060416][ T7884] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2214.069940][   T12] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2214.090855][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2214.099783][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2214.141205][   T12] usb 6-1: config 0 descriptor??
[ 2214.146490][ T7884] usb 5-1: config 0 descriptor??
[ 2214.218856][ T7884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2214.233775][   T12] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2214.425713][ T7884] usb 5-1: USB disconnect, device number 74
[ 2214.449395][T23189] usb 6-1: USB disconnect, device number 67
23:24:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:24:55 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:55 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

23:24:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r4, 0x105, 0x0, 0x0, {0x24}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x60, 0x0, 0xc21af5370aa138cb, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x810)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[ 2214.765352][T15340] IPVS: ftp: loaded support on port[0] = 21
[ 2214.778559][   T12] usb 1-1: USB disconnect, device number 69
23:24:55 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:56 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2215.038153][T23189] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 2215.045842][ T7884] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 2215.127173][   T12] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 2215.199145][T15340] IPVS: ftp: loaded support on port[0] = 21
[ 2215.287428][T23189] usb 6-1: Using ep0 maxpacket: 32
[ 2215.298113][ T7884] usb 5-1: Using ep0 maxpacket: 32
[ 2215.377289][   T12] usb 1-1: Using ep0 maxpacket: 16
[ 2215.407567][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2215.418925][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2215.442232][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2215.460705][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2215.494899][ T7884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2215.506677][T23189] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2215.516392][   T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2215.531273][   T12] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2215.541362][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2215.559598][T23189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2215.572102][   T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2215.583091][ T7884] usb 5-1: config 0 descriptor??
[ 2215.593866][T23189] usb 6-1: config 0 descriptor??
[ 2215.612182][   T12] usb 1-1: config 0 descriptor??
[ 2215.638872][ T7884] hub 5-1:0.0: USB hub found
[ 2215.644562][T23189] hub 6-1:0.0: USB hub found
[ 2215.661003][   T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2215.847286][T23189] hub 6-1:0.0: 1 port detected
[ 2215.862501][ T7884] hub 5-1:0.0: 1 port detected
[ 2215.873411][   T12] usb 1-1: USB disconnect, device number 70
[ 2216.437170][   T12] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 2216.501092][T32592] usb 6-1: USB disconnect, device number 68
[ 2216.526643][ T7884] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2216.677156][   T12] usb 1-1: Using ep0 maxpacket: 32
[ 2216.711372][ T7884] usb 5-1: USB disconnect, device number 75
[ 2216.797200][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2216.808876][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2216.817302][ T8914] tipc: TX() has been purged, node left!
[ 2216.820891][   T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2216.834447][   T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.851602][   T12] usb 1-1: config 0 descriptor??
[ 2216.892582][   T12] hub 1-1:0.0: USB hub found
[ 2216.947151][ T8914] tipc: TX() has been purged, node left!
23:24:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:24:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2217.097180][ T8914] tipc: TX() has been purged, node left!
[ 2217.097240][   T12] hub 1-1:0.0: 1 port detected
[ 2217.263600][ T8914] tipc: TX() has been purged, node left!
[ 2217.337280][T32592] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 2217.497426][T32588] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 2217.587197][T32592] usb 6-1: Using ep0 maxpacket: 16
[ 2217.717533][T32592] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2217.743283][T32592] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2217.747551][ T7412] hub 1-1:0.0: activate --> -90
[ 2217.765421][T32592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2217.777127][T32588] usb 5-1: Using ep0 maxpacket: 16
[ 2217.799531][T32592] usb 6-1: config 0 descriptor??
[ 2217.848700][T32592] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2217.907972][T32588] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2217.937428][T32588] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2217.957101][T32588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2217.982673][T32588] usb 5-1: config 0 descriptor??
23:24:59 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x7, 0x0, 0x20, 0x1f}, 0xfd, &(0x7f0000000200)={0x5, 0xf, 0xfd, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x36, "455235288b3a5529a589c784babc1f25"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x0, 0x0, 0x5, [0xff00cf, 0xff0000, 0x3f00, 0xc000, 0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xb9, 0xca, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0xa2f1a12ea8c2e93e, 0x2, 0x3, 0x4, 0x2}, @generic={0x9c, 0x10, 0x2, "c2a9c0c4695f0f73256e0ba54fa63aed3fc92535889fedc678894ffcfe2121c2ed565962323a9ca36f125c4977906003b7909624c39e5c3db678b404f17a9ca66622430de91c39472030b964b2e943f793aaa88e0e8d01ba59fa2e2c1d2fbd9548332127b97004ba3205d8ad6db24d4fdcf856557abb4c497107db0fb1c53090caec712892148d27e8c3373380c805a97c18c08c70e6c35852"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "623b80b89462bd3133c987e346a8d3cc"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x200a}}, {0xb6, &(0x7f0000000340)=@string={0xb6, 0x3, "76885b385f4cde37549846dc4684ccd18170c63520832587d26b90b1e3000d9d45f603431204461d1caf26fe3f4cc9466981fba37888dde7cd8cd4b629e912d133b3baeb398b363f685a566f66427573e8b16ede0529a065aa14e18010407c0f0fc20676aa0cc57b62d1fc3a8c3625588420d67a715ba7e22b39a8fed084770cd4c7e8435ad1d2ae31af470d4e497da560e9db730756f696c4cbbe7b2a02f602a1f2ab4e1eb9106b1ccc1078330f58af27fec585"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2401}}]})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2218.051027][T32592] usb 6-1: USB disconnect, device number 69
23:24:59 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:24:59 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2}, &(0x7f0000000240)=0x54)

23:24:59 executing program 1:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x3, 0x6}})
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0)
clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)

[ 2218.108088][T32588] usb 5-1: can't set config #0, error -71
[ 2218.130629][T32588] usb 5-1: USB disconnect, device number 76
[ 2218.186105][T15485] IPVS: ftp: loaded support on port[0] = 21
[ 2218.577129][T32588] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 2218.620026][T15485] IPVS: ftp: loaded support on port[0] = 21
[ 2218.637159][T32592] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 2218.847137][T32588] usb 5-1: Using ep0 maxpacket: 16
[ 2218.898846][T32592] usb 6-1: Using ep0 maxpacket: 32
23:25:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:25:00 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:25:00 executing program 1:

23:25:00 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3}, &(0x7f0000000240)=0x54)

[ 2218.992902][T32588] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2219.025667][T32588] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2219.037415][T32592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
23:25:00 executing program 1:

[ 2219.065135][T32592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2219.083161][T15547] IPVS: ftp: loaded support on port[0] = 21
[ 2219.093533][T32588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2219.097612][ T7884] usb 1-1: USB disconnect, device number 71
23:25:00 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2219.147360][T32592] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2219.156410][T32592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2219.187466][T32588] usb 5-1: config 0 descriptor??
[ 2219.252860][T32592] usb 6-1: config 0 descriptor??
[ 2219.262842][T32588] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2219.328256][T32592] hub 6-1:0.0: USB hub found
[ 2219.466681][T23189] usb 5-1: USB disconnect, device number 77
[ 2219.517164][ T7884] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 2219.538245][T32592] hub 6-1:0.0: 1 port detected
[ 2219.571879][T15547] IPVS: ftp: loaded support on port[0] = 21
[ 2219.777252][ T7884] usb 1-1: Using ep0 maxpacket: 16
[ 2219.897482][ T7884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2219.927164][ T7884] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2219.936238][ T7884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2219.956222][ T7884] usb 1-1: config 0 descriptor??
[ 2220.008140][ T7884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2220.037121][T23189] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 2220.177284][T32592] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2220.184494][T31070] usb 6-1: USB disconnect, device number 70
[ 2220.221386][T32592] usb 1-1: USB disconnect, device number 72
[ 2220.280379][T23189] usb 5-1: Using ep0 maxpacket: 32
[ 2220.397269][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2220.408304][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2220.419727][T23189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2220.429632][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2220.439823][T23189] usb 5-1: config 0 descriptor??
[ 2220.478278][T23189] hub 5-1:0.0: USB hub found
[ 2220.697187][T23189] hub 5-1:0.0: 1 port detected
23:25:01 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:01 executing program 1:

[ 2220.781866][T32592] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 2221.047146][T31070] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 2221.054852][T32592] usb 1-1: Using ep0 maxpacket: 32
[ 2221.197629][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2221.208656][ T8914] tipc: TX() has been purged, node left!
[ 2221.208943][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2221.225576][T32592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2221.236012][T32592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2221.248966][T32592] usb 1-1: config 0 descriptor??
[ 2221.303380][T32592] hub 1-1:0.0: USB hub found
[ 2221.327155][T31070] usb 6-1: Using ep0 maxpacket: 16
[ 2221.347272][ T8914] tipc: TX() has been purged, node left!
[ 2221.347282][T23189] hub 5-1:0.0: activate --> -90
[ 2221.467308][T31070] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2221.480291][T31070] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2221.490956][T31070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2221.501613][T31070] usb 6-1: config 0 descriptor??
[ 2221.507210][ T8914] tipc: TX() has been purged, node left!
[ 2221.512955][T32592] hub 1-1:0.0: 1 port detected
[ 2221.553641][T15492] udc-core: couldn't find an available UDC or it's busy
[ 2221.555774][T31070] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2221.565099][T15492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2221.667229][ T8914] tipc: TX() has been purged, node left!
[ 2221.755691][T31070] usb 6-1: USB disconnect, device number 71
[ 2221.823393][T32591] usb 5-1: USB disconnect, device number 78
[ 2222.067236][T23189] usb 5-1-port1: config error
[ 2222.157239][T32592] hub 1-1:0.0: activate --> -90
[ 2222.357345][T31070] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 2222.597272][T23189] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 2222.628716][T31070] usb 6-1: Using ep0 maxpacket: 32
[ 2222.749097][T31070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2222.767073][T31070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2222.776884][T31070] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2222.788376][T31070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2222.803494][T31070] usb 6-1: config 0 descriptor??
[ 2222.847159][T23189] usb 5-1: Using ep0 maxpacket: 16
[ 2222.859538][T31070] hub 6-1:0.0: USB hub found
[ 2222.967789][T23189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2222.997143][T23189] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2223.006235][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2223.018798][T23189] usb 5-1: config 0 descriptor??
[ 2223.058360][T23189] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2223.077165][T31070] hub 6-1:0.0: 1 port detected
23:25:04 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0)
getsockopt(r3, 0x1ff, 0x6, &(0x7f0000000180)=""/76, &(0x7f0000000200)=0x4c)

23:25:04 executing program 3:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:25:04 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4}, &(0x7f0000000240)=0x54)

23:25:04 executing program 1:

[ 2223.184899][T23189] usb 5-1: USB disconnect, device number 79
[ 2223.274934][T15699] IPVS: ftp: loaded support on port[0] = 21
23:25:04 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:25:04 executing program 3:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:25:04 executing program 1:

23:25:04 executing program 1:

[ 2223.518111][ T7145] usb 1-1: USB disconnect, device number 73
23:25:04 executing program 3:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:25:04 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

[ 2223.683315][T23189] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 2223.722592][T31849] usb 6-1: USB disconnect, device number 72
[ 2223.747146][ T8533] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2223.827384][T31070] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 2223.862158][T15699] IPVS: ftp: loaded support on port[0] = 21
[ 2223.927300][T23189] usb 5-1: Using ep0 maxpacket: 16
[ 2224.057942][T23189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2224.080371][T23189] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2224.083522][T31070] usb 1-1: Using ep0 maxpacket: 16
[ 2224.103611][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2224.144627][T23189] usb 5-1: config 0 descriptor??
[ 2224.208347][T23189] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2224.247383][T31070] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
23:25:05 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:05 executing program 1:

[ 2224.287122][T31070] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2224.296238][T31070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2224.318631][T31070] usb 1-1: config 0 descriptor??
[ 2224.368237][T31070] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2224.412303][T23189] usb 5-1: USB disconnect, device number 80
[ 2224.574828][T31849] usb 1-1: USB disconnect, device number 74
[ 2224.676257][T31070] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 2224.927220][T31070] usb 6-1: Using ep0 maxpacket: 16
[ 2224.997160][T23189] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 2225.047226][T31070] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2225.060211][T31070] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2225.073192][T31070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2225.083491][T31070] usb 6-1: config 0 descriptor??
[ 2225.130623][T31070] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2225.177143][T31849] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 2225.237355][T23189] usb 5-1: Using ep0 maxpacket: 32
[ 2225.331070][T23186] usb 6-1: USB disconnect, device number 73
[ 2225.361074][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2225.372113][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2225.382360][T23189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2225.392016][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2225.404586][T23189] usb 5-1: config 0 descriptor??
[ 2225.431395][T31849] usb 1-1: Using ep0 maxpacket: 32
[ 2225.447159][ T8914] tipc: TX() has been purged, node left!
[ 2225.449221][T23189] hub 5-1:0.0: USB hub found
[ 2225.547307][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2225.558410][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2225.570549][T31849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2225.580332][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2225.590232][T31849] usb 1-1: config 0 descriptor??
[ 2225.627318][ T8914] tipc: TX() has been purged, node left!
[ 2225.638679][T31849] hub 1-1:0.0: USB hub found
[ 2225.657414][T23189] hub 5-1:0.0: 1 port detected
[ 2225.847222][T31849] hub 1-1:0.0: 1 port detected
[ 2225.887198][T23186] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2226.127230][T23186] usb 6-1: Using ep0 maxpacket: 32
[ 2226.247433][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2226.261865][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2226.274859][T23186] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2226.289131][T23186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2226.306802][T23186] usb 6-1: config 0 descriptor??
[ 2226.315091][T23189] hub 5-1:0.0: activate --> -90
[ 2226.358299][T23186] hub 6-1:0.0: USB hub found
[ 2226.497266][   T23] hub 1-1:0.0: activate --> -90
[ 2226.577184][T23186] hub 6-1:0.0: 1 port detected
[ 2226.709362][T31849] usb 1-1: USB disconnect, device number 75
[ 2226.717196][   T23] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2226.747439][   T23] usb 5-1: USB disconnect, device number 81
[ 2226.997197][T23189] usb 5-1-port1: config error
[ 2227.225340][T31849] usb 6-1: USB disconnect, device number 74
[ 2227.227347][T29367] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2227.637139][   T23] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2227.907156][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2228.038512][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2228.051595][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2228.062180][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2228.073720][   T23] usb 5-1: config 0 descriptor??
[ 2228.118726][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:25:09 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x6, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400a02, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0)
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:25:09 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x11}, &(0x7f0000000240)=0x54)

23:25:09 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

23:25:09 executing program 1:

23:25:09 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:25:09 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2228.259616][   T23] usb 5-1: USB disconnect, device number 82
23:25:09 executing program 1:

23:25:09 executing program 3:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x3})
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

[ 2228.385917][T15877] IPVS: ftp: loaded support on port[0] = 21
23:25:09 executing program 1:

23:25:09 executing program 3:

[ 2228.597205][T29367] usb 6-1: new high-speed USB device number 75 using dummy_hcd
23:25:09 executing program 1:

[ 2228.647700][ T7412] usb 1-1: new high-speed USB device number 76 using dummy_hcd
23:25:09 executing program 3:

[ 2228.787200][   T23] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 2228.857113][T29367] usb 6-1: Using ep0 maxpacket: 16
[ 2228.888361][T15877] IPVS: ftp: loaded support on port[0] = 21
[ 2228.917547][ T7412] usb 1-1: Using ep0 maxpacket: 16
[ 2228.977656][T29367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2229.009015][T29367] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2229.034277][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2229.037379][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2229.055529][T29367] usb 6-1: config 0 descriptor??
[ 2229.064520][ T7412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2229.087362][ T7412] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2229.109129][ T7412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2229.119692][T29367] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2229.134928][ T7412] usb 1-1: config 0 descriptor??
[ 2229.177765][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2229.190963][ T8914] tipc: TX() has been purged, node left!
[ 2229.198467][ T7412] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2229.215062][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2229.227522][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2229.250788][   T23] usb 5-1: config 0 descriptor??
[ 2229.300847][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2229.328182][   T23] usb 6-1: USB disconnect, device number 75
[ 2229.401444][T31849] usb 1-1: USB disconnect, device number 76
[ 2229.504039][T31070] usb 5-1: USB disconnect, device number 83
[ 2229.887130][   T23] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2229.957179][T31849] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2230.057164][T31070] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 2230.127156][   T23] usb 6-1: Using ep0 maxpacket: 32
[ 2230.207438][T31849] usb 1-1: Using ep0 maxpacket: 32
[ 2230.247555][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2230.264523][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2230.276500][   T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2230.295150][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2230.316288][   T23] usb 6-1: config 0 descriptor??
[ 2230.321545][T31070] usb 5-1: Using ep0 maxpacket: 32
[ 2230.337919][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2230.360339][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2230.372208][   T23] hub 6-1:0.0: USB hub found
[ 2230.402806][T31849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2230.434134][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2230.443222][T31070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2230.456916][T31070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2230.468855][T31849] usb 1-1: config 0 descriptor??
[ 2230.475175][T31070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2230.494695][T31070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2230.508203][T31849] hub 1-1:0.0: USB hub found
[ 2230.521577][T31070] usb 5-1: config 0 descriptor??
[ 2230.568148][T31070] hub 5-1:0.0: USB hub found
[ 2230.587373][   T23] hub 6-1:0.0: 1 port detected
[ 2230.727287][T31849] hub 1-1:0.0: 1 port detected
[ 2230.787287][T31070] hub 5-1:0.0: 1 port detected
[ 2231.223435][T29367] usb 6-1: USB disconnect, device number 76
[ 2231.227316][   T23] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2231.237537][ T8914] tipc: TX() has been purged, node left!
[ 2231.377230][   T23] hub 1-1:0.0: activate --> -90
[ 2231.437259][T31070] hub 5-1:0.0: activate --> -90
[ 2231.579351][T32592] usb 1-1: USB disconnect, device number 77
[ 2231.597411][   T23] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2231.864348][T29367] usb 5-1: USB disconnect, device number 84
[ 2232.127329][T31070] usb 5-1-port1: config error
[ 2232.767144][T29367] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 2233.027165][T29367] usb 5-1: Using ep0 maxpacket: 16
[ 2233.157179][T29367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2233.170840][T29367] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2233.181159][T29367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2233.194573][T29367] usb 5-1: config 0 descriptor??
[ 2233.238209][T29367] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:25:14 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r6, &(0x7f0000000040), 0x240)
ioctl(r6, 0x5, &(0x7f0000000180)="f104e00769aaeac12b02029c738f05fd30c08f2feb5f5b720d16cba6548c4d35f52073ce30bc2661efc38ba770b1724797f82204370aa1b1d1c2b1535eac825ccf017a3bedc726037badd145a0a2")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

23:25:14 executing program 1:

23:25:14 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x12}, &(0x7f0000000240)=0x54)

23:25:14 executing program 3:

23:25:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2233.366584][T31070] usb 5-1: USB disconnect, device number 85
23:25:14 executing program 1:

23:25:14 executing program 3:

[ 2233.466954][T16030] IPVS: ftp: loaded support on port[0] = 21
23:25:14 executing program 1:

23:25:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x49}]})

23:25:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0}]})

[ 2233.730886][   T23] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2233.757231][T31849] usb 6-1: new high-speed USB device number 77 using dummy_hcd
23:25:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10}]})

[ 2233.887174][T31070] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 2233.987288][   T23] usb 1-1: Using ep0 maxpacket: 16
[ 2234.007501][T31849] usb 6-1: Using ep0 maxpacket: 16
[ 2234.020313][T16030] IPVS: ftp: loaded support on port[0] = 21
[ 2234.115230][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2234.128510][T31849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2234.157311][T31070] usb 5-1: Using ep0 maxpacket: 16
[ 2234.162576][T31849] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2234.172106][   T23] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2234.215354][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2234.223894][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2234.242947][   T23] usb 1-1: config 0 descriptor??
[ 2234.257647][T31849] usb 6-1: config 0 descriptor??
[ 2234.277245][T31070] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2234.298360][T31849] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2234.334885][T31070] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2234.345500][   T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2234.357220][T14279] tipc: TX() has been purged, node left!
[ 2234.383345][T31070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2234.417703][T31070] usb 5-1: config 0 descriptor??
[ 2234.461653][T31070] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2234.515608][T29367] usb 6-1: USB disconnect, device number 77
[ 2234.548802][T31070] usb 1-1: USB disconnect, device number 78
[ 2234.668317][T23189] usb 5-1: USB disconnect, device number 86
[ 2235.057164][T29367] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2235.154623][T31070] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2235.217202][T23189] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2235.297140][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2235.417136][T31070] usb 1-1: Using ep0 maxpacket: 32
[ 2235.417450][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2235.443373][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2235.455992][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2235.473535][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2235.481972][T23189] usb 5-1: Using ep0 maxpacket: 32
[ 2235.508282][T29367] usb 6-1: config 0 descriptor??
[ 2235.557411][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2235.558101][T29367] hub 6-1:0.0: USB hub found
[ 2235.570057][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2235.607295][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2235.613464][T31070] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2235.624430][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2235.647181][T31070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2235.649726][T23189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2235.672304][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2235.682031][T31070] usb 1-1: config 0 descriptor??
[ 2235.684880][T23189] usb 5-1: config 0 descriptor??
[ 2235.738074][T23189] hub 5-1:0.0: USB hub found
[ 2235.738133][T31070] hub 1-1:0.0: USB hub found
[ 2235.777277][T29367] hub 6-1:0.0: 1 port detected
[ 2235.947335][T31070] hub 1-1:0.0: 1 port detected
[ 2235.957349][T23189] hub 5-1:0.0: 1 port detected
[ 2236.423259][T31070] usb 6-1: USB disconnect, device number 78
[ 2236.427410][T29367] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2236.617274][   T23] hub 1-1:0.0: activate --> -90
[ 2236.627317][T14279] tipc: TX() has been purged, node left!
[ 2236.667299][T23189] hub 5-1:0.0: activate --> -90
[ 2236.818471][T29367] usb 1-1: USB disconnect, device number 79
[ 2236.830748][   T23] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2237.096300][T29367] usb 5-1: USB disconnect, device number 87
[ 2237.350153][T23189] usb 5-1-port1: config error
[ 2237.917215][   T23] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 2238.187151][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2238.317264][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2238.330189][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2238.340747][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2238.355544][   T23] usb 5-1: config 0 descriptor??
[ 2238.398454][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:25:19 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1d}, &(0x7f0000000240)=0x54)

23:25:19 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:19 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)

23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04}]})

23:25:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f1}]})

[ 2238.473002][   T23] usb 5-1: USB disconnect, device number 88
23:25:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="005b43b7ac207184b6fad13a4800060000005e9f889fa36e5d4521ede003c7550f1010aa4eda4f117c968cb17b1c00211453f001f292aeb0f61f0cf622050b53"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x18}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x80000000, 0x9, 0x10000}}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000028c0)={0x1110, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_MESH_ID={0xb5, 0x18, "b2724dba0163a46e4cf7471be83da2a48f7313a40979a980585a19c332796e12ede1e05e3cfc0d591359ceb2edeedab3ccde2e5e180f3ccc626e41ab9660da67409687745db711a105128ea77fbb1608e0f3cabfbfe85c5253fba4125aad4887358b5a69743b0202e6eb3c7ea508b6cb1af42c2dbffdc806db4fec79f3485db9d0c1007bfdf041a369ccca69465635c2b7a69e2bbe1c3bb901a33d18df26bc20265887f16cc685254c2a8527cfb65ab230"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3f24563}, @NL80211_ATTR_MESH_ID={0x1004, 0x18, "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"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1110}, 0x1, 0x0, 0x0, 0x4040000}, 0x1)
r6 = syz_open_dev$mouse(&(0x7f00000004c0)='/dev/input/mouse#\x00', 0x0, 0xc981)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xecb3ab3a10a7919b}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c10da9e7dbfe3245010100000000000000000c006973743a73657400000000051f05000100000010000300686173683a69702c6d616300050005000500"/78], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
r7 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2238.584106][T16205] IPVS: ftp: loaded support on port[0] = 21
23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10}]})

23:25:19 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1f01000011f79e08070ada00488f000000010902240001000000000904120002c750dc000905850b0003000e0009050103"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, 0x0, 0x0)

[ 2238.830148][ T7412] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2238.847417][T29367] usb 6-1: new high-speed USB device number 79 using dummy_hcd
23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f4}]})

23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1d9}]})

[ 2239.078172][ T7412] usb 1-1: Using ep0 maxpacket: 16
[ 2239.088072][T29367] usb 6-1: Using ep0 maxpacket: 16
[ 2239.088977][   T23] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2239.101049][T31070] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2239.181700][T16205] IPVS: ftp: loaded support on port[0] = 21
[ 2239.197566][ T7412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2239.211311][T29367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2239.233253][T29367] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2239.251130][ T7412] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x79}]})

[ 2239.281886][ T7412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2239.291812][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2239.323836][T29367] usb 6-1: config 0 descriptor??
[ 2239.332982][ T7412] usb 1-1: config 0 descriptor??
[ 2239.377368][T31070] usb 4-1: Using ep0 maxpacket: 8
[ 2239.382525][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2239.400073][T29367] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2239.408482][ T7412] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
23:25:20 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x32}, &(0x7f0000000240)=0x54)

23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d05}]})

[ 2239.527385][T31070] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[ 2239.535496][T31070] usb 4-1: config 0 has no interface number 0
[ 2239.541938][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2239.571916][T31070] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2239.587140][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2239.596189][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2239.605414][ T7412] usb 6-1: USB disconnect, device number 79
[ 2239.623225][T31070] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2239.632116][T29367] usb 1-1: USB disconnect, device number 80
[ 2239.647507][ T8914] tipc: TX() has been purged, node left!
[ 2239.672445][   T23] usb 5-1: config 0 descriptor??
[ 2239.684369][T31070] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2239.709242][T16325] IPVS: ftp: loaded support on port[0] = 21
[ 2239.723798][T31070] usb 4-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48
[ 2239.758248][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2239.782155][T31070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2239.848778][T31070] usb 4-1: config 0 descriptor??
[ 2239.963011][T31070] usb 5-1: USB disconnect, device number 89
[ 2240.110795][T16325] IPVS: ftp: loaded support on port[0] = 21
[ 2240.127159][   T23] usb 4-1: USB disconnect, device number 62
[ 2240.187199][ T7412] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2240.207412][T29367] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2240.427566][ T7412] usb 6-1: Using ep0 maxpacket: 32
[ 2240.457186][T29367] usb 1-1: Using ep0 maxpacket: 32
[ 2240.547434][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2240.565223][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2240.576494][ T7412] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2240.577823][T31070] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 2240.592253][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2240.604175][T29367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2240.614206][ T7412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2240.622538][T29367] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2240.647666][ T7412] usb 6-1: config 0 descriptor??
[ 2240.664369][T29367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2240.688159][ T7412] hub 6-1:0.0: USB hub found
[ 2240.708177][T29367] usb 1-1: config 0 descriptor??
[ 2240.758152][T29367] hub 1-1:0.0: USB hub found
[ 2240.867171][T31070] usb 5-1: Using ep0 maxpacket: 32
[ 2240.907249][ T7412] hub 6-1:0.0: 1 port detected
[ 2240.977361][T29367] hub 1-1:0.0: 1 port detected
[ 2240.997393][T23189] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2241.007753][T31070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2241.027123][T31070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2241.036878][T31070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2241.047896][T31070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2241.066501][T31070] usb 5-1: config 0 descriptor??
[ 2241.108107][T31070] hub 5-1:0.0: USB hub found
[ 2241.247120][T23189] usb 4-1: Using ep0 maxpacket: 8
[ 2241.337315][T31070] hub 5-1:0.0: 1 port detected
[ 2241.367864][T23189] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[ 2241.375949][T23189] usb 4-1: config 0 has no interface number 0
[ 2241.387461][T23189] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2241.399492][T23189] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2241.410624][T23189] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2241.437129][T23189] usb 4-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48
[ 2241.446214][T23189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2241.468473][T23189] usb 4-1: config 0 descriptor??
[ 2241.552280][T23186] usb 6-1: USB disconnect, device number 80
[ 2241.567270][T29367] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2241.627344][T23189] hub 1-1:0.0: activate --> -90
[ 2241.739340][T29367] usb 4-1: USB disconnect, device number 63
[ 2241.835927][T31070] usb 1-1: USB disconnect, device number 81
[ 2241.850280][T23189] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2241.927242][ T8914] tipc: TX() has been purged, node left!
[ 2241.987263][ T8533] hub 5-1:0.0: activate --> -90
23:25:23 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2242.077454][ T8914] tipc: TX() has been purged, node left!
[ 2242.197196][ T8533] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[ 2242.237145][ T8914] tipc: TX() has been purged, node left!
23:25:23 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)

23:25:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f5}]})

23:25:23 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4a}, &(0x7f0000000240)=0x54)

[ 2242.367346][T29367] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 2242.458370][T16449] IPVS: ftp: loaded support on port[0] = 21
[ 2242.588354][T23189] usb 5-1: USB disconnect, device number 90
[ 2242.617169][T29367] usb 6-1: Using ep0 maxpacket: 16
[ 2242.728518][T16449] IPVS: ftp: loaded support on port[0] = 21
[ 2242.737377][T29367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2242.753546][T29367] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2242.763802][T23186] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2242.772551][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.789475][T29367] usb 6-1: config 0 descriptor??
[ 2242.838465][T29367] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2243.007193][T23186] usb 1-1: Using ep0 maxpacket: 16
[ 2243.045683][T29367] usb 6-1: USB disconnect, device number 81
[ 2243.127564][T23186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2243.141575][T23186] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2243.151355][T23186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2243.161355][T23186] usb 1-1: config 0 descriptor??
[ 2243.198192][T23186] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2243.317158][ T7884] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2243.404648][T31070] usb 1-1: USB disconnect, device number 82
[ 2243.557119][ T7884] usb 5-1: Using ep0 maxpacket: 16
23:25:24 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="121c24c78fc304000000000109022400010000a022e5d474a0d62df45d0400000100d0"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8)
ioctl$EVIOCSREP(r0, 0x40044581, 0x0)

23:25:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4d0}, {}]})

23:25:24 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x88}, &(0x7f0000000240)=0x54)

[ 2243.637179][T29367] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2243.697325][ T7884] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 2243.714104][ T7884] usb 5-1: can't read configurations, error -71
[ 2243.782578][T16548] IPVS: ftp: loaded support on port[0] = 21
23:25:24 executing program 1:
r0 = eventfd2(0x0, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x1011}, {r0, 0x50db}], 0x2, 0xffff)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="9ec17d0312d12b27", 0x7ffff000}], 0x1)
semget$private(0x0, 0x0, 0x0)

[ 2243.887196][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2243.977251][T31070] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2244.007503][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.045799][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2244.091275][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2244.127210][ T7884] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2244.154959][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.206027][T29367] usb 6-1: config 0 descriptor??
23:25:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000106}]})

[ 2244.227091][T31070] usb 1-1: Using ep0 maxpacket: 32
[ 2244.278325][T29367] hub 6-1:0.0: USB hub found
[ 2244.347503][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.374426][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2244.377183][ T7884] usb 5-1: Using ep0 maxpacket: 16
[ 2244.408812][T31070] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2244.452933][T31070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:25:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000101}]})

[ 2244.496759][T31070] usb 1-1: config 0 descriptor??
[ 2244.497334][T29367] hub 6-1:0.0: 1 port detected
[ 2244.547918][ T7884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2244.577807][T16548] IPVS: ftp: loaded support on port[0] = 21
[ 2244.588586][T31070] hub 1-1:0.0: USB hub found
[ 2244.596497][ T7884] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2244.651179][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.689767][ T7884] usb 5-1: config 0 descriptor??
[ 2244.759881][ T7884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2244.797385][T31070] hub 1-1:0.0: 1 port detected
23:25:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0)

[ 2244.968234][T29367] usb 5-1: USB disconnect, device number 92
[ 2245.147250][T23189] hub 6-1:0.0: activate --> -90
[ 2245.437356][T31070] hub 1-1:0.0: activate --> -90
[ 2245.477790][T23189] usb 6-1: USB disconnect, device number 82
[ 2245.548373][T29367] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2245.640804][ T8533] usb 1-1: USB disconnect, device number 83
[ 2245.647188][T31070] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2245.807207][T29367] usb 5-1: Using ep0 maxpacket: 16
23:25:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2245.927478][T29367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2245.950888][T29367] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2245.972560][T29367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2245.995211][T29367] usb 5-1: config 0 descriptor??
[ 2246.048445][T29367] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:25:27 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)

23:25:27 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x98}, &(0x7f0000000240)=0x54)

23:25:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc1}]})

[ 2246.213230][T16676] IPVS: ftp: loaded support on port[0] = 21
[ 2246.241903][T16677] kvm [16675]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 2246.277201][T23187] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2246.540453][T23187] usb 6-1: Using ep0 maxpacket: 16
[ 2246.617124][ T8533] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2246.657580][T23187] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2246.671459][T23187] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2246.683327][T23187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2246.699624][T23187] usb 6-1: config 0 descriptor??
[ 2246.713900][T16676] IPVS: ftp: loaded support on port[0] = 21
[ 2246.752447][T23187] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2246.764549][ T8914] tipc: TX() has been purged, node left!
[ 2246.777694][ T8914] tipc: TX() has been purged, node left!
[ 2246.877110][ T8533] usb 1-1: Using ep0 maxpacket: 16
[ 2246.927209][ T8914] tipc: TX() has been purged, node left!
[ 2246.951325][T23187] usb 6-1: USB disconnect, device number 83
[ 2247.017457][ T8533] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2247.039920][ T8533] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2247.054462][ T8533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2247.070239][ T8533] usb 1-1: config 0 descriptor??
[ 2247.113014][ T8533] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2247.120450][ T8914] tipc: TX() has been purged, node left!
23:25:28 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3)

[ 2247.315072][T23186] usb 5-1: USB disconnect, device number 93
[ 2247.330449][T23189] usb 1-1: USB disconnect, device number 84
[ 2247.517156][T23187] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2247.777126][T23187] usb 6-1: Using ep0 maxpacket: 32
[ 2247.837428][T23186] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2247.897498][T23187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2247.908592][T23189] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2247.927316][T23187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2247.947400][T23187] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2247.956452][T23187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2247.989314][T23187] usb 6-1: config 0 descriptor??
[ 2248.028179][T23187] hub 6-1:0.0: USB hub found
[ 2248.107116][T23186] usb 5-1: Using ep0 maxpacket: 16
[ 2248.147400][T23189] usb 1-1: Using ep0 maxpacket: 32
23:25:29 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0)

23:25:29 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x1)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x6, 0x0, 0x0, @time, {}, {}, @result}], 0x1c)

23:25:29 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xd4}, &(0x7f0000000240)=0x54)

[ 2248.232127][T23186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2248.247304][T23187] hub 6-1:0.0: 1 port detected
[ 2248.272005][T23186] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2248.281603][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2248.295420][T16771] IPVS: ftp: loaded support on port[0] = 21
[ 2248.302906][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2248.318650][T23186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:25:29 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="240000001e005f031400fffffffffff8070037b2b3448647a0e09658dc000208000800ff", 0xfdd6)
recvmmsg(r0, &(0x7f0000005180), 0x193, 0x0, 0x0)

[ 2248.341467][T23189] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2248.358123][T23186] usb 5-1: config 0 descriptor??
[ 2248.393130][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2248.418598][T23186] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2248.448378][T23189] usb 1-1: config 0 descriptor??
23:25:29 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2248.512721][T23189] hub 1-1:0.0: USB hub found
[ 2248.622905][T32591] usb 5-1: USB disconnect, device number 94
[ 2248.727432][T23189] hub 1-1:0.0: 1 port detected
23:25:29 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2248.868957][T16771] IPVS: ftp: loaded support on port[0] = 21
[ 2248.897871][T23187] hub 6-1:0.0: activate --> -90
23:25:30 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2249.213537][T32591] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2249.217318][T23186] usb 6-1: USB disconnect, device number 84
[ 2249.377262][T23186] hub 1-1:0.0: activate --> -90
[ 2249.457119][T32591] usb 5-1: Using ep0 maxpacket: 32
[ 2249.577921][T32591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2249.579622][T23189] usb 1-1: USB disconnect, device number 85
[ 2249.597252][T23186] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2249.610588][T32591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:25:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2249.681313][T32591] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2249.718153][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2249.786330][T32591] usb 5-1: config 0 descriptor??
[ 2249.868284][T32591] hub 5-1:0.0: USB hub found
[ 2250.007224][T23186] usb 6-1: new high-speed USB device number 85 using dummy_hcd
23:25:31 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2250.077231][T32591] hub 5-1:0.0: 1 port detected
23:25:31 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0)

[ 2250.261331][T23186] usb 6-1: Using ep0 maxpacket: 16
[ 2250.377486][T23186] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2250.415905][T23186] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2250.444566][T23186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.476823][T23186] usb 6-1: config 0 descriptor??
[ 2250.487345][T32588] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2250.528580][T23186] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2250.727181][ T8533] hub 5-1:0.0: activate --> -90
[ 2250.731388][T23186] usb 6-1: USB disconnect, device number 85
[ 2250.747193][T32588] usb 1-1: Using ep0 maxpacket: 16
[ 2250.897465][T32588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2250.927087][T32588] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2250.941600][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.972395][T32588] usb 1-1: config 0 descriptor??
[ 2251.018399][T32588] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2251.141919][T32588] usb 5-1: USB disconnect, device number 95
[ 2251.224088][T23189] usb 1-1: USB disconnect, device number 86
[ 2251.297300][T23186] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2251.397321][ T8533] usb 5-1-port1: config error
[ 2251.537204][T23186] usb 6-1: Using ep0 maxpacket: 32
[ 2251.577109][ T8914] tipc: TX() has been purged, node left!
[ 2251.657297][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2251.673791][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2251.684850][T23186] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2251.695249][T23186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2251.706505][T23186] usb 6-1: config 0 descriptor??
[ 2251.727415][ T8914] tipc: TX() has been purged, node left!
[ 2251.747831][T23186] hub 6-1:0.0: USB hub found
[ 2251.787620][T23189] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2251.887148][ T8914] tipc: TX() has been purged, node left!
[ 2251.917210][T29367] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2251.967234][T23186] hub 6-1:0.0: 1 port detected
[ 2252.027232][T23189] usb 1-1: Using ep0 maxpacket: 32
[ 2252.047180][ T8914] tipc: TX() has been purged, node left!
[ 2252.147262][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2252.158326][T29367] usb 5-1: Using ep0 maxpacket: 16
[ 2252.163610][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2252.174417][T23189] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2252.184492][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2252.196742][T23189] usb 1-1: config 0 descriptor??
[ 2252.258145][T23189] hub 1-1:0.0: USB hub found
[ 2252.277251][T29367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2252.295560][T29367] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2252.304882][T29367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2252.315780][T29367] usb 5-1: config 0 descriptor??
[ 2252.358229][T29367] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:25:33 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x32021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x48120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040000000a0005003c00000018f643ef43"], 0x40}}, 0x0)
syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x30}, 0x1, 0xfffffff0}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000)
syz_genetlink_get_family_id$batadv(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x25c8c2, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0xc40)

23:25:33 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x12a}, &(0x7f0000000240)=0x54)

23:25:33 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

23:25:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}]}, 0x1c}}, 0x0)

[ 2252.403157][T32588] usb 5-1: USB disconnect, device number 96
[ 2252.477269][T23189] hub 1-1:0.0: 1 port detected
23:25:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x79}, {}]})

[ 2252.543683][T16957] IPVS: ftp: loaded support on port[0] = 21
[ 2252.617359][T23186] hub 6-1:0.0: activate --> -90
23:25:33 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b917102b03756acaba15ca1ed4782bfbaf6cebe37d62d0d86abf48ea3c683e1669ffa3a48c475a8f217db4cfc2fac5f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0x6d, &(0x7f0000000340)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r5}, 0xc)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, 0x0, 0x4240a2a0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x30009, 0x0)

[ 2252.917269][T32588] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2252.937440][T23186] usb 6-1: USB disconnect, device number 86
[ 2252.989862][T16957] IPVS: ftp: loaded support on port[0] = 21
23:25:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]})

[ 2253.127368][ T7884] hub 1-1:0.0: activate --> -90
23:25:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000105}]})

[ 2253.177384][T32588] usb 5-1: Using ep0 maxpacket: 16
[ 2253.297776][T32588] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2253.327236][T32588] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2253.333215][T23187] usb 1-1: USB disconnect, device number 87
23:25:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x34}]})

[ 2253.347268][ T7884] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2253.373905][T32588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2253.434247][T32588] usb 5-1: config 0 descriptor??
[ 2253.499290][T32588] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2253.708075][T32588] usb 5-1: USB disconnect, device number 97
23:25:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

23:25:34 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:34 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[ 2253.924815][T16958] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[ 2254.197146][ T8533] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2254.207104][T23187] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2254.447107][T23187] usb 1-1: Using ep0 maxpacket: 16
[ 2254.447207][ T8533] usb 6-1: Using ep0 maxpacket: 16
[ 2254.567419][T23187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2254.587237][T23187] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2254.588340][ T8533] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2254.596271][T23187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2254.617945][ T8533] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2254.632937][ T8533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2254.655037][ T8533] usb 6-1: config 0 descriptor??
[ 2254.665609][T23187] usb 1-1: config 0 descriptor??
[ 2254.698657][ T8533] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2254.728235][T23187] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2254.905561][ T8533] usb 6-1: USB disconnect, device number 87
[ 2254.935707][T23189] usb 1-1: USB disconnect, device number 88
[ 2254.937933][T32588] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2255.227188][T32588] usb 5-1: Using ep0 maxpacket: 16
[ 2255.357322][T32588] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2255.377128][T32588] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2255.386176][T32588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2255.399010][T32588] usb 5-1: config 0 descriptor??
[ 2255.448519][T32588] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2255.467141][ T8533] usb 6-1: new high-speed USB device number 88 using dummy_hcd
23:25:36 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1f01000011f79e08070ada00488f000000010902240001000000000904120002c750dc000905850b000300"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

23:25:36 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x130}, &(0x7f0000000240)=0x54)

23:25:36 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[ 2255.517162][T23189] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 2255.518729][T32591] usb 5-1: USB disconnect, device number 98
23:25:36 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000040), 0x240)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r1, &(0x7f0000000040), 0x240)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="8d9fe125f7ab7579cbd09a705a50f2fff821ba6375748fa5015507358d035f47562ba51eabe3e8ca5917b2eb6c8b5c36beaa31410f75f42af671bcfae89e396a9d95cc5a320d6011", @ANYRES16=r3, @ANYRES64=r3, @ANYRESHEX], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r5, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x5, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2255.617143][T17128] IPVS: ftp: loaded support on port[0] = 21
[ 2255.648223][ T8914] tipc: TX() has been purged, node left!
[ 2255.655631][ T8914] tipc: TX() has been purged, node left!
[ 2255.747367][ T8533] usb 6-1: Using ep0 maxpacket: 32
[ 2255.761635][T23189] usb 1-1: Using ep0 maxpacket: 32
[ 2255.867136][T32592] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2255.877662][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2255.887583][ T8533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2255.893106][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2255.919132][T23189] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2255.923366][ T8533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2255.928948][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2255.949557][T23189] usb 1-1: config 0 descriptor??
[ 2255.987212][ T8533] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2255.988211][T23189] hub 1-1:0.0: USB hub found
[ 2256.007004][ T8533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2256.038829][ T8533] usb 6-1: config 0 descriptor??
[ 2256.058633][T17128] IPVS: ftp: loaded support on port[0] = 21
[ 2256.088228][ T8533] hub 6-1:0.0: USB hub found
[ 2256.127140][T32591] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[ 2256.148086][T32592] usb 2-1: Using ep0 maxpacket: 8
[ 2256.213853][T23189] hub 1-1:0.0: 1 port detected
[ 2256.277765][T32592] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[ 2256.285857][T32592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2256.307251][ T8533] hub 6-1:0.0: 1 port detected
[ 2256.317408][T32592] usb 2-1: config 0 has no interface number 0
[ 2256.328715][T32592] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2256.353771][T32592] usb 2-1: config 0 interface 18 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2256.387220][T32592] usb 2-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48
[ 2256.396295][T32592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2256.407291][T32591] usb 5-1: device descriptor read/64, error 18
[ 2256.426934][T32592] usb 2-1: config 0 descriptor??
23:25:37 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
tkill(r0, 0x15)

23:25:37 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1c6}, &(0x7f0000000240)=0x54)

[ 2256.603048][T17193] IPVS: ftp: loaded support on port[0] = 21
[ 2256.683166][T32592] usb 2-1: USB disconnect, device number 53
23:25:37 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
tkill(r0, 0x15)

[ 2256.827470][T32591] usb 5-1: device descriptor read/64, error 18
[ 2256.847414][T23189] hub 1-1:0.0: activate --> -90
23:25:38 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
tkill(r0, 0x15)

[ 2256.937289][ T8533] hub 6-1:0.0: activate --> -90
[ 2257.049281][   T23] usb 1-1: USB disconnect, device number 89
[ 2257.057414][T23189] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2257.107375][T32591] usb 5-1: new full-speed USB device number 100 using dummy_hcd
23:25:38 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2257.187880][ T7884] usb 6-1: USB disconnect, device number 88
[ 2257.197318][ T8533] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2257.321727][T17193] IPVS: ftp: loaded support on port[0] = 21
[ 2257.397125][T32591] usb 5-1: device descriptor read/64, error 18
[ 2257.461284][T32592] usb 2-1: new high-speed USB device number 54 using dummy_hcd
23:25:38 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

23:25:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:38 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2257.727202][T32592] usb 2-1: Using ep0 maxpacket: 8
[ 2257.800361][T32591] usb 5-1: device descriptor read/64, error 18
[ 2257.867925][T32592] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[ 2257.876039][T32592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2257.913585][T32592] usb 2-1: config 0 has no interface number 0
[ 2257.917244][ T7884] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2257.920071][T32591] usb usb5-port1: attempt power cycle
[ 2257.967167][T32592] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2257.997162][T32592] usb 2-1: config 0 interface 18 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2258.027186][T32592] usb 2-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48
[ 2258.036305][T32592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.058632][T32592] usb 2-1: config 0 descriptor??
[ 2258.097266][ T7412] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 2258.172532][ T7884] usb 1-1: Using ep0 maxpacket: 16
23:25:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f2}]})

23:25:39 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:39 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x238}, &(0x7f0000000240)=0x54)

[ 2258.298323][ T7884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2258.307452][T32592] usb 2-1: USB disconnect, device number 54
[ 2258.323440][ T7884] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2258.367189][ T7412] usb 6-1: Using ep0 maxpacket: 16
[ 2258.373683][ T7884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.395245][T17302] IPVS: ftp: loaded support on port[0] = 21
[ 2258.404984][ T7884] usb 1-1: config 0 descriptor??
[ 2258.458479][ T7884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2258.487495][ T7412] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2258.527776][ T7412] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2258.564011][ T7412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.602009][ T7412] usb 6-1: config 0 descriptor??
[ 2258.647229][T32591] usb 5-1: new full-speed USB device number 101 using dummy_hcd
[ 2258.652203][ T7412] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2258.703205][ T7884] usb 1-1: USB disconnect, device number 90
[ 2258.777255][T32591] usb 5-1: device descriptor read/8, error -71
[ 2258.855429][ T7412] usb 6-1: USB disconnect, device number 89
23:25:39 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x175}]})

23:25:40 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000180))
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000001c0)={0x2, @vbi={0xfffffff8, 0x1, 0xc0000001, 0x30314742, [0x13b, 0xffffffe1], [0xd2, 0x4], 0x13b}})
r8 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

[ 2258.988871][T32591] usb 5-1: device descriptor read/8, error -71
23:25:40 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]})

[ 2259.132850][T17302] IPVS: ftp: loaded support on port[0] = 21
[ 2259.287136][ T7884] usb 1-1: new high-speed USB device number 91 using dummy_hcd
23:25:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x277}]})

[ 2259.427246][ T7412] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 2259.477137][T32591] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2259.537123][ T7884] usb 1-1: Using ep0 maxpacket: 32
[ 2259.577929][T32591] usb 5-1: Using ep0 maxpacket: 16
[ 2259.657424][ T7884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2259.668558][ T7412] usb 6-1: Using ep0 maxpacket: 32
[ 2259.680794][ T7884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2259.717815][ T7884] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2259.727771][T32591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2259.737109][ T7884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2259.768645][T32591] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2259.769653][ T7884] usb 1-1: config 0 descriptor??
[ 2259.797552][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2259.806487][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2259.825949][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2259.836559][T32591] usb 5-1: config 0 descriptor??
[ 2259.884715][ T7412] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2259.895479][ T7884] hub 1-1:0.0: USB hub found
[ 2259.908626][T32591] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2259.931440][ T7412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2259.963933][ T7412] usb 6-1: config 0 descriptor??
[ 2260.008105][ T7412] hub 6-1:0.0: USB hub found
[ 2260.097225][ T7884] hub 1-1:0.0: 1 port detected
[ 2260.122771][T29367] usb 5-1: USB disconnect, device number 102
[ 2260.227297][ T7412] hub 6-1:0.0: 1 port detected
[ 2260.447226][ T8914] tipc: TX() has been purged, node left!
[ 2260.607173][ T8914] tipc: TX() has been purged, node left!
[ 2260.697147][T29367] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2260.747862][ T7884] hub 1-1:0.0: activate --> -90
[ 2260.767161][ T8914] tipc: TX() has been purged, node left!
[ 2260.877178][ T7412] hub 6-1:0.0: activate --> -90
[ 2260.937187][T29367] usb 5-1: Using ep0 maxpacket: 16
[ 2260.947286][ T8914] tipc: TX() has been purged, node left!
[ 2260.955431][ T8533] usb 1-1: USB disconnect, device number 91
[ 2260.967194][ T7884] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2261.057278][T29367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2261.070283][T29367] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2261.081168][T29367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2261.113482][T29367] usb 5-1: config 0 descriptor??
[ 2261.118676][ T7412] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2261.129218][ T8914] tipc: TX() has been purged, node left!
[ 2261.144239][ T7412] usb 6-1: USB disconnect, device number 90
[ 2261.150496][ T7884] usb 6-1: Failed to suspend device, error -19
[ 2261.179459][T29367] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2261.248965][ T8914] tipc: TX() has been purged, node left!
23:25:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

23:25:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:25:42 executing program 1:
fsopen(&(0x7f0000000000)='xfs\x00', 0x0)

23:25:42 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:42 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x242}, &(0x7f0000000240)=0x54)

23:25:42 executing program 1:
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000580))
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000000c0)={0xd46d, "da6cb011b41e04e7e54fd07985c4d59e28d907e778de224598d22434917eed36", 0x1, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x101})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)}], 0x2)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x840)

[ 2261.683878][T17467] IPVS: ftp: loaded support on port[0] = 21
23:25:42 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2261.757409][ T7412] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 2261.924971][T17485] new mount options do not match the existing superblock, will be ignored
23:25:43 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
r3 = dup(r2)
write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2]}, 0x45c)

[ 2261.987394][ T7884] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 2261.997205][ T7412] usb 1-1: Using ep0 maxpacket: 16
[ 2262.117469][ T7412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2262.134042][ T7412] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2262.139512][T17509] input: syz0 as /devices/virtual/input/input12
[ 2262.159920][ T7412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.165640][T17467] IPVS: ftp: loaded support on port[0] = 21
[ 2262.195378][ T7412] usb 1-1: config 0 descriptor??
[ 2262.227147][ T7884] usb 6-1: Using ep0 maxpacket: 16
[ 2262.240098][ T7412] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2262.347518][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2262.380996][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:25:43 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r0, 0x5)
flock(r1, 0x2)
flock(r1, 0x1)
flock(r0, 0x2)

23:25:43 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000200)=0xbe, 0x4)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000a45fb4be6c7334960bc4c8d865b18d9fb03d9c290f98a5f107642d1b7e085691fefbaaf75e0c469696c9892e28ebc6978d048a4241f9a74111d4ed21e5eef8e8c22430c445fd1dc9407f376c3da7f6f5c1563c62c54f4f5ac9ead35ef7f3592d197f133955023186fb"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2262.425957][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.435328][T32588] usb 5-1: USB disconnect, device number 103
[ 2262.481151][ T7884] usb 6-1: config 0 descriptor??
[ 2262.483504][T31070] usb 1-1: USB disconnect, device number 92
[ 2262.528488][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2262.735010][T29367] usb 6-1: USB disconnect, device number 91
23:25:43 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2d4}, &(0x7f0000000240)=0x54)

[ 2262.985697][T17578] IPVS: ftp: loaded support on port[0] = 21
[ 2262.998351][T32588] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2263.047276][T31070] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 2263.247116][T32588] usb 5-1: Using ep0 maxpacket: 16
[ 2263.277240][T17578] IPVS: ftp: loaded support on port[0] = 21
[ 2263.297154][T29367] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 2263.307448][T31070] usb 1-1: Using ep0 maxpacket: 32
[ 2263.368325][T32588] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2263.391142][T32588] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2263.415977][T32588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2263.427422][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2263.445731][T31070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2263.468710][T32588] usb 5-1: config 0 descriptor??
[ 2263.481941][T31070] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2263.508449][T31070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:25:44 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2f4}, &(0x7f0000000240)=0x54)

[ 2263.519174][T32588] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2263.537194][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2263.554858][T31070] usb 1-1: config 0 descriptor??
[ 2263.611237][T31070] hub 1-1:0.0: USB hub found
[ 2263.663817][T17631] IPVS: ftp: loaded support on port[0] = 21
[ 2263.669860][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2263.669883][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2263.669917][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2263.669939][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2263.723555][   T23] usb 5-1: USB disconnect, device number 104
[ 2263.827258][T31070] hub 1-1:0.0: 1 port detected
[ 2263.829317][T29367] usb 6-1: config 0 descriptor??
[ 2263.894705][T29367] hub 6-1:0.0: USB hub found
[ 2264.042813][T17631] IPVS: ftp: loaded support on port[0] = 21
[ 2264.097383][T29367] hub 6-1:0.0: 1 port detected
[ 2264.307228][   T23] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 2264.478532][T31070] hub 1-1:0.0: activate --> -90
[ 2264.557167][   T23] usb 5-1: Using ep0 maxpacket: 32
[ 2264.697398][T31070] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2264.704758][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2264.728879][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2264.747259][T24361] hub 6-1:0.0: activate --> -90
[ 2264.750882][   T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2264.775638][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.794015][   T23] usb 5-1: config 0 descriptor??
[ 2264.838449][   T23] hub 5-1:0.0: USB hub found
[ 2264.978935][T32591] usb 6-1: USB disconnect, device number 92
[ 2264.987321][T24361] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2265.017339][T24362] usb 1-1: USB disconnect, device number 93
[ 2265.047403][   T23] hub 5-1:0.0: 1 port detected
23:25:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

23:25:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

23:25:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0xedbf)

23:25:46 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x300}, &(0x7f0000000240)=0x54)

23:25:46 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:46 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c)

[ 2265.598789][T17725] IPVS: ftp: loaded support on port[0] = 21
[ 2265.647654][ T8914] tipc: TX() has been purged, node left!
[ 2265.653963][ T8914] tipc: TX() has been purged, node left!
[ 2265.667789][ T8914] tipc: TX() has been purged, node left!
[ 2265.683171][ T8914] tipc: TX() has been purged, node left!
[ 2265.696918][ T8914] tipc: TX() has been purged, node left!
[ 2265.710292][ T8914] tipc: TX() has been purged, node left!
[ 2265.718410][T32589] hub 5-1:0.0: activate --> -90
[ 2265.723418][T23186] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 2265.870507][T17725] IPVS: ftp: loaded support on port[0] = 21
[ 2265.878274][T32592] usb 6-1: new high-speed USB device number 93 using dummy_hcd
23:25:47 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0x108, 0x0, 0x0, 0x1d8, 0x1d8, 0x2e0, 0x328, 0x328, 0x328, 0x2e0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
r1 = socket$inet6(0xa, 0x3, 0x2b)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)

23:25:47 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x344}, &(0x7f0000000240)=0x54)

23:25:47 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)
readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0x700}], 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000023c0)={0x0, &(0x7f0000000200)=""/144, 0x0, &(0x7f00000022c0)="4867dd24aae06d86616cdd0051f165b43a8c7b30a28266bf22581563758153204bb4e2530fa79a7582b087ede12f"}, 0x38)

[ 2265.978016][T23186] usb 1-1: Using ep0 maxpacket: 16
[ 2265.982624][T17783] x_tables: duplicate underflow at hook 2
[ 2266.001652][T17783] x_tables: duplicate underflow at hook 2
[ 2266.096722][T17788] IPVS: ftp: loaded support on port[0] = 21
[ 2266.097254][T23186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2266.127274][T32592] usb 6-1: Using ep0 maxpacket: 16
[ 2266.127958][T23186] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2266.152392][   T17] usb 5-1: USB disconnect, device number 105
[ 2266.218510][T23186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.247652][T32592] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2266.259235][T23186] usb 1-1: config 0 descriptor??
[ 2266.276612][T32592] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2266.301858][T32592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.308517][T23186] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2266.347936][T32592] usb 6-1: config 0 descriptor??
[ 2266.410574][T32592] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2266.419591][T32589] usb 5-1-port1: config error
[ 2266.511714][T32592] usb 1-1: USB disconnect, device number 94
[ 2266.603311][T17788] IPVS: ftp: loaded support on port[0] = 21
[ 2266.612501][T23186] usb 6-1: USB disconnect, device number 93
[ 2266.957197][   T17] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 2267.087106][T32592] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 2267.167185][T23186] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 2267.217158][   T17] usb 5-1: Using ep0 maxpacket: 16
[ 2267.347263][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2267.347307][   T17] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2267.347326][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2267.348124][T32592] usb 1-1: Using ep0 maxpacket: 32
[ 2267.387317][   T17] usb 5-1: config 0 descriptor??
[ 2267.409909][T23186] usb 6-1: Using ep0 maxpacket: 32
[ 2267.438528][   T17] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2267.527365][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2267.550501][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2267.551900][T23186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:25:48 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x8380, 0x1850, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x3f, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x101, 0xa5, 0x1, {0x22, 0x1a9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x40, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1f, 0x8, 0x20, 0x8, 0x20}, 0x1e, &(0x7f0000000200)={0x5, 0xf, 0x1e, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x7a, 0x0, 0x9, 0xff0f, 0xffff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x1, 0x200}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}]})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:25:48 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x394}, &(0x7f0000000240)=0x54)

23:25:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
msgget(0x3, 0x0)

[ 2267.577225][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2267.593372][T23186] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2267.619240][T32592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2267.623498][T23186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2267.657858][T23186] usb 6-1: config 0 descriptor??
[ 2267.670181][T32592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2267.711996][T17879] IPVS: ftp: loaded support on port[0] = 21
[ 2267.717341][   T17] usb 5-1: USB disconnect, device number 106
[ 2267.722378][T23186] hub 6-1:0.0: USB hub found
[ 2267.735119][T32592] usb 1-1: config 0 descriptor??
[ 2267.798253][T32592] hub 1-1:0.0: USB hub found
[ 2267.927464][T23186] hub 6-1:0.0: 1 port detected
[ 2268.007454][T32592] hub 1-1:0.0: 1 port detected
[ 2268.177183][   T17] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 2268.183541][T17879] IPVS: ftp: loaded support on port[0] = 21
[ 2268.427561][   T17] usb 5-1: Using ep0 maxpacket: 16
[ 2268.547206][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2268.567112][   T17] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2268.576160][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.577336][T23186] hub 6-1:0.0: activate --> -90
[ 2268.615282][   T17] usb 5-1: config 0 descriptor??
[ 2268.638933][T32592] hub 1-1:0.0: activate --> -90
[ 2268.668325][   T17] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2268.787476][T23186] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2268.794615][T23187] usb 6-1: USB disconnect, device number 94
[ 2268.847271][T32592] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2268.877795][T23189] usb 5-1: USB disconnect, device number 107
[ 2269.167391][T23187] usb 1-1: USB disconnect, device number 95
[ 2269.447219][T23189] usb 5-1: new high-speed USB device number 108 using dummy_hcd
23:25:50 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3da}, &(0x7f0000000240)=0x54)

23:25:50 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)

23:25:50 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:50 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

23:25:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 2269.637826][T17979] IPVS: ftp: loaded support on port[0] = 21
[ 2269.687179][T23189] usb 5-1: Using ep0 maxpacket: 32
23:25:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f0000000040))

[ 2269.807939][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2269.839117][T23189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2269.863821][T23189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2269.877563][   T17] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 2269.881667][T23189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2269.909991][T23189] usb 5-1: config 0 descriptor??
[ 2269.958285][T23189] hub 5-1:0.0: USB hub found
23:25:51 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="5385955d335b"}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10)

[ 2270.077372][T23186] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 2270.079870][T17979] IPVS: ftp: loaded support on port[0] = 21
[ 2270.129078][   T17] usb 6-1: Using ep0 maxpacket: 16
[ 2270.155976][ T8914] tipc: TX() has been purged, node left!
[ 2270.169353][ T8914] tipc: TX() has been purged, node left!
[ 2270.177304][T23189] hub 5-1:0.0: 1 port detected
[ 2270.190615][T18031] device ip6tnl0 entered promiscuous mode
[ 2270.199172][T18015] device ip6tnl0 left promiscuous mode
23:25:51 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3ec}, &(0x7f0000000240)=0x54)

[ 2270.245018][T18039] device ip6tnl0 entered promiscuous mode
[ 2270.251608][T18015] device ip6tnl0 left promiscuous mode
[ 2270.259366][   T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2270.272505][ T8914] tipc: TX() has been purged, node left!
[ 2270.273147][   T17] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:25:51 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr})

[ 2270.289778][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2270.304454][   T17] usb 6-1: config 0 descriptor??
[ 2270.327676][T18041] IPVS: ftp: loaded support on port[0] = 21
[ 2270.347412][T23186] usb 1-1: Using ep0 maxpacket: 16
[ 2270.368527][   T17] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2270.385159][T17889] udc-core: couldn't find an available UDC or it's busy
[ 2270.408301][ T8914] tipc: TX() has been purged, node left!
[ 2270.416759][ T8914] tipc: TX() has been purged, node left!
[ 2270.433223][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2270.462638][ T8914] tipc: TX() has been purged, node left!
[ 2270.467471][T23186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2270.518080][T23186] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2270.549712][T23186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2270.573207][   T17] usb 6-1: USB disconnect, device number 95
[ 2270.576037][T23186] usb 1-1: config 0 descriptor??
[ 2270.628595][T23186] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2270.692785][T18041] IPVS: ftp: loaded support on port[0] = 21
[ 2270.835761][T23189] usb 1-1: USB disconnect, device number 96
[ 2270.962956][ T7884] usb 5-1: USB disconnect, device number 108
[ 2270.969383][T23186] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 2271.187254][   T17] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 2271.407173][T23189] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2271.447197][   T17] usb 6-1: Using ep0 maxpacket: 32
[ 2271.597588][   T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2271.609566][   T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2271.619806][   T17] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2271.629264][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.644807][   T17] usb 6-1: config 0 descriptor??
[ 2271.652783][T23189] usb 1-1: Using ep0 maxpacket: 32
[ 2271.698182][   T17] hub 6-1:0.0: USB hub found
[ 2271.777206][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2271.788612][T23189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2271.800868][T23189] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2271.807114][T31069] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2271.812395][T23189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.832747][T23189] usb 1-1: config 0 descriptor??
[ 2271.878259][T23189] hub 1-1:0.0: USB hub found
[ 2271.907193][   T17] hub 6-1:0.0: 1 port detected
[ 2272.097170][T31069] usb 5-1: Using ep0 maxpacket: 16
[ 2272.097307][T23189] hub 1-1:0.0: 1 port detected
[ 2272.220343][T31069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2272.237233][T31069] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2272.246275][T31069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2272.256017][T31069] usb 5-1: config 0 descriptor??
23:25:53 executing program 1:

23:25:53 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3ed}, &(0x7f0000000240)=0x54)

23:25:53 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @local}, &(0x7f00000001c0)=0xc)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2272.327440][T31069] usb 5-1: can't set config #0, error -71
[ 2272.351071][T31069] usb 5-1: USB disconnect, device number 109
[ 2272.385614][T18138] IPVS: ftp: loaded support on port[0] = 21
23:25:53 executing program 1:

23:25:53 executing program 1:

[ 2272.547502][   T17] hub 6-1:0.0: activate --> -90
23:25:53 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2272.747408][T23186] hub 1-1:0.0: activate --> -90
[ 2272.763739][T23186] usb 6-1: USB disconnect, device number 96
[ 2272.777382][   T17] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2272.797213][T31069] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2272.895257][T18138] IPVS: ftp: loaded support on port[0] = 21
[ 2272.957200][ T7884] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2273.071816][T31069] usb 5-1: Using ep0 maxpacket: 16
[ 2273.210949][T31069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2273.237002][T31069] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2273.266218][T31069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2273.282364][ T7884] usb 1-1: USB disconnect, device number 97
[ 2273.303445][T31069] usb 5-1: config 0 descriptor??
[ 2273.368577][T31069] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2273.576798][ T7884] usb 5-1: USB disconnect, device number 110
23:25:54 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})

23:25:54 executing program 1:

23:25:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

23:25:54 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3f0}, &(0x7f0000000240)=0x54)

23:25:54 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
read$dsp(r0, &(0x7f0000000100)=""/48, 0x30)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0x700}], 0x1)

[ 2273.765031][T18227] IPVS: ftp: loaded support on port[0] = 21
[ 2273.988233][   T23] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 2274.077149][T32591] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 2274.113689][T18227] IPVS: ftp: loaded support on port[0] = 21
[ 2274.147235][ T7884] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2274.229087][   T23] usb 6-1: Using ep0 maxpacket: 16
23:25:55 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3f6}, &(0x7f0000000240)=0x54)

[ 2274.330623][T32591] usb 1-1: Using ep0 maxpacket: 16
[ 2274.347923][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2274.362905][T18280] IPVS: ftp: loaded support on port[0] = 21
[ 2274.387124][   T23] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2274.403809][ T7884] usb 5-1: Using ep0 maxpacket: 32
[ 2274.419518][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2274.438135][   T23] usb 6-1: config 0 descriptor??
23:25:55 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48)
dup(0xffffffffffffffff)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100), 0x4)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5}, {0x3, 0x3f}, {0xffff, 0x100}, {}, {0x0, 0xff}]})

[ 2274.459003][T32591] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2274.509994][   T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2274.527119][T32591] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2274.528148][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2274.536166][T32591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2274.581992][T32591] usb 1-1: config 0 descriptor??
[ 2274.583234][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2274.610300][ T7884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2274.642848][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2274.658353][T32591] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
23:25:55 executing program 1:

[ 2274.684821][ T7884] usb 5-1: config 0 descriptor??
[ 2274.729372][   T23] usb 6-1: USB disconnect, device number 97
[ 2274.745238][ T7884] hub 5-1:0.0: USB hub found
[ 2274.865022][T23186] usb 1-1: USB disconnect, device number 98
[ 2274.947429][ T7884] hub 5-1:0.0: 1 port detected
[ 2275.012752][T18280] IPVS: ftp: loaded support on port[0] = 21
[ 2275.297194][   T23] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 2275.429593][T23186] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 2275.559104][   T23] usb 6-1: Using ep0 maxpacket: 32
[ 2275.657207][ T7884] hub 5-1:0.0: activate --> -90
[ 2275.677194][T23186] usb 1-1: Using ep0 maxpacket: 32
[ 2275.677290][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2275.694401][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2275.705401][   T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2275.715326][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2275.725122][   T23] usb 6-1: config 0 descriptor??
[ 2275.778135][   T23] hub 6-1:0.0: USB hub found
[ 2275.791045][ T8914] tipc: TX() has been purged, node left!
[ 2275.798001][T23186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2275.820237][T23186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2275.836280][T23186] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2275.852497][T23186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2275.866019][T23186] usb 1-1: config 0 descriptor??
[ 2275.918321][T23186] hub 1-1:0.0: USB hub found
[ 2275.957249][ T8914] tipc: TX() has been purged, node left!
[ 2275.987201][   T23] hub 6-1:0.0: 1 port detected
[ 2276.084080][T23189] usb 5-1: USB disconnect, device number 111
[ 2276.119711][ T8914] tipc: TX() has been purged, node left!
[ 2276.137376][T23186] hub 1-1:0.0: 1 port detected
[ 2276.267126][ T8914] tipc: TX() has been purged, node left!
[ 2276.338506][ T7884] usb 5-1-port1: config error
[ 2276.427177][ T8914] tipc: TX() has been purged, node left!
[ 2276.597235][ T8914] tipc: TX() has been purged, node left!
[ 2276.623279][T31849] hub 6-1:0.0: activate --> -90
[ 2276.757163][ T8914] tipc: TX() has been purged, node left!
[ 2276.787245][T23186] hub 1-1:0.0: activate --> -90
[ 2276.833846][T32590] usb 6-1: USB disconnect, device number 98
[ 2276.840003][T31849] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2276.877298][   T23] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2276.927320][ T8914] tipc: TX() has been purged, node left!
[ 2277.007246][T23186] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2277.098885][ T8914] tipc: TX() has been purged, node left!
[ 2277.117180][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2277.239157][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2277.252169][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2277.261622][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.273762][   T23] usb 5-1: config 0 descriptor??
[ 2277.283519][ T8914] tipc: TX() has been purged, node left!
[ 2277.318413][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2277.329182][T23186] usb 1-1: USB disconnect, device number 99
23:25:58 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3fa}, &(0x7f0000000240)=0x54)

23:25:58 executing program 1:

23:25:58 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:25:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

[ 2277.388571][   T23] usb 5-1: USB disconnect, device number 112
[ 2277.460852][T18412] IPVS: ftp: loaded support on port[0] = 21
23:25:58 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})

23:25:58 executing program 1:

23:25:58 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, &(0x7f0000000180)={0x0, 0x31, 0xc4, {0xc4, 0x9, "21c8a1886ea90ee5df55e09d89c9f47eace715e9bb13e52cd120f0ff09fe98385e2f6d2f2c005a3c20e242a6040c0fa5adbf1fe4025b84dd378ac554778e74c067493d4149567901f1f63aa59e6d1daf1038903340a0ed9897382420679266bd73ef9a1785a38369521ebc8390d6bb1ebb989dd025ca5840ece6a48c352435bef121d7f0f6924a147c00a11a1ce17c6fdb4d7b403fd0716f51bb5c518ef5b3ee0049f7d778e6fbbaff28761af56f51f4e15d38e5db65da2413cb4ca47ffa935c483f"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f00000002c0)={0x0, 0x22, 0x2c, {[@global=@item_4={0x3, 0x1, 0x6, "b4b41146"}, @global=@item_4={0x3, 0x1, 0x9, "ef9b326c"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "022d21eb"}, @local=@item_4={0x3, 0x2, 0x3, "83592184"}, @local=@item_4={0x3, 0x2, 0x5, "3cb2f912"}, @main=@item_4={0x3, 0x0, 0x9, "6e4dc5a4"}, @main=@item_4={0x3, 0x0, 0x8, "b6514233"}, @local=@item_012={0x2, 0x2, 0x4, "43be"}, @local=@item_4={0x3, 0x2, 0x2, "d11f6ee7"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x653}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x20, 0x9, 0x1c, "351b6ad0ec08adee786c9eca4fd0adb3c1e16297e80bac7f542d6207"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000440)={0x20, 0x1, 0x4a, "ae7b4b3b652ba09c1d256aac636f29bde379d6e07e6b7b726dce08f07e9b58387486ee984dd583a0b1a7c68eaaae4b3ad0d97e620e4c67fcbce9ab5b4c23783fd62376b69c6f2ad1596a"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0xd4}})
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:25:58 executing program 1:

[ 2277.797146][T23189] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 2277.800920][T18412] IPVS: ftp: loaded support on port[0] = 21
23:25:58 executing program 1:

23:25:59 executing program 1:

23:25:59 executing program 1:

[ 2278.047400][T23189] usb 6-1: Using ep0 maxpacket: 16
[ 2278.057586][T23186] usb 5-1: new high-speed USB device number 113 using dummy_hcd
23:25:59 executing program 1:

[ 2278.127301][ T7884] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 2278.187639][T23189] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2278.210661][T23189] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2278.228381][T23189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2278.269150][T23189] usb 6-1: config 0 descriptor??
[ 2278.327494][T23186] usb 5-1: Using ep0 maxpacket: 16
[ 2278.334121][T23189] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:25:59 executing program 1:

[ 2278.397236][ T7884] usb 1-1: Using ep0 maxpacket: 16
23:25:59 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1100}, &(0x7f0000000240)=0x54)

[ 2278.447797][T23186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2278.466899][T23186] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2278.481204][T23186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2278.514868][T23186] usb 5-1: config 0 descriptor??
[ 2278.515288][T18485] IPVS: ftp: loaded support on port[0] = 21
[ 2278.539704][ T7884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2278.556128][T23189] usb 6-1: USB disconnect, device number 99
[ 2278.563533][T23186] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2278.615110][ T7884] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2278.645808][ T7884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2278.671505][ T7884] usb 1-1: config 0 descriptor??
[ 2278.718603][ T7884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2278.776679][ T7884] usb 5-1: USB disconnect, device number 113
[ 2278.922232][   T12] usb 1-1: USB disconnect, device number 100
[ 2278.954761][T18485] IPVS: ftp: loaded support on port[0] = 21
[ 2279.127337][T23189] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 2279.387238][T23189] usb 6-1: Using ep0 maxpacket: 32
[ 2279.398112][ T7884] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2279.507206][   T12] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2279.527810][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2279.547093][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2279.567128][T23189] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2279.576184][T23189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2279.602402][T23189] usb 6-1: config 0 descriptor??
[ 2279.667204][ T7884] usb 5-1: Using ep0 maxpacket: 32
[ 2279.673172][T23189] hub 6-1:0.0: USB hub found
[ 2279.767158][   T12] usb 1-1: Using ep0 maxpacket: 32
[ 2279.798161][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2279.817186][ T7884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2279.826947][ T7884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2279.839102][ T7884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2279.853183][ T7884] usb 5-1: config 0 descriptor??
[ 2279.890758][T23189] hub 6-1:0.0: 1 port detected
[ 2279.908342][ T7884] hub 5-1:0.0: USB hub found
[ 2279.923499][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2279.947956][   T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2279.967360][   T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2279.976409][   T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2280.013226][   T12] usb 1-1: config 0 descriptor??
[ 2280.078212][   T12] hub 1-1:0.0: USB hub found
[ 2280.127340][ T7884] hub 5-1:0.0: 1 port detected
[ 2280.297335][   T12] hub 1-1:0.0: 1 port detected
23:26:01 executing program 1:

[ 2280.527290][T10068] hub 6-1:0.0: activate --> -90
[ 2280.731055][ T7884] usb 6-1: USB disconnect, device number 100
[ 2280.747186][T10068] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2280.780467][T23189] hub 5-1:0.0: activate --> -90
[ 2280.937370][T10068] hub 1-1:0.0: activate --> -90
[ 2281.167355][T10068] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2281.200694][T18445] udc-core: couldn't find an available UDC or it's busy
[ 2281.216978][T18445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
23:26:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

[ 2281.261870][T10068] usb 5-1: USB disconnect, device number 114
[ 2281.488338][   T12] usb 1-1: USB disconnect, device number 101
[ 2281.507168][T23189] usb 5-1-port1: config error
[ 2281.597133][ T7884] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 2281.857138][ T7884] usb 6-1: Using ep0 maxpacket: 16
23:26:02 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})

23:26:02 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2281.987408][ T7884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2282.017138][ T7884] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2282.026180][ T7884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.047146][T10068] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2282.060375][ T7884] usb 6-1: config 0 descriptor??
[ 2282.098438][ T7884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2282.207172][   T17] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 2282.304972][   T12] usb 6-1: USB disconnect, device number 101
[ 2282.311081][T10068] usb 5-1: Using ep0 maxpacket: 16
[ 2282.447927][T10068] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2282.457205][   T17] usb 1-1: Using ep0 maxpacket: 16
[ 2282.469895][T10068] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2282.479721][T10068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.491606][T10068] usb 5-1: config 0 descriptor??
[ 2282.538353][T10068] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2282.577552][   T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2282.607122][   T17] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2282.616160][   T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.638747][   T17] usb 1-1: config 0 descriptor??
[ 2282.678281][   T17] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
23:26:03 executing program 1:

[ 2282.739117][   T17] usb 5-1: USB disconnect, device number 115
23:26:03 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1200}, &(0x7f0000000240)=0x54)

23:26:03 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003c60ad7d88eaad7f00000010ffffffff000000000001090224000100000000090400000003000000097a52d750"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB="b30000000000"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/autofs\x00', 0x228400, 0x0)
r3 = socket(0xa, 0x5, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5}, 0xc)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000940)={r5, 0x2}, &(0x7f0000000980)=0x8)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:26:03 executing program 1:

[ 2282.857702][   T12] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 2282.860834][T18625] IPVS: ftp: loaded support on port[0] = 21
[ 2282.882619][T32588] usb 1-1: USB disconnect, device number 102
23:26:04 executing program 1:

23:26:04 executing program 1:

[ 2283.123463][   T12] usb 6-1: Using ep0 maxpacket: 32
23:26:04 executing program 1:

[ 2283.248087][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2283.269677][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:26:04 executing program 1:

[ 2283.302261][   T12] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2283.322156][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2283.327136][   T17] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2283.340364][   T12] usb 6-1: config 0 descriptor??
23:26:04 executing program 1:

[ 2283.388367][   T12] hub 6-1:0.0: USB hub found
[ 2283.457187][T32588] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 2283.471616][T18625] IPVS: ftp: loaded support on port[0] = 21
[ 2283.487485][ T8914] tipc: TX() has been purged, node left!
[ 2283.563643][ T8914] tipc: TX() has been purged, node left!
[ 2283.597281][   T12] hub 6-1:0.0: 1 port detected
[ 2283.617127][   T17] usb 5-1: device descriptor read/64, error 18
[ 2283.697259][T32588] usb 1-1: Using ep0 maxpacket: 32
[ 2283.717270][ T8914] tipc: TX() has been purged, node left!
[ 2283.817309][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2283.828413][T32588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2283.838635][T32588] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2283.848139][T32588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2283.857879][T32588] usb 1-1: config 0 descriptor??
[ 2283.898930][T32588] hub 1-1:0.0: USB hub found
[ 2284.017171][   T17] usb 5-1: device descriptor read/64, error 18
[ 2284.117231][T32588] hub 1-1:0.0: 1 port detected
[ 2284.247349][   T12] hub 6-1:0.0: activate --> -90
[ 2284.287201][   T17] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2284.456375][T23186] usb 6-1: USB disconnect, device number 102
[ 2284.469948][   T12] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2284.559292][   T17] usb 5-1: device descriptor read/64, error 18
[ 2284.767329][T32588] hub 1-1:0.0: activate --> -90
[ 2284.947180][   T17] usb 5-1: device descriptor read/64, error 18
23:26:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

[ 2284.987421][T32588] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[ 2285.067379][   T17] usb usb5-port1: attempt power cycle
[ 2285.307185][T31849] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 2285.315161][T23035] usb 1-1: USB disconnect, device number 103
[ 2285.547436][T31849] usb 6-1: Using ep0 maxpacket: 16
[ 2285.667204][T31849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2285.687096][T31849] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2285.696138][T31849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:26:06 executing program 1:

23:26:06 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1d00}, &(0x7f0000000240)=0x54)

23:26:06 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0065000600"], 0x0, 0x0, 0x0, 0x0})

[ 2285.729834][T31849] usb 6-1: config 0 descriptor??
[ 2285.778345][T31849] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2285.786921][   T17] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2285.814370][T18720] IPVS: ftp: loaded support on port[0] = 21
[ 2285.887990][   T17] usb 5-1: Invalid ep0 maxpacket: 125
23:26:07 executing program 1:

23:26:07 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getpeername(r6, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff}}, &(0x7f0000000200)=0x80)
ioctl$int_out(r7, 0x2, &(0x7f0000000240))
r8 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

23:26:07 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:07 executing program 1:

[ 2285.981681][ T8533] usb 6-1: USB disconnect, device number 103
23:26:07 executing program 1:

[ 2286.117659][T31849] usb 1-1: new high-speed USB device number 104 using dummy_hcd
23:26:07 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:07 executing program 1:

[ 2286.345564][T18720] IPVS: ftp: loaded support on port[0] = 21
[ 2286.357197][T31849] usb 1-1: Using ep0 maxpacket: 16
[ 2286.399112][ T8914] tipc: TX() has been purged, node left!
[ 2286.417857][ T8914] tipc: TX() has been purged, node left!
[ 2286.477610][T31849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2286.509698][T31849] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2286.541963][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2286.557151][ T8533] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 2286.572555][T31849] usb 1-1: config 0 descriptor??
[ 2286.582947][   T17] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2286.648346][T31849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2286.688018][   T17] usb 5-1: Using ep0 maxpacket: 16
[ 2286.807914][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2286.820994][ T8533] usb 6-1: Using ep0 maxpacket: 32
[ 2286.841063][   T17] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2286.869237][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2286.893109][   T17] usb 5-1: config 0 descriptor??
[ 2286.912068][T31849] usb 1-1: USB disconnect, device number 104
[ 2286.937518][ T8533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2286.949648][   T17] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2286.980770][ T8533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2286.993918][ T8533] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2287.006229][ T8533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2287.025769][ T8533] usb 6-1: config 0 descriptor??
[ 2287.078308][ T8533] hub 6-1:0.0: USB hub found
[ 2287.162421][T23186] usb 5-1: USB disconnect, device number 119
[ 2287.297243][ T8533] hub 6-1:0.0: 1 port detected
[ 2287.407245][T31849] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 2287.647135][T31849] usb 1-1: Using ep0 maxpacket: 32
[ 2287.767523][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2287.777143][T23186] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2287.785461][T31849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2287.805385][T31849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2287.816168][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2287.840879][T31849] usb 1-1: config 0 descriptor??
[ 2287.878209][T31849] hub 1-1:0.0: USB hub found
[ 2287.947681][ T8533] hub 6-1:0.0: activate --> -90
[ 2288.057137][T23186] usb 5-1: Using ep0 maxpacket: 32
[ 2288.097297][T31849] hub 1-1:0.0: 1 port detected
[ 2288.153692][ T8533] usb 6-1: USB disconnect, device number 104
[ 2288.171353][   T17] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2288.194858][T23186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2288.211318][T23186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2288.225605][T23186] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2288.234913][T23186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2288.248147][T23186] usb 5-1: config 0 descriptor??
[ 2288.288144][T23186] hub 5-1:0.0: USB hub found
[ 2288.497264][T23186] hub 5-1:0.0: 1 port detected
23:26:09 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

23:26:09 executing program 1:

23:26:09 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:09 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2a01}, &(0x7f0000000240)=0x54)

[ 2288.732339][T18842] IPVS: ftp: loaded support on port[0] = 21
[ 2288.748600][T31849] hub 1-1:0.0: activate --> -90
[ 2288.767581][ T8914] tipc: TX() has been purged, node left!
[ 2288.775231][ T8914] tipc: TX() has been purged, node left!
[ 2288.922671][T18842] IPVS: ftp: loaded support on port[0] = 21
[ 2288.997431][ T7412] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 2289.137285][ T7884] hub 5-1:0.0: activate --> -90
[ 2289.181774][   T17] usb 1-1: USB disconnect, device number 105
[ 2289.247202][ T7412] usb 6-1: Using ep0 maxpacket: 16
[ 2289.377309][ T7412] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2289.390298][ T7412] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2289.402099][ T7412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.414614][ T7412] usb 6-1: config 0 descriptor??
[ 2289.480541][ T7412] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:26:10 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0065000600"], 0x0, 0x0, 0x0, 0x0})

23:26:10 executing program 1:

[ 2289.659576][ T7412] usb 5-1: USB disconnect, device number 120
[ 2289.684754][T10068] usb 6-1: USB disconnect, device number 105
[ 2289.908313][ T7884] usb 5-1-port1: config error
[ 2290.077216][T23186] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 2290.277255][T10068] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 2290.328501][T23186] usb 1-1: Using ep0 maxpacket: 16
[ 2290.448721][T23186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2290.469871][T23186] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2290.484078][ T7412] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2290.496079][T23186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.520073][T23186] usb 1-1: config 0 descriptor??
[ 2290.541073][T10068] usb 6-1: Using ep0 maxpacket: 32
[ 2290.568558][T23186] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2290.662385][T10068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2290.673329][T10068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2290.684963][T10068] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2290.694338][T10068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.707669][T10068] usb 6-1: config 0 descriptor??
[ 2290.768023][T10068] hub 6-1:0.0: USB hub found
[ 2290.772869][ T7412] usb 5-1: Using ep0 maxpacket: 16
[ 2290.786173][T32590] usb 1-1: USB disconnect, device number 106
[ 2290.898709][ T7412] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2290.927249][ T7412] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2290.936329][ T7412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.949647][ T7412] usb 5-1: config 0 descriptor??
[ 2290.987591][T10068] hub 6-1:0.0: 1 port detected
[ 2290.993716][ T7412] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:26:12 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000040), 0x240)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:26:12 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3001}, &(0x7f0000000240)=0x54)

23:26:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4d6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040500030020000000002000000000000040000000000000000000", 0xffffffe5}], 0x2)

[ 2291.067635][T31849] usb 5-1: USB disconnect, device number 121
23:26:12 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000001600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
mknod(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

[ 2291.172511][T18960] IPVS: ftp: loaded support on port[0] = 21
[ 2291.357599][T32590] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 2291.544000][T18960] IPVS: ftp: loaded support on port[0] = 21
[ 2291.570566][ T8914] tipc: TX() has been purged, node left!
[ 2291.576926][ T8914] tipc: TX() has been purged, node left!
[ 2291.610415][T32590] usb 1-1: Using ep0 maxpacket: 32
23:26:12 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3200}, &(0x7f0000000240)=0x54)

[ 2291.637461][T23189] hub 6-1:0.0: activate --> -90
23:26:12 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2291.687461][T10068] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2291.727475][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2291.748720][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2291.765058][T19017] IPVS: ftp: loaded support on port[0] = 21
[ 2291.774503][T32590] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2291.802482][T32590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2291.834787][T32590] usb 1-1: config 0 descriptor??
[ 2291.842091][T23189] usb 6-1: USB disconnect, device number 106
[ 2291.848400][ T7408] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2291.900165][T32590] hub 1-1:0.0: USB hub found
[ 2291.947469][T10068] usb 5-1: Using ep0 maxpacket: 32
[ 2292.068026][T10068] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.091149][T10068] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2292.117433][T32590] hub 1-1:0.0: 1 port detected
[ 2292.154832][T10068] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2292.183978][T10068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2292.200583][T10068] usb 5-1: config 0 descriptor??
[ 2292.250524][T19017] IPVS: ftp: loaded support on port[0] = 21
[ 2292.258350][T10068] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2292.264571][T10068] hub: probe of 5-1:0.0 failed with error -5
23:26:13 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

23:26:13 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001e000902", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)

[ 2292.399301][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2292.413635][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:26:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prlimit64(0x0, 0x0, &(0x7f0000000640)={0xdb}, 0x0)

23:26:13 executing program 1:
pipe(&(0x7f0000000240))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}]}, 0x50}}, 0x42000)

[ 2292.737200][ T7408] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 2292.787344][T32590] hub 1-1:0.0: activate --> -90
[ 2292.977111][ T7408] usb 6-1: Using ep0 maxpacket: 16
[ 2293.097493][ T7408] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2293.127159][ T7408] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2293.136212][ T7408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2293.151544][ T7408] usb 6-1: config 0 descriptor??
[ 2293.188500][ T7408] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2293.211201][T31849] usb 1-1: USB disconnect, device number 107
[ 2293.394984][ T7408] usb 6-1: USB disconnect, device number 107
23:26:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0065000600"], 0x0, 0x0, 0x0, 0x0})

23:26:14 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3802}, &(0x7f0000000240)=0x54)

[ 2293.772908][T19127] IPVS: ftp: loaded support on port[0] = 21
[ 2294.013753][ T7408] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 2294.064578][T19127] IPVS: ftp: loaded support on port[0] = 21
[ 2294.070682][ T8533] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 2294.269348][ T7408] usb 6-1: Using ep0 maxpacket: 32
[ 2294.317127][ T8533] usb 1-1: Using ep0 maxpacket: 16
[ 2294.389037][ T7408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2294.400200][ T7408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2294.412398][ T7408] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2294.421926][ T7408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2294.437513][ T8533] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2294.439307][ T7408] usb 6-1: config 0 descriptor??
[ 2294.459295][ T8533] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2294.480381][ T8533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2294.492283][ T8533] usb 1-1: config 0 descriptor??
[ 2294.508242][ T7408] hub 6-1:0.0: USB hub found
[ 2294.519631][T23790] tipc: TX() has been purged, node left!
[ 2294.538504][ T8533] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2294.647235][T23790] tipc: TX() has been purged, node left!
[ 2294.737316][ T7408] hub 6-1:0.0: 1 port detected
[ 2294.745099][ T8533] usb 1-1: USB disconnect, device number 108
[ 2294.827710][T23790] tipc: TX() has been purged, node left!
23:26:16 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)={0x0, 0x16, 0xed, "1fb399c531d25dd0085b6a8818eadc45dd5b2cf446adbbb47092d6f07ab1f0a4a55cb84d738ae748a1d8704bcbcfa45f80d26c13ea6bac40b80e7a06db2b57326f40160c42f41af3aa0e80ff099c1e9941500255ae8fad9de15d49845b99983847d54b149effe1476aeefed928edea4b4e27ea0fb4e045ca650f778b668912d0a5f911110caa1e5fe9a73be6d3c0ee2ab6d24822a3bc6519bfe087d6af822844f0cf4efe80042162758498a1f5b9611c95578276e14a6afd7501f6475335bd31968c79319e9c3a31f4cdd8d6313c95624ad5522bbaab667034d99a428c0b7b46d0f22c84d1ea3e39a96c1654dc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

23:26:16 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x32021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x48120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040000000a0005003c00000018f643ef43"], 0x40}}, 0x0)
syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x30}, 0x1, 0xfffffff0}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000)
syz_genetlink_get_family_id$batadv(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x25c8c2, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0xc40)

23:26:16 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4000}, &(0x7f0000000240)=0x54)

23:26:16 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2294.987213][T23790] tipc: TX() has been purged, node left!
[ 2295.007946][T23035] usb 5-1: USB disconnect, device number 122
[ 2295.019126][T19198] IPVS: ftp: loaded support on port[0] = 21
[ 2295.082981][T23790] tipc: TX() has been purged, node left!
[ 2295.090265][T23790] tipc: TX() has been purged, node left!
[ 2295.297298][T23035] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2295.317252][ T8533] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 2295.343366][T19198] IPVS: ftp: loaded support on port[0] = 21
[ 2295.377409][ T7408] hub 6-1:0.0: activate --> -90
23:26:16 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4202}, &(0x7f0000000240)=0x54)

[ 2295.484826][T19259] IPVS: ftp: loaded support on port[0] = 21
[ 2295.547538][T23035] usb 2-1: Using ep0 maxpacket: 16
[ 2295.552834][T31070] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2295.567356][ T8533] usb 1-1: Using ep0 maxpacket: 32
[ 2295.583698][ T7884] usb 6-1: USB disconnect, device number 108
[ 2295.590100][ T7408] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2295.677273][T23035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2295.690401][ T8533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2295.707297][ T8533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2295.707344][ T8533] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2295.707365][ T8533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.737211][T23035] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2295.746254][T23035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.778714][T23035] usb 2-1: config 0 descriptor??
[ 2295.785337][ T8533] usb 1-1: config 0 descriptor??
[ 2295.817476][T31070] usb 5-1: Using ep0 maxpacket: 32
[ 2295.825263][T23035] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2295.863448][T19259] IPVS: ftp: loaded support on port[0] = 21
[ 2295.892486][ T8533] hub 1-1:0.0: USB hub found
[ 2295.938021][T31070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2295.958867][T31070] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2295.974597][T31070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2295.984866][T31070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.008599][T31070] usb 5-1: config 0 descriptor??
[ 2296.057267][ T8533] hub 1-1:0.0: 1 port detected
[ 2296.064192][T31070] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2296.083063][T31070] hub: probe of 5-1:0.0 failed with error -5
23:26:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

[ 2296.120050][   T23] usb 2-1: USB disconnect, device number 55
[ 2296.363343][T19200] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
23:26:17 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4403}, &(0x7f0000000240)=0x54)

[ 2296.487631][T31070] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 2296.530364][T19338] IPVS: ftp: loaded support on port[0] = 21
[ 2296.707231][   T23] hub 1-1:0.0: activate --> -90
[ 2296.727203][T31070] usb 6-1: Using ep0 maxpacket: 16
[ 2296.857482][T31070] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2296.870521][T31070] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2296.881721][T31070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.891668][T31070] usb 6-1: config 0 descriptor??
[ 2296.928380][T31070] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2297.086397][T19338] IPVS: ftp: loaded support on port[0] = 21
[ 2297.131343][T23189] usb 6-1: USB disconnect, device number 109
[ 2297.135116][T23034] usb 1-1: USB disconnect, device number 109
23:26:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:18 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00650006000000"], 0x0, 0x0, 0x0, 0x0})

23:26:18 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4a00}, &(0x7f0000000240)=0x54)

[ 2297.693409][T23186] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2297.718006][T23189] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 2297.778699][T19414] IPVS: ftp: loaded support on port[0] = 21
[ 2297.937174][T23186] usb 2-1: Using ep0 maxpacket: 16
[ 2297.958157][T23189] usb 6-1: Using ep0 maxpacket: 32
[ 2297.997280][T23034] usb 1-1: new high-speed USB device number 110 using dummy_hcd
23:26:19 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2298.044908][T19414] IPVS: ftp: loaded support on port[0] = 21
[ 2298.063969][T23186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2298.094673][T23186] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2298.125899][T23186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2298.135418][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2298.158847][T23189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2298.186583][T23186] usb 2-1: config 0 descriptor??
[ 2298.217698][T23189] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2298.248362][T23186] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2298.257189][T23034] usb 1-1: Using ep0 maxpacket: 16
23:26:19 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2298.270567][T23189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2298.298946][T23189] usb 6-1: config 0 descriptor??
[ 2298.358171][T23189] hub 6-1:0.0: USB hub found
[ 2298.377481][T23034] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2298.413360][T23034] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2298.444278][T23034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2298.483831][T23034] usb 1-1: config 0 descriptor??
[ 2298.513364][T31070] usb 2-1: USB disconnect, device number 56
[ 2298.547575][T23034] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2298.567302][T23189] hub 6-1:0.0: 1 port detected
23:26:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
write$FUSE_WRITE(r3, &(0x7f0000000180)={0x18, 0x0, 0x8}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:19 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2298.750308][T23034] usb 1-1: USB disconnect, device number 110
[ 2298.857383][   T23] usb 5-1: USB disconnect, device number 123
23:26:20 executing program 3:
r0 = gettid()
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2299.077431][T31070] usb 2-1: new high-speed USB device number 57 using dummy_hcd
23:26:20 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x8800}, &(0x7f0000000240)=0x54)

[ 2299.147662][   T23] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2299.217398][T23189] hub 6-1:0.0: activate --> -90
[ 2299.251404][T19510] IPVS: ftp: loaded support on port[0] = 21
[ 2299.327553][T31070] usb 2-1: Using ep0 maxpacket: 32
[ 2299.332933][T23034] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2299.397405][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 2299.427393][T10068] usb 6-1: USB disconnect, device number 110
[ 2299.442345][T23189] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2299.453008][T31070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2299.505836][T31070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2299.528065][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2299.559705][T31070] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2299.569203][   T23] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2299.578644][T31070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.586865][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.596378][T23034] usb 1-1: Using ep0 maxpacket: 32
[ 2299.622780][T19510] IPVS: ftp: loaded support on port[0] = 21
[ 2299.629221][T31070] usb 2-1: config 0 descriptor??
[ 2299.641500][   T23] usb 5-1: config 0 descriptor??
[ 2299.688374][T31070] hub 2-1:0.0: USB hub found
[ 2299.695037][   T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2299.717726][T23034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2299.749432][T23034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2299.791310][T23034] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2299.825971][T23034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.859067][T23034] usb 1-1: config 0 descriptor??
[ 2299.902601][ T8533] usb 5-1: USB disconnect, device number 124
[ 2299.918270][T23034] hub 1-1:0.0: USB hub found
[ 2299.937293][T31070] hub 2-1:0.0: 1 port detected
23:26:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="af4f863c08d3609c62fa6a3ad9bd74476a31d19231999f465d83e5801787566c3e7ad7a4da190c6ce3dfd478d9ad4a0f25e0e2e8d6bbe83d5b73a939061e8beff55b76f8e1d94a1ab26af7daf98a8cc4f8d431f740aa76a838c82ae2ab8f22ff84f02961"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3d)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x10, 0xa0}}, 0x18}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@ipv4={[], [], @empty}, @empty, @mcast2, 0x141, 0x5, 0xbd20, 0xc00, 0x9, 0x2000218})
ptrace$cont(0x16, r2, 0x100, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 2300.137328][T23034] hub 1-1:0.0: 1 port detected
23:26:21 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x9403}, &(0x7f0000000240)=0x54)

[ 2300.336641][T19582] IPVS: ftp: loaded support on port[0] = 21
[ 2300.419681][   T12] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 2300.457382][ T8533] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 2300.625499][T23034] usb 2-1: USB disconnect, device number 57
[ 2300.631638][T32590] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 2300.678594][T19582] IPVS: ftp: loaded support on port[0] = 21
[ 2300.687181][   T12] usb 6-1: Using ep0 maxpacket: 16
[ 2300.707194][ T8533] usb 5-1: Using ep0 maxpacket: 32
[ 2300.787251][T32590] hub 1-1:0.0: activate --> -90
[ 2300.807565][   T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2300.827318][ T8533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2300.832158][   T12] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2300.857904][ T8533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2300.867452][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2300.896814][ T8533] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2300.906967][   T12] usb 6-1: config 0 descriptor??
[ 2300.921280][ T8533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:26:22 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x9800}, &(0x7f0000000240)=0x54)

[ 2300.949246][ T8533] usb 5-1: config 0 descriptor??
[ 2300.978957][   T12] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2301.008710][ T8533] hub 5-1:0.0: USB hub found
[ 2301.051953][T19645] IPVS: ftp: loaded support on port[0] = 21
23:26:22 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x8800}, &(0x7f0000000240)=0x54)

[ 2301.208734][T31070] usb 1-1: USB disconnect, device number 111
[ 2301.232597][ T8533] hub 5-1:0.0: 1 port detected
[ 2301.236192][   T12] usb 6-1: USB disconnect, device number 111
[ 2301.323463][T19679] IPVS: ftp: loaded support on port[0] = 21
[ 2301.604524][T19645] IPVS: ftp: loaded support on port[0] = 21
23:26:22 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00650006000000"], 0x0, 0x0, 0x0, 0x0})

[ 2301.792855][   T12] usb 6-1: new high-speed USB device number 112 using dummy_hcd
23:26:22 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xc601}, &(0x7f0000000240)=0x54)

[ 2301.867341][ T8533] hub 5-1:0.0: activate --> -90
23:26:23 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2301.963988][T19735] IPVS: ftp: loaded support on port[0] = 21
23:26:23 executing program 3:
r0 = gettid()
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2302.067376][   T12] usb 6-1: Using ep0 maxpacket: 32
[ 2302.127402][T31070] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 2302.191743][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2302.215591][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2302.245757][   T12] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2302.274201][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.297346][T32590] usb 5-1: USB disconnect, device number 125
[ 2302.312442][   T12] usb 6-1: config 0 descriptor??
[ 2302.367104][T31070] usb 1-1: Using ep0 maxpacket: 16
[ 2302.368388][   T12] hub 6-1:0.0: USB hub found
[ 2302.480058][T19735] IPVS: ftp: loaded support on port[0] = 21
[ 2302.493832][T31070] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2302.535967][T31070] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2302.547435][ T8533] usb 5-1-port1: config error
[ 2302.587313][   T12] hub 6-1:0.0: 1 port detected
[ 2302.597530][T31070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.622853][T23790] tipc: TX() has been purged, node left!
[ 2302.630094][T23790] tipc: TX() has been purged, node left!
[ 2302.645392][T23790] tipc: TX() has been purged, node left!
[ 2302.657445][T31070] usb 1-1: config 0 descriptor??
[ 2302.664413][T23790] tipc: TX() has been purged, node left!
[ 2302.684464][T23790] tipc: TX() has been purged, node left!
[ 2302.706208][T23790] tipc: TX() has been purged, node left!
[ 2302.718819][T31070] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2302.887145][T23790] tipc: TX() has been purged, node left!
[ 2302.921113][T32590] usb 1-1: USB disconnect, device number 112
[ 2303.047227][T23790] tipc: TX() has been purged, node left!
[ 2303.087302][ T8107] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2303.207175][T23790] tipc: TX() has been purged, node left!
[ 2303.251096][T29367] usb 6-1: USB disconnect, device number 112
[ 2303.257300][   T12] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2303.337423][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2303.377173][T23790] tipc: TX() has been purged, node left!
[ 2303.477277][T32590] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 2303.477606][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2303.498592][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2303.507752][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2303.516858][ T8107] usb 5-1: config 0 descriptor??
[ 2303.547702][T23790] tipc: TX() has been purged, node left!
[ 2303.568160][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2303.707480][T23790] tipc: TX() has been purged, node left!
[ 2303.727123][T32590] usb 1-1: Using ep0 maxpacket: 32
23:26:24 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:26:24 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xd400}, &(0x7f0000000240)=0x54)

[ 2303.773609][T31070] usb 5-1: USB disconnect, device number 126
23:26:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:24 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12019c1b050d5ac0b570e568563b91acb1230000094000206d041cc304000000000109029031c56c90c6c232b817bfb7"], 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_OPEN(r6, &(0x7f0000000180)={0x20, 0x0, 0x8, {0x0, 0x11}}, 0x20)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

[ 2303.857468][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2303.877197][T23790] tipc: TX() has been purged, node left!
[ 2303.890984][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:26:25 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2303.927936][T19843] IPVS: ftp: loaded support on port[0] = 21
[ 2303.936348][T32590] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2303.972792][T32590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2303.997482][T23790] tipc: TX() has been purged, node left!
[ 2304.004986][T23790] tipc: TX() has been purged, node left!
[ 2304.020766][T32590] usb 1-1: config 0 descriptor??
[ 2304.058409][T32590] hub 1-1:0.0: USB hub found
23:26:25 executing program 1:
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:26:25 executing program 1:
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

[ 2304.277369][T32590] hub 1-1:0.0: 1 port detected
[ 2304.282349][ T8533] usb 6-1: new high-speed USB device number 113 using dummy_hcd
23:26:25 executing program 1:
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

[ 2304.348622][T19843] IPVS: ftp: loaded support on port[0] = 21
[ 2304.367498][T31070] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 2304.537237][ T8533] usb 6-1: Using ep0 maxpacket: 16
[ 2304.647159][T31070] usb 5-1: device descriptor read/64, error 18
[ 2304.658575][ T8533] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2304.671584][ T8533] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2304.682171][ T8533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2304.696397][ T8533] usb 6-1: config 0 descriptor??
[ 2304.749065][ T8533] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2304.927258][ T8533] hub 1-1:0.0: activate --> -90
[ 2304.968363][T32590] usb 6-1: USB disconnect, device number 113
[ 2305.037417][T31070] usb 5-1: device descriptor read/64, error 18
[ 2305.313567][T31070] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2305.352993][T31849] usb 1-1: USB disconnect, device number 113
[ 2305.547428][T32590] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 2305.597170][T31070] usb 5-1: device descriptor read/64, error 18
[ 2305.787438][T32590] usb 6-1: Using ep0 maxpacket: 32
23:26:26 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00650006000000"], 0x0, 0x0, 0x0, 0x0})

23:26:26 executing program 3:
r0 = gettid()
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:26 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

23:26:26 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xd402}, &(0x7f0000000240)=0x54)

23:26:27 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2305.911847][T32590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2305.920789][T19935] IPVS: ftp: loaded support on port[0] = 21
[ 2305.946129][T32590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:26:27 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))

[ 2305.982826][T32590] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2305.993319][T31070] usb 5-1: device descriptor read/64, error 18
[ 2306.021710][T32590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.046597][T32590] usb 6-1: config 0 descriptor??
[ 2306.088391][T32590] hub 6-1:0.0: USB hub found
[ 2306.117421][T31070] usb usb5-port1: attempt power cycle
[ 2306.207269][T31849] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2306.307315][T32590] hub 6-1:0.0: 1 port detected
[ 2306.457155][T31849] usb 1-1: Using ep0 maxpacket: 16
[ 2306.469073][T19935] IPVS: ftp: loaded support on port[0] = 21
[ 2306.577279][T31849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2306.590233][T31849] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2306.600765][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.615206][T31849] usb 1-1: config 0 descriptor??
[ 2306.678656][T31849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2306.827476][T31070] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2306.886374][T32590] usb 1-1: USB disconnect, device number 114
[ 2306.999768][ T8533] usb 6-1: USB disconnect, device number 114
[ 2307.007385][T31070] usb 5-1: device descriptor read/8, error -71
[ 2307.017979][T31849] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2307.217190][T31070] usb 5-1: device descriptor read/8, error -71
[ 2307.477121][T32590] usb 1-1: new high-speed USB device number 115 using dummy_hcd
23:26:28 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="d4e67d966d4ecb20f9a992eab64c7c931962bfbc3078bf77e8c2e6c0e69abfb515f2474f35301191d39c78e4d90832e8dae0e194f1b59007aefd98f2709fed0658e9e3b92d976f1ea77615e364e094af3ab3984af7d783c34f33151aae0dbd996462bd99420cc7668837e6c1d2f56127766b38c378f9f3c007a615b2f07614b2b925810722b7b325509e58db3172c7750e10229ddfeec96570d8181483756d", 0x9f)

23:26:28 executing program 1:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

23:26:28 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xda03}, &(0x7f0000000240)=0x54)

23:26:28 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6f73322e00c25bd7cb95eaae5a650505f2f2cc713c5e5469534265eaf93d71dcc00ca1f0cb5345971e765fa85a4537186f4aaf1d5412df358aeac287e1"])
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224a14f582dd6fc60810000012e9e416c1788501e784b0e68c8caf78f5cb0243f2833474c38d1c9db21ddf530e88dbde6ee00cd90fb80d30f07bda14c1ec08f95db4d9385c1d096e593a54dbf5592f6bcc33a1330ee321ea7140022a8a58736838cca25478c2af44e03363d3bf462cd53ab26cf3228708b8fcf6c36a5eacbe2ac1667a396"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="002400000000209285063a5db2e54e076a378c23aa57bff5dcf4081aa66b4177ca436a9e35506bec28d1ee0a6dc6602994763a4b939df6126fce1401ca0be2f2ac87904d264cd01d7665b17b2286fd1f3ce694bbc4d556bbbc7ba8b3d0"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r2, &(0x7f0000000040), 0x240)
fdatasync(r2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00a2c7c0abbebd"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 2307.604337][T20016] IPVS: ftp: loaded support on port[0] = 21
23:26:28 executing program 1:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

[ 2307.717200][T32590] usb 1-1: Using ep0 maxpacket: 32
23:26:28 executing program 1:
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040))

[ 2307.838174][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2307.871339][T32590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2307.887134][T23034] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 2307.927140][T32590] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2307.936218][T32590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2307.961678][T32590] usb 1-1: config 0 descriptor??
[ 2307.999196][T32590] hub 1-1:0.0: USB hub found
[ 2308.010724][T31070] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2308.032089][T20016] IPVS: ftp: loaded support on port[0] = 21
[ 2308.107623][T31070] usb 5-1: Using ep0 maxpacket: 16
[ 2308.137186][T23034] usb 6-1: Using ep0 maxpacket: 16
[ 2308.217305][T32590] hub 1-1:0.0: 1 port detected
[ 2308.233585][T31070] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2308.257230][T23034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2308.279001][T31070] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2308.290261][T23034] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2308.300473][T31070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2308.309426][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2308.325490][T31070] usb 5-1: config 0 descriptor??
[ 2308.335876][T23034] usb 6-1: config 0 descriptor??
[ 2308.381227][T23034] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2308.390025][T31070] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2308.597624][T23034] usb 5-1: USB disconnect, device number 4
[ 2308.604801][T24584] usb 6-1: USB disconnect, device number 115
[ 2308.857217][T32590] hub 1-1:0.0: activate --> -90
[ 2309.167175][T23034] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[ 2309.197114][T24584] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2309.282661][ T7145] usb 1-1: USB disconnect, device number 115
[ 2309.407105][T23034] usb 5-1: Invalid ep0 maxpacket: 16
[ 2309.447155][T24584] usb 6-1: Using ep0 maxpacket: 32
[ 2309.557116][T23034] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[ 2309.568493][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2309.586081][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2309.604806][T24584] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2309.615306][T24584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2309.633914][T24584] usb 6-1: config 0 descriptor??
[ 2309.678282][T24584] hub 6-1:0.0: USB hub found
23:26:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e"], 0x0, 0x0, 0x0, 0x0})

23:26:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

23:26:30 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xec03}, &(0x7f0000000240)=0x54)

23:26:30 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
fcntl$setown(r0, 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(0x0, 0x15)

[ 2309.797152][T23034] usb 5-1: Invalid ep0 maxpacket: 16
[ 2309.820546][T23034] usb usb5-port1: attempt power cycle
[ 2309.845747][T20118] IPVS: ftp: loaded support on port[0] = 21
[ 2309.907374][T24584] hub 6-1:0.0: 1 port detected
23:26:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

23:26:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, 0x0)

[ 2310.230700][T24583] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2310.259484][T20118] IPVS: ftp: loaded support on port[0] = 21
[ 2310.299884][T23790] tipc: TX() has been purged, node left!
[ 2310.311417][T23790] tipc: TX() has been purged, node left!
[ 2310.326582][T23790] tipc: TX() has been purged, node left!
[ 2310.333417][T23790] tipc: TX() has been purged, node left!
[ 2310.345958][T23790] tipc: TX() has been purged, node left!
[ 2310.352805][T23790] tipc: TX() has been purged, node left!
[ 2310.397560][T23790] tipc: TX() has been purged, node left!
[ 2310.404839][T23790] tipc: TX() has been purged, node left!
[ 2310.487333][T24583] usb 1-1: Using ep0 maxpacket: 16
[ 2310.547125][T23034] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[ 2310.567308][T24584] hub 6-1:0.0: activate --> -90
[ 2310.612969][T24583] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2310.646423][T24583] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2310.655786][T24583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.658096][T23034] usb 5-1: device descriptor read/8, error -71
[ 2310.678976][T24583] usb 1-1: config 0 descriptor??
[ 2310.728494][T24583] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2310.909222][T23034] usb 5-1: device descriptor read/8, error -71
[ 2310.935114][ T8107] usb 1-1: USB disconnect, device number 116
[ 2311.030843][T24583] usb 6-1: USB disconnect, device number 116
[ 2311.297215][T24584] usb 6-1-port1: config error
[ 2311.537953][ T8107] usb 1-1: new high-speed USB device number 117 using dummy_hcd
23:26:32 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="d4e67d966d4ecb20f9a992eab64c7c931962bfbc3078bf77e8c2e6c0e69abfb515f2474f35301191d39c78e4d90832e8dae0e194f1b59007aefd98f2709fed0658e9e3b92d976f1ea77615e364e094af3ab3984af7d783c34f33151aae0dbd996462bd99420cc7668837e6c1d2f56127766b38c378f9f3c007a615b2f07614b2b925810722b7b325509e58db3172c7750e10229ddfeec96570d8181483756d", 0x9f)

23:26:32 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
fcntl$setown(r0, 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(0x0, 0x15)

23:26:32 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xed03}, &(0x7f0000000240)=0x54)

23:26:32 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa4881, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd1084130}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="100028bd7000fcdbdf25f9000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2311.712304][T20207] IPVS: ftp: loaded support on port[0] = 21
[ 2311.787314][ T8107] usb 1-1: Using ep0 maxpacket: 32
[ 2311.927738][ T8107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2311.958657][ T8107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2311.976184][ T8107] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2311.977182][T32593] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 2311.987209][ T8107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.013938][ T8107] usb 1-1: config 0 descriptor??
23:26:33 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x3, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

[ 2312.068371][ T8107] hub 1-1:0.0: USB hub found
[ 2312.138135][T23034] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 2312.163952][T20207] IPVS: ftp: loaded support on port[0] = 21
[ 2312.177659][T20250] IPVS: ftp: loaded support on port[0] = 21
[ 2312.228052][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2312.257413][T32593] usb 6-1: Using ep0 maxpacket: 16
[ 2312.277405][ T8107] hub 1-1:0.0: 1 port detected
[ 2312.348157][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2312.377479][T32593] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2312.397395][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2312.406435][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.427102][T32593] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2312.436231][T32593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.461648][T23034] usb 5-1: config 0 descriptor??
[ 2312.494403][T32593] usb 6-1: config 0 descriptor??
[ 2312.500935][T23034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2312.549595][T32593] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2312.706466][T32593] usb 5-1: USB disconnect, device number 8
[ 2312.786535][T23035] usb 6-1: USB disconnect, device number 117
[ 2312.927420][ T8107] hub 1-1:0.0: activate --> -90
[ 2313.317114][T32593] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 2313.356320][T24584] usb 1-1: USB disconnect, device number 117
[ 2313.367939][T23035] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 2313.567103][T32593] usb 5-1: Using ep0 maxpacket: 32
[ 2313.628334][T23035] usb 6-1: Using ep0 maxpacket: 32
[ 2313.688103][T32593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2313.704856][T32593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2313.730658][T32593] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2313.747511][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2313.762125][T32593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2313.775549][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2313.795374][T32593] usb 5-1: config 0 descriptor??
[ 2313.808878][T23035] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2313.830345][T23035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:26:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e"], 0x0, 0x0, 0x0, 0x0})

[ 2313.856626][T23035] usb 6-1: config 0 descriptor??
[ 2313.867456][T32593] hub 5-1:0.0: USB hub found
23:26:34 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r0, 0xa, 0x12)
dup2(r0, r1)
fcntl$setown(r0, 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(0x0, 0x15)

23:26:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$apparmor_current(r6, &(0x7f0000000000)=@hat={'changehat ', 0x0, 0x5e, [')}/\xf8!\x00']}, 0x23)

[ 2313.929466][T23035] hub 6-1:0.0: USB hub found
[ 2314.087365][T32593] hub 5-1:0.0: 1 port detected
[ 2314.147385][T23035] hub 6-1:0.0: 1 port detected
23:26:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$apparmor_current(r6, &(0x7f0000000000)=@hat={'changehat ', 0x0, 0x5e, [')}/\xf8!\x00']}, 0x23)

[ 2314.317222][T23034] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 2314.567115][T23034] usb 1-1: Using ep0 maxpacket: 16
23:26:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$apparmor_current(r6, &(0x7f0000000000)=@hat={'changehat ', 0x0, 0x5e, [')}/\xf8!\x00']}, 0x23)

[ 2314.703618][T23034] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2314.737305][T23035] hub 5-1:0.0: activate --> -90
[ 2314.745965][T23034] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2314.813185][T23034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2314.860299][T23034] usb 1-1: config 0 descriptor??
23:26:36 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2314.897329][T23035] hub 6-1:0.0: activate --> -90
[ 2314.903626][T23034] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2315.106370][T24584] usb 1-1: USB disconnect, device number 118
[ 2315.161657][T23034] usb 5-1: USB disconnect, device number 9
[ 2315.417183][T32593] usb 5-1-port1: config error
[ 2315.500215][ T8107] usb 6-1: USB disconnect, device number 118
[ 2315.697308][T24584] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 2315.767208][T23035] usb 6-1-port1: config error
[ 2315.937137][T32593] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 2315.947705][T24584] usb 1-1: Using ep0 maxpacket: 32
[ 2316.067512][T24584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2316.085279][T24584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2316.100512][T24584] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
23:26:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="d4e67d966d4ecb20f9a992eab64c7c931962bfbc3078bf77e8c2e6c0e69abfb515f2474f35301191d39c78e4d90832e8dae0e194f1b59007aefd98f2709fed0658e9e3b92d976f1ea77615e364e094af3ab3984af7d783c34f33151aae0dbd996462bd99420cc7668837e6c1d2f56127766b38c378f9f3c007a615b2f07614b2b925810722b7b325509e58db3172c7750e10229ddfeec96570d8181483756d", 0x9f)

23:26:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2316.111112][T24584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2316.122041][T24584] usb 1-1: config 0 descriptor??
[ 2316.177145][T32593] usb 5-1: Using ep0 maxpacket: 16
[ 2316.208050][T24584] hub 1-1:0.0: USB hub found
[ 2316.297964][T32593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2316.338704][T32593] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2316.367504][T32593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2316.386991][T32593] usb 5-1: config 0 descriptor??
[ 2316.427340][T24584] hub 1-1:0.0: 1 port detected
[ 2316.448306][T32593] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2316.526830][T19773] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 2316.653230][T32591] usb 5-1: USB disconnect, device number 10
23:26:37 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00a46e6cb9c61dc9c2"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:37 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf003}, &(0x7f0000000240)=0x54)

23:26:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2316.787347][T19773] usb 6-1: Using ep0 maxpacket: 16
[ 2316.846671][T20449] IPVS: ftp: loaded support on port[0] = 21
[ 2316.917430][T19773] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2316.952824][T19773] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2317.040390][T19773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2317.049188][T23790] tipc: TX() has been purged, node left!
[ 2317.061808][T23790] tipc: TX() has been purged, node left!
[ 2317.116198][T19773] usb 6-1: config 0 descriptor??
[ 2317.207432][T24584] hub 1-1:0.0: activate --> -90
[ 2317.213974][T19773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2317.257226][T23790] tipc: TX() has been purged, node left!
[ 2317.267725][ T8107] usb 5-1: new high-speed USB device number 11 using dummy_hcd
23:26:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2317.437151][T23790] tipc: TX() has been purged, node left!
[ 2317.447972][T24584] usb 6-1: USB disconnect, device number 119
[ 2317.567432][ T8107] usb 5-1: device descriptor read/64, error 18
[ 2317.573280][T20449] IPVS: ftp: loaded support on port[0] = 21
[ 2317.639869][ T7409] usb 1-1: USB disconnect, device number 119
[ 2318.027365][ T8107] usb 5-1: device descriptor read/64, error 18
[ 2318.069728][T24584] usb 6-1: new high-speed USB device number 120 using dummy_hcd
23:26:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)

23:26:39 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:39 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e"], 0x0, 0x0, 0x0, 0x0})

23:26:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)

[ 2318.297418][ T8107] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2318.327112][T24584] usb 6-1: Using ep0 maxpacket: 32
[ 2318.457934][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2318.485752][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2318.516673][T24584] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2318.528940][T24584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2318.547166][T24584] usb 6-1: config 0 descriptor??
23:26:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4, <r5=>0x0}, &(0x7f0000000340)=0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r5, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)

[ 2318.597461][T32593] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2318.598269][T24584] hub 6-1:0.0: USB hub found
[ 2318.609799][ T8107] usb 5-1: device descriptor read/64, error 18
23:26:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4}, &(0x7f0000000340)=0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2318.817479][T24584] hub 6-1:0.0: 1 port detected
[ 2318.837754][T32593] usb 1-1: Using ep0 maxpacket: 16
[ 2318.957622][T32593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2318.980311][T32593] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2318.995295][T32593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2319.010605][ T8107] usb 5-1: device descriptor read/64, error 18
[ 2319.020061][T32593] usb 1-1: config 0 descriptor??
[ 2319.058576][T32593] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2319.137605][ T8107] usb usb5-port1: attempt power cycle
[ 2319.262785][T31468] usb 1-1: USB disconnect, device number 120
[ 2319.513773][T24584] hub 6-1:0.0: activate --> -90
[ 2319.837208][T31468] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 2319.857146][ T8107] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2320.038201][T19775] usb 6-1: USB disconnect, device number 120
[ 2320.087171][T31468] usb 1-1: Using ep0 maxpacket: 32
[ 2320.207530][T31468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2320.231262][T31468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2320.255407][T31468] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2320.276246][T31468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2320.306857][T31468] usb 1-1: config 0 descriptor??
[ 2320.320455][T24584] usb 6-1-port1: config error
[ 2320.347356][ T8107] usb 5-1: device not accepting address 13, error -71
[ 2320.348168][T31468] hub 1-1:0.0: USB hub found
[ 2320.567238][T31468] hub 1-1:0.0: 1 port detected
23:26:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:26:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4}, &(0x7f0000000340)=0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:41 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x80, 0x0)

[ 2321.027255][T31069] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 2321.047148][ T8107] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2321.147919][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2321.217230][T31468] hub 1-1:0.0: activate --> -90
[ 2321.267821][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2321.272963][T31069] usb 6-1: Using ep0 maxpacket: 16
[ 2321.289318][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2321.312491][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2321.326726][ T8107] usb 5-1: config 0 descriptor??
23:26:42 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf402}, &(0x7f0000000240)=0x54)

23:26:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8a7, 0x5, 0x4, 0x4, 0xfffffffe, 0x4, 0xf8d, 0xedc4}, &(0x7f0000000340)=0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:42 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2321.378967][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2321.437588][T31069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2321.479249][T31069] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2321.525640][T31069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2321.575960][T31069] usb 6-1: config 0 descriptor??
[ 2321.586885][   T12] usb 5-1: USB disconnect, device number 14
[ 2321.620787][T20647] IPVS: ftp: loaded support on port[0] = 21
[ 2321.638791][T32591] usb 1-1: USB disconnect, device number 121
[ 2321.663014][T31069] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:26:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2321.877919][T24584] usb 6-1: USB disconnect, device number 121
23:26:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2322.169040][   T12] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2322.272218][T20647] IPVS: ftp: loaded support on port[0] = 21
23:26:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2322.319247][T23790] tipc: TX() has been purged, node left!
[ 2322.417123][   T12] usb 5-1: Using ep0 maxpacket: 32
[ 2322.438145][T24584] usb 6-1: new high-speed USB device number 122 using dummy_hcd
23:26:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2322.548389][   T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2322.573226][   T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2322.591400][   T12] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2322.600685][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.610747][   T12] usb 5-1: config 0 descriptor??
[ 2322.648271][   T12] hub 5-1:0.0: USB hub found
[ 2322.677362][T19775] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2322.697647][T24584] usb 6-1: Using ep0 maxpacket: 32
23:26:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2322.837450][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2322.851455][T24584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2322.863338][   T12] hub 5-1:0.0: 1 port detected
[ 2322.868908][T24584] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2322.889032][T24584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.904027][T24584] usb 6-1: config 0 descriptor??
[ 2322.924187][T19775] usb 1-1: Using ep0 maxpacket: 16
[ 2322.949110][T24584] hub 6-1:0.0: USB hub found
23:26:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2323.078465][T19775] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2323.099959][T19775] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2323.143150][T19775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2323.167285][T24584] hub 6-1:0.0: 1 port detected
[ 2323.197733][T19775] usb 1-1: config 0 descriptor??
[ 2323.258656][T19775] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2323.497244][   T12] hub 5-1:0.0: activate --> -90
[ 2323.497569][T32592] usb 1-1: USB disconnect, device number 122
[ 2323.817476][T24584] hub 6-1:0.0: activate --> -90
[ 2323.989091][T19773] usb 5-1: USB disconnect, device number 15
[ 2324.077192][T32592] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 2324.247214][   T12] usb 5-1-port1: config error
[ 2324.327145][T32592] usb 1-1: Using ep0 maxpacket: 32
[ 2324.344139][T32589] usb 6-1: USB disconnect, device number 122
[ 2324.447536][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2324.480151][T32592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2324.510850][T32592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2324.540995][T32592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2324.575018][T32592] usb 1-1: config 0 descriptor??
[ 2324.597337][T24584] usb 6-1-port1: config error
[ 2324.648312][T32592] hub 1-1:0.0: USB hub found
[ 2324.777314][T19773] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2324.872416][T32592] hub 1-1:0.0: 1 port detected
23:26:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)

23:26:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2325.037160][T19773] usb 5-1: Using ep0 maxpacket: 16
[ 2325.158462][T19773] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2325.171739][T19773] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2325.183705][T19773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.199756][T19773] usb 5-1: config 0 descriptor??
[ 2325.238490][T19773] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2325.319307][T32589] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 2325.442378][T20796] udc-core: couldn't find an available UDC or it's busy
[ 2325.450764][T24584] usb 5-1: USB disconnect, device number 16
[ 2325.480942][T20796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2325.507550][T32591] hub 1-1:0.0: activate --> -90
23:26:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2325.580242][T32589] usb 6-1: Using ep0 maxpacket: 16
[ 2325.697476][T32589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2325.734212][T32589] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2325.775808][T32589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.809031][T32589] usb 6-1: config 0 descriptor??
[ 2325.860005][T32589] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2325.931962][T24584] usb 1-1: USB disconnect, device number 123
[ 2326.065720][T19773] usb 6-1: USB disconnect, device number 123
23:26:47 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf603}, &(0x7f0000000240)=0x54)

23:26:47 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:47 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="006500060000005e9f9aa840dac17316ed25a36984fecffdb283ac8825f6bfb8131e2bf32646a88353e62dc5bbdb969abfcc4bb857817747891e0046692ba3c19c4c0f974b0531c3d30b28fa139de48b48f231f87ce0ea8a27638668c240264376149d2efb6904eaa49e5b5ca2f6d9a715a6fa288fbf9584a8153aba9694c0492193b9a1589c2692f96415ff7744be865209fd81f176609756a7f81312fb8720c7c17030ebe0f55f696656cf6a253bc971ef2c724c1950d0b168887cec65"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{0x4, 0x81, 0x7, 0x1}, {0x9, 0x6, 0x30, 0x7}, {0xe63, 0x20, 0x6, 0x5}, {0x546c, 0x40, 0x5, 0x50}, {0x1, 0xff, 0x5, 0x80000001}, {0x8001, 0x4, 0x9}, {0x0, 0x1, 0x1f}, {0x9, 0xfc, 0x5, 0xe9}, {0x7fff, 0x30, 0x80, 0x9}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:26:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2326.188234][T32591] usb 1-1-port1: config error
[ 2326.245247][T20884] IPVS: ftp: loaded support on port[0] = 21
[ 2326.320060][ T6373] tipc: TX() has been purged, node left!
[ 2326.447828][T31468] usb 5-1: new high-speed USB device number 17 using dummy_hcd
23:26:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r6, 0x202002)
keyctl$chown(0x4, r6, r4, r5)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r5}, 0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2326.647167][T19773] usb 6-1: new high-speed USB device number 124 using dummy_hcd
23:26:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2326.707138][T31468] usb 5-1: Using ep0 maxpacket: 16
[ 2326.827961][T31468] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2326.858486][T31468] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2326.886376][T20884] IPVS: ftp: loaded support on port[0] = 21
[ 2326.907613][T19773] usb 6-1: Using ep0 maxpacket: 32
[ 2326.920014][T31468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2326.996067][T31468] usb 5-1: config 0 descriptor??
[ 2327.057808][T19773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2327.077724][T31468] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2327.103683][T19773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2327.171143][T19773] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2327.197376][T19773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2327.223240][T19773] usb 6-1: config 0 descriptor??
23:26:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2327.278366][T19773] hub 6-1:0.0: USB hub found
[ 2327.279761][T31468] usb 5-1: USB disconnect, device number 17
23:26:48 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xfa03}, &(0x7f0000000240)=0x54)

[ 2327.497469][T19773] hub 6-1:0.0: 1 port detected
[ 2327.540517][T20972] IPVS: ftp: loaded support on port[0] = 21
[ 2327.851222][T20972] IPVS: ftp: loaded support on port[0] = 21
[ 2327.878232][T31468] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2328.117227][T31468] usb 5-1: Using ep0 maxpacket: 32
[ 2328.151131][T19773] hub 6-1:0.0: activate --> -90
[ 2328.237997][T31468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2328.255761][T31468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2328.279257][T31468] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2328.293574][T31468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2328.313353][T31468] usb 5-1: config 0 descriptor??
[ 2328.358243][T31468] hub 5-1:0.0: USB hub found
[ 2328.577275][T31468] hub 5-1:0.0: 1 port detected
[ 2328.632341][T32589] usb 6-1: USB disconnect, device number 124
[ 2328.888265][T19773] usb 6-1-port1: config error
23:26:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

23:26:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r6, 0x202002)
keyctl$chown(0x4, r6, r4, r5)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r5}, 0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:50 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x40000}, &(0x7f0000000240)=0x54)

23:26:50 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2329.227378][T32589] hub 5-1:0.0: activate --> -90
[ 2329.267303][ T6373] tipc: TX() has been purged, node left!
[ 2329.290721][T21039] IPVS: ftp: loaded support on port[0] = 21
[ 2329.400139][ T6373] tipc: TX() has been purged, node left!
[ 2329.414522][ T6373] tipc: TX() has been purged, node left!
[ 2329.461825][ T6373] tipc: TX() has been purged, node left!
[ 2329.587598][T19773] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 2329.787533][ T8107] usb 5-1: USB disconnect, device number 18
[ 2329.861030][T19773] usb 6-1: Using ep0 maxpacket: 16
[ 2329.997648][T19773] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2330.031580][T19773] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2330.047356][T32589] usb 5-1-port1: config error
[ 2330.095547][T19773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2330.118739][T19773] usb 6-1: config 0 descriptor??
[ 2330.168640][T19773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2330.226890][T21039] IPVS: ftp: loaded support on port[0] = 21
[ 2330.371356][T29367] usb 6-1: USB disconnect, device number 125
[ 2330.599917][ T8107] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2330.867139][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2330.977218][T29367] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 2330.988059][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2331.012895][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2331.033376][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2331.056976][ T8107] usb 5-1: config 0 descriptor??
[ 2331.108488][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:26:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="9f8194be5ac63025329b621f016e602f096d07ff00cd66299667b705363426", 0x1f}, {&(0x7f0000000040)="8eef1e56db3ca785dcc5c07bb2131d3d13b601134e204531f46bddcb3c62a22e007ee3b3f9ca6c38f4b6e9df8bb79ac42cba33f7bcfcf274daaa2a1ce7081a9bed082e15942d4a54b154fdb5b5d1566f5854acb95dc16b06371ba51e5067c5d54c65595072f5c248bd020288d8710c3f72b9a026bb86be2cd0427d038a177b6049911423080d0a85f642fa923f985bc4d56481570f02bb5b306f6172f118a32f4e93ea0904362a788a83854b8bad", 0xae}, {&(0x7f0000000100)="ff46e67fe84fb272d3df26cd7458d146bd2886ea70ec3cd90251d2cad6f7e9a77a5addb0d3d3d9f015e8dfae9afe96810800000000000000f2773abdac3d3f9be18387a8621ab32df5f7ece6b0ef78d2636ac68a51d1015f72d8d8308a339ed8c1d251553612032cac6982fbf5f86b9a449b912c4b4144bf59338d996b300dfc21521eb838651850627ec0ffa724dcb2c59f6500f50b547dcec892c067185c272d7d6590", 0xa4}, {&(0x7f00000001c0)="40c854f7fb7f6c0ab2f871d383", 0xd}, {&(0x7f0000000600)="bc8c91b526c53bb2887b571b900ec4bd4ee3dbb62dc8e69f740761e545a46a87970f28a637eca512ba2fde3dc8f340fe03cf06f709eed8ff44f5e86920c846f95ad666561e223df85815020335e682d24cc9517e1e22d34bd34521b4b679daab4a0219c081154228c984286a2abf1d93f1867c8aef8bc358d03d9a651c5662c9cc8abc120deb7f19d2e9ecd2ce07d846d07a34702e9d33dfebf8185e9aecc643b65d383c93550cef0b180aed9f89e746b0559642dce8ed3846a078eb31aa063c2217f34a96061875a49999dbad4068609292aa8d47cb302dcf59f649233af5c4989c572a55eb5a7da6d14237c5133f4cbb1fdaaa9c57471ba7d54011d39526a3d20044060a18bc80c1b40cc0f4c8f2d87c9957cd17c9f33b316c2e51e5fc47b87337c2676ec88d125aa7ff1ee238194431c12c0fae5187921ae944736a1248f1530085bcc95f5d3154f1af452a8cce7d14fff5b7bee3f7895db26574f8f82e3fd54e5129f02a624605736bdd3b74a6aaeec805a4d8fd758bbadea73177344413d5eb19bb234b4f98bc5195a967d8b192382dfcae2ab01aceacbdf2f109f97f63ca55c6bf1dda5fd8de32de9847e99e3916958406b0eb2652ac349ff45e8bc5c04802276018d4d295b3a17d28be0483f6510af6a2e5959d99cb531d6dcc5c47115309cc673a850bcc0e52e19eac3ded23ba8f893edb45632de01098cd8996149fbe94f80b34d0f61fdc7a279547e59852503b823ffc038357c45c45380b350db231afb1a72f968af3e35549e016856247ad7e8b3f35365b4d797204268b0fb67ed456efaba73b0a3e7b50803213311f88baa7f8803b366a102ac5c532060e9d8b09a5b51c7cf9968005b5cef583bcb57d23b0057ef2d6cad64d6758b181a5fc3db9166e3d907d0f30bb991c7025b73347e3dce322a9fc4a948ea5bab672aed10c699f841ad068a873e3afc028d78bcbcc2c1cd4e5e2f125321d00e694122195e93b3056061cf314efd6d59ec9b37b1fb647c58c17ecdc2ca2d34d069a7e20cd4f800d1d048d65ae7082b826ec75a5a3188c8779fb056e65f6c527b07c8a7280a381f3cb1c93e7346f46eafd375670ddc5f554d6d4f421083dc0546558404e22bb6a43861946147928f05e38f27974969f44db3df97260c3594cd99f6d1a0c49fae404a9e12b8fb3011fbcaac939cb5b729daf008c03ef56b213bc6153c739d5f188feae0299f8b62bc43685b9faf9e71a256173cde67035c7ed3306b4f2ca7429b4e517734780e8247d4d853bea9aea2dffe6261c8e180f2a19ff0c86826da986486898ac82072e9f863debe543402be60c5f5642fec8f206254924b82006cba01a7d46c40f44372ba689de2109b8cb83b141d52f03917fcfcd7e0616fef88ff5a26180b0633b74e9f368f76e7330b3067d7dbb48b4a7345b2d75a930e5f5086d6d534697d564474428a3bff86629ab973905f97c07b93ae0a4e5df5cc31c3125c71db5efa8c6b7bbde3e7d245dc44473c661e56caee3ae447c0ecc054fc185e9a81042787e7d2dd2ab2e774bab072f048a6d4285268ebd9411b78934604e6a1a0795bb355cfa0e332c3a52a8395f8c252d0b3eab061d4f7b88096e91ef07ab18c9d708a3647063181d36141d39551221a840254da9a2ce61978274114ba118bf83ee92ce5898568b7a9a3120b8a2f5632e40e9d4e3ec1758644b6ff2f4e1cc348cc17bd33c9449f7bbf43ea775d684ee511ffc399ada1a8592ff3b5fc706f5859a207e65ac13c13a69eaee2bce314072d185832aacaed0038eae1f691c443c1ca601988cb05d1a180aed9e81bcb1c1358a42382888fb9764440f38d11afb13e7c8900c166f1ca911b643af92d8e2d279eb5434a1cbd5688a09e5d8fb442b14c581e36572d15c5331fda3fa41aaf2d91171220b48e6e374f2f95caa01be2cabb1f75689d66c5bfe037f0fefdfa43d135f6edd6aaf576537cf88929392f65b1af769b42484bf7f4640d9c1fce80586a7eff406d07b0427c9b0f1bca42f2a8350f626512250dd5da3ee1e414baddca713b66e847a96bdaf4b6947dbedf95a8e947e61dc4383cc9a18db8eea056aebdbfbf196008f6144715c362ac2a93172e90038d4699243b983fe98d2183a25fab133f56bc03d0c7dbb3ddb397670719977b888db6a310631da4d5740799462a9482b487cfd439654a26340612ea6be888751dbb2d006476dc0273dee22314289e57ec4289dbf10a7eeeb778fbc59ad8b67d775da6c0498dd40be5cf200544b2bf83291423d2b1a1a05b781a7a7d3df36b3604665b8b9e1ac2e279d96b855102b69c3e4b6f1d2918fa73ca2e85e6bb2fbd663db7c24cd13750e21160d05b6f1563bcfe0594f20d2686ec4c24ea6c64ba98b7050ff377e4ef932fa75df69084f375a88da6369d649df9af2b4a5a776acfc47c11a4c29bad790cce277a499832759e7b4c18aa08749a01c15a1e4fd7bf57296f4c4c89ea4f3d2a78a796d3fe0e386840ba879fab63ce588e5961a462a85c61371b7e4fe8e95a5d447b7756b9629138fdae7c9c43e15f34933b2a2b06b8843767db709f8d17f2b9d991f34a0d61b950d76a3fbaf09a1228746b93c2982f8487f6b18e5a6036b23692955617ee827dfcbd9a9fa5e96b146ae434d0b126971906815d993dbc9dc77341ec26e45288f90f8e8ea889de142dc43926caccf8a6f0b3e518c75c30742ad39b8f2e597f14395ce4f4f2fb1c699e8de982afbe501fb1c6b0051c4bec2f22fbc9fc16648e7713d829de1720b7f65326e24f3d1896bc67be20b7f31ed3f43a4de9d71c494871bea10a730f8b6d9113dc79b6b0a382c7a8374df1d76ae2447c8e65cef62e1e6817b1985e9cb991aa81a9b587c36116e0a67d77b32fa9b4b949a897603d866f4072cdacadf3b5e944b45f03d8f926365f1b7a70e3cc30c470aaf0b24c29ca81a56643e6713b7995915f188d4c4e2ddd2480596454a0c8ef2c325211f19d2774f7daa7c74d7d922b38127604462cbd2ef829f9754b5132b64c88c940584c69f7413b9bbb091d6d6711d7eda747ff11504b117e2d49bba8fe54e030381818fde1213558a03792a34d3af3199b048ae3f457caa6d4329bb3449a3daa63a8b2b50312df34ffc438ef0d9dcf8e73d466839281e249dc902992bed2c93590bbbac279996303fc7c271047ecfebe08086d02f4782f14eeb2354c6ca4f205fdea870c02983b55255386c96818db68da9ab95282c8f0ceb6985204ae814da151137e53e60a565efb2de9bd1e52a2e8d3e1caa4e12f14eedf51609f63624182868e228168abed86b6998dc4b55e827c4ad09c0189d8ded590330b25b8c2cbd7c024103c2c058cd113ebf45c3cbd84c0ab73960fdfd15911b3358d567b859556e18bace61fc0211797e1d7a51415711bf46a8353228b8893672ba89a8569dbb18faa920c73199be8d86cf4ac43107d549bdbeaa12d75b93c0a3e8202da0f7185aee12c69767244784163d8752e690511ef3469d94c1c1950828901e57cc501016a9ac8c91c9b8160d87519f7b6eca6f26c6b88b3696a5d581cb3c8578462c08a3d3661ec173dd51419d1bd51a5fb22db98ada8e72bb45eeb6a319f72e88b14a564e10f47d9a6a11a9ccdc91a0b01a82ff08e2c05104db87706fe3ccda158909ccff02b03169fd01f51dedcde30773ecb393721a55910e32b789df4701931ecf83b40feaa69a19a67242cec9cd04a7c815f9385271cd27304843395b90576561c20d8f9f540429f05bfb6fb769b3fd4a93fdaa1d3352b3aa1fb54229c15cf0633682e35050898df6f0492a53e3bd48268fdcdc87f210363004d8925d3d885628f5629035f98f81d708977c0bd4aec8575dbdb9e4b51906bc9c3a2969ec1a722557a2bae512a87a7d469aff6790754b2b85969ac29043e09beaa942e184c971cef1a855969d49eb30d9faf570592778c6b9eb82a5633d1e4a946a58501fbe39596844b52ac09fae95ebfa320ad00a8198889db74a1c9bbf07daab66087ecc43748ebbb40a5ae7341a4f32e0e74aaa006a8a52cf32f8b45a4bec1972b4973228d2cb5c043343d8476187f0f676c98f49ac792f49381735a70410f76319b1e1dfbcd94cdf77b3163217e227de0a40bb86f39fdeb8ddb2465317e5710565ee8ecb25b27526c1a8f22b1f13b8928e7faa83b4103f42fceedd76e6f921fc86df0f7ac528d0df9e484bdd486ec41d562815d460df2ec28d330f209d0a606de4c32d04376f178c1be0b82b7f3bb9b47baa432c326cffd7ed0dca31b1f00123a7bd2e3163252fb661f32a026e21baf307128c9fbb8baf53676df8dcacd4c11b23115140d3b4cbb1190d8885a361d2f2aa36b010574daee24aec8135b7bd7b198ad7201b974135294913d5b2cc8f2c4be176483c6a3a4646eaa000bdb6e68bb8582e76b2a33df07090a5d5059be807ee8d13495fe15da5eb76ee89c6fd04a1e724fe7ad99ffb8923c6d2814750d1ec8804c9cc64dec4bc0d307c8f9ea286c5f3b91fcac452f2a28fe946af474935d33fe86d617b7eb825907b52b624e3a9f3ff93229e790769202ae8960784e929c8eac98b87d790be6123506b707b268ba71fadad8e76976d6fce17915cff7c997a18d697c07797351a35bf6e94634b357ee376d89aa762b4504f28779bc122fb1a5407650654c04001b6a872295a0746b417308f68b4941e1ce54cf6eed0e44350cdefd2d9a89d916eb06733134421dd8b3bdec5a9d567fa0893f4f267ff7b51bde2a900224ba12ddbf7b98cf4719d76d20ed0abe8162e128fdce3348c3196b0dcfc1280a63c6c8fbf96d4cec3209a0640580d4c4da3c82612cfab159d1eb1f837abb72f8012623cb2d33f62928822fc38f407d10d41f29979c66818b1a9edd566ac3d631f344ea4c1d4889ea1fa3362a787d61b953446dbbd58d4539917acd39f69c9236c4af336b258411d3e0c94e08de19cab6a43b0dd9dd8d7679d875d4d6ab2606833811675264c815ee574e4ee9fdf066562e62a0d5bdbddb19ab47703c80c62205b4fb8a1f74c3e05ee81bb43f7a13416dfcb7c9120a0fef34f71c9cb640b404664c994c3e1a9185c178cdb45b035901dd71018b51d8991205e9280db9106e622f1dc4167d2f5a1bf2318ef7c7564a0d8318671d0e33deae38f62925769d9205c4aa4a2dd65f749dc11380558cc000e63c17af13841d9a35c5366816cf9eb8ebe5ca5f076085cbb2d4a55dc2d11c182d84b17539766fbe715145f184f481a6b500e777b39e0636669d56790798ebfdab416c3723f1552795ea33de33b51359b207a7791ebc633465d1a971c4dbac36843fc0b457c5a792bc2648ede816991aa690f49076cebce556606400d224023d12a2c8673b805109330a52ea9b82d884d68e0e19f4f9ed72e94d67d5d6a035c2f009a63b8d8ccdfe34689d7ab832dc12cbcee708addb5710c6e6e75fd71eb11b9cebcfb370391f93b755c9426555e87cc51956f4533eadcf82684a9c8febe08de81ca549191b7fa6d3c8045140ad17cc9a62cf2c773878caf143e96a8476f9a698911dec2bfc3b2ed38adf57b5625bcd2e70c5e0b60e8a90cb7a175440ca8d7b03793c4a0f80afd4e222cc6a7990fbbc1a524ed452f8e1f88db86b2d5ea5d18c553673c8a0b15c497f29a6c186d76a14081f1835232d6ea203c7e3d4324935f81e8c3429da4bb7149e47ccc8f54f972f3e8555e48f75099dbbd4b868b16767163b8aa02e3803353e60610f41574cf7e87f15f7b2b358c8dae352bd990513f04", 0x1000}], 0x5)

23:26:52 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1000000}, &(0x7f0000000240)=0x54)

23:26:52 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
syz_usb_disconnect(r0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0x51, 0x29, 0x7f, 0x10, 0x0, 0x9, '/ \x00'}}, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000001c0)={0xa, 0x5, 0x9, 0xfffff035, 'syz0\x00', 0x6})

[ 2331.199195][T24583] usb 5-1: USB disconnect, device number 19
[ 2331.247143][T29367] usb 6-1: Using ep0 maxpacket: 32
[ 2331.287757][T21142] IPVS: ftp: loaded support on port[0] = 21
[ 2331.377511][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2331.377536][T29367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2331.377570][T29367] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2331.377589][T29367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2331.379082][T29367] usb 6-1: config 0 descriptor??
[ 2331.438135][T29367] hub 6-1:0.0: USB hub found
23:26:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2331.647377][T29367] hub 6-1:0.0: 1 port detected
23:26:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
socket$unix(0x1, 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000040)=0x100060, 0xffffffff)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705363426", 0x17}], 0x1)

[ 2331.827243][T24583] usb 5-1: new high-speed USB device number 20 using dummy_hcd
23:26:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2331.912091][T21142] IPVS: ftp: loaded support on port[0] = 21
[ 2332.087382][T24583] usb 5-1: Using ep0 maxpacket: 16
[ 2332.092520][T21184] splice read not supported for file /21183/pagemap (pid: 21184 comm: syz-executor.0)
[ 2332.252045][T24583] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2332.274175][T24583] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2332.297426][T24583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2332.318091][T29367] hub 6-1:0.0: activate --> -90
[ 2332.343410][T24583] usb 5-1: config 0 descriptor??
[ 2332.408282][T24583] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2332.623394][T31468] usb 5-1: USB disconnect, device number 20
[ 2332.771062][T24583] usb 6-1: USB disconnect, device number 126
[ 2333.041882][T29367] usb 6-1-port1: config error
[ 2333.187133][T31468] usb 5-1: new high-speed USB device number 21 using dummy_hcd
23:26:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x3)
dup(r4)

23:26:54 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="82cb9ab6cf9061ea2b7201fa5b19ca9c0d5539d12472e3c5cb18c9cf98784ae41121a5fa40b40220ce488fc4e4590279faf1003edb2f624365d0468460b07a225d3839a3a3539014b2fdab3a0c8c0aa9b7102bc5082648efbc6b9de8e21ef877bbb22fd24ff93f75da332b92972edd34f592498b750a692b56330c4593b3ed73d029f3f462a727f4112aca29b0467d5cca527c3bb422379778cc9e1a78b65692c739b4beb825d3291560a199f511d39224334a5bf9bb3e84f7b8ca8577435f81a85672aa73de9d2f879995")
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705363426", 0x17}], 0x1)

23:26:54 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2000000}, &(0x7f0000000240)=0x54)

[ 2333.427176][T31468] usb 5-1: Using ep0 maxpacket: 32
[ 2333.478707][T21251] IPVS: ftp: loaded support on port[0] = 21
23:26:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="82cb9ab6cf9061ea2b7201fa5b19ca9c0d5539d12472e3c5cb18c9cf98784ae41121a5fa40b40220ce488fc4e4590279faf1003edb2f624365d0468460b07a225d3839a3a3539014b2fdab3a0c8c0aa9b7102bc5082648efbc6b9de8e21ef877bbb22fd24ff93f75da332b92972edd34f592498b750a692b56330c4593b3ed73d029f3f462a727f4112aca29b0467d5cca527c3bb422379778cc9e1a78b65692c739b4beb825d3291560a199f511d39224334a5bf9bb3e84f7b8ca8577435f81a85672aa73de9d2f879995")
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705363426", 0x17}], 0x1)

[ 2333.547638][T31468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2333.585038][T31468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:26:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2333.644945][T31468] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2333.679591][T31468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2333.721818][T31468] usb 5-1: config 0 descriptor??
[ 2333.727237][T24583] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 2333.788105][T31468] hub 5-1:0.0: USB hub found
23:26:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2333.987256][T24583] usb 6-1: Using ep0 maxpacket: 16
[ 2334.004904][T31468] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[ 2334.127621][T24583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2334.137819][T21251] IPVS: ftp: loaded support on port[0] = 21
[ 2334.148598][ T6373] tipc: TX() has been purged, node left!
[ 2334.156657][T24583] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2334.213694][T24583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2334.222260][ T6373] tipc: TX() has been purged, node left!
[ 2334.229870][ T6373] tipc: TX() has been purged, node left!
[ 2334.244160][ T6373] tipc: TX() has been purged, node left!
[ 2334.249709][T24583] usb 6-1: config 0 descriptor??
[ 2334.309760][T24583] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2334.514110][T24583] usb 6-1: USB disconnect, device number 127
[ 2335.147214][T24583] usb 6-1: new high-speed USB device number 2 using dummy_hcd
23:26:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="82cb9ab6cf9061ea2b7201fa5b19ca9c0d5539d12472e3c5cb18c9cf98784ae41121a5fa40b40220ce488fc4e4590279faf1003edb2f624365d0468460b07a225d3839a3a3539014b2fdab3a0c8c0aa9b7102bc5082648efbc6b9de8e21ef877bbb22fd24ff93f75da332b92972edd34f592498b750a692b56330c4593b3ed73d029f3f462a727f4112aca29b0467d5cca527c3bb422379778cc9e1a78b65692c739b4beb825d3291560a199f511d39224334a5bf9bb3e84f7b8ca8577435f81a85672aa73de9d2f879995")
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705363426", 0x17}], 0x1)

23:26:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:56 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x3000000}, &(0x7f0000000240)=0x54)

23:26:56 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$RTC_WIE_ON(r4, 0x700f)
syz_usb_disconnect(r0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r5, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000014003c70dbbf048fd8dadf68c8254c973c9ce907b4a7592f17095078e1d5685e2daec0c5d34d19e20fca8bf30df6b9380029ca1872745e3c2543e9f756082d04db2a3e3df8fca135334aa05addf2345024b42019c72426b91d497910879793a75205065bd37e95aa0c5bc18f70800efa58ce0cb80491332abbf4266d5081066a1eed513300000000000000000000003e8a02dcadca66afe67b3c2355761647db5fa8ebebd75e610cdfa175dd1ca96e00033a004e30ef69b6134751b66f3d34b1f94149f7fe8c599c4ab11bd05f5407ff40676ff94fa9dd5d7fed91747484bc"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

[ 2335.323258][T21346] IPVS: ftp: loaded support on port[0] = 21
[ 2335.387421][T24583] usb 6-1: Using ep0 maxpacket: 32
[ 2335.508366][T24583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2335.519841][ T7409] usb 5-1: reset high-speed USB device number 21 using dummy_hcd
[ 2335.567922][T24583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2335.602911][T24583] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2335.618828][T24583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2335.630087][T24583] usb 6-1: config 0 descriptor??
[ 2335.678110][T24583] hub 6-1:0.0: USB hub found
[ 2335.777254][ T7409] usb 5-1: Using ep0 maxpacket: 16
[ 2335.817877][ T7409] usb 5-1: device firmware changed
[ 2335.823486][ T7409] usb 5-1: USB disconnect, device number 21
[ 2335.888229][T24583] hub 6-1:0.0: 1 port detected
[ 2335.966489][T21346] IPVS: ftp: loaded support on port[0] = 21
[ 2336.227394][ T7409] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2336.467144][ T7409] usb 5-1: Using ep0 maxpacket: 16
[ 2336.527291][T24583] hub 6-1:0.0: activate --> -90
[ 2336.587962][ T7409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2336.619652][ T7409] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2336.657177][ T7409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2336.666583][ T7409] usb 5-1: config 0 descriptor??
[ 2336.738620][ T7409] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2336.986875][T29367] usb 6-1: USB disconnect, device number 2
[ 2337.021710][   T12] usb 5-1: USB disconnect, device number 22
[ 2337.257226][T24583] usb 6-1-port1: config error
23:26:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x3)

23:26:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:26:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="82cb9ab6cf9061ea2b7201fa5b19ca9c0d5539d12472e3c5cb18c9cf98784ae41121a5fa40b40220ce488fc4e4590279faf1003edb2f624365d0468460b07a225d3839a3a3539014b2fdab3a0c8c0aa9b7102bc5082648efbc6b9de8e21ef877bbb22fd24ff93f75da332b92972edd34f592498b750a692b56330c4593b3ed73d029f3f462a727f4112aca29b0467d5cca527c3bb422379778cc9e1a78b65692c739b4beb825d3291560a199f511d39224334a5bf9bb3e84f7b8ca8577435f81a85672aa73de9d2f879995")

23:26:58 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:58 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4000000}, &(0x7f0000000240)=0x54)

[ 2337.647173][   T12] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2337.673057][T21446] IPVS: ftp: loaded support on port[0] = 21
23:26:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2337.793015][ T6373] tipc: TX() has been purged, node left!
[ 2337.799786][ T6373] tipc: TX() has been purged, node left!
23:26:58 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:26:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2337.843917][ T6373] tipc: TX() has been purged, node left!
[ 2337.897212][   T12] usb 5-1: Using ep0 maxpacket: 32
[ 2337.902810][ T6373] tipc: TX() has been purged, node left!
[ 2338.017827][T32593] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 2338.018739][   T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2338.085577][   T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:26:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:26:59 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2338.129612][   T12] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2338.144413][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:26:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2338.179999][   T12] usb 5-1: config 0 descriptor??
[ 2338.232621][   T12] hub 5-1:0.0: USB hub found
[ 2338.257504][T32593] usb 6-1: Using ep0 maxpacket: 16
23:26:59 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2338.377523][T32593] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2338.425830][T32593] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2338.438056][   T12] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2338.462502][T32593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2338.506093][T32593] usb 6-1: config 0 descriptor??
[ 2338.513597][T21446] IPVS: ftp: loaded support on port[0] = 21
[ 2338.569947][T32593] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2338.657430][   T12] usb 5-1: reset high-speed USB device number 23 using dummy_hcd
[ 2338.770876][T23187] usb 6-1: USB disconnect, device number 3
[ 2338.929857][   T12] usb 5-1: Using ep0 maxpacket: 16
[ 2338.967872][   T12] usb 5-1: device firmware changed
[ 2338.981588][   T12] usb 5-1: USB disconnect, device number 23
[ 2339.337319][T23187] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 2339.417300][   T12] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2339.597141][T23187] usb 6-1: Using ep0 maxpacket: 32
[ 2339.697168][   T12] usb 5-1: Using ep0 maxpacket: 16
[ 2339.727425][T23187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2339.747478][T23187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2339.769901][T23187] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2339.791399][T23187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2339.813702][T23187] usb 6-1: config 0 descriptor??
[ 2339.822983][   T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2339.848988][   T12] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2339.859721][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2339.875804][   T12] usb 5-1: config 0 descriptor??
[ 2339.888288][T23187] hub 6-1:0.0: USB hub found
[ 2339.938397][   T12] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2340.104199][T23187] hub 6-1:0.0: 1 port detected
[ 2340.144538][T32591] usb 5-1: USB disconnect, device number 24
[ 2340.721457][T32591] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2340.757261][T23187] hub 6-1:0.0: activate --> -90
[ 2341.007112][T32591] usb 5-1: device descriptor read/64, error 18
[ 2341.221687][   T12] usb 6-1: USB disconnect, device number 4
[ 2341.397308][T32591] usb 5-1: device descriptor read/64, error 18
[ 2341.477222][T23187] usb 6-1-port1: config error
[ 2341.597379][ T6373] tipc: TX() has been purged, node left!
23:27:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:02 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:02 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x11000000}, &(0x7f0000000240)=0x54)

23:27:02 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="006500060000005e9fa67207cc00fd97802486c4b68b8fedddae052908ac18277baf4f336f929866d21c895478613faf50dc842a98f0c20618c7ca3131e1cb0f24671cfdc7cf5a00ee9a1351fcb69b917be48d7677f6e0fe818bc46913"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r4, &(0x7f0000000040), 0x240)
r5 = dup3(r4, r2, 0x80000)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e24, 0x0, @empty, 0x4}, {0xa, 0x4e23, 0x2, @loopback, 0x5}, 0x4, [0x6, 0x1, 0x3, 0x4, 0x9, 0x2, 0x3, 0xa9ba]}, 0x5c)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2341.901982][T21582] IPVS: ftp: loaded support on port[0] = 21
23:27:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2342.257263][   T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd
23:27:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2342.407238][T32591] usb 5-1: new high-speed USB device number 26 using dummy_hcd
23:27:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2342.498914][   T23] usb 6-1: Using ep0 maxpacket: 16
23:27:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2342.617492][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2342.647256][T32591] usb 5-1: Using ep0 maxpacket: 16
[ 2342.668158][   T23] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2342.701545][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2342.718359][T21582] IPVS: ftp: loaded support on port[0] = 21
[ 2342.767349][T32591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2342.802475][   T23] usb 6-1: config 0 descriptor??
[ 2342.841557][T32591] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2342.868885][   T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:27:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2342.906304][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2342.975659][T32591] usb 5-1: config 0 descriptor??
[ 2343.058604][T32591] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2343.093149][   T23] usb 6-1: USB disconnect, device number 5
[ 2343.267527][T32591] usb 5-1: USB disconnect, device number 26
[ 2343.667261][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 2343.847208][T32591] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2343.907198][   T23] usb 6-1: Using ep0 maxpacket: 32
[ 2344.027826][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2344.038969][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2344.050277][   T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2344.060155][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2344.074252][   T23] usb 6-1: config 0 descriptor??
[ 2344.097137][T32591] usb 5-1: Using ep0 maxpacket: 32
[ 2344.138337][   T23] hub 6-1:0.0: USB hub found
[ 2344.218823][T32591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2344.236667][T32591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2344.252000][T32591] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2344.261839][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2344.275644][T32591] usb 5-1: config 0 descriptor??
[ 2344.319351][T32591] hub 5-1:0.0: USB hub found
[ 2344.357418][   T23] hub 6-1:0.0: 1 port detected
[ 2344.527291][T32591] hub 5-1:0.0: 1 port detected
[ 2344.657139][ T6373] tipc: TX() has been purged, node left!
[ 2344.817134][ T6373] tipc: TX() has been purged, node left!
[ 2345.007328][   T23] hub 6-1:0.0: activate --> -90
[ 2345.177208][T31069] hub 5-1:0.0: activate --> -90
[ 2345.429561][T19773] usb 6-1: USB disconnect, device number 6
[ 2345.601422][T32592] usb 5-1: USB disconnect, device number 27
[ 2345.687377][   T23] usb 6-1-port1: config error
[ 2345.857193][T31069] usb 5-1-port1: config error
23:27:07 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")

23:27:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:27:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:07 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x12000000}, &(0x7f0000000240)=0x54)

23:27:07 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2346.113578][T21736] IPVS: ftp: loaded support on port[0] = 21
[ 2346.427149][T32592] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2346.503647][T19773] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 2346.602313][T21736] IPVS: ftp: loaded support on port[0] = 21
[ 2346.674359][T32592] usb 5-1: Using ep0 maxpacket: 16
[ 2346.757159][T19773] usb 6-1: Using ep0 maxpacket: 16
[ 2346.808882][T32592] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2346.829372][T32592] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2346.843401][T32592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2346.880992][T32592] usb 5-1: config 0 descriptor??
[ 2346.897554][T19773] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2346.917092][    C1] raw-gadget gadget: ignoring, device is not running
[ 2346.924022][T32592] usb 5-1: can't set config #0, error -32
23:27:08 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xff, 'syz0\x00', @null, 0x3, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:27:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2346.931394][T32592] usb 5-1: USB disconnect, device number 28
[ 2346.950610][T19773] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2347.010068][T19773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2347.055772][T19773] usb 6-1: config 0 descriptor??
[ 2347.118827][T19773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:27:08 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0xf76, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="aa25a85f364288fc90cd222e228a9551e1414304c6d2712be5400be7a1e1640f339f6aeaddb5984240b8bdd1c89187db647a058cdbbee8f338b499c4c47750a1", 0x40, 0x9}, {&(0x7f0000000340)="b28d2e8baff7278344f960618e7195701ce498675e103797540907701226d0fe0cdf0fdcec39d23c4958353a1211474d0a75e2e47d9479355bbef012a17f1f616505ec10f98bfe4b7e4de85e4d4bfa18df85689e59f94d85f808d80dfee340c50221e6802506a8bf243aea109eafc46b8dfbb92466b3ec3c3635454f0332b716904798b97df3f0846f99805df69a2da33e9795320bbc78e34ecf756615fcbed333027af5a60c4a3ed494b30ec16b0912fb8beff6066bc2f675df7bbf651f1c80b05836fd", 0xc4, 0x54}, {&(0x7f0000000240)="b6dd529f5dd02db99b258ea3435a468c8639080524c1dbad7522e22e5f1e43a3983180eee95701d593d8dc35448b4d82688246bcefde8d0cb5f684f96abf5112fd1e", 0x42, 0x3f8}], 0x44, &(0x7f00000004c0)={[{@dyn='dyn'}, {@source={'source', 0x3d, '[%'}}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}, {@source={'source', 0x3d, '\xa0&]'}}, {@source={'source', 0x3d, '%\xa4$'}}], [{@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, '}{\'{'}}]})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:08 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x1d000000}, &(0x7f0000000240)=0x54)

[ 2347.320801][T31069] usb 6-1: USB disconnect, device number 7
23:27:08 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2347.438235][T21835] IPVS: ftp: loaded support on port[0] = 21
[ 2347.467194][T32592] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2347.707206][T32592] usb 5-1: Using ep0 maxpacket: 16
[ 2347.827184][T32592] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2347.847182][T32592] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2347.856234][T32592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2347.887220][T31069] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2347.901784][T21835] IPVS: ftp: loaded support on port[0] = 21
[ 2347.913708][T32592] usb 5-1: config 0 descriptor??
[ 2347.958559][T32592] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2348.029105][ T6373] tipc: TX() has been purged, node left!
[ 2348.127190][T31069] usb 6-1: Using ep0 maxpacket: 32
[ 2348.167573][T32592] usb 5-1: USB disconnect, device number 29
[ 2348.190676][ T6373] tipc: TX() has been purged, node left!
[ 2348.248313][T31069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2348.259508][T31069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2348.274260][T31069] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2348.283656][T31069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2348.297707][T31069] usb 6-1: config 0 descriptor??
[ 2348.337941][T31069] hub 6-1:0.0: USB hub found
[ 2348.557293][T31069] hub 6-1:0.0: 1 port detected
[ 2348.757201][T32592] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2348.999133][T32592] usb 5-1: Using ep0 maxpacket: 32
[ 2349.118102][T32592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2349.134994][T32592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2349.146875][T32592] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2349.156924][T32592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.171655][T32592] usb 5-1: config 0 descriptor??
[ 2349.218137][T32592] hub 5-1:0.0: USB hub found
[ 2349.233282][T32591] hub 6-1:0.0: activate --> -90
[ 2349.437455][T32592] hub 5-1:0.0: 1 port detected
[ 2349.442506][T31069] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2349.457433][   T23] usb 6-1: USB disconnect, device number 8
23:27:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")

23:27:11 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:11 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:11 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x2a010000}, &(0x7f0000000240)=0x54)

23:27:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2350.131508][T21925] IPVS: ftp: loaded support on port[0] = 21
[ 2350.187267][T32592] hub 5-1:0.0: activate --> -90
[ 2350.481505][T21925] IPVS: ftp: loaded support on port[0] = 21
[ 2350.507832][T31069] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 2350.516404][ T6373] tipc: TX() has been purged, node left!
[ 2350.523039][ T6373] tipc: TX() has been purged, node left!
[ 2350.613615][   T12] usb 5-1: USB disconnect, device number 30
[ 2350.747282][T31069] usb 6-1: Using ep0 maxpacket: 16
[ 2350.867405][T31069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2350.880484][T32592] usb 5-1-port1: config error
[ 2350.885550][T31069] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2350.900996][T31069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2350.914026][T31069] usb 6-1: config 0 descriptor??
[ 2350.958593][T31069] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2351.166117][T32593] usb 6-1: USB disconnect, device number 9
[ 2351.417203][   T12] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 2351.657181][   T12] usb 5-1: Using ep0 maxpacket: 16
[ 2351.727200][T32593] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2351.787905][   T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2351.808753][   T12] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2351.829252][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2351.851673][   T12] usb 5-1: config 0 descriptor??
[ 2351.888451][   T12] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2351.967159][T32593] usb 6-1: Using ep0 maxpacket: 32
23:27:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:13 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:13 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x30010000}, &(0x7f0000000240)=0x54)

[ 2352.042169][   T12] usb 5-1: USB disconnect, device number 31
23:27:13 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000040), 0x240)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1], 0x0)
syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

[ 2352.092087][T32593] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2352.126990][T32593] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2352.173720][T22026] IPVS: ftp: loaded support on port[0] = 21
[ 2352.181264][T32593] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2352.224342][T32593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2352.265913][T32593] usb 6-1: config 0 descriptor??
[ 2352.328546][T32593] hub 6-1:0.0: USB hub found
23:27:13 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2352.537356][T32593] hub 6-1:0.0: 1 port detected
23:27:13 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2352.727277][T32592] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2352.889941][T22026] IPVS: ftp: loaded support on port[0] = 21
[ 2353.007287][T32592] usb 5-1: device descriptor read/64, error 18
[ 2353.190979][T32593] hub 6-1:0.0: activate --> -90
[ 2353.390790][   T12] usb 6-1: USB disconnect, device number 10
[ 2353.397165][T32592] usb 5-1: device descriptor read/64, error 18
[ 2353.407445][T32593] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2353.414357][ T6373] tipc: TX() has been purged, node left!
[ 2353.577184][ T6373] tipc: TX() has been purged, node left!
[ 2353.667259][T32592] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2353.748194][ T6373] tipc: TX() has been purged, node left!
[ 2353.937170][T32592] usb 5-1: device descriptor read/64, error 18
23:27:15 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x400, &(0x7f0000000180)="bb2ed8e13aaf1c12c3d4ba19ed665e49df1e5cb77565ebd8d222b53870879752c860b1849c32e550dc9692a0923fe7b221baf44ae322c4df8a7a87c8")

23:27:15 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:15 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:15 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x32000000}, &(0x7f0000000240)=0x54)

[ 2354.100849][T22116] IPVS: ftp: loaded support on port[0] = 21
23:27:15 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:15 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2354.327424][T32592] usb 5-1: device descriptor read/64, error 18
[ 2354.440864][   T12] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 2354.447304][T32592] usb usb5-port1: attempt power cycle
[ 2354.619491][T22116] IPVS: ftp: loaded support on port[0] = 21
[ 2354.717232][   T12] usb 6-1: Using ep0 maxpacket: 16
[ 2354.857533][   T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2354.879519][   T12] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2354.899043][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2354.928652][   T12] usb 6-1: config 0 descriptor??
[ 2354.978573][   T12] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2355.157285][T32592] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2355.183680][   T12] usb 6-1: USB disconnect, device number 11
23:27:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:16 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2355.277263][T32592] usb 5-1: device descriptor read/8, error -71
23:27:16 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x38020000}, &(0x7f0000000240)=0x54)

23:27:16 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6e32c364eff3e3f04000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$qrtr(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x2a, 0x3, 0x3fff}, 0xc, &(0x7f0000000500)=[{&(0x7f00000003c0)="8b9d646846a1d3e99e4d7a08ae465755fdd220e732abd89d315fdb814b4e9d13c9d7d75a844d45eeaf62a4b33cdd6816fad5272c5f4168abe78e2fabdb8076c1e4ff521570cfb67ab276c8ef73b98f35f919e6", 0x53}, {&(0x7f0000000440)="216bf931f1f8dfe9b2a5ae4832929eb7c4f39ad52758e6ba690c3950adb21fd9554b49596fac2bcb6ea30ef6b6e632c77f37f1141ee87fce8ea616f00bb72865e29e82c29798af29e517922f24adabb504e8afc111eb9c8cd1aad82b29e6e05b5be798606f7583131228854bc156121a82694a5f42a7f97624d0ea64140213f259ec17dca673dea648629dd712e224a7d5745588ca", 0x95}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="d6da1e867fb9b2560a68deb56a58b91b998dad6cddf5fc7a6241e505ca59492f61d350b6f1c719bbf1ac95f56787e41102b4aabe945ffa080c42257e2448d9846ce1981cbd77fb72cc92a66b4ab390003fcd005494ddf9a5a99409b81808b3bf12b5bd3cee93e0168b9c805dcc012918e33d37d211ff7bd8b9e9131dcdb4029908568a3584e2aa51c49177288876284c3664e52db38a8366ffd5ce89fe7aba00243772ab0eb3fe83c912374daf24baaff209c30f023374d856445490", 0xbc}], 0x4, 0x0, 0x0, 0x4804}, 0x38)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000007c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
setuid(r7)
setresuid(r4, r5, r7)

[ 2355.408475][T22206] IPVS: ftp: loaded support on port[0] = 21
[ 2355.487311][T32592] usb 5-1: device descriptor read/8, error -71
[ 2355.797164][   T12] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 2355.878656][T22206] IPVS: ftp: loaded support on port[0] = 21
[ 2355.977452][T32592] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 2356.047164][   T12] usb 6-1: Using ep0 maxpacket: 32
[ 2356.067222][T32592] usb 5-1: Using ep0 maxpacket: 16
[ 2356.173703][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2356.187265][T32592] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2356.192884][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2356.205814][T32592] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2356.220010][T32592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.234464][T32592] usb 5-1: config 0 descriptor??
[ 2356.243448][   T12] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2356.275101][   T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.288389][T32592] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2356.301043][   T12] usb 6-1: config 0 descriptor??
[ 2356.353733][   T12] hub 6-1:0.0: USB hub found
[ 2356.492282][T24584] usb 5-1: USB disconnect, device number 35
[ 2356.557305][   T12] hub 6-1:0.0: 1 port detected
[ 2357.077924][T24584] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2357.187391][T24361] hub 6-1:0.0: activate --> -90
[ 2357.227199][ T6373] tipc: TX() has been purged, node left!
[ 2357.357266][T24584] usb 5-1: device descriptor read/64, error 18
[ 2357.387286][ T6373] tipc: TX() has been purged, node left!
[ 2357.394800][T19774] usb 6-1: USB disconnect, device number 12
[ 2357.407298][T24361] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2357.527172][ T6373] tipc: TX() has been purged, node left!
[ 2357.687156][ T6373] tipc: TX() has been purged, node left!
[ 2357.757262][T24584] usb 5-1: device descriptor read/64, error 18
[ 2357.857152][ T6373] tipc: TX() has been purged, node left!
23:27:19 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:27:19 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:19 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x40000000}, &(0x7f0000000240)=0x54)

23:27:19 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2358.027239][T24584] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 2358.046946][T22294] IPVS: ftp: loaded support on port[0] = 21
23:27:19 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2358.317167][T24584] usb 5-1: device descriptor read/64, error 18
23:27:19 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:19 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2358.398229][T19772] usb 6-1: new high-speed USB device number 13 using dummy_hcd
23:27:19 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x16}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f00000001c0))
timer_gettime(r3, &(0x7f0000000180))
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[ 2358.661130][T19772] usb 6-1: Using ep0 maxpacket: 16
23:27:19 executing program 1:
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2358.797552][T19772] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2358.835756][T19772] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2358.849623][T19772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2358.863617][T22294] IPVS: ftp: loaded support on port[0] = 21
[ 2358.886075][T19772] usb 6-1: config 0 descriptor??
[ 2358.940544][T19772] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:27:20 executing program 1:
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2359.146328][T19774] usb 6-1: USB disconnect, device number 13
[ 2359.257257][T24584] usb 5-1: device descriptor read/64, error -71
[ 2359.377353][T24584] usb usb5-port1: attempt power cycle
[ 2359.787220][T19774] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2360.027506][T19774] usb 6-1: Using ep0 maxpacket: 32
[ 2360.097150][T24584] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 2360.154020][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2360.184195][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2360.204283][T24584] usb 5-1: Using ep0 maxpacket: 16
[ 2360.223745][T19774] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2360.237193][T19774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2360.268367][T19774] usb 6-1: config 0 descriptor??
[ 2360.311140][T19774] hub 6-1:0.0: USB hub found
[ 2360.327835][T24584] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2360.341099][T24584] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2360.367216][T24584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2360.407611][T24584] usb 5-1: config 0 descriptor??
[ 2360.449098][T24584] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2360.527280][T19774] hub 6-1:0.0: 1 port detected
[ 2360.659197][T24584] usb 5-1: USB disconnect, device number 38
[ 2361.167282][T19774] hub 6-1:0.0: activate --> -90
[ 2361.267211][T24584] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 2361.507139][T24584] usb 5-1: Using ep0 maxpacket: 32
[ 2361.590425][ T8107] usb 6-1: USB disconnect, device number 14
[ 2361.629664][T24584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2361.646406][T24584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2361.656900][T24584] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2361.666728][T24584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2361.677826][T24584] usb 5-1: config 0 descriptor??
[ 2361.724321][T24584] hub 5-1:0.0: USB hub found
[ 2361.828095][  T323] tipc: TX() has been purged, node left!
[ 2361.847235][T19774] usb 6-1-port1: config error
[ 2361.927583][T24584] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2361.978068][T24584] usb 5-1: USB disconnect, device number 39
23:27:23 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:23 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:23 executing program 1:
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:23 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:23 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x42020000}, &(0x7f0000000240)=0x54)

23:27:23 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB="dbe590006b75"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x80000000, 0x101000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x80001, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f00000005c0)='IPVS\x00', 0x5)
ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x1ad, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6b9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x30a05be}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10004)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2362.260200][T22442] IPVS: ftp: loaded support on port[0] = 21
23:27:23 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:23 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:23 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:23 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2362.537405][ T8107] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2362.587568][T32591] usb 6-1: new high-speed USB device number 15 using dummy_hcd
23:27:23 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2362.807476][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2362.837191][T32591] usb 6-1: Using ep0 maxpacket: 16
23:27:23 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2362.914724][T22442] IPVS: ftp: loaded support on port[0] = 21
[ 2362.938517][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2362.966802][T32591] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2362.982830][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2363.000558][T32591] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2363.019683][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2363.043117][T32591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2363.065368][ T8107] usb 5-1: config 0 descriptor??
[ 2363.092711][T32591] usb 6-1: config 0 descriptor??
[ 2363.139005][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2363.159556][T32591] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2363.347869][ T8107] usb 5-1: USB disconnect, device number 40
[ 2363.364494][T32591] usb 6-1: USB disconnect, device number 15
[ 2363.917250][ T8107] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2363.927280][T32591] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2364.167130][ T8107] usb 5-1: Using ep0 maxpacket: 32
[ 2364.172896][T32591] usb 6-1: Using ep0 maxpacket: 32
[ 2364.298654][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2364.309695][T32591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2364.317920][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2364.321980][T32591] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2364.338053][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2364.341017][T32591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2364.357657][ T8107] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2364.363763][T32591] usb 6-1: config 0 descriptor??
[ 2364.367120][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2364.391472][ T8107] usb 5-1: config 0 descriptor??
[ 2364.418273][T32591] hub 6-1:0.0: USB hub found
[ 2364.436546][ T8107] hub 5-1:0.0: USB hub found
[ 2364.487381][  T323] tipc: TX() has been purged, node left!
[ 2364.637234][T32591] hub 6-1:0.0: 1 port detected
[ 2364.647294][  T323] tipc: TX() has been purged, node left!
[ 2364.657354][ T8107] hub 5-1:0.0: 1 port detected
[ 2365.307346][ T8107] hub 5-1:0.0: activate --> -90
[ 2365.489698][T19774] usb 6-1: USB disconnect, device number 16
[ 2365.742934][T19774] usb 5-1: USB disconnect, device number 41
[ 2366.008176][ T8107] usb 5-1-port1: config error
23:27:27 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:27 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:27 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:27 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x44030000}, &(0x7f0000000240)=0x54)

23:27:27 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2366.146846][T22579] IPVS: ftp: loaded support on port[0] = 21
[ 2366.450408][T32593] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 2366.514785][T22579] IPVS: ftp: loaded support on port[0] = 21
[ 2366.517205][T19774] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 2366.697126][T32593] usb 6-1: Using ep0 maxpacket: 16
[ 2366.797293][T19774] usb 5-1: Using ep0 maxpacket: 16
[ 2366.817506][T32593] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2366.830608][T32593] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2366.840315][T32593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2366.855670][T32593] usb 6-1: config 0 descriptor??
[ 2366.898376][T32593] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2366.937929][T19774] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2366.950882][T19774] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2366.962049][T19774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2366.970353][  T323] tipc: TX() has been purged, node left!
[ 2366.981765][T19774] usb 5-1: config 0 descriptor??
[ 2367.034784][T19774] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2367.100983][T19774] usb 6-1: USB disconnect, device number 17
[ 2367.133466][  T323] tipc: TX() has been purged, node left!
23:27:28 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:28 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:28 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x4a000000}, &(0x7f0000000240)=0x54)

[ 2367.211732][T32591] usb 5-1: USB disconnect, device number 42
23:27:28 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000040), 0x240)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000800008c33a169957d26c623cd9de3e6d8487d9e36b5291f110782b8995e2238400cbd6fcc9da595814cbcc97e2e3cdc4d714b13d1826636ef64b9f8d44817ad49db00703563c37533a472ee0edad8f4e3105b945036a2eefff941208c94c19c0df151bf68c5c98185"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r5, &(0x7f0000000040), 0x240)
close_range(r3, r5, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:27:28 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2367.330384][T22657] IPVS: ftp: loaded support on port[0] = 21
23:27:28 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:28 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2367.657223][T19774] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2367.777319][T32591] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 2367.834826][T22657] IPVS: ftp: loaded support on port[0] = 21
[ 2367.917143][T19774] usb 6-1: Using ep0 maxpacket: 32
[ 2368.037155][T32591] usb 5-1: Using ep0 maxpacket: 16
[ 2368.055493][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2368.073190][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2368.086945][T19774] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2368.098298][T19774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2368.116668][T19774] usb 6-1: config 0 descriptor??
[ 2368.157229][T32591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2368.178207][T19774] hub 6-1:0.0: USB hub found
[ 2368.207184][T32591] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2368.216245][T32591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2368.271352][T32591] usb 5-1: config 0 descriptor??
[ 2368.312935][T32591] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2368.387323][T19774] hub 6-1:0.0: 1 port detected
[ 2368.515075][ T8107] usb 5-1: USB disconnect, device number 43
[ 2369.097178][ T8107] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 2369.242997][T32593] usb 6-1: USB disconnect, device number 18
[ 2369.347246][ T8107] usb 5-1: Using ep0 maxpacket: 32
[ 2369.468248][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2369.479468][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2369.491420][ T8107] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2369.501426][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2369.513615][ T8107] usb 5-1: config 0 descriptor??
[ 2369.558130][ T8107] hub 5-1:0.0: USB hub found
[ 2369.667167][  T323] tipc: TX() has been purged, node left!
[ 2369.777305][ T8107] hub 5-1:0.0: 1 port detected
23:27:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:30 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:30 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:30 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x88000000}, &(0x7f0000000240)=0x54)

23:27:30 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2369.827147][  T323] tipc: TX() has been purged, node left!
[ 2369.880333][T22748] IPVS: ftp: loaded support on port[0] = 21
23:27:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:31 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2370.207859][T19774] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2370.337244][T22748] IPVS: ftp: loaded support on port[0] = 21
[ 2370.427614][ T8107] hub 5-1:0.0: activate --> -90
[ 2370.458202][T19774] usb 6-1: Using ep0 maxpacket: 16
[ 2370.587639][T19774] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2370.600583][T19774] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2370.611672][T19774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2370.624138][T19774] usb 6-1: config 0 descriptor??
[ 2370.688363][T19774] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2370.895254][T19772] usb 6-1: USB disconnect, device number 19
[ 2371.409988][T22661] udc-core: couldn't find an available UDC or it's busy
[ 2371.416947][T22661] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2371.497228][T19772] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2371.611002][T22661] udc-core: couldn't find an available UDC or it's busy
[ 2371.622846][T22661] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2371.651003][T23035] usb 5-1: USB disconnect, device number 44
23:27:32 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041c050000000000010700000000000000000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:27:32 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:32 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x94030000}, &(0x7f0000000240)=0x54)

23:27:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2371.737333][T19772] usb 6-1: Using ep0 maxpacket: 32
[ 2371.805287][T22835] IPVS: ftp: loaded support on port[0] = 21
[ 2371.880693][T19772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2371.897383][ T8107] usb 5-1-port1: config error
[ 2371.909635][T19772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2371.933790][T19772] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2371.964611][T19772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2372.000915][T19772] usb 6-1: config 0 descriptor??
[ 2372.058263][T19772] hub 6-1:0.0: USB hub found
[ 2372.245797][T22835] IPVS: ftp: loaded support on port[0] = 21
[ 2372.267213][T23035] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 2372.278491][T19772] hub 6-1:0.0: 1 port detected
[ 2372.283422][  T323] tipc: TX() has been purged, node left!
[ 2372.294920][  T323] tipc: TX() has been purged, node left!
[ 2372.507284][T23035] usb 5-1: Using ep0 maxpacket: 16
[ 2372.627596][T23035] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2372.640878][T23035] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2372.650413][T23035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2372.660117][T23035] usb 5-1: config 0 descriptor??
[ 2372.698390][T23035] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2372.905471][T23035] usb 5-1: USB disconnect, device number 45
[ 2373.148331][T24584] usb 6-1: USB disconnect, device number 20
[ 2373.477163][T23035] usb 5-1: new high-speed USB device number 46 using dummy_hcd
23:27:34 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

[ 2373.717194][T23035] usb 5-1: Using ep0 maxpacket: 32
23:27:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:34 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:34 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x98000000}, &(0x7f0000000240)=0x54)

23:27:34 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:34 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:34 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2373.864197][T22925] IPVS: ftp: loaded support on port[0] = 21
[ 2373.888270][T23035] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2373.896159][T23035] usb 5-1: can't read configurations, error -61
23:27:35 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2374.087381][T23035] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2374.127236][T31069] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2374.238711][T22925] IPVS: ftp: loaded support on port[0] = 21
[ 2374.337302][T23035] usb 5-1: Using ep0 maxpacket: 32
[ 2374.409903][T31069] usb 6-1: Using ep0 maxpacket: 16
[ 2374.510319][T23035] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2374.526015][T23035] usb 5-1: can't read configurations, error -61
[ 2374.534686][T31069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2374.559625][T23035] usb usb5-port1: attempt power cycle
[ 2374.565134][T31069] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2374.576097][T31069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2374.587759][T31069] usb 6-1: config 0 descriptor??
[ 2374.628408][T31069] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2374.787194][  T323] tipc: TX() has been purged, node left!
23:27:35 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
accept$netrom(r5, &(0x7f0000000180)={{0x3, @netrom}, [@null, @bcast, @null, @null, @netrom, @netrom, @null, @netrom]}, &(0x7f0000000200)=0xfffffffffffffe9f)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6532b0e5aa005e9f"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

23:27:35 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:35 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:35 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xc6010000}, &(0x7f0000000240)=0x54)

[ 2374.834403][T31069] usb 6-1: USB disconnect, device number 21
[ 2374.945481][T22996] IPVS: ftp: loaded support on port[0] = 21
[ 2374.957353][  T323] tipc: TX() has been purged, node left!
[ 2375.048025][  T323] tipc: TX() has been purged, node left!
[ 2375.057005][  T323] tipc: TX() has been purged, node left!
[ 2375.256873][T22996] IPVS: ftp: loaded support on port[0] = 21
[ 2375.357170][T23035] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2375.417246][T31069] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2375.447314][T23035] usb 5-1: Using ep0 maxpacket: 16
[ 2375.568827][T23035] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2375.581685][T23035] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2375.591966][T23035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2375.602278][T23035] usb 5-1: config 0 descriptor??
[ 2375.648381][T23035] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2375.658172][T31069] usb 6-1: Using ep0 maxpacket: 32
[ 2375.777258][T31069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2375.788350][T31069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2375.799517][T31069] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2375.809478][T31069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2375.820117][T31069] usb 6-1: config 0 descriptor??
[ 2375.858148][T31069] hub 6-1:0.0: USB hub found
[ 2375.864842][T19775] usb 5-1: USB disconnect, device number 48
[ 2376.077248][T31069] hub 6-1:0.0: 1 port detected
[ 2376.447151][T19775] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 2376.697153][T19775] usb 5-1: Using ep0 maxpacket: 32
[ 2376.818294][T19775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2376.829810][T19775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2376.840977][T19775] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2376.850429][T19775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2376.863245][T19775] usb 5-1: config 0 descriptor??
[ 2376.918345][T19775] hub 5-1:0.0: USB hub found
[ 2376.933442][T31468] usb 6-1: USB disconnect, device number 22
[ 2377.137386][T19775] hub 5-1:0.0: 1 port detected
23:27:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:38 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:38 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xd4000000}, &(0x7f0000000240)=0x54)

23:27:38 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2377.587201][  T323] tipc: TX() has been purged, node left!
[ 2377.635239][T23087] IPVS: ftp: loaded support on port[0] = 21
23:27:38 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2377.702233][  T323] tipc: TX() has been purged, node left!
23:27:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:38 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2377.872751][T19774] hub 5-1:0.0: activate --> -90
[ 2377.927473][T19775] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2378.068410][T23087] IPVS: ftp: loaded support on port[0] = 21
[ 2378.080852][T19774] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[ 2378.187193][T19775] usb 6-1: Using ep0 maxpacket: 16
[ 2378.307392][T19775] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2378.324344][T19775] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2378.334078][T19775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2378.346897][T19775] usb 6-1: config 0 descriptor??
[ 2378.397526][T24361] usb 5-1: USB disconnect, device number 49
[ 2378.404517][T19775] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2378.607670][T19774] usb 6-1: USB disconnect, device number 23
[ 2379.057141][T31069] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2379.187227][T19774] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2379.297158][T31069] usb 5-1: Using ep0 maxpacket: 16
[ 2379.437169][T19774] usb 6-1: Using ep0 maxpacket: 32
[ 2379.438178][T31069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2379.459105][T31069] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2379.469271][T31069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2379.485162][T31069] usb 5-1: config 0 descriptor??
23:27:40 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

23:27:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:40 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:40 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2379.552313][T31069] usb 5-1: can't set config #0, error -71
[ 2379.567590][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2379.581066][T31069] usb 5-1: USB disconnect, device number 50
[ 2379.604550][T19774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2379.652587][T19774] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2379.676776][T19774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2379.725412][T19774] usb 6-1: config 0 descriptor??
[ 2379.778124][T19774] hub 6-1:0.0: USB hub found
[ 2379.987276][T19774] hub 6-1:0.0: 1 port detected
[ 2380.037229][  T323] tipc: TX() has been purged, node left!
[ 2380.077154][T31069] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 2380.201305][  T323] tipc: TX() has been purged, node left!
[ 2380.347219][T31069] usb 5-1: device descriptor read/64, error 18
[ 2380.747173][T31069] usb 5-1: device descriptor read/64, error 18
[ 2380.830093][T19775] usb 6-1: USB disconnect, device number 24
[ 2381.017181][T31069] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 2381.297141][T31069] usb 5-1: device descriptor read/64, error 18
23:27:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
sendfile(r2, r3, 0x0, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:42 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:42 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xd4020000}, &(0x7f0000000240)=0x54)

23:27:42 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2381.552460][T23227] IPVS: ftp: loaded support on port[0] = 21
23:27:42 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:42 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2381.687340][T31069] usb 5-1: device descriptor read/64, error 18
[ 2381.807503][T31069] usb usb5-port1: attempt power cycle
[ 2381.897453][T19775] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2382.026778][T23227] IPVS: ftp: loaded support on port[0] = 21
[ 2382.163446][T19775] usb 6-1: Using ep0 maxpacket: 16
[ 2382.293939][T19775] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2382.321382][T19775] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2382.353497][T19775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2382.374597][T19775] usb 6-1: config 0 descriptor??
[ 2382.422614][T19775] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2382.517214][T31069] usb 5-1: new high-speed USB device number 53 using dummy_hcd
23:27:43 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900520b65d91cc304000018000109022400010000a00009ac8ffad6"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

23:27:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:43 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:43 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2382.626528][T19775] usb 6-1: USB disconnect, device number 25
[ 2382.687246][T31069] usb 5-1: device descriptor read/8, error -71
[ 2382.828419][  T323] tipc: TX() has been purged, node left!
[ 2382.897305][T31069] usb 5-1: device descriptor read/8, error -71
[ 2382.987304][  T323] tipc: TX() has been purged, node left!
[ 2383.237228][T19775] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2383.387271][T31069] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 2383.477934][T31069] usb 5-1: Using ep0 maxpacket: 16
[ 2383.497259][T19775] usb 6-1: Using ep0 maxpacket: 32
[ 2383.598110][T31069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2383.611288][T31069] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2383.621771][T31069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.627509][T19775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2383.639971][T31069] usb 5-1: config 0 descriptor??
[ 2383.640791][T19775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2383.678322][T31069] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2383.683411][T19775] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2383.707774][T19775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.744451][T19775] usb 6-1: config 0 descriptor??
[ 2383.798207][T19775] hub 6-1:0.0: USB hub found
[ 2383.882642][T23034] usb 5-1: USB disconnect, device number 54
[ 2384.017304][T19775] hub 6-1:0.0: 1 port detected
[ 2384.447266][T23034] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 2384.717156][T23034] usb 5-1: device descriptor read/64, error 18
[ 2384.875714][ T7409] usb 6-1: USB disconnect, device number 26
[ 2385.107220][T23034] usb 5-1: device descriptor read/64, error 18
[ 2385.377155][T23034] usb 5-1: new high-speed USB device number 56 using dummy_hcd
23:27:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r3, &(0x7f0000000040), 0x240)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:46 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xda030000}, &(0x7f0000000240)=0x54)

23:27:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:46 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:46 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2385.490219][T23342] IPVS: ftp: loaded support on port[0] = 21
23:27:46 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2385.657384][T23034] usb 5-1: device descriptor read/64, error 18
23:27:46 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2385.907178][T32592] usb 6-1: new high-speed USB device number 27 using dummy_hcd
23:27:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:47 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:47 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="129f0de106e0777210ffda280000000010ffffffff00000000c4d3dbef757353450f4474f155612ad3fc126111a3f9cb691348cb3b47030059db8d6e08bd6738e5aa7c0166272200000000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r2, &(0x7f0000000040), 0x240)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r4, &(0x7f0000000040), 0x240)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="2f034a92effdeafabdaa424166f87869e0c4d596958808535af00013470d82fa4bca7b4499d8eb2a5117b08fc7cd6a3d8ea4c52a0472327a9da93157b9c9ed073497397ec34e9f1bf73fe505bf062840ea08a7e4c518a61e615200ff16360fb9d24d689cd61be5a6c93a73b9d047437451673daa34cb6c140514"], 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 2386.023321][T23342] IPVS: ftp: loaded support on port[0] = 21
[ 2386.167165][T32592] usb 6-1: Using ep0 maxpacket: 16
23:27:47 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2386.297530][T32592] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2386.326734][T32592] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2386.357407][T32592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2386.392338][T32592] usb 6-1: config 0 descriptor??
[ 2386.417781][  T323] tipc: TX() has been purged, node left!
[ 2386.438434][T32592] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2386.527194][T23034] usb 5-1: device descriptor read/64, error -71
[ 2386.640180][T23035] usb 6-1: USB disconnect, device number 27
[ 2386.657310][T23034] usb usb5-port1: attempt power cycle
[ 2387.227226][T23035] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2387.377136][T23034] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 2387.467348][T23035] usb 6-1: Using ep0 maxpacket: 32
[ 2387.577258][T23034] usb 5-1: device descriptor read/8, error -61
[ 2387.597247][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2387.617114][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2387.626859][T23035] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2387.644988][T23035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2387.654375][T23035] usb 6-1: config 0 descriptor??
[ 2387.702308][T23035] hub 6-1:0.0: USB hub found
[ 2387.857324][T23034] usb 5-1: device descriptor read/8, error -61
[ 2387.917408][T23035] hub 6-1:0.0: 1 port detected
[ 2388.147196][T23034] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 2388.327165][  T323] tipc: TX() has been purged, node left!
[ 2388.327303][T23034] usb 5-1: device descriptor read/8, error -61
[ 2388.557298][T23035] hub 6-1:0.0: activate --> -90
[ 2388.617339][T23034] usb 5-1: device descriptor read/8, error -61
[ 2388.737306][T23034] usb usb5-port1: unable to enumerate USB device
[ 2388.970081][ T7409] usb 6-1: USB disconnect, device number 28
[ 2389.233993][T23035] usb 6-1-port1: config error
23:27:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:50 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$uac1(0x6, 0xbe, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x8, 0x30, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0xff}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x9, "0748e04a7c52"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x34, 0x1, "ef7a"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x4, 0x3, [0x9, 0x9, 0x5], 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x2, "0e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x40, '|', 'xv'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x20, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x400, 0x9, 0x3, "38e7959a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3f, 0x2, 0xff, {0x7, 0x25, 0x1, 0x0, 0x5, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x6, 0x87, 0x5, 0xff, 0x40}, 0x172, &(0x7f00000002c0)={0x5, 0xf, 0x172, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x19, 0x6, 0x2, 0xf00, 0x8, [0xc0, 0xff3f00, 0x0, 0x30, 0xc00f, 0xff0170]}, @generic={0x7c, 0x10, 0x3, "12acd3d2a91ab46cbbe5346ec7f08e820addba3098a1aeffd1c88b9ecc1c06bb7f6f302bc0e605019328e1e7bb9165a386230c7b652267ee9ffbd2266d491419ad8d31a644052470ef42f3a7570631162539f08d5520ea46eb6c575b2ce95064fd402ddcfc43b191ca2e88907a456cb2599b93b8dee72fd225"}, @generic={0xca, 0x10, 0x2, "0c55212a7dd6863a53b880b5c1a77f9fd56c5d58967258af81fbab5580cd30b2ffa8d0b331038c1d39a9d606e3c2089621122bfce49ea96e8c93c611173362052e1d6864ff5cddde18b54014cd8386956525f50094d3519da28aee2a4709b0bb24df3575e50096dae870c15d166a39d47a93b03dfbccb1f4ed1478450970a575259c718ff91721d767bf531d3b63444d6f54bfe19c5e427d018e6f86b01c10fded9397365321cfb223aeeca76d007f49ed0febfab6753cdbfeb55e38d168de196b4be8b801f0cb"}]}, 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x1f, &(0x7f0000000480)=@string={0x1f, 0x3, "4f89736c2d25498a335f24888ff922669d0a129927ca79253587b4894c"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc27}}, {0x96, &(0x7f00000005c0)=@string={0x96, 0x3, "eee539e14ae94209d082644afc56cb689a8fdd1c10ffbdc36d79403f6b7f6b002ae858c5e28360b5991dd5f15c7195f89180635c078ede72d8eb69422341e21b9973eeb6d705ee9ac4a3efa625012814d2fb453281e97476a3ce750829ba11ee08149249a7f2ef7f0c5ea09941c9c3f48234f6cbb1b862caa3343c1041bb95a852511aa5c544cbe627af59169e99e1bd160f5373"}}, {0xdb, &(0x7f0000000800)=@string={0xdb, 0x3, "469b8547ed63e872e9d4ca8a27eb07e41e5d2e610b5c4a057e5ee17264cb43b808a6fc006c8e641a679019aacf16f0189619062005282b979804f52e516293107bc1e12f664a2aba074b0ae462b26946423b4234f87cbe9b0e9650b909f13ab01fe474bf2d3dc3e164e84f9f57ec9f394532211323e9db0ff409a9d08ddde961d6b37a70364758beba7923077c5719ef57caa53cabac48fc6d9ae990110bf02fde89884bf7054ed679b035818ebbda69e62b7bc330970346174975f12abd6f4f864b6f46fb6e866c686d9de102e520cb249ba6bb2962e2a13a"}}]})
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

23:27:50 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xec030000}, &(0x7f0000000240)=0x54)

23:27:50 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:50 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2389.714161][T23465] IPVS: ftp: loaded support on port[0] = 21
23:27:50 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2389.967335][T23034] usb 5-1: new high-speed USB device number 59 using dummy_hcd
23:27:51 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2390.067288][T23035] usb 6-1: new high-speed USB device number 29 using dummy_hcd
23:27:51 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, 0x0)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2390.220362][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2390.327413][T23035] usb 6-1: Using ep0 maxpacket: 16
[ 2390.338985][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2390.366489][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2390.371272][T23465] IPVS: ftp: loaded support on port[0] = 21
[ 2390.390057][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2390.454368][T23034] usb 5-1: config 0 descriptor??
[ 2390.460058][T23035] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2390.502855][T23035] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2390.528396][T23034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2390.566179][T23035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2390.595689][T23035] usb 6-1: config 0 descriptor??
[ 2390.659727][T23035] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2390.733948][T23468] udc-core: couldn't find an available UDC or it's busy
[ 2390.743489][T23468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2390.867205][T23034] usb 6-1: USB disconnect, device number 29
[ 2390.963260][T23468] udc-core: couldn't find an available UDC or it's busy
[ 2390.972022][T23468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2391.090549][  T323] tipc: TX() has been purged, node left!
[ 2391.267168][  T323] tipc: TX() has been purged, node left!
[ 2391.427225][T23034] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2391.667232][T23034] usb 6-1: Using ep0 maxpacket: 32
[ 2391.787338][T23034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2391.798354][T23034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2391.810219][T23034] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2391.819666][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2391.831707][T23034] usb 6-1: config 0 descriptor??
[ 2391.880954][T23034] hub 6-1:0.0: USB hub found
[ 2392.077243][T23034] hub 6-1:0.0: 1 port detected
[ 2392.637512][T24361] usb 5-1: USB disconnect, device number 59
[ 2392.737881][T23034] hub 6-1:0.0: activate --> -90
[ 2393.165189][T32589] usb 6-1: USB disconnect, device number 30
[ 2393.417182][T23034] usb 6-1-port1: config error
23:27:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
write$evdev(r2, &(0x7f0000000040), 0x240)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:54 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, 0x0)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:54 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xed030000}, &(0x7f0000000240)=0x54)

23:27:54 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0xa03, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x98, 0x2b, 0x33, 0xff, 0x5ac, 0x243, 0xff32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f1, 0x4, 0x1, 0x9, 0x0, 0x5, [{{0x9, 0x4, 0xf, 0x51, 0x0, 0x3, 0x8b, 0x2, 0x6, [@hid_hid={0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0xb03}}, @generic={0x73, 0x1, "1bbc08109f11b443bb8c210868b85283d22bb8be50728188c38d2a78267ce254b48ea9b0607aab538c766c10672b986776d6f6d6671cc0fb3c0a6a58adf6c8cd124ad2f67d4e770c54f1d086d4d94b947bfae406996f001793ba937347cf38790d50fa5bb8f9724bc133f8fa86e87ff893"}]}}, {{0x9, 0x4, 0x10, 0xa5, 0x10, 0x1a, 0xc, 0x35, 0x90, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xbd6}}, @hid_hid={0x9, 0x21, 0x384, 0x7, 0x1, {0x22, 0x1a}}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x80}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x1f, 0x9, 0x7f, [@generic={0x49, 0x2, "fb7758197e88301c8e928d0cfbfe83a59ac9f693b273919f97a7ff308d96c7388ae7e2dea22aa2559512b441d2b175fc3c3dbf8aba404d6d8e22e26f9b4d84ec1fb7b85474d6c0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x7, 0xe9, 0xae}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xff, 0x8, 0xf6, [@generic={0xce, 0xf, "45fb59e2544f5a85fa40a0bf6773a591ca8a8166a16835fc0fc6100771f85979942bafc32d3db5c188131e073a156106d9df63e82bdf06dbadfe073d23efc8f4ab4b46159bb60e0a1ddb04b8f4c0c5d0dd6801874b8cdc63c3b5a17c25da5474f04506e48064f5f40f31270956b13a8439d166f0ad391c82a60dbded11120fa71df0f10603ec87a4dbf77700c6a60aa4a87aaf81479c37f61fdd5d8fb9869b4ef10345466255d547746642c706433c913940180200391ed437ff6c17c1159d154051b80acbf58400a1e268ff"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x7, 0x3f, [@generic={0x37, 0x31, "a2ec8c5801f5bab6fde452824ecf2de24ad37d17431ff3b95770cf7fbe3d5f2dc63f9d2e91a78dcbf500f60fc1b3ce062d3cd576a7"}, @generic={0x44, 0x23, "4d1feb3b764cd66b43e1b75278d6b58205b19cae78df47a428eab447e00dfb40923dba66b4ac88e008daa6618a546447fe10187f5f7a840f67aa50853672dc2df042"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x4, 0x5e, 0x8, [@generic={0x7b, 0x21, "5aef596fc34c08032df68f9f36c87b58bdd4a80b2fce63bc5ea75d7abe01ba95abb7c9481f8fccabe033fdf0bd5bdf93a8f3c54aa9639d83302f792f3849df8618f78b838f40e870a1be4117b49b2e3191e7f7070fff5b8ab80ddd65ca93ca007c3901c196173d139bf3799218db59a01920b7e6128ebf78d6"}, @generic={0xcc, 0x24, "ad58c12c5ddc1afe3c0bb93217e371a44ece447afdf1f066da9fcd6185cb41a9baa21ceb9cba9245a1915637130648b60d9726badc8adc3347af31c19365f4743829f87744394121adbba706e34b303e2eef82700fa37150646cb8f66a91138a29483da460120d4a91e36706a486a792adf5b74dff57426c999e75a372fe7375569e239f4a5a7b5a083990f66a03be8a5c77a5fba0b0ccb9ce73b57a8b3d6b9ec3b9287025c273ed85b1b32bf886f36611a876823c1272b99e200f02cc03fc849af9c8363008787aa830"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x0, 0xf8, 0xeb}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x87, 0x0, 0x1f, [@generic={0xa1, 0xd, "e8bdc8aba0f46baaa41e0f275ef03f7d2146627f47b814e0a9ac906da9596304538025f3737dd21adaff93a0b80252dcb8c1dc5f8116dd130b67e30bb7581db1cfb409c0dfeb1ad5cd23e95ed0d57d4e660f998012173abf24a7668932f4d1c55085285938de0353411ad27efef0d66e9f772df8ee9e4f1251ebddba197e88d8e72b67769a9b774a5d1eaf476b64514c5d2a043000cc84cdf9eab7f0ae2b63"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x208, 0x0, 0x4, 0x9, [@generic={0xa7, 0x23, "10f8c8978749998db61cd4e6791abf91d46fb25548359ec49bdb76457f585f87ecb7a906d9d6aff61f65003ed8abff6f5cac83a8aaa929ca6e6bef7a41661b186d0695ad747a19b3589f14e19c309857abf222288abbdf906478857b8deab346cc981d32b83ec8382d14507a3f57767320df79bf8a6650202c4edf6e80e3cbcaeb8e16165a8ad1e01625abb3f97baa75a82060e378465f16e411f6cd11284c153242a25b96"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0xa8, 0x2, 0xff, [@generic={0x5, 0x4, "a0495a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3f, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x83}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x2a, 0x5, [@generic={0x1c, 0x21, "aeeabd077165a466b6792423a8af4b9d0e6beadedb7bab70fd8c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x6}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x6, 0x3, 0x8, [@generic={0x102, 0xd, "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"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0x72, 0x97, [@generic={0xe8, 0x22, "12e8c1edfb253ca40c8d870cdc96de791932faefb9e8540788bfbd01f64be0a13c61813cc13bc3e5bf207099afe366d50c4b84e7b72c1bb4ee3b75b94ca12fa5bdd158857ea6b2d05001f6182d09da3f08f8c01021531bd8fc754c323890d3575e168b16f6151569acf3ec019cf0bb058cb7175348eb116190102b82cd75f8fba8651e9e29a81681dbbb616a22a159b8b1e85a9750768c794f753bb558d50f2c2c156bf7b26a61de2e16a386e3fe4e103013babb5674c03bab19b752edb4cb0d714a132ee2edf428092cd71a7f5da5a3b99c21e4fe3d7a7f5d15f26163209f61b7a746899cee"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x5, 0x7f, 0x3, [@generic={0xe9, 0xe, "1d720e519d647ef3e8c3ee798259a8ee68df9f7adf59a5fb351c26f00500c48609acecb5aa881c12c5b00ebd99b3ab7b86b7186dba94871ec0a9628cee03d9677b5bb32818bb9cbc34245e613f39f9f846f97b00d911e4ece27f66c2cd454d382133a93d79dc655e323b0e16ec7528646569e397ae7004e3ac3bc1f26420ac98cb6722e4d2e96f3df172435bbde1da0c8ac63b21e037416eacd505dee8fd8ad5dcbecc54d26431340f9aeef40b15d082c5058dee669fd1985932a52b2d9979634a83acec50b8f712a4aa9c4ace2e2bbd40c8f92133209b68e92b822a83491e85ab30597552cf2e"}]}}]}}, {{0x9, 0x4, 0x7d, 0x6, 0x4, 0x3, 0x0, 0x0, 0xff, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "98ea990364"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x80, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x1f, 0xfff, [0x1ff, 0x0, 0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3, 0xfc00}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, @generic={0x72, 0xb, "49d5fe18c6fe847c506793f2ee0e190fe80e85b3c41377a6409676f0e90d8e32db02a2f345fb1f403a2ebdf659f9c1faff210ff75c2829c348bf2591030a75c2c36ec7a17daa6b2c89b0ac7a903c8f29898fcc5121e54b605d3042d345614f09e71fabeb9a7bebd184c2817cf8b7fd99"}], [{{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x0, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x6b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcf, 0x4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0xc4, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x70a5}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xd5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x5}, @generic={0x48, 0x21, "cf749e91263b5b94ad5accccd2bd597d59c85f64f641d276528db55a94b6b20cde803b4349c7e1203faa43a03819b4bb86f397b5ac487876364ed840d00aea73d231ec463bb9"}]}}]}}, {{0x9, 0x4, 0xf5, 0x7f, 0x0, 0x79, 0xc3, 0xd4, 0x4, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6d, 0x2, 0xae, 0x4, "40c0cdd5"}]}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xfe, 0x1, 0x0, 0xff, 0x9}, 0x3b, &(0x7f00000001c0)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0xff00, 0x1000, [0x0, 0x8100]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x0, 0x3, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x100, 0xf000, 0x1, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0x401}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0xaf, &(0x7f0000000240)=@string={0xaf, 0x3, "d5d107438770be8b31671bb6a6764d9545a1aa6915834b5d43fe190a47afc5946a38ee9be64b7388824189ac0f994715474f8577f8ba7bc9e29a10e6ddce7ddb72f363b9c5999f70fa5b20b1aa93ad7cea7bfbe44fda1171b41d096ee01a006a6323d762bab11e0b266977392cc8e9c11686d5633bce17c077a606c68b5c11bafa859bf6f6485298a2bf765d85e47e5cbe769b67ad0051b2ed047d1f982857bbe417f2289860fb076ee32affb8"}}]})
syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x5d, {0x1, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

23:27:54 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

[ 2393.832162][T23590] IPVS: ftp: loaded support on port[0] = 21
23:27:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, 0x0)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:55 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffffffff}, &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2394.117198][T32589] usb 5-1: new high-speed USB device number 60 using dummy_hcd
23:27:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2394.197313][T23034] usb 6-1: new high-speed USB device number 31 using dummy_hcd
23:27:55 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000480))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2394.334523][T23590] IPVS: ftp: loaded support on port[0] = 21
[ 2394.377871][T32589] usb 5-1: Using ep0 maxpacket: 16
23:27:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2394.447235][T23034] usb 6-1: Using ep0 maxpacket: 16
[ 2394.497376][T32589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2394.530647][T32589] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2394.556021][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2394.568863][T23034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2394.623632][T23034] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2394.646547][T32589] usb 5-1: config 0 descriptor??
23:27:55 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000480))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2394.678563][T23034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2394.708434][T32589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2394.727378][T23034] usb 6-1: config 0 descriptor??
[ 2394.751520][ T6373] tipc: TX() has been purged, node left!
[ 2394.783923][T23034] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2394.915949][T32589] usb 5-1: USB disconnect, device number 60
[ 2394.995631][T23035] usb 6-1: USB disconnect, device number 31
[ 2395.487160][T32589] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 2395.557222][T23035] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2395.727198][T32589] usb 5-1: Using ep0 maxpacket: 32
[ 2395.807999][T23035] usb 6-1: Using ep0 maxpacket: 32
[ 2395.847976][T32589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2395.865249][T32589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2395.877791][T32589] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2395.886984][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2395.899268][T32589] usb 5-1: config 0 descriptor??
[ 2395.937647][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2395.949654][T32589] hub 5-1:0.0: USB hub found
[ 2395.968792][T23035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2395.991433][T23035] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2396.004491][T23035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2396.020106][T23035] usb 6-1: config 0 descriptor??
[ 2396.058276][T23035] hub 6-1:0.0: USB hub found
[ 2396.167363][T32589] hub 5-1:0.0: 1 port detected
[ 2396.277306][T23035] hub 6-1:0.0: 1 port detected
[ 2396.777156][ T6373] tipc: TX() has been purged, node left!
[ 2396.820193][T23593] udc-core: couldn't find an available UDC or it's busy
[ 2396.828527][T23593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2396.927279][T32589] hub 6-1:0.0: activate --> -90
[ 2397.063924][T24361] usb 5-1: USB disconnect, device number 61
[ 2397.349224][T24361] usb 6-1: USB disconnect, device number 32
[ 2397.609654][T32589] usb 6-1-port1: config error
[ 2397.837193][T23034] usb 5-1: new high-speed USB device number 62 using dummy_hcd
23:27:59 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x1a9041)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:27:59 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000480))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:27:59 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf0030000}, &(0x7f0000000240)=0x54)

[ 2397.969254][T23731] IPVS: ftp: loaded support on port[0] = 21
[ 2398.087336][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2398.208005][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2398.230335][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2398.251909][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2398.272786][T23034] usb 5-1: config 0 descriptor??
[ 2398.297191][T32589] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2398.329573][T23034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:27:59 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4202, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10)

23:27:59 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:27:59 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:27:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2398.399981][T23034] usb 5-1: USB disconnect, device number 62
[ 2398.472728][T23731] IPVS: ftp: loaded support on port[0] = 21
23:27:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2398.557364][T32589] usb 6-1: Using ep0 maxpacket: 16
23:27:59 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2398.687530][T32589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2398.727695][T32589] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
23:27:59 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf4020000}, &(0x7f0000000240)=0x54)

[ 2398.759227][T32589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2398.782020][T32589] usb 6-1: config 0 descriptor??
23:27:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2398.839543][T32589] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2398.967219][T23034] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 2398.975462][T23823] IPVS: ftp: loaded support on port[0] = 21
[ 2399.041471][T32589] usb 6-1: USB disconnect, device number 33
[ 2399.234173][T23034] usb 5-1: Using ep0 maxpacket: 16
[ 2399.300540][T23823] IPVS: ftp: loaded support on port[0] = 21
[ 2399.357311][T23034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2399.383620][T23034] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2399.417897][T23034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2399.447976][T23034] usb 5-1: config 0 descriptor??
[ 2399.488360][T23034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2399.617203][T32589] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2399.696031][ T8107] usb 5-1: USB disconnect, device number 63
[ 2399.737154][ T6373] tipc: TX() has been purged, node left!
[ 2399.857334][T32589] usb 6-1: Using ep0 maxpacket: 32
[ 2399.907331][ T6373] tipc: TX() has been purged, node left!
[ 2399.977484][T32589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2399.988636][T32589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2400.000134][T32589] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2400.010150][T32589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2400.024600][T32589] usb 6-1: config 0 descriptor??
[ 2400.057315][ T6373] tipc: TX() has been purged, node left!
[ 2400.068647][T32589] hub 6-1:0.0: USB hub found
[ 2400.287316][T32589] hub 6-1:0.0: 1 port detected
[ 2400.297351][ T8107] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 2400.547229][ T8107] usb 5-1: Using ep0 maxpacket: 32
[ 2400.678188][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2400.689298][ T8107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2400.699780][ T8107] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2400.711000][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2400.723525][ T8107] usb 5-1: config 0 descriptor??
[ 2400.778356][ T8107] hub 5-1:0.0: USB hub found
[ 2400.937288][T32589] hub 6-1:0.0: activate --> -90
[ 2400.997457][ T8107] hub 5-1:0.0: 1 port detected
[ 2401.362665][T19775] usb 6-1: USB disconnect, device number 34
[ 2401.617325][T32589] usb 6-1-port1: config error
[ 2401.667333][ T8107] hub 5-1:0.0: activate --> -90
23:28:03 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:28:03 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:28:03 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0xfffffffffffffc76)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:28:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2402.093896][T32589] usb 5-1: USB disconnect, device number 64
[ 2402.348459][ T8107] usb 5-1-port1: config error
[ 2402.377269][T31468] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2402.487183][  T323] tipc: TX() has been purged, node left!
[ 2402.617288][T31468] usb 6-1: Using ep0 maxpacket: 16
[ 2402.737511][T31468] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2402.757727][T31468] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2402.772721][T31468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.785975][T31468] usb 6-1: config 0 descriptor??
[ 2402.832835][T31468] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2402.867259][T32589] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 2403.035777][T19772] usb 6-1: USB disconnect, device number 35
[ 2403.107217][T32589] usb 5-1: Using ep0 maxpacket: 16
[ 2403.228012][T32589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2403.257131][T32589] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2403.266198][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2403.290091][T32589] usb 5-1: config 0 descriptor??
[ 2403.328438][T32589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2403.535531][ T8107] usb 5-1: USB disconnect, device number 65
23:28:04 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:28:04 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xf6030000}, &(0x7f0000000240)=0x54)

23:28:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

23:28:04 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000200)=""/233)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2403.600316][T19772] usb 6-1: new high-speed USB device number 36 using dummy_hcd
23:28:04 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

23:28:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2403.725460][T23969] IPVS: ftp: loaded support on port[0] = 21
[ 2403.867208][T19772] usb 6-1: Using ep0 maxpacket: 32
23:28:05 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2403.987580][T19772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2404.048149][ T8107] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 2404.063552][T19772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2404.124883][T19772] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
23:28:05 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2404.165943][T19772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2404.184215][T19772] usb 6-1: config 0 descriptor??
[ 2404.235116][T19772] hub 6-1:0.0: USB hub found
[ 2404.317272][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2404.367236][T31468] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 2404.431202][T23969] IPVS: ftp: loaded support on port[0] = 21
[ 2404.437367][T19772] hub 6-1:0.0: 1 port detected
[ 2404.442956][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2404.479755][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2404.496724][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2404.512414][ T8107] usb 5-1: config 0 descriptor??
[ 2404.558481][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2404.607429][T31468] usb 1-1: Using ep0 maxpacket: 16
[ 2404.727500][T31468] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2404.746860][T31468] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2404.767140][T31468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2404.774949][ T8107] usb 5-1: USB disconnect, device number 66
[ 2404.786895][T31468] usb 1-1: config 0 descriptor??
[ 2404.878408][T31468] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2405.097433][T19772] hub 6-1:0.0: activate --> -90
[ 2405.298022][T24008] udc-core: couldn't find an available UDC or it's busy
[ 2405.305214][T24008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2405.387447][ T8107] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 2405.477218][  T323] tipc: TX() has been purged, node left!
[ 2405.520941][T19775] usb 6-1: USB disconnect, device number 36
[ 2405.637235][  T323] tipc: TX() has been purged, node left!
[ 2405.657295][ T8107] usb 5-1: Using ep0 maxpacket: 16
[ 2405.790459][T19772] usb 6-1-port1: config error
[ 2405.799222][ T8107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2405.814370][ T8107] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2405.825444][ T8107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2405.835493][ T8107] usb 5-1: config 0 descriptor??
[ 2405.880913][ T8107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
23:28:07 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})

23:28:07 executing program 3:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
tkill(r0, 0x15)

23:28:07 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:28:07 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xfa030000}, &(0x7f0000000240)=0x54)

[ 2406.073702][T24073] IPVS: ftp: loaded support on port[0] = 21
23:28:07 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:28:07 executing program 1 (fault-call:7 fault-nth:0):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2406.412212][T24107] FAULT_INJECTION: forcing a failure.
[ 2406.412212][T24107] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2406.413481][T24073] IPVS: ftp: loaded support on port[0] = 21
[ 2406.425992][T24107] CPU: 1 PID: 24107 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0
[ 2406.426002][T24107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2406.426016][T24107] Call Trace:
[ 2406.455309][T24107]  dump_stack+0x18f/0x20d
[ 2406.460055][T24107]  should_fail.cold+0x5/0x14
[ 2406.464849][T24107]  __alloc_pages_nodemask+0x1db/0x2a20
[ 2406.470412][T24107]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[ 2406.476406][T24107]  ? warn_alloc+0x120/0x120
[ 2406.480916][T24107]  ? find_held_lock+0x2d/0x110
[ 2406.485684][T24107]  ? count_memcg_event_mm.part.0+0x20b/0x3c0
[ 2406.491669][T24107]  ? lock_downgrade+0x820/0x820
[ 2406.496612][T24107]  alloc_pages_vma+0xdd/0x720
[ 2406.501303][T24107]  handle_mm_fault+0x27b0/0x45e0
[ 2406.506420][T24107]  ? apply_to_existing_page_range+0x40/0x40
[ 2406.512319][T24107]  ? vmacache_update+0xce/0x140
[ 2406.517358][T24107]  do_user_addr_fault+0x598/0xbf0
[ 2406.522607][T24107]  exc_page_fault+0xab/0x170
[ 2406.527198][T24107]  ? asm_exc_page_fault+0x8/0x30
[ 2406.532216][T24107]  asm_exc_page_fault+0x1e/0x30
[ 2406.537273][T24107] RIP: 0033:0x40b57d
[ 2406.541158][T24107] Code: Bad RIP value.
[ 2406.545219][T24107] RSP: 002b:00007f2ebe609070 EFLAGS: 00010202
[ 2406.551287][T24107] RAX: 000000000040b570 RBX: 000000000050b040 RCX: 0000000000000000
[ 2406.559326][T24107] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000006
[ 2406.567492][T24107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2406.575554][T24107] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000007
[ 2406.583539][T24107] R13: 0000000000000c4d R14: 00000000004ce8d2 R15: 00007f2ebe60b6d4
[ 2406.597555][ T8107] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2406.613244][T24107] syz-executor.1 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000
[ 2406.649887][T24107] CPU: 1 PID: 24107 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0
[ 2406.659924][T24107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2406.669997][T24107] Call Trace:
[ 2406.673309][T24107]  dump_stack+0x18f/0x20d
[ 2406.677751][T24107]  dump_header+0x106/0x60f
[ 2406.682379][T24107]  out_of_memory.cold+0xf/0x182
[ 2406.687276][T24107]  ? mem_cgroup_size+0x50/0x50
[ 2406.692091][T24107]  ? oom_killer_disable+0x270/0x270
[ 2406.697473][T24107]  ? mutex_trylock+0x246/0x2c0
[ 2406.702283][T24107]  ? pagefault_out_of_memory+0xed/0x11c
[ 2406.707855][T24107]  pagefault_out_of_memory+0x109/0x11c
[ 2406.713486][T24107]  ? out_of_memory+0x1340/0x1340
[ 2406.718485][T24107]  mm_fault_error+0x123/0x380
[ 2406.723203][T24107]  do_user_addr_fault+0x5f8/0xbf0
[ 2406.728260][T24107]  exc_page_fault+0xab/0x170
[ 2406.732877][T24107]  ? asm_exc_page_fault+0x8/0x30
[ 2406.737842][T24107]  asm_exc_page_fault+0x1e/0x30
[ 2406.742711][T24107] RIP: 0033:0x40b57d
[ 2406.746613][T24107] Code: Bad RIP value.
[ 2406.750690][T24107] RSP: 002b:00007f2ebe609070 EFLAGS: 00010202
[ 2406.756770][T24107] RAX: 000000000040b570 RBX: 000000000050b040 RCX: 0000000000000000
[ 2406.764913][T24107] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000006
[ 2406.772998][T24107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2406.781116][T24107] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000007
[ 2406.789264][T24107] R13: 0000000000000c4d R14: 00000000004ce8d2 R15: 00007f2ebe60b6d4
23:28:07 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ffffffff000000000001090224000100000000090400000003000000097a52d7500122000009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={<r7=>r6})
sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000f70300042cbd7000fbdbdf2507000000070000002e2f66696c65302e2f66696c653000008fa1af1e03ff781537aee95e79fe6dc928fd38fd8a4dc9199ae5f39ca2193c6c9934d2410466c46907829cb5752296c47496bc9325d5c2216afff9b9ded7900fe1b22f7dd4c2114a401a95a181e130d7def9baf54a96b8638aa41c757dd53e412448c743b2cb4504f42b14f86bc5dffcc5667f594a5ed1d2826b5a0db082d593d93502a597870ad2a74fb9f49b2c5427273a8cd531a5680f28fb3c90eeb69b82175efa726914afdb618e315365d76a6c366561e71e8cfc258b09c877a1fb81132df8b2e7"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="006500060000005e9f"], 0x0, 0x0, 0x0, 0x0})
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)

[ 2406.829793][T32589] usb 5-1: USB disconnect, device number 67
23:28:07 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0xffffffff}, &(0x7f0000000240)=0x54)

[ 2406.938082][T24107] Mem-Info:
[ 2406.939651][ T8107] usb 6-1: Using ep0 maxpacket: 16
[ 2406.941393][T24107] active_anon:139389 inactive_anon:6206 isolated_anon:0
[ 2406.941393][T24107]  active_file:11397 inactive_file:67641 isolated_file:0
[ 2406.941393][T24107]  unevictable:0 dirty:144 writeback:0
[ 2406.941393][T24107]  slab_reclaimable:21463 slab_unreclaimable:102692
[ 2406.941393][T24107]  mapped:63038 shmem:6434 pagetables:1764 bounce:0
[ 2406.941393][T24107]  free:1151821 free_pcp:437 free_cma:0
[ 2406.985112][T24107] Node 0 active_anon:557556kB inactive_anon:24824kB active_file:45448kB inactive_file:270564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:252152kB dirty:576kB writeback:0kB shmem:25736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 505856kB writeback_tmp:0kB kernel_stack:10368kB all_unreclaimable? no
[ 2407.034457][T24140] IPVS: ftp: loaded support on port[0] = 21
[ 2407.048303][T24107] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no
23:28:08 executing program 0 (fault-call:7 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2407.094729][T31468] usb 1-1: USB disconnect, device number 124
[ 2407.127578][ T8107] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2407.133418][T24107] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2407.179315][ T8107] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2407.227953][ T8107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2407.277411][ T8107] usb 6-1: config 0 descriptor??
[ 2407.327320][T32589] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 2407.334919][T24107] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2407.359207][ T8107] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
23:28:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2407.384867][T24107] Node 0 DMA32 free:823304kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:556224kB inactive_anon:31124kB active_file:45448kB inactive_file:270564kB unevictable:0kB writepending:576kB present:3129332kB managed:2578208kB mlocked:0kB pagetables:7500kB bounce:0kB free_pcp:640kB local_pcp:344kB free_cma:0kB
[ 2407.553321][T24107] lowmem_reserve[]: 0 0 0 0 0
[ 2407.567496][ T8107] usb 6-1: USB disconnect, device number 37
[ 2407.577124][T32589] usb 5-1: Using ep0 maxpacket: 16
[ 2407.606529][T24107] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
23:28:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0)

[ 2407.686412][T24140] IPVS: ftp: loaded support on port[0] = 21
[ 2407.697854][T32589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2407.745941][T32589] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[ 2407.787296][T24107] lowmem_reserve[]: 0 0 0 0 0
[ 2407.805580][T24107] Node 1 Normal free:3761604kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2407.846320][T32589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2407.900138][T24107] lowmem_reserve[]: 0 0 0 0 0
[ 2407.905232][T24107] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[ 2407.907549][T32589] usb 5-1: config 0 descriptor??
23:28:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3, 0x0, 0x0, 0x0)

[ 2407.983777][T24107] Node 0 DMA32: 1483*4kB (UME) 173*8kB (UE) 7*16kB (ME) 507*32kB (UME) 180*64kB (UM) 158*128kB (UM) 45*256kB (UME) 18*512kB (ME) 12*1024kB (UM) 5*2048kB (UM) 175*4096kB (UM) = 815460kB
[ 2408.028278][T32589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2408.070137][T24107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2408.121786][T24107] Node 1 Normal: 97*4kB (UME) 222*8kB (UME) 193*16kB (UME) 84*32kB (UME) 43*64kB (UME) 22*128kB (UM) 7*256kB (U) 3*512kB (UE) 1*1024kB (M) 2*2048kB (ME) 913*4096kB (M) = 3761604kB
[ 2408.157230][ T8107] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 2408.223899][T24107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2408.250967][T32589] usb 5-1: USB disconnect, device number 68
[ 2408.293111][T24107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2408.319669][T24107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2408.351554][T24107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2408.383468][T24107] 59066 total pagecache pages
[ 2408.403392][T24107] 0 pages in swap cache
[ 2408.408554][T24107] Swap cache stats: add 0, delete 0, find 0/0
[ 2408.414625][T24107] Free swap  = 0kB
[ 2408.426068][T24107] Total swap = 0kB
[ 2408.432048][T24107] 1965979 pages RAM
[ 2408.435859][T24107] 0 pages HighMem/MovableOnly
[ 2408.447304][ T8107] usb 6-1: Using ep0 maxpacket: 32
[ 2408.455167][T24107] 349900 pages reserved
[ 2408.465694][T24107] 0 pages cma reserved
[ 2408.481674][T24107] Out of memory and no killable processes...
[ 2408.501407][T24107] Kernel panic - not syncing: System is deadlocked on memory
[ 2408.508803][T24107] CPU: 1 PID: 24107 Comm: syz-executor.1 Not tainted 5.8.0-rc4-next-20200710-syzkaller #0
[ 2408.518691][T24107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2408.528748][T24107] Call Trace:
[ 2408.532045][T24107]  dump_stack+0x18f/0x20d
[ 2408.536467][T24107]  panic+0x2e3/0x75c
[ 2408.540368][T24107]  ? __warn_printk+0xf3/0xf3
[ 2408.544974][T24107]  ? out_of_memory.cold+0x95/0x182
[ 2408.550124][T24107]  out_of_memory.cold+0xa6/0x182
[ 2408.555071][T24107]  ? mem_cgroup_size+0x50/0x50
[ 2408.559847][T24107]  ? oom_killer_disable+0x270/0x270
[ 2408.565050][T24107]  ? mutex_trylock+0x246/0x2c0
[ 2408.569808][T24107]  ? pagefault_out_of_memory+0xed/0x11c
[ 2408.575385][T24107]  pagefault_out_of_memory+0x109/0x11c
[ 2408.580847][T24107]  ? out_of_memory+0x1340/0x1340
[ 2408.585794][T24107]  mm_fault_error+0x123/0x380
[ 2408.590472][T24107]  do_user_addr_fault+0x5f8/0xbf0
[ 2408.595505][T24107]  exc_page_fault+0xab/0x170
[ 2408.600097][T24107]  ? asm_exc_page_fault+0x8/0x30
[ 2408.605033][T24107]  asm_exc_page_fault+0x1e/0x30
[ 2408.609876][T24107] RIP: 0033:0x40b57d
[ 2408.613776][T24107] Code: Bad RIP value.
[ 2408.617838][T24107] RSP: 002b:00007f2ebe609070 EFLAGS: 00010202
[ 2408.623897][T24107] RAX: 000000000040b570 RBX: 000000000050b040 RCX: 0000000000000000
[ 2408.631866][T24107] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000006
[ 2408.639832][T24107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2408.647795][T24107] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000007
[ 2408.655764][T24107] R13: 0000000000000c4d R14: 00000000004ce8d2 R15: 00007f2ebe60b6d4
[ 2408.665241][T24107] Kernel Offset: disabled
[ 2408.669675][T24107] Rebooting in 86400 seconds..