ink becomes ready [ 409.652342][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.741006][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.750618][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.782252][T10325] device veth0_vlan entered promiscuous mode [ 409.791369][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.800577][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.849787][T10325] device veth1_vlan entered promiscuous mode [ 409.941735][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.952041][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.982896][T10325] device veth0_macvtap entered promiscuous mode [ 410.010471][T10325] device veth1_macvtap entered promiscuous mode [ 410.065402][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 410.076648][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.087140][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 410.097688][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.107655][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 410.118210][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.128186][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 410.138729][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.152924][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.163640][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.173185][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.183114][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.193120][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.222327][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 410.234429][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.244527][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 410.255129][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.265155][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 410.275752][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.285776][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 410.296425][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.310575][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.321329][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.331814][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:25:56 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:25:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x932c2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) 17:25:56 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="74726105003d66642c7266646eef3d", @ANYRESHEX=r1, @ANYBLOB="7709000000d40576a63800462bbf53a376aeb91ef07d1a658f92b92b3efe454dba025533cb85334e697274228fe6c4290fcf11f338ee80670d0417", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r2 = openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x478802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) write$char_usb(r2, &(0x7f0000000180)="124067e48da6c716f578bc27ecf13fdd06294d274b9ba250032d8bac80d6468421bfae145624b1c14e246f48de496a036b8dacc679f1e62d67110546103f41c1f9ebbdc055d618401d0002c82e349937957b349e1ce0a1bf558f96963c46bfa2bf1073ffea5d152090b6b603c7a29bad26ad11da6da5e858a9848339fd93253e410be052a179729b37e7883add95d70ecc8f71bdb96a56109853de98bba3f24580d6983ea95fbb9c4444f374d0883d425d4f5ee8c8", 0xb5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) 17:25:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') r6 = socket(0x400020000000010, 0x803, 0x0) write(r6, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x0, {0xb}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}]}, 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x9, @ipv4={[0x0, 0x2], [], @local}}]}, 0x40}}, 0x0) 17:25:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x0, 'pids'}, {0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x15) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x4, 0x0, 0x200000000041c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x20}, 0x20, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, r1, 0xe}, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @sco, @ax25={0x3, @bcast, 0x2}, @ax25={0x3, @bcast, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='ipvlan1\x00', 0x0, 0x1fe, 0x4}) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x9, 0x3f, 0x4, 0x6}, {0xcb1, 0x7, 0x9, 0x9}, {0x1f, 0x9, 0xff}, {0x0, 0x8, 0x80, 0x20}, {0x6, 0x5, 0x5, 0x81}]}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{}, "fb40ba8936c9f99c", "9d738942966e9c71caa531d405d080ec", "6431e156", "4a6e1029cea18e59"}, 0x28) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000140)={0x80000001, 0xffffffff, 0x1}) [ 411.170938][ T9843] Bluetooth: hci4: command 0x040f tx timeout [ 411.177533][ T29] audit: type=1400 audit(1597512356.953:21): avc: denied { create } for pid=10596 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 411.296448][T10599] vcan0: Master is either lo or non-ether device [ 411.359650][T10600] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.403796][ T29] audit: type=1400 audit(1597512357.183:22): avc: denied { name_bind } for pid=10602 comm="syz-executor.4" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 411.427374][ T29] audit: type=1400 audit(1597512357.183:23): avc: denied { node_bind } for pid=10602 comm="syz-executor.4" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 17:25:57 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 411.724714][ T29] audit: type=1400 audit(1597512357.253:24): avc: denied { name_connect } for pid=10602 comm="syz-executor.4" dest=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 17:25:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 17:25:57 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x205, 0x4) 17:25:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001eb59183f7ab6d532600e6d74ef1f38faa0"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="0000000073630000000008000200"/27], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="245e422033850f00002800270d00000000000000", @ANYRES32=r5, @ANYBLOB="0400001d0000000000010000"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@mpls_newroute={0x44, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x90, 0x87, 0xfe, 0x0, 0xff, 0x5, 0xe00}, [@RTA_MULTIPATH={0xc, 0x9, {0x9d, 0x30, 0x34}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x0, 0x8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x1ab202) getsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000040)={@remote, @initdev}, &(0x7f0000000080)=0x8) [ 412.016882][T10608] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.182688][T10616] vcan0: Master is either lo or non-ether device 17:25:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010de1e0c01121800160013003f0b0000", @ANYRES32, @ANYBLOB="0000000001000037280012800a00010076786c616e00000018000280140007"], 0x3}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x4, &(0x7f0000000080)=[{0xb1, 0x0, 0x0, 0x5b5}, {0x6}, {0xfff, 0x7, 0x20}, {0x8001, 0xe4, 0xa6, 0xfff}]}, 0x8) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffd88) 17:25:58 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:25:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x27, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba0000000a2e0b3836005404b0e030bec30000f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbfdf4e332f1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)={0x5, 0xb8a, 0x800, 0x8, 0x41, 0xffffffffffffffff, 0x0, [], r1, 0xffffffffffffffff, 0x3}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r2, &(0x7f0000001140), &(0x7f0000000080)=""/4096}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f00000014c0)=0xfffffffc) splice(r2, &(0x7f0000000040)=0x42, r3, &(0x7f00000010c0)=0x1, 0x7f, 0x7) openat$thread_pidfd(0xffffff9c, &(0x7f0000001140)='/proc/thread-self\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r4, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f00000011c0)={0x3, 0x1, 0xa, 0x13, 0xdb, &(0x7f0000001500)}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001200)=@newlink={0xa8, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb6d7cda7742d567f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "01d626ea1e5373d853b739ae918637f9"}, @IFLA_PORT_VF={0x8, 0x1, 0x7e5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7da682847a79416850964e35b13c2004"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bbb7e46c29059aa1079dc4185c7b6208"}]}]}, 0xa8}}, 0x4000000) [ 412.668549][ T9843] usb 4-1: new full-speed USB device number 6 using dummy_hcd 17:25:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/178) [ 412.891804][T10632] vcan0: Master is either lo or non-ether device [ 412.940857][ T9843] usb 4-1: device descriptor read/64, error 18 17:25:58 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 413.248702][ T9087] Bluetooth: hci4: command 0x0419 tx timeout [ 413.333939][ T9843] usb 4-1: device descriptor read/64, error 18 17:25:59 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174070404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000100)) 17:25:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x80, 0xf2fe, 0x1, 0x1, 0x5, 0xfffffffb, 0x4, 0x10001, 0xfffffffc, 0x82, 0x966, 0x201, 0x1, 0x6, 0x1, 0x10, {0x8, 0x40000000}, 0xff, 0x9d}}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 413.515005][T10644] vcan0: Master is either lo or non-ether device [ 413.608169][ T9843] usb 4-1: new full-speed USB device number 7 using dummy_hcd 17:25:59 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 413.879666][ T9843] usb 4-1: device descriptor read/64, error 18 17:25:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x1, 0x6, 0x29, 0x0, 0x9, 0x19810, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x100000000, 0x3}, 0x401, 0x6, 0x3, 0x4, 0x0, 0xd2, 0x3}, r1, 0xed2, r0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x44040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000000c0)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) [ 413.978528][T10650] FAT-fs (loop4): bogus logical sector size 1031 [ 413.985015][T10650] FAT-fs (loop4): Can't find a valid FAT filesystem [ 414.070620][T10653] FAT-fs (loop4): bogus logical sector size 1031 [ 414.077085][T10653] FAT-fs (loop4): Can't find a valid FAT filesystem [ 414.270290][ T9843] usb 4-1: device descriptor read/64, error 18 [ 414.388590][ T9843] usb usb4-port1: attempt power cycle [ 414.510711][T10660] vcan0: Master is either lo or non-ether device [ 415.218031][ T9843] usb 4-1: new full-speed USB device number 8 using dummy_hcd 17:26:01 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0x4e}}, {@resize='resize'}]}) 17:26:01 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x8101) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x5000, 0x10000, 0x3, 0x6, 0x3f, 0x8, 0x5, 0x1f, 0x0, 0x1, 0x9, 0xfa}, {0x0, 0x4, 0xb, 0x49, 0xcc, 0x9, 0x7, 0x9, 0x9d, 0x80, 0x2, 0x9}, {0xf000, 0x1000, 0xf, 0x8, 0x2, 0x2, 0x2, 0x32, 0x20, 0x3, 0x88, 0x80}, {0x2000, 0x6000, 0x4, 0x1f, 0x1, 0x7, 0x80, 0x3, 0x81, 0x0, 0x9, 0x4}, {0xf000, 0x100000, 0x4, 0x52, 0x73, 0x4, 0x57, 0x6, 0x9, 0xaf, 0x7f, 0x1}, {0x4000, 0xf000, 0xa, 0x6, 0xb7, 0x2, 0x40, 0x0, 0x40, 0x8, 0x40, 0x2}, {0x1000, 0x2000, 0xb, 0x9, 0x3, 0xe2, 0xc0, 0x1, 0x0, 0x4, 0xd7, 0x7}, {0x10000, 0x1000, 0x8, 0x3, 0x14, 0x9, 0x1f, 0x86, 0xff, 0xc7, 0x10, 0x3f}, {0x4000, 0xff}, {0x4}, 0x40000016, 0x0, 0xf000, 0x4400, 0xb, 0x2100, 0x0, [0x0, 0x1, 0x5, 0xcba]}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000080)="507073d2870699999cc30a98bb828581192b2ddc80511561a87146290eac84e1463841062235de380bd019383f18e335d8c05af23b3c52b89e899dab48192f2c", 0x40, 0x40, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xc9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 17:26:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x418105, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:01 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 415.351097][ T9843] usb 4-1: device descriptor read/8, error -71 [ 415.558991][ T9843] usb 4-1: device descriptor read/8, error -71 [ 415.576532][T10671] device ipvlan2 entered promiscuous mode [ 415.587151][T10671] bridge0: port 3(ipvlan2) entered blocking state [ 415.593920][T10671] bridge0: port 3(ipvlan2) entered disabled state 17:26:01 executing program 0: r0 = socket(0x400020000000010, 0x803, 0x0) write(r0, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000001c0)={0x1, 0x2, [@dev={[], 0x37}, @remote]}) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x3f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x664b19aa40a57f09, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, 0x0) 17:26:01 executing program 4: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x82, &(0x7f0000000380)=0x0) io_submit(r1, 0x6aa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r0, &(0x7f0000000000), 0x1e}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000241e07050000004003a2a30018891a152ed2cc9cc7a2e08f03f2000000000000000000000000156c11", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7ff}]}}]}, 0x3c}}, 0x0) 17:26:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x43d, 0x70bd27}, 0x20}}, 0x20000080) 17:26:02 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 416.618170][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.639370][T10690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7716 sclass=netlink_route_socket pid=10690 comm=syz-executor.4 [ 416.717808][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.732456][T10696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7716 sclass=netlink_route_socket pid=10696 comm=syz-executor.4 17:26:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xffffffff, 0x3, 0x1, 0xe3ea, 0x4, 0x7, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) write$P9_RATTACH(r1, &(0x7f0000000300)={0x14, 0x69, 0x1, {0x90, 0x1, 0x4}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x30, r3, 0xc01, 0x0, 0x0, {{}, {0x0, 0x3fff}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44842}, 0x400c0e0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x44}}, 0x0) 17:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x32282, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) r3 = socket(0x400020000000010, 0x803, 0x0) write(r3, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10048080}, 0x40800) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f00000000c0)={0x598f, 0xc, 0x4, 0x102020, 0xffffffff, {0x77359400}, {0x7, 0x1, 0x2, 0xe8, 0x3f, 0x5f, "d260f104"}, 0x8, 0x0, @planes=&(0x7f0000000080)={0x1, 0x94e, @userptr=0x2, 0x20}, 0xffffffff, 0x0, r2}) 17:26:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf3d72) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_REPORTZONE(r2, 0xc0101282, &(0x7f0000000080)={0x7fd1462d, 0x1, 0x0, [{0x0, 0x7fff, 0x10000, 0x9, 0x0, 0xff}]}) [ 417.141417][T10699] device ipvlan2 entered promiscuous mode [ 417.151942][T10699] bridge0: port 3(ipvlan2) entered blocking state [ 417.158653][T10699] bridge0: port 3(ipvlan2) entered disabled state 17:26:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x1, 0x6, 0x29, 0x0, 0x9, 0x19810, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x100000000, 0x3}, 0x401, 0x6, 0x3, 0x4, 0x0, 0xd2, 0x3}, r1, 0xed2, r0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x44040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000000c0)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 17:26:04 executing program 3: r0 = gettid() tkill(r0, 0x14) r1 = gettid() tkill(r1, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) clone3(&(0x7f0000000380)={0x221200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x11}, &(0x7f0000000100)=""/94, 0x5e, &(0x7f00000002c0)=""/144, &(0x7f0000000180)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x3, {r2}}, 0x58) tgkill(r0, r3, 0xc) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @pix={0x0, 0xe7}}) 17:26:04 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80800) sendmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x80, 0x0}}], 0x1, 0x0) fanotify_init(0x20, 0x8000) 17:26:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x8002, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 418.858554][T10724] device ipvlan2 entered promiscuous mode [ 418.869160][T10724] bridge0: port 3(ipvlan2) entered blocking state [ 418.875785][T10724] bridge0: port 3(ipvlan2) entered disabled state 17:26:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) ioctl$NBD_DISCONNECT(r0, 0xab08) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) flistxattr(r1, &(0x7f0000000440)=""/4096, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0) 17:26:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80800) sendmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x80, 0x0}}], 0x1, 0x0) fanotify_init(0x20, 0x8000) 17:26:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x1, 0x6, 0x29, 0x0, 0x9, 0x19810, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x100000000, 0x3}, 0x401, 0x6, 0x3, 0x4, 0x0, 0xd2, 0x3}, r1, 0xed2, r0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x44040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000000c0)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 17:26:05 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 420.346498][T10746] vcan0: Master is either lo or non-ether device 17:26:06 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 420.870004][T10749] vcan0: Master is either lo or non-ether device 17:26:06 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 421.326315][T10753] vcan0: Master is either lo or non-ether device 17:26:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xa0000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000380)={r1, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000200)={r1, 0x1}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={r1, 0x4}) 17:26:07 executing program 3: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe4) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48f9ad23bc75610530e03bc1d2000000", @ANYRES16=r0, @ANYBLOB="000129bd7000fcdbdf25050000003400038014000200766c616e300000000000000000000000050008000500000014000600fc010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, r2, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4000) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x220280, 0x0) fsetxattr$security_capability(r5, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0xc) 17:26:07 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:07 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaac7b7fdcb0086dd60ddce0a00102f00fe800000000000000000000000000000fe8000000000000000000000000000aa00000800000000008f0090943741843c78d461ed3f780000000047740c5c29ae8605c722515b0515acf10b3d174e41c76ee32770c5e6d2f182395f94bbefd0448cb160d06598d3edcca22121a7e71a08b177d66bec4e67fa604c6fb883124c33c807df2bb85b476b437e819cc28f35493b12213526eff68c55eacb924fc858b53129bcf37d24fdda7d1609acf9114c25ead2aa05b6c260aac2a3113c070dbf3f"], 0x0) getrusage(0x0, &(0x7f0000000440)) r0 = socket(0x400020000000010, 0x803, 0x0) write(r0, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) r6 = dup3(r4, r5, 0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r6, 0x3309) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e24, 0x5927b95a, @dev={0xfe, 0x80, [], 0x2c}, 0x9}}, 0x0, 0x4}, &(0x7f0000000240)=0x88) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x3fff}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000011}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r8, @ANYBLOB="000428bd7000fedbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008000) [ 422.160449][T10759] device ipvlan2 entered promiscuous mode [ 422.171952][T10759] bridge0: port 3(ipvlan2) entered blocking state [ 422.178673][T10759] bridge0: port 3(ipvlan2) entered disabled state 17:26:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00800000ffffffff00000100686690630000000008000200000058be7e"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0400000000000000000000000a0001007273807036000000180002001400020000000000000400000000ffff7f000001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x200480c4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500008d017d79ab98b5d28b042b000702000c002c"], 0x15) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7f, 0x401}) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x0, 0x1000}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 422.263327][T10764] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 423.018045][T10764] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 423.161782][T10767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.179196][T10767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.187051][T10767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.296701][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.322554][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.353878][T10781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.371898][T10781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.381313][T10781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:26:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x4, 0x7}, 0xfffffffffffffe4d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 17:26:09 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="070580a2004007a2a30060eb0800000000000080", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000400)={0x2, 0x2, @stop_pts=0x7}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002800270f00"/20, @ANYRES32=r7, @ANYBLOB="040039000000000000000000"], 0x24}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@allocspi={0x144, 0x16, 0x820, 0x70bd2d, 0x25dfdbfe, {{{@in6=@loopback, @in=@private=0xa010102, 0x4e20, 0x1, 0x4e23, 0x6, 0xa, 0x80, 0x80, 0x32, r7, r9}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@multicast2, {0xffff, 0x0, 0x0, 0x11, 0x2, 0x63d, 0x7dfd, 0xbf06}, {0x0, 0x0, 0x6, 0x6}, {0x1, 0x9, 0xfffffff9}, 0x70bd2b, 0x3501, 0xa, 0x4, 0x4}, 0xb28, 0x8001}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40008}, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 424.234130][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 424.334645][T10797] device ipvlan2 entered promiscuous mode [ 424.345285][T10797] bridge0: port 3(ipvlan2) entered blocking state [ 424.352091][T10797] bridge0: port 3(ipvlan2) entered disabled state 17:26:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x1, 0x6, 0x29, 0x0, 0x9, 0x19810, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x100000000, 0x3}, 0x401, 0x6, 0x3, 0x4, 0x0, 0xd2, 0x3}, r1, 0xed2, r0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x44040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000000c0)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 17:26:10 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dee5e340ca0404300000000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000002200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x0, 0xc, 0x29, {0x29, 0x8, "ab24c214031504bae3edb337b71caf08f7b8b6c8b80788f591fb71ce3be17b4c94c522fa9fd7ce"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f00000003c0)={0x24, &(0x7f0000000180)={0x20, 0xa, 0x9e, "1a70ee0e153ef0e56c5c3ec0b0c993b221605eed3a57fea7932bf75d48a297938583c5fff47dc5c8b5b91ee7ab9b4cffc947e50470b0fb58ead08fef47f300096aebd801b2f55966aa08f036ba3ffad80661bfb97fa9938464c89d5dcf25570f40b69c09d50c9ba4fec32e60d08de91382737b19a4fcaedb612568efa8d7cc4f739c9577d6343092b78010bbc7f7b54d1693eb8322ce54857ee31ff89790"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x3, "47fa75"}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "7a1e3e"}, &(0x7f0000000300)={0x20, 0x83, 0x2, '\\L'}, &(0x7f0000000340)={0x20, 0x84, 0x3, "6da6ae"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "7f7b23"}}) 17:26:10 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xffffffffffffff84) [ 425.218037][ T9087] usb 4-1: new high-speed USB device number 10 using dummy_hcd 17:26:11 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0xae3a2000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x401, 0x0) getpeername$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10) dup2(r2, r3) [ 425.526424][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.578532][ T9087] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 425.589000][ T9087] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.736482][ T29] audit: type=1804 audit(1597512371.514:25): pid=10825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir207877140/syzkaller.PH3Hl0/43/bus" dev="sda1" ino=15971 res=1 [ 425.802097][ T9087] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.812404][ T9087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.820775][ T9087] usb 4-1: Product: syz [ 425.825099][ T9087] usb 4-1: Manufacturer: syz [ 425.829959][ T9087] usb 4-1: SerialNumber: syz 17:26:11 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x430001, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 425.944276][ T29] audit: type=1804 audit(1597512371.724:26): pid=10829 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir207877140/syzkaller.PH3Hl0/43/bus" dev="sda1" ino=15971 res=1 [ 426.124993][ T29] audit: type=1804 audit(1597512371.774:27): pid=10825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir207877140/syzkaller.PH3Hl0/43/bus" dev="sda1" ino=15971 res=1 [ 426.149739][ T29] audit: type=1804 audit(1597512371.774:28): pid=10826 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir207877140/syzkaller.PH3Hl0/43/bus" dev="sda1" ino=15971 res=1 [ 426.174541][ T29] audit: type=1804 audit(1597512371.834:29): pid=10825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir207877140/syzkaller.PH3Hl0/43/bus" dev="sda1" ino=15971 res=1 [ 426.181930][T10811] udc-core: couldn't find an available UDC or it's busy [ 426.206060][T10811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:26:12 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a9ff6bff0a000000ff45ac048000e93119000000000000bde3ffffffbf000000e100e2ff87770072003007000500000000000000008000da55aa00000000", 0x40, 0x1c0}]) [ 426.398117][ T9087] usb 4-1: cannot find UAC_HEADER [ 426.403942][ T9087] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 426.464966][ T9087] usb 4-1: USB disconnect, device number 10 [ 426.512655][T10839] device ipvlan2 entered promiscuous mode [ 426.523050][T10839] bridge0: port 3(ipvlan2) entered blocking state [ 426.529806][T10839] bridge0: port 3(ipvlan2) entered disabled state [ 426.710574][T10846] Dev loop1: unable to read RDB block 1 [ 426.716490][T10846] loop1: unable to read partition table [ 426.722559][T10846] loop1: partition table beyond EOD, truncated [ 426.728960][T10846] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 426.909856][T10846] Dev loop1: unable to read RDB block 1 [ 426.915720][T10846] loop1: unable to read partition table [ 426.921789][T10846] loop1: partition table beyond EOD, truncated [ 426.928229][T10846] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 427.127457][ T9087] usb 4-1: new high-speed USB device number 11 using dummy_hcd 17:26:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x25c, 0x110, 0x0, 0x0, 0x110, 0x0, 0x1c8, 0x198, 0x198, 0x1c8, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0x110, 0x0, {0xffffffffa0028000}, [@common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 17:26:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x420500, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r4, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000002c0)) splice(r2, &(0x7f0000000180)=0x5, r3, &(0x7f00000001c0)=0x7, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/igmp6\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0xda2a, 0x9}, @mss={0x2, 0x8}, @window={0x3, 0x1, 0x8}, @timestamp, @sack_perm], 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7000fcdbdf250500000024000180060005004e24000008000300e00000010600010002000000060001000200000008000300070000000800025b8001000008000200060000000800030005000000"], 0x58}}, 0x4004810) [ 427.489019][ T9087] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 427.499498][ T9087] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 17:26:13 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 427.699434][ T9087] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.709018][ T9087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.717155][ T9087] usb 4-1: Product: syz [ 427.721640][ T9087] usb 4-1: Manufacturer: syz [ 427.726476][ T9087] usb 4-1: SerialNumber: syz 17:26:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) fcntl$setflags(r0, 0x2, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000001f80)='/dev/dsp1\x00', 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000100)={[0x0, 0x4]}, 0x8, 0x80000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x3, 0xa7, 0x9, 0x9, 0x172}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x1, 0x8000, 0x6, 0x8000}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0xff, 0xba020000}, {0x6}]}, 0x5) fcntl$dupfd(r3, 0x406, r5) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r6}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x8}, &(0x7f0000000200)=0x8) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:26:13 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000011, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xa360, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 428.167771][ T9087] usb 4-1: can't set config #1, error -71 [ 428.214515][ T9087] usb 4-1: USB disconnect, device number 11 [ 428.384291][T10872] vcan0: Master is either lo or non-ether device [ 428.727044][T10874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.810224][T10874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.820379][T10874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:26:16 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0086418, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x3ff, 0x1, 0x616}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) 17:26:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffd2) write$cgroup_subtree(r2, 0x0, 0x200600) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000440)={0x0, 0xdfe, 0x5}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x608000, 0x140) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, [], 0x1}, 0x67b, 0x0, 0x3, 0x0, 0x7ff, 0x2}, &(0x7f0000000140)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 17:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x13, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x48}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 17:26:16 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f0000000240)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200800, 0x0) utimensat(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="550ac4b7", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfffff5d6) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="03c50000000000002800128009000100766c616e0000000018000280060001000000000004000380060005008100000008000500", @ANYRES32=r5, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="4fc218f53c668f7b43a34abd03799bf9b745e3a857f8322ea88083d8fecaac0e88450ef475d903effa938c441f454b1396b7f79fda9bc87d59b0fcc36de8d829e864e62b213ea73f883324c04fe17739c852f491bf8bc504380c7f0e5514"], 0x58}}, 0x0) [ 430.984133][T10894] vcan0: Master is either lo or non-ether device 17:26:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 431.272380][ T29] audit: type=1800 audit(1597512377.054:30): pid=10902 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15999 res=0 17:26:17 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 431.422757][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.442155][T10903] device vlan2 entered promiscuous mode [ 431.447855][T10903] device bond0 entered promiscuous mode [ 431.453457][T10903] device bond_slave_0 entered promiscuous mode [ 431.460435][T10903] device bond_slave_1 entered promiscuous mode 17:26:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0xa69}, 0x16, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="b805000000b9510000000f01c10f46a78900000066ba21003bb067673636642ef26eedb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f0066baf80cb8d21d0a8def66bafc0cec66b8bf008ee0", 0x5c}], 0x1, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r3, &(0x7f0000000400)='E', 0x1) keyctl$set_timeout(0xf, r3, 0x800) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3}, &(0x7f0000000180)=""/159, 0x9f, &(0x7f0000000340)={&(0x7f0000000240)={'sha256-avx2\x00'}, &(0x7f0000000280)="475c67b129c0dc9616e3d62f2f5a87dcdd4920c93a7ba911f329287d201294c9f199e642613b7b7e047d63b2fd83b7627fe20f29a1b0acc432491da8e0d2a46f7035a056fbc2f1db9ce47d985a9884c16c0fa347fc26cec5556b8c195f3d525961430e9c72db327de44f6266a4ace4da3bcabac2885cb0e24934004486f2812311d812b33660b7ea7e617b659f994f05e7b833580f058f81e28949949b8f4dc7ed20fa950ee2e162d4a346a29cc49dc1f2f19b94439643decda67fe23bb2e927", 0xc0}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r5, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L-', 0xed18}, 0x16, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:26:17 executing program 5: r0 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$BLKRRPART(r4, 0x125f, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x101, 0x4) recvfrom$x25(r4, &(0x7f00000001c0)=""/114, 0x72, 0x40010102, &(0x7f0000000240)={0x9, @null=' \x00'}, 0x12) r5 = openat$null(0xffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xb0182, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x3ff, 0x448000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000300)={0x40000000}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000340)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x10) r7 = accept4(0xffffffffffffffff, &(0x7f0000001840)=@nfc_llcp, &(0x7f00000018c0)=0x80, 0x800) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000001900)={{0x200, 0x3}, 0x34}, 0x10) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000001940)) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000001980)={0x0, 0x6, 0x7, 0x8000, 0x6}) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000001a00)=0x1f) 17:26:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000000)) syz_io_uring_setup(0x46e7, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x19}, 0x0) r5 = syz_io_uring_complete(r2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r8, 0x7fff}, &(0x7f0000000080)=0x8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 431.854154][T10915] vcan0: Master is either lo or non-ether device 17:26:17 executing program 4: 17:26:18 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x2, "ef0323fc546ca277cbf9598bcba43e4899564b633dc995fc5a4eacf43fab930d", 0x1, 0xdd, 0x0, 0x8, 0x2}) 17:26:18 executing program 1: [ 432.540791][T10940] vcan0: Master is either lo or non-ether device 17:26:18 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:18 executing program 4: 17:26:18 executing program 1: 17:26:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x100000000) 17:26:19 executing program 3: [ 433.244552][T10952] vcan0: Master is either lo or non-ether device 17:26:19 executing program 4: [ 434.547317][T10956] IPVS: ftp: loaded support on port[0] = 21 [ 435.008738][T10956] chnl_net:caif_netlink_parms(): no params data found [ 435.492516][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.499832][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.509612][T10956] device bridge_slave_0 entered promiscuous mode [ 435.642187][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.649848][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.659750][T10956] device bridge_slave_1 entered promiscuous mode [ 435.883592][T10956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.927601][T10956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.016527][T10956] team0: Port device team_slave_0 added [ 436.037050][T10956] team0: Port device team_slave_1 added [ 436.101853][T10956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.109319][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.135565][T10956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.231794][T10956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.239162][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.265530][T10956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.319247][T10956] device hsr_slave_0 entered promiscuous mode [ 436.327554][T10956] device hsr_slave_1 entered promiscuous mode [ 436.334813][T10956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.342575][T10956] Cannot create hsr debugfs directory [ 436.545956][T10095] Bluetooth: hci5: command 0x0409 tx timeout [ 436.560275][T10956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 436.581069][T10956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.602978][T10956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.629265][T10956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 436.834937][T10956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.875316][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.884175][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.901838][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.919191][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.928892][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.938352][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.945486][ T9843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.990114][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.998560][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.008328][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.018345][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.025447][ T9843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.034584][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.044526][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.060065][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.070462][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.084327][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.109167][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.119756][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.141380][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.150449][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.178658][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.188510][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.201611][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.242545][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.251803][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.276626][T10956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.385504][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.395428][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.443564][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.452580][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.472787][T10956] device veth0_vlan entered promiscuous mode [ 437.482729][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.492660][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.518776][T10956] device veth1_vlan entered promiscuous mode [ 437.572054][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.580764][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.590171][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.600108][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.619593][T10956] device veth0_macvtap entered promiscuous mode [ 437.640625][T10956] device veth1_macvtap entered promiscuous mode [ 437.679895][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 437.690999][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.701143][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 437.711788][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.721814][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 437.732956][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.742956][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 437.753539][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.763618][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 437.774299][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.787250][T10956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.799538][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.809186][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.818510][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.828323][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.847452][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 437.858068][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.868224][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 437.878788][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.888776][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 437.899385][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.909354][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 437.919915][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.929941][T10956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 437.940491][T10956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.954706][T10956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.965215][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.975422][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:26:24 executing program 5: 17:26:24 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:24 executing program 1: 17:26:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xfe5d, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x2, 0x2c86867b, 0x1000, 0x7fffffff, 0x3ff, 0xd40}) openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x260000, 0x0) 17:26:24 executing program 4: 17:26:24 executing program 3: [ 438.608882][T10095] Bluetooth: hci5: command 0x041b tx timeout [ 438.704419][T11201] vcan0: Master is either lo or non-ether device 17:26:24 executing program 4: 17:26:24 executing program 3: 17:26:24 executing program 1: 17:26:24 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000000)=0x101) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r2 = socket(0x400020000000010, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x4}, &(0x7f0000000080)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r8}, 0x8) r9 = socket(0x23, 0x2, 0x1000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x4}, 0x8) 17:26:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x134, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x400}, 0x90) [ 439.470378][T11214] vcan0: Master is either lo or non-ether device 17:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)="db", 0x1}], 0x2) 17:26:25 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/77) 17:26:25 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000000)={0xf8, 0x0, 0x1, 0x204}) 17:26:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16a, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda", 0x3}], 0x3, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 440.037721][T11229] new mount options do not match the existing superblock, will be ignored [ 440.137894][T11229] new mount options do not match the existing superblock, will be ignored [ 440.157073][T11234] vcan0: Master is either lo or non-ether device 17:26:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 17:26:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xb0, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e1652248973a4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b01647a0200169c864e1d5f8179cba2e43112cfb22fcd74713b3c6d706a8a25ca8ee0592538cb4000000084395a80adbe3e983622703c3567664828248492"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:26 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x40}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x290041, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) [ 440.690911][T10095] Bluetooth: hci5: command 0x040f tx timeout [ 440.937244][T11251] vcan0: Master is either lo or non-ether device 17:26:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x110, &(0x7f00000001c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f488000000b8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d2a96681290c39a5ece9d99f4f771d82408ebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:26:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef02", 0x41}, {&(0x7f0000000880)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a73f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2", 0x88}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1460, 0x11, 0x0, 0x27) 17:26:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x713, 0x87, 0x4, 0x5, 0x18, "3ec1adaf7b6f92ec77ecbef99e6acdb8571649"}) [ 442.505143][T11278] vcan0: Master is either lo or non-ether device 17:26:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:28 executing program 0: r0 = socket(0x400020000000010, 0x803, 0x0) write(r0, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x3ff, 0x3}, &(0x7f0000000040)=0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) [ 442.768720][ T28] Bluetooth: hci5: command 0x0419 tx timeout [ 442.946127][T11290] vcan0: Master is either lo or non-ether device 17:26:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x85, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e1652248973a4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b01647a0200169c864e1d5f8179cba2e43112cf"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 443.418923][T11297] vcan0: Master is either lo or non-ether device 17:26:29 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 17:26:29 executing program 2: socket$inet6(0xa, 0x0, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:29 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x165, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8", 0x1}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 444.123859][T11317] vcan0: Master is either lo or non-ether device 17:26:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x7d, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e1652248973a4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b01647a0200169c864e1d5f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:30 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 17:26:30 executing program 2: socket$inet6(0xa, 0x0, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:30 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) 17:26:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x220404, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}}, 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x37, 0x1, 0x0, 0x0, "e076f4751c07a6b2b2f402213724abc602caaeb4834e831663dc1c089328bbb6289f3407bf27f62780f34cdfe5445c6af7652bdf70cde595df40961cacd3e5f1"}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0xc0) [ 444.775154][T11334] vcan0: Master is either lo or non-ether device 17:26:30 executing program 2: socket$inet6(0xa, 0x0, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 445.108468][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.260697][T11357] vcan0: Master is either lo or non-ether device [ 445.270671][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:26:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 17:26:32 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "5a1f91830511adc571ab9f82c323e07445d95c", 0x0, 0x2}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xfe, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:32 executing program 2: socket$inet6(0xa, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) ioctl$MON_IOCX_GET(r2, 0x400c9206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/133, 0x85}) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @private0, 0x40}, {0xa, 0x4e21, 0xfffffffe, @empty, 0x20}, 0x9, [0x2, 0x6, 0x7fffffff, 0xd646, 0x1, 0x4, 0xe1e5, 0x9]}, 0x5c) 17:26:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16c, &(0x7f00000001c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f488000000b8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d2a96681290c39a5ece9d99f4f771d82408ebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc86597e12c337a9a5335557abe71f3761d77294e0879a4f6029a2496354181802027994e44fdfecc6e9c842f10267c94b43085dfee050115b71bcc07fcd89f0ecb0e0cbd382"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda2f4e", 0x5}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 446.831087][T11374] vcan0: Master is either lo or non-ether device [ 446.915208][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.122238][T11379] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 447.138131][T11379] bond1: (slave gtp0): Error -95 calling set_mac_address [ 447.279798][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.305786][T11379] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 447.317758][T11379] bond1: (slave gtp0): Error -95 calling set_mac_address 17:26:33 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x76, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:26:33 executing program 0: r0 = socket(0x400020000000010, 0x803, 0x0) write(r0, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) 17:26:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x2b, 0x0, 0x0) 17:26:33 executing program 2: socket$inet6(0xa, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)='\x00', 0x1}], 0x2) 17:26:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(0x0, 0x88) [ 447.990289][T11440] new mount options do not match the existing superblock, will be ignored [ 448.104385][T11447] new mount options do not match the existing superblock, will be ignored [ 448.110043][T11445] vcan0: Master is either lo or non-ether device 17:26:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 17:26:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe7, &(0x7f0000000200)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad000000000000000000000000000000e165224897ba4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78bfd83c3c845dfb3aefcb83f8707bb1655e1c3b81e05f0b5f469a8c0194ded84a80a9fc1ed2c472048a4d291cde0500cf145ac4f2cb38c1"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 17:26:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x10000, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r2 = socket(0x400020000000010, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x28022840}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8)Ug', @ANYRES16=r3, @ANYBLOB="000126bd7000fcdbdf250100000014000700fc010000000000000000000000000001"], 0x28}}, 0x40088d4) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x5}, {0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}, 0x3, [0xffffff01, 0x1000, 0x7fff, 0x401, 0x0, 0x3bd, 0x0, 0x6]}, 0x5c) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r4 = socket(0x400020000000010, 0x803, 0x0) semget(0x2, 0x3, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) write(r4, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000040)=0xfffffffb) 17:26:34 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x79, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:26:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x7cbf, 0x0, 0x0, 0x3d2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = syz_io_uring_complete(r3) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xef, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627"}}], 0x1c) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0409cb4358a7e8d71c594ff6bb171c3611a215fe1ed5d456aab49e0a9f17770082f512475536a5b3c7bd53040d2d477d55fe20d072ee69f47a9c2a18f4126c00000000000000000000000000888c06d1be5c3108761182afb5bc57e1fd14a7d6609862f9b85c0c3468ee3e4c3c5fb20bea23023de0038326aa8b710dbfb69680ce8f0eccca3393854caa971f1337ccd79faf147c601b6446c5cc0ea693a903eb6224a516a09dd4cc237f543b838db10440da207bcbe90d4cdd76702dc07c0e3e6dacbe6a6e"], 0x16, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x2) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) 17:26:34 executing program 2: socket$inet6(0xa, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 448.982610][T11479] vcan0: Master is either lo or non-ether device 17:26:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xad, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a9"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x2) 17:26:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x43, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e1652248973a4ecb40"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:35 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)) msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x8, 0x0) 17:26:35 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) 17:26:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) faccessat2(0xffffffffffffffff, 0x0, 0x142, 0x0) [ 449.823737][T11503] device ipvlan2 entered promiscuous mode [ 449.834276][T11503] bridge0: port 3(ipvlan2) entered blocking state [ 449.841146][T11503] bridge0: port 3(ipvlan2) entered disabled state 17:26:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) [ 450.445214][T11515] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 450.503091][T11516] bond1: (slave gtp0): no link monitoring support [ 450.511146][T11516] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 450.524737][T11516] bond1: (slave gtp0): Error -95 calling set_mac_address [ 450.610799][T11516] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 450.646937][T11516] bond1: (slave gtp0): no link monitoring support [ 450.654291][T11516] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 450.666871][T11516] bond1: (slave gtp0): Error -95 calling set_mac_address 17:26:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16a, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda2f4e", 0x5}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:26:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xb10663cb4f6042b7, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {r2, r3+60000000}}, &(0x7f00000000c0)) 17:26:37 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002600)=[{&(0x7f00000000c0)="580000001400ad", 0x7}, {&(0x7f0000000180)="47cea76a906b189b65c2c8ac9cdaea6574eb81a0393c30327ff742f013ea680cc3c18bb13b53810b97e5772b37a6aaa80d07587b052892888cd93b17e66200c8dad1e6374128419f80000000", 0x4c}, {&(0x7f0000000000)="d7b009abd34443aabd521470821d3667bd94b7367fdf057f929a103e8142d97fbd", 0x21}, {&(0x7f0000000300)="9ebfd7cf4ee2c576d297ec03f426c7d58c7f86d2390b6f5a143f5fc087bee3dbdf692b35f748aeb54e6b71efee78ba80942dd28a9d60aa4c5ee3d5e50e484c9f56523f3f5f1f5d34b17a73863f3aa9a98941807af751e09c172c", 0x5a}, {&(0x7f00000003c0)="6ff65c09a4ef0580cce2d6ef97b812eaaae1c31ab17edfcfbadf77398aaee1a6c4253ea838dbdd0d2354e9363ce26c905156ad74e48b63885b35120c8b9658255e103e", 0x43}], 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 17:26:37 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:37 executing program 3: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="144cad36", @ANYRES16, @ANYBLOB="8d05000000000000000004"], 0x14}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 451.781870][T11571] device ipvlan2 entered promiscuous mode [ 451.792197][T11571] bridge0: port 3(ipvlan2) entered blocking state [ 451.798956][T11571] bridge0: port 3(ipvlan2) entered disabled state 17:26:37 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() process_vm_writev(r3, &(0x7f0000000700)=[{&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f00000002c0)=""/194, 0xc2}], 0x2, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/81, 0x51}], 0x3, 0x0) 17:26:38 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x135, &(0x7f0000000200)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad000000000000000000000000000000e165224897ba4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78bfd83c3c845dfb3aefcb83f8707bb1655e1c3b81e05f0b5f469a8c0194ded84a80a9fc1ed2c472048a4d291cde0500cf145ac4f2cb38c1263bb7d3001dc9d32b32de57d97c2fd7d4deebe1eedb6e52d142a6c386990b668aaf09081d1e8b2adbe4605f4e4dc1663afb23ed3fcf1815698a8583a90d4a384976d7d1573df6ce3e3565ffc3e7"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000180)=0x68) 17:26:38 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 453.021220][T11609] device ipvlan2 entered promiscuous mode [ 453.032162][T11609] bridge0: port 3(ipvlan2) entered blocking state [ 453.039126][T11609] bridge0: port 3(ipvlan2) entered disabled state 17:26:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0xa, 0x0, 0x0) 17:26:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef02", 0x41}, {&(0x7f0000000880)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a73f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2", 0x88}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1460, 0x11, 0x0, 0x27) 17:26:40 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mtu(r0, 0x11, 0x17, 0x0, &(0x7f0000000080)) 17:26:40 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:40 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x541b, 0x0) 17:26:40 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000400)={@multicast1, @local, 0x0, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) [ 455.286731][T11632] Unknown ioctl 21531 17:26:41 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x541b, 0x0) [ 455.342123][T11633] device ipvlan2 entered promiscuous mode [ 455.352693][T11633] bridge0: port 3(ipvlan2) entered blocking state [ 455.359526][T11633] bridge0: port 3(ipvlan2) entered disabled state 17:26:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x83, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac000000000000000000000000000000e1652248973a4ecb40aa071d905914c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad84c998bd2f7155d302a7be122bb1609f8b01647a0200169c864e1d5f8179cba2e431"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:41 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x8, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) [ 455.706489][T11644] Unknown ioctl 21531 17:26:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) 17:26:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x167, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda2f4ede", 0x6}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:26:42 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB='Iiz'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:26:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030800ffffffc300020000000000", @ANYRES32=r5, @ANYBLOB="00000000000010001c001a8018000a8014000700fe"], 0x3c}}, 0x0) 17:26:42 executing program 0: r0 = socket(0x25, 0xa, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$CHAR_RAW_ZEROOUT(r3, 0x127f, &(0x7f0000000180)={0x7fff, 0x3bdc528a}) [ 456.810462][T11682] device ipvlan2 entered promiscuous mode [ 456.820988][T11682] bridge0: port 3(ipvlan2) entered blocking state [ 456.827859][T11682] bridge0: port 3(ipvlan2) entered disabled state 17:26:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) write(r1, &(0x7f0000000000)="89eb6044be0a051c4ec368df394820dbc0744f54c6be1a11867ab2ddf30162680c6bb288f0d489d642b80ebe57b2a0678eb535f57e9974851d948e975106d67940cfbc0eae0da92bb0f3c0e7c078beae6f348426b7b3168dfd7f3127f86d6c55c0d8bc568e82e6d4d2238f46cb2c164d488da14be27813d353ddb1a05472737aacf08849665d181de0a45c8e352b6cdd6bc4599c98347fbb14e874d84a879390c3e279aa68aa97267965f5ee93a140f91a8d232178e5a728e3d67cdda77556187ec3fc0d1f9710b0dcfcecc005b326a3d3e36483f8b0487f204f26d8e264f0616f19224689", 0xe5) [ 457.166366][ T8712] usb 5-1: new high-speed USB device number 2 using dummy_hcd 17:26:43 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe8000000000f4ffffffffffffff0000ff02000000000000000000000000000100004e20004d90"], 0x0) [ 457.541696][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.552874][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.563072][ T8712] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 457.572418][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:26:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:43 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 457.728821][ T8712] usb 5-1: config 0 descriptor?? [ 457.903468][T11705] device ipvlan2 entered promiscuous mode [ 457.914058][T11705] bridge0: port 3(ipvlan2) entered blocking state [ 457.920922][T11705] bridge0: port 3(ipvlan2) entered disabled state [ 458.211122][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.218797][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.226310][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.233674][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.241061][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.248421][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.255720][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.263079][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.270468][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.277831][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.285134][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.292887][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.300359][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.307788][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.315089][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.322500][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.329933][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.337368][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.344679][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.352104][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.359509][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.368219][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.375529][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.382922][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.390379][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.397861][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.405238][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.412677][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.420123][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.427522][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.434875][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.442249][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.449658][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.457070][ T8712] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 458.479785][ T8712] samsung 0003:0419:0001.0001: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 458.496324][ T8712] usb 5-1: USB disconnect, device number 2 17:26:44 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 17:26:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x26e000, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) 17:26:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 459.226497][ T9087] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 459.238505][T11733] input: syz1 as /devices/virtual/input/input7 [ 459.312365][T11742] input: syz1 as /devices/virtual/input/input8 17:26:45 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030b000000000000000013000000340009800800010000000000080002"], 0x48}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x0, 0x0) 17:26:45 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 459.587152][ T9087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.598338][ T9087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.608494][ T9087] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 459.617874][ T9087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.680887][ T9087] usb 5-1: config 0 descriptor?? [ 459.768844][T11753] vcan0: Master is either lo or non-ether device 17:26:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x21b6487635b4d857) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 17:26:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x104}], 0x10}}], 0x1, 0x0) 17:26:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0) 17:26:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 459.967876][ T9087] usbhid 5-1:0.0: can't add hid device: -71 [ 459.974218][ T9087] usbhid: probe of 5-1:0.0 failed with error -71 [ 460.066074][ T9087] usb 5-1: USB disconnect, device number 3 17:26:45 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 460.131988][T11769] input: syz1 as /devices/virtual/input/input9 17:26:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 460.724318][T11789] vcan0: Master is either lo or non-ether device 17:26:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1d6) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 460.900190][T11794] input: syz1 as /devices/virtual/input/input10 17:26:47 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 17:26:47 executing program 0: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x602802, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) [ 461.492107][T11801] input: syz1 as /devices/virtual/input/input11 [ 461.770941][T11816] vcan0: Master is either lo or non-ether device [ 461.806095][T11814] input: syz1 as /devices/virtual/input/input13 17:26:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 461.966218][ T9087] Bluetooth: hci0: command 0x0406 tx timeout 17:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:48 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b000000000000000013000000340009800800010000000000080002"], 0x48}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x0, 0x0) 17:26:48 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 462.747952][T11836] input: syz1 as /devices/virtual/input/input14 [ 462.759361][T11838] device ipvlan2 entered promiscuous mode [ 462.769871][T11838] bridge0: port 3(ipvlan2) entered blocking state [ 462.776653][T11838] bridge0: port 3(ipvlan2) entered disabled state [ 462.813282][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.490714][T11847] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 17:26:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000000)=0x4) 17:26:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100030, r1, 0x6000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:49 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mtu(r0, 0x11, 0x17, 0x0, 0x0) 17:26:49 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030b0000000000000000130000003400098008000100000000000800020f39a961c70d386a00000000000800"], 0x48}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x0, 0x0) 17:26:49 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 464.131285][T11861] device ipvlan2 entered promiscuous mode [ 464.141746][T11861] bridge0: port 3(ipvlan2) entered blocking state [ 464.148558][T11861] bridge0: port 3(ipvlan2) entered disabled state [ 464.234241][T11868] input: syz1 as /devices/virtual/input/input15 17:26:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:50 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000005580)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) [ 465.041670][T11884] input: syz1 as /devices/virtual/input/input16 17:26:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) 17:26:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) r2 = openat$bsg(0xffffff9c, &(0x7f0000005380)='/dev/bsg\x00', 0x40, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00b23400000000000000000030b6dea64a3cb8439c4faed42bdc7e084b6bd00ecbb18d6a3e6355eb7c5bbd0c6da14eea503b040827b6ce10847943317c25fbf17ca7e13952f2a0281b17418b13365c23bfe8dca8399199391539f58b2cf91c3383f16f69751b48f64fc829014f1f68071966729019568e5528e6922ed5ef0e397ced801d81191bb8cb4dd3a0e15782a5ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa607a5e34794710bdaaaaaa0000e90c300000000000000000000000000200"/47, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="49de8464c9223fd16c062a52b05fd333338768b2b39e76f6d25dca2fe35f6d051d74e5579adaa24a3bdcdd0fedfc542762eb44e9d2c436b82404bba160a846ae706a7f65ead0d6ebf533ea29f5bb4514533d1d8fcef0751e7e79da7213993b454767873648c4ec01697b9fed2ff950468a99c64767d51727ba05c4286fd913e4b24d42aa66945ca43b71075d76a4b29fd964c9393e2e734be4d869e5a94c352a88516ece74fcfafc7f2ba99b4a31bb5109c8bd9a604eeb0608052824f79b29bc2e152782c1f663948139ac919ae09f40923337250b0a4622425ca35ed9a28ca33d47b330fbc2c55cdf8295"], 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400d36d887e0939070040b3010064edb6820fc720471ebf868ea124feac4f2e3302c34546c91410b123deed91e4b5fd5f46fbaa7b8f800c762aa86ace6ad9c4d3d1b48965338032eaae969d6e2a45345c9e6ee33bb7ceb819716776a5a1b7864ed8321a15824456a9ec84f345434d15d10fa031d8f0aade89cc19788e6638b5ad919599fb3ca98655c819dd1277d428d6e8207853eb70ea23e02c181f03e43892d41fb39337793c86800be7a96af493663597f42be7e7d5ae097a", @ANYRES16=r4, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000005480)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x23fab2685ca9238c}, 0x80) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$MON_IOCX_MFETCH(r5, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xd7}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:51 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x2) 17:26:51 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:51 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) [ 465.888726][T11905] input: syz1 as /devices/virtual/input/input17 [ 465.917851][T11906] device ipvlan2 entered promiscuous mode [ 465.928397][T11906] bridge0: port 3(ipvlan2) entered blocking state [ 465.935016][T11906] bridge0: port 3(ipvlan2) entered disabled state 17:26:52 executing program 3: socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db, 0x32003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xfffd}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) 17:26:52 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000780), 0x10) 17:26:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r2, 0x0, r3}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 17:26:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:52 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x1) 17:26:52 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 467.127872][T11932] vcan0: Master is either lo or non-ether device [ 467.175888][T11931] input: syz1 as /devices/virtual/input/input18 17:26:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x3a, 0x487, 0x0, 0x0) 17:26:53 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xffff, &(0x7f00000004c0)) 17:26:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xb9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x9, 0xb0, 0x45, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x43}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x3, 0x1, 0x1, 0x1, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x4, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x7, 0x4, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xfb, 0x4, 0x8, 0x12, "2f5bb6842b87a3509f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc0, 0x2, 0xbb, 0x7f, 'mo', "f07499"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x1, '\f'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x3, 0x1, {0x7, 0x25, 0x1, 0x81, 0x6, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1f, 0x1, {0x7, 0x25, 0x1, 0x80, 0x40, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x3, 0x40, 0x40, 0x3}, 0x11d, &(0x7f0000000180)={0x5, 0xf, 0x11d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x2b, 0x4, 0x200, 0xf, 0x2, [0xfffe7f, 0xffc0c0, 0xcf, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x40, 0x1, 0xf801}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x4, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "099fddd0084cd427714db8ba22e45fdd"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x7, 0x1}, @generic={0xcd, 0x10, 0x2, "dbad4729be2afd72c82bc6a02a7acb32fd04dfedf4fb6e454da65b06d0753b4461a9800b11595d75e66bee0aa39860813647af4e9c1a0d47bd50cd70630b267bfc479004af5b1c2601e1ce1c9af661feaa5985e526dc219582e97948e691eabb37ebac26995a9c050f5df0bee1764847c63906ba8c376c3df678f4cbe504587ab5baa97d731df64da82a7191b7ff8a862e13e9b4a6758f47e0bd44eaad269b14312bd0620efddf357ff022056db536106af65fa04dbf87021076fefc3c51042ce9058fa062e6f9d989f5"}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44a}}, {0xa0, &(0x7f00000002c0)=@string={0xa0, 0x3, "96a8de8b9a6b57d8d5f42268ecb459d11e6c79e22cebe57a03ac3aab81f9dba4c705dbd6fa81bd2b34239705cdded802504e3108c2372de5fa190db18fa1ab740ac7d79dd40a219d7ad9db62a3fd46d9fec99fe2ff4fb8be79543b512cd94a81a8973be3925a3de38a95944377f0a20849caeabef6c81c4ea16cd3a42844e111f2a08df743d8c6628c9b2c06b5288b078c1aff10f2273763f00215e15341"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x455}}, {0x57, &(0x7f00000003c0)=@string={0x57, 0x3, "0603dda2efd8560ecea2efc5d78819eec6f3618c79b88df596734bdc99115dae2f4bc1117ba975be52185ac1d1d5de0e29c944bdee669c92efd7db21274e35787d88557db81b4d2d824dd4c0738ae1fa207b7c1886"}}, {0xe8, &(0x7f0000000440)=@string={0xe8, 0x3, "beb23f4c40ca22a4ad247cd0f72c6e6dceca4e0f679d32cbd0ec6a63339a8963f7ab9182c4627a21e2ad6e2a6ca54148d9a7ccbe968244f4350c0c42c57b4b3d0fd1a66eefc073653cba2e7f7c7d569bfe0e21c3dcbf5f39b9bb48f45470f0e79dfbe0a774eb348778076bac1726ba79be1889482f7c15e983b3be20fd780985a5366f0cc3917d1a1acee66fdf83bacb54976e5291948a9f0bf4a924fa4cdac15a16c29d73a851ab95ec659b72bd22496ea3acf98bd07f4db32b3e0ae69dcc1f6f6028e3ae95eb0e84653bd4d4b3f77841677790735b5988d0a73757ca0b413b91a3a762bf9a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000740)={0xc, &(0x7f0000000640)={0x0, 0x22, 0xad, {0xad, 0x30, "e35cb0da25fa8ca35553d6d06f4f693ed6c6f9358d62caf15f3e0c2bb1b97875ab7cce5d9b32fb674268197985fd1846b9d4cc718183fa2eb26eb6b746d5e41dc3c26b4a83d56ff23c9f0540fd1bc6dc132020dfd05b396716245be2366a66f999d0e2c7256d151913c1e9d31488e05aaa2025df0971e30f731d0190743fd6b57d52141ab6618bc0704ca91147dd635407dc9e2ea9bc795b79a65b58a05eb90bcd6b70ec43083a8323c3ec"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x201e}}}, &(0x7f00000009c0)={0x24, &(0x7f0000000780)={0x20, 0x16, 0x74, "c5a3ce4754b0888a16387c77841b689036c9474cc67441eebb1a2ed91d0e885f3ef9323fe4e50a522eb9da0b52c1b02668b77f9f85e1223b5629c451e79c811c597ee860ff562e13c01a28bf67aa4f11669eb21999ebc621ac0960c6ed0512bb46090c3fb0b15667ec828e5783d445131b8a9998"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)=ANY=[@ANYBLOB="2081010000005b"], &(0x7f00000008c0)={0x20, 0x82, 0x3, "ba60c6"}, &(0x7f0000000900)={0x20, 0x83, 0x3, 'c\n5'}, &(0x7f0000000940)={0x20, 0x84, 0x1, "c3"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "a635c5"}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)) open_tree(r2, &(0x7f0000000a00)='./file0\x00', 0x1000) 17:26:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:53 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 467.481114][T11941] IPv6: sit1: Disabled Multicast RS [ 467.876182][T11956] input: syz1 as /devices/virtual/input/input19 17:26:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 468.158691][T11962] vcan0: Master is either lo or non-ether device [ 468.229111][T11966] IPv6: sit1: Disabled Multicast RS 17:26:54 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='Y'}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r3, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r3, 0x0) write(r0, &(0x7f0000000340), 0x41395527) 17:26:54 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) 17:26:54 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:54 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xffff, &(0x7f00000004c0)) 17:26:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x224080) r0 = socket(0x400020000000010, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0xa0050, r1, 0x10000000) write(r0, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) accept4$netrom(r0, &(0x7f0000000040)={{}, [@bcast, @rose, @bcast, @default, @default, @netrom, @default, @null]}, &(0x7f00000000c0)=0x48, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="5d19418aa06fbd8a7e90a92ea442a2400dde67d1c3ee4f6266dda1eeb0471d49c35b5c421767a8c6ee97b8d877e49ea1c67e6d25afdd30d4d99b087e3945825331dc4c24ffada690bd6e6cb10ae0ee0f9f7c6a63f294272436c9423ec8d48d3b8ca21c34545c8102bbe46374df96b58d0474d10696f305d8a8cd7e38a0d7acae", 0x80}, {&(0x7f0000000280)="a24bbcd26ef45a5aa81e01f588cc96c318807e0ff31ac82953d59c076be98a07cde60b031e19afdbf975bf083388773efbd99a476ee04ac18d13191a1d50199684338746a3a2ba073a4e8e26b6f54dc9ab20ef28208229b2e381f23eb2ffb89f74e00a3002d3822a8788bb90db4a24526101432690c447fb4995deaee86a359bdd65fa58285c077eb53d5e8ef1f7c23207a0fd841fb0de755fcf5364b0c4b3ac8b5a2a3bc8cdb765c0e3880dbc872940d6ed4eec50c491262089c3bde2d6fa4b", 0xc0}, {&(0x7f0000000440)="ba2de78f3d8ebc275a7ab0c093a400847f10148f8fa136192abb1de6a23f5abecc3cee4b017b4e45b1ae2323d672414f4842338615d068b1881d5ce3bdea494652d0e1200a062cc9f1fd9852a6e8a527441eeb17eca997a119161765291bec7de29054aea8215a103bfeed500b6514aafc49cd746d3eaf2705afab1a725ed57138d020c1e334819add7a58cc063922d87308531995637b04c44c06ec3f70ea6228bb3b441c6577cac7d0fffeae4950b2eb9ec6cd6cfaecf5ece01063e03e9dbbf17ac3d0d6418255695d23c63d96b92207c508a4585d00c9a5a48aa6fbd75565780972", 0xe3}, {&(0x7f0000000340)="e39bdddecafaae4429490e1e74a3623a916dfd54ed74e4e3ccf17371232aabe6cadca03bfce77cbcd1ed5cbd94ee0f4ad49ea7b794f14b3414bd0efea0bdbe33e3d85a379984", 0x46}, {&(0x7f00000003c0)="a921321a9039b2c26b8f750a7f65eddae91536daeb5f8cb507534f9cc9096cc8791a2b6ce99f444baf1d23d9e477", 0x2e}, {&(0x7f0000000540)="b8018d57c8f78986b1b99281c81caf13a2195a96ec71f5e74cc7a0098460c196adb72e30e84dd564b509247c210951db49e19d9ef9830b2e497dd4186e51f5f5476862aec1b364718c90e2ca", 0x4c}], 0x6, &(0x7f0000000f40)=[{0x44, 0x117, 0x8, "b15b07cc945554d1054da2c6e2b9f42974584f5eb9d9e42ad2c4845eea5b9d73ba77b94a701dffc5a98010dfa6eb27809bf253511b"}, {0x30, 0x102, 0x2, "4ddc97696e8f4e594ce1a19e2bebf62149477840d5e526f38238b81e7441c578c4"}, {0xd4, 0x103, 0x3, "12a44ca862909e7ac6f9ec3198dcbfdc161d8e8748891eeb450f13906972eee97f501d3bd028169e4a56523cc63adac8010ce85073e92949e899465082a701baa9785b6ba52acde36d897729155ccd911cf9fe10b441cfa034c123db7b4f91645c123ab6a6966fea777cc6af0ad8e13d440151ff5e8211ede1676a4fa3ab2a01a8a4264dfd2be2cf7a011479391332804f5759557e87a3f60ce5f03ed189aaf02d86f1023d7d2202676de13f519e9e79bbe1760abea3d58fcbad342b11b54a93a7b9e08438"}, {0x24, 0x107, 0xd5, "735babaf73868731c43b7dee39c13f508a34be01f2"}, {0xbc, 0x107, 0x5, "0d9817e0e2025aab597f73a1186d45088f60f6972ed6e7d1ae2e7e04beef1f5d1d6fa4164e071a45759d4e51aaa24f994f5c002964275318998a385d9e88e6924cbae18a3825168a832d2344b0385d0474e8d6c4f0aee611c6a46a33ac403bf0c9f34cfa135dbebf2fa19e343813fd8b5050dcd76aecdb535899efccfcae6a229e0ed4a6451ca0ef506556afc541b3cc9dd1b65852ad1fdbf74d2fe369cf1714a0edefd66b2005c746209660323b"}, {0x34, 0x0, 0x9a, "bf299503e0eae440dc9e7bd84f041e2c87c72f77ed08cccf6208b6dbbfc8c851b0d4fe0f74"}, {0x100c, 0x6, 0x20f, "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"}, {0x40, 0x6, 0x549, "8865dbdcff775526c2f444804b9732717149eef05a4c818c89b85fbd715cfa4cba7dd9ef7d58f2be8bc98a638b9f5d3b19b1d9ea"}, {0x9c, 0x104, 0xffffffff, "7b54adc3ae12beb1e1895892f0e09c19555ad0f74a9527fc69877c99d83ca911f5df6bf86e4ae7a1b74ba0c7890aea2c45156cd443459819d227cc58192e15f1c21fc2cffd00b5ccbdd2d8d823a9ccb1b8450a92adcdef3c00b2c2dadf7cca8a4ef710f6ca32b6dfe54d02ea379094890e52e2e4e37f1b4f1fab6444df99ef01a9e2c96daf31666943a7766f751fa8"}], 0x1344}}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000022c0)="945b42062729178ac1277880bc744ffc06dd33562a8624fa95509be1418410c0917f232cddf6150cacf1ffe890c76d47f1150023135026a9e00956c34eb3bb61387a91885a1821d97885ff7f2fa3298e726b9195f96ed5b96b3681b746d812c6d8576b4f630b55ab3c4cc15fe233e334d3a2537040cbe76bbd19918f000a7ac15cc07de7cd2ec0ad590b317cffc6dc2ffd4b8d97930c10cddd709c94476685fa49cf00997267a5d8c3a6d8e4286836a3469389ed7faded19aa4b44dccdbb51d0e3e7e704ca73e1ee5a5b55660a40f913f1ce6cd2e2c931290c83132a3f4fe78e8acd147347b9209be2d03ea6d62381d4f3b205ad8cf35d4e33b70a4a78f9676c1738c6997382c8220279c9966246c91d3fac33218464b2c8b1e9edf2b7f5a634fc45c7b4394891b00aed7c0ff46726f4b183fc45c1ae2bf4c560582ada8bc72a5b6cecaa35b83b13e8bc40a4606e11b99fd5e2769cce83065b63b704a31578a91d3b2256f611f9733639e38c629afdf342ef184b242ae19edfc5b29d3ce1aa395b969797f18c6219dd2e637f7f5a57fc4de579dca53e8abaf914890a6c7d1ecfee891418fa1fac6e08f721767ebf5c2fea71b56e4e6888ddc1dce5e816c8433c32c1e836b12dbfaccb8cd49c6ebe9bede93841b7fc140909eac4e3d200e27da325e6add7cb511419cbc4cfb4f2c95ad2bad0e380488afeb9b4b5f80bfeef5296c6b6d2c77c8af4121af08ae3239ca2331ecf7ed12b2150b85f022b8c7042c393a88ea343184f9769a89637f0dcee853abd0a98aa981cc8ad002998e054d40015f55b66c5b370df925d0807ce994fab6f3ec9615274818b0a1aa16884d8ad96a515e1db099fb458452ed4e37378f3127f8650924cdd1b0c8fc4d21b2411725b8f73661bf64239378d90dfad4264aa289b4f5bb9aae81835432334f2b1323bbc8f76df6ed3f4c618023ff894b8ad950b913a7f1e0e86d0d817a48aae684e9086358655c11979a413c52a833bc81bf9fc16df8631280298997cc65d1bd5a6e97ff8ae661f0fe6bcc162151b40e398dd127aefb27e41e4db1ef2896858171a77c3a3a1bb6a56e8ee63c15f8d9920733593982a4fa351746aa49e5e5ecd589e746d851a06d448450c10ab13b46935cc6a56b4611460860d4978a3ecbbc0763fc47d1008d27edf63b9b8ab7e3fd06e04d6a8f4c8fb08f2b811be1349675380c801bcc2a80562d4d53ca48e83e437cbcba2cbd55248035f6e527d0a2f1bc79b691e270ec44e05cb956fcc167c41e10f8c37670c126fabdca46d2efcede80987ce2bd484083c05ee63232b1dff63d8531f44f45c6559550ba178cc7365f6fc37ce263f28cc5cd5141f80440e51871710024c84c8249fa1e5435a42f38adc2078a9c63358ac761d23b464b177ab29dc9a30fde5ccde2842c54e7076bb779e26ad60b7ad000303ca7860904a27e9aaded7d677a6ae155629b8be71cb249e4576b0e9b671c65a1286557f34176f2a33fb3c163a6256be5cbed05d4e16fa6ff7876a18490e7b9b0fec2bd722634468bc6fb33f999637e1ec53c76a61726c61764acf5d576d6faa9bc3857cad23d904d44a761d6b34db9126d68ef625f50391af70a80e8e357364f68c1cae06bb25a0660ba38aef59e5195df89de85d1ccc3f142236e38c4d5c6878345f4d84ff8b05f5b7a3d7799b134d698f7a70ef2d45bf68e8b101b6ea0a3e4162f5bffabefa48496a752ae0a5c5795fa9b3302b0f08e06cac28835ddbf72e4095e31f7ae8d2d2371f8522d26282b36621053beaa7d5ac9edb0fd5ec8d5cab4cfb378b6673b6b30b57d4436c48e8802111514938a8eeb197122d685cac2d04d670a25cd236f5a8d90d91aae5cd504c8c3b88ed19b1ddcd4508a125953211bdde6ca48c1eb12b16b0da1f482bc4fd2d1950d107f614ecacc0d38a2b033d37f34b423cb5ce23d2fafb97bd04f1f097bf4eed38ef214b8238d12ce9ea8af04fe1666e1b9b06d109b8fbe43d1364429788c47c996527aaa8e161dd4b6807ff61b7983d5b57a0099a0c1082260d8c811558716bed700c9749f259757fa4943b4318b03e64b7157db12af634b353cc8c3d5241a0d1473c04ee160fe5d39452ef6a137e2a3e22fc428b49c27c385fea6aed67da1d3a514d77d5badcbfeeb1f6566abeb95585286707a73984f1fb54ca49f3b501579daf58dad9acb04325fa82951544563631d28d46fa76c9a81579ec25d1cda5bcb3fd9fc5c0d2c951b758dd3d7ac769afefed9f915c06aae0389f0b621139ffa3ba1403da28c93c5d3bd7f52cc701f892b061521dfe968a98aa01d1b1528e1c0400ad80f3c11770ab807475b74aaa45a36c6c079176b6330d42234de0afac9f36cc6ab10140003f66fd8721dfdda775f054bcc96c126550141ce4fe3fe14d0b5fa7bdca0d6a1156dfe07e7afb2cb01bf7e89a94e59c1d3dcf92ead96fcd6aee3e348aac180f619a9e43428940f033de5d4fd70362a45521b36fc2ee3708c70c1c139b3ec981a06bf95fc5ac47d3669c3a6abf50d97dcb718096674d0aa4d34d33c67456acc6102236f3b13ed4873418f617976d52232317266e059f480f75ee09665ce195276623f12b7254e454116289dc2ee57198f7f14e7489ba5ff1e0e96feada94743dfbe1b9b6252d670e5d35362e2088b98d342110a0a720ddace9124adbe90a40ce96a8b70106adffb629ffbf61d2e3769b9b2502556641c603d7e5ce91861ee45ebcbed533d8565e9d8d1843c3ea1bdc17f1da5eae284b1f0df7f746f84ad1b518d338db3f1f2236322c8f471475e19c0765a813e3d16e12ba7a9d53e709e6161e6d4927ba1cdb285033d90ada3b5bb5d00a46d7b1a78420c8b5b078c37782ab4305326d1c77c24fefa0046874b3a5d9d591229206ec47c29f45d289aa775799ccd641f1252ba391225411b2eadbf108d7bd45d58ac03e7b27c8d4e93e539c5b693208eabbc0f5095c8da02c2b639e6ddfeae25c5115dd424c2f2f9dda2aa5bb2c75b7df006be0241eaa366e9851e13cadc2eddd0d806e201c0fb5d2e686fb62663e77460b233d36220220431c683004b7973ebe31ee2c7ecc5be6b2bc0098a44864eddc5a32a4bb8e6d86d5bb30177beb089df7753f3a67989d30d358c6c444a6544e1636a35413200689a8a84a67cf4ca36be2dc11d175c54f3190f59569a3b4771129885988b9bc001e0ac0ee9a5ccc527b8c4b07fd8ad4ef6aa5758b3c9cb50f70435ed38762c73ea504348ce39410931a4f511ab7a39dfbffac253ec00fea2b71031180e87373bb3cba243e5df3b70aa5d3dcfe9a71fb1193463c96f30069715c881813002faf052624c141b641b08be678aca9f8fdd168aab3c8692c200d4be34221fe5cb0a9e869995d2a0322869ef54e474d7584f86cdefce2eefea84dcff8e08e4c55f5543406cc6a53d91e857e65e64cab6b4cab100b87a0fdfe576ada896a3085d280902fe5c2e0a172309c3ab361661492969c77dc71af50a45576cdc1531da3a749c5cdd45ff4e1805279c765efbd568101fd32506491b28b3666f55a6de98a11879fc40e9362d90b043fda7a6690c9208c90a2cfaf91ded2f9198b28af64a1669b17ed332d8f9168548d906e1e6caaf29559bf849e4f0642fc67496f5a6e7451e9d02d42142207dbc875933f54d48093a3ed110e23c40a557b6101315ff0b727eaa5d41c6e81984cc40baf490e2f9c33c9e45f7eea9c43edf947e2f802f06ef9e89ed5d01e666d4301b230dee92f68c1fcf67b711311b4c4cff9c78f1b79ebdf97d9091ec8d7d4f6d56692a583a0cdc77cbe291e442007af42518d6820a641b4c7da4b3c36ea3e6bdd424d36db7f0ec81fafbfcdbfec865d9ea6531ab4cd4639b140d2e674c2918d521763aacfd48bc3c3587ba0bae6ef43e791f00e7012fa8ca4031d766ccdc2b643cea5b38c5b1509dde38577ca94fb7d54682cb6d4993485aef917778adfa859bd01b6839dee9f09ff3848c08bf454d60fa8dca6a4c2c1bd129be3672ce9b7d68e9fd32c4b6b40e9163901bd38a98baa8f4087bcc7ae5d3a50a30c1bcf115e6722cddc8d7c67ee41fcda0f7991fabe3501d37bf2a8e1b7fffb078a64b3777fd8fe8d61324a1da71196e39e81f65d277d2d2d2333ef6a17db34b7323595526ea87cd99e9b6b19135cdaa86d505b5fcbd56047c21abe96a1fd7682e44ee085d6485fcd370615c99f3f862f84fe04a0175f7829259058dadcbf710718592aeaf0a8e43c9ca1620142cb311d1ecfc963c13ada221044391b2a8118f85f480b0dc00dc865f6d75b1b7e4738b40fa4166acb1a211d570fe3112e96990dc847576c062c1a8f1c8e1de92bca2126d68826db84fed08ac30aa04095e8cecd0da7b56c75a74fd70ecc64fb44c2ba45ec48f9de74ed3c83fa4016d67cc888db47952011b58fe969baed4c91cee9cbf272bbadaee45880adf58cf11ece8959e90e3d09226312c292429a5f52d44c59ba8b29b4b9b97b3f48fcbca0be6f91e2c426b2a3fd38eff3c06c78076ffebac945c655faa0a7e9097d0bfe8c2240fe01aec4dcd2f3ab90e00f90d04a5aca6ae2d601cfea2372d09042c63af684c287dd5c00a36572e31812a8070fbfc19bd9b5ec792c6adfafc0a2abccb71a4de1d9a53b3ce7a69d5997a06cc893e406e3a73f4217a36812bd035e56ce167e9cd0452183f1458f55d5a95c6f54338ff2d94d4658db8834ddc9a5d26da9d05b6422dc0bf40d4b4bb868d715343593de2b0459414a6dc78ea4b05d3840e67fdf5f88e8c6d8bb5815bc95b7bbe136869c2cdf5aab0e5211291b8f09f816208f8681167de3e269fd9b5608a1593630937b9127cdc2a1aa99315ef873bb9f38e65d200fe7e83c22b8126b8f471b13744827e1a886cae3825e5c2fa7c72f7a7d332665aa4e5ed56195675807c9b7e60a87667a643cd9102856d69029ad645c0238b2015ac5716d3bb4466afb705ef17410589d96596a7bddf6008cef114535dcf77ad79dd090e8220f7ed8872b9a404738d12ea9bb82138b97477273bade6387862985035a292490f7283f5a1cd0965ce3df1ddb5775a582f6e6a6b54ed381ffad0d6cb14b555eb205732586aee26e0f0bd29e3054fa2ac3d6ae0cf243fa26786eae09ad1c52a09278d54eb278c22f17419b5da6c09dd57cd2c3e1d6b6d513f11a97cac278687455aa7e2f48a99814a53e78b24c38a3b96a90d91f54d82c1d41d1d3117af69acf495f06a706474ac96b9de1a1e3ca2cd4851c978759ccca15548a1ea4a931611178a37011be9131e967cac4f44f7540d1910e434bb08777ad72fca63404bd26e74e317839a2eb3fa6f6618b864eb47ffd96ef6effe63bb85aae15cec72f781d912e81f3387be2d1b2ade46778926716563d1caf26c291a8a53fd35b122cab6a47f05d8bf20253c96f34d1e1f3f0e5302bf47a1a9b10ea5f97d15267a2a5b9b37549e768cabfc7f7db91bf6fa9456738ce8b1ce522e5295aae262959b377d58f36126a7408a392b0c2b95c7592b0ed5e6943fb8b925110ce914595dd6ca3c7448f1b0c27998b32252a47800c711808d143fc8a8848d51a1742e401a29b8e582db104b54842f6690c61b01ffdd86bbb400897d704b7043f8731494afc6989a9a2e82d9ad82c3e15ae019bf0b6fdff553fb423a2beff1bb6a85279ee4cdb713257aacf2c644ced0abea840ee8dcd02c65fd1817f9071ad5d8b788c53829b6d37f1a2b6a85afe47014e2da2d5f7764df95c9fef8ab09b00ab5c4fe5d44911c6f13d77", 0x1000}, {&(0x7f0000000680)="b7f07a77b32da64ebf4f05bc929dc6edb49f66afcba8e6d33cb962526be03ae5160c6edcd4a729effdfb0f34916b4a7458db04fcd3d20b960d79d54f5ade0af56c4e7f69a1e6f757026efae91ace59dde7c282f63749e3e278ecda11ee606c3be5af22a72a7425b2b9c3186dc68502b2dce75eb425", 0x75}, {&(0x7f0000000700)="bebd6d6783496fb00ff6b789264eb69fd2ef8983f087b3c23a85f19084d05e28aaf4bd5cd3816c25b62fc76e9f72e4a7a32a277f1fbaf07caee314299f1b33ba797668c9955ea1d207a8b4cb4e90f1a0981315ecc23aa84cb9241927ff7914ff07c49d96a831872796b8f727f6166ef566659a0c76be4d2fb4ca1216a2b8c17aa0a7af0bd5425f9c6f2c3295c419aac9988606c2ce8630f0263f6727eaafd3da527d75ec0ac4150090a0df0da62d336d22f0395fe95b4e3acb52c5c98aea75f11e7618a163125e82f03aadb7aab8398329748f2c8d778e30b8fdf725a975410984aed841d9785a4ce03a8bf2", 0xec}, {&(0x7f0000000800)="d7d25e1d0506697b084bd00eb9787cdcc75772768eb6aeeecc71a3df3945e447fd3125f53cf2a02e929538", 0x2b}, {&(0x7f0000000840)="50a76917a87ec0955afbbb66cd35b449e145f1d9975326a0ce0cfe76c7fe58b43450504b6b6eb69a2be28907e1093e701f28a5d28147acc61fe7eaa721c0f7af4f338d2ff140c6f17782ea4323317bd71f76ed6ac304a52d7f353f2bd54029704113d87e0f08823911967a6ec97813b2936fbe7af6e6632e77015fb826d5850eb265863bcbddb092fbeb7cde31fe1068d83da1dd19dc476d8a5487aded2b5899fab0cedb5ae1db1692b54c81cca1f3", 0xaf}, {&(0x7f0000000900)="ec3e18d2b790eec3fa839c96fc9d7e014b491ab2071932ed45203275aa534fc30158896a6bdea0660eec47ea579a10dd679034b189e5404e9214baade360a26cdac267a707fa002346a776a0b30c517b54760775501afd969be115a2f14da6a7aad81192998eee38e37de8c36cfd2dc4beddb3a942870c09f2ad996e28cdd9e70a1364d8353b9cdebe7166952e16c40ce7623fe8cbf536cff6e05eaae64566ef057cb874314ea43abd7034b3b54c364821e1281fd7269aa4ec6ef343e09b54e8b602a68f273d2a8d455d82f2172fe64de834e2bf7cc2d04908076df123150052fe", 0xe1}, {&(0x7f0000000a00)="a0eb3a47a4a1f859fe897dd844657ab08478f5b1eb3fa514226e08ef16337566589963c26a1794e344ab2ddb8294ed23a7faf08a3326b6315a1547479ad150dd818d49231484885a6059262a157ece767430f4a0f6afcb549185cd7e0058c9949be4337a1ae4da8338ced6938b50db080a1a59831481542d4b6b46d4a5c9063402c8a82d4f99d83b4b678fb02c58b1536b12e83b181e09daed762805971cfbb8afac021555c3bc52e7a5aaa13f7c8af28fe42a69506251", 0xb7}, {&(0x7f0000000ac0)="5ec23e0c587cdb6c24c8652e31c55936edd006", 0x13}], 0x8, &(0x7f00000032c0)=[{0x34, 0x113, 0xffffffff, "21b9354ec0a633981bb36d4cf814eca43421715c2a531fb4952667c16237588b206a7c8f859ba9"}, {0x90, 0x84, 0x4, "efda17a9176e258ac7d274301d006a4207691fde03ad34ddc080ce846381e16e263cf89f6930de30338fa795d71bec56797b51511efb4f4359fc3b3f0d7bcd8266af016f7c79c601458398c33896c7082f5a15e4fe847b4ee4db23ee8b359c595a39a5ab2d9a80fce685cdef99b0c2d2a4229399f8de5307b01751cac96c911ebf"}, {0x90, 0x100, 0x9, "8e9b2a9009b6c31c320c78f7275f086175fe539095ccce849df0fb95290f70a0b38a128464a62492ed90077011c60304ac2d8fb3394682a896d803bfaa7bd0231200de98a818409407f9c42ddd894e12e62a5c4f05d46277d6cdaf2546b4229619d1fbf6b898faa798c731de25fcbc95d827433fee60534784bb6b9f9b4fd4aeaa0762"}, {0xcc, 0x109, 0xfffffffe, "7b88c06766224c6a27414678a899a3d104606ad94c37e414b56336c9f7763cb325a7d77b2504213938f71322680457b04b1f513f5f7a67d31e4fecaac41e67fa9e81224111db2d82dfdf8edab070bbf3f9fe92f67b4bcfcfc0913e0eef049790c9c9791d743357c0c7ca8d8983127abde17267121107636f9cfc9a9858ca73d6dc6fdcb5c6400fd72c374c26ad6fa7f2b39ae6427d53e85f616968d16a15790492a96e891e9ed53faf2ead46141cf165f44e6ff201347d3f7a84703f065259"}, {0xb4, 0xff, 0x1f, "ef34dc4be6633c890e2ff36c008d1223d9e204e802070a3bc4733a73438b8a8bc2308141769c97a937ea814c46dc2fb4a884d1cecc142ee597d768fc05b36e98b0acf2b73ca7781f528f88db82b9e7e77911c44d101dfc75567e80595570dfb7557d8d9ca37588de2f07456e9dc8be93bcdc582e1f15ec929acde16a42ebc7675bcf4ee6396ecf9f23ac53e397a2bde33c0e8d303cc27e6113d8e9710cc860fb6fed203727385f"}, {0xe4, 0x110, 0xfffffffd, "c76b76f9217fe2e0946d13700c79145e5a0ff66f9fa8737cce6f69ed1136d1a2fb548316a1251bded6ae22040c97035167fbffd182421e4cf042f8d249268b991bcc09b7be17dc8420f4f84cc9b9262e55d4680544b8b431bac0b4769db820e75b3c5447d83bdc9fc5bf3b842a021e6e0c1459a2ba944e48d7e197d5781a93334148447b48c538ea23c8ceee7308b7682e4c9fef272ec32f80813c99ba675ddd897b064e8da27ba2955d3ef98fb4979f57796fa637ce704d371954fc08a6e933a38958384db0226ef5a5c2e54c79ff5c78a802cdbff4f4e8"}, {0x1c, 0x10f, 0x5, "61c12e370545f9be0ad8e8358c"}], 0x3d4}}, {{&(0x7f0000000b40)=@isdn={0x22, 0x6, 0x5, 0x7, 0x20}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000bc0)="04e4ca253b508d2f77b7954a61df5d48688c635db63d32c655ae7791e1b94faa504e497cebe6425eef4d", 0x2a}, {&(0x7f0000000c00)="a067aea56eb4431b8607e9f7c5c84a9fb751a3b10ac25fd2aa9d14d9ad7c1ed129e4e78f91f5e76112f0a12cb0d7e2fa7ff44092edebc3c4658f8e4eefee2d1bb830882520a5edfc6d34e710a6021043b2ed1d1691c583be2faf25a73c92ea3bc66d676342525fb20e09c1b003bb7ac8dfce21daede840aa9b392870df42d89cd26f0f96ea501d69969c88598179e2fb41abc07aa4de88cb", 0x98}, {&(0x7f0000000cc0)="1a26f0e1849aa4ba3c82f199f5fed02a44bd31b257cc5de5dccf3ce701c1ac3ea2b5d9e180c78d217b78f2c062475023c27c311284d52ea5126e062753a77f82cc49e6ad3ee20b07c8cca25de118a9bc4f8da428e52ec1c78a5353cbb9868c1800c37e16b48d0d3241f30b2cb8fa74729ab2cbe2", 0x74}, {&(0x7f0000000d40)="d9ba6eceafb208a73f11302469dfa882fd76c224abe9ab71098ad2cefc01b1be51fa009d6ffbc06dff989b507f56774d64aa80ff22956761e41164901449fa8fdeaa292c3cf04dd42fe7e129452f90a33015e9daec0e584a7b2f5efba9c7bfe76160af0c0b85e064dd29b648742ffa998ed5508aa06191f6757db8b77eb43b972f4a1a14523cd7a2b0e2", 0x8a}, {&(0x7f0000000e00)="3143198d57501df91bfe18b3b995", 0xe}, {&(0x7f0000000e40)="6fbe6c882af5f9515d2c1dca34e45f76874dde21758aa444de4b", 0x1a}, {&(0x7f00000036c0)="427c5d235ceb5f7408a758029eca9369b3ff83d10c48f90f77ad10874b09da059796d0add7b1c9ad191c5c3e9051bf1d4d991cce05dd95d9a5678440ec9a79c2f2b51cfa86cb3d19db41b88eacd3a838df2291072c88002a6cf8a298327b9ce03fff3078d387e240e860fc77dbe9c1201d2fdc5efa26de5e5e53ac2d86c2ae0f2d3138a5219eb2f3fcea09d7c55132920d29b4b1a8354d5f6d47c3f837ccf5b02cc8fd8033553ad848ad96ac6c2429ab7dccd3aba677f256976d1e7582908e009942f3233b2b7cc1144f06f02045656be6d337e5c3bc4fef0811bf70bfb257e50d7fc11e612f1e1dd3dc28cb24bff04b", 0xf0}, {&(0x7f0000000e80)="87d721afda8aa8085a1fdd2086aeac3f44a827cb09b6343f7e07bb0687c9df4ecc32f2d5af92713df48af74b0d4bae412f9287edd89743847bfc652fcbe71b3074671434ba470e1a2d69d50ef0d0a46579b3e1add2c1a629317e8e4f53a3737caa1b014330da3e8809b26f4fd94a64f8c0ad3ff70752bfa0221affc4", 0x7c}], 0x8, &(0x7f0000003800)=[{0x74, 0x117, 0x1a1b, "48025d9d25857a312917d9394686852c26e2bf45d86291be20b5e47d4a6003fd75ca993f8a63a31c0f20506a3748fc1a190b70807da9185f83325808b6f7f6f7a87e7e91fda1778fc5922d8b751a2bdf80efb94187e6ab7be3a9b767d531a9f6802fcdc7c4"}, {0xa0, 0x88, 0x4, "802a3c0f644f7719f909e2357346531eebf5466964e838d1bbe610896c38489369fadda7d8d37e7856aa17c536f48574be067d1ae6fc7c0dea02ce48e0a56df4871b7df25abce9d70ad1b3419c2fb5fa9e81028befe1ef3e29b3996c464a3309f350462bb258d457377605857458c27f92cf0196d9957a764bd7334027d345d903d9cd350408a64e6fb56347ec2cf5045b195e2b"}], 0x114}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000003940)="fa0809f7f347c3fe64d1637bba5f1f99ad57c6d3c04877e142dc4511167c6d00d8449151f298e32006d1c6c78b8e0f15b1b882e5d4293c194a8343075fea00bf7fa933f17817142785dc79b8dbffd5e372c0b34e242a5810b895dae03adaa866ec817db807c4b71f34e175fc12ce54c4eff196619556c04928bc43ba8a4f62a6a08fa1976fff9bb8c8f210dbdb8e682805850bfcc7492cabee01e3044f3f8ca6b0", 0xa1}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="14ad7448498311765fc0871717e478ea95d3ce0fcee90bf4a7580e1d17483684f9005ae36db22e3fe43b6cdeef817141f5d843412e74d1618b6d7038f6f7aac7acc594a15fe3b26acbf0f187427c53335a7c66bff43929e1ab9eb53149c34d5e85d945d8f1ed1db5291b17694eec213a68d819466688bd4c3423727a8ce1c1b6523a9c6a0a63fac1a73b295bffeb5eda387ba7766e1520", 0x97}, {&(0x7f0000004ac0)="c0bc774ec3f0046699111a31c23eea7c728f55e044c6144d8f0ae927cd7998ae3a8fe581f8591b9b9a21cfa5e437ff73dd74afb96c5863764d5057f4d40f0b6e20a1a9e5cc96955420c6e00e0e1960b1dff509472847efb77005e73e2857a89ce88471a00ebba8441a2a24e3dd6254dc75a30064fc245d4ecc42a31c70d11ca2c2d0521754e2d1bf9404ec67dd9fe816017163c25b4ad7bd26be5597ca1dacdc765c99e5d1c5f47a01697ec2218061ec25b10da26a0e8ac492322c4ddf41f0a8fd4ba4", 0xc3}, {&(0x7f0000004bc0)="a54d1bc0b92ceedd406ccb15af207c717a5dde3676e413008fc9a2f1bd0378b009ee9a481035b930884dcc1f303c4b960a3fd9f1149594daa2114b41fc8dee8a97d5ac8f98aeca1e5d66e17f4ce23e20678200890f8bbeea94e66bfd28c4f5a1decbfa350aa8f3606c6f004d7d6aa0e0e0a53052e28a9de6b2c2d025c328eb289b3f921818960d5f4a7f916995908776d08126fd46dd52eacb7254678613ed3c47ed53e5b9357b31201e8a", 0xab}, {&(0x7f0000004c80)="0e33107750dd991ad822ddd30c02a94d35daab6810e5afc21e083155ad7b6e4675c04e2d300bbc029d5a5d5e5daa5b6e3113bb6bb6f6e373f7c58fffbb42fda9f4bf411ad59ca4253d68eee3", 0x4c}, {&(0x7f0000004d00)="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", 0x1000}], 0x7}}], 0x4, 0x20004000) dup2(r2, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) openat$sndtimer(0xffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 469.132062][T11987] vcan0: Master is either lo or non-ether device 17:26:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 17:26:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000000)=0x4) [ 469.344487][ T29] audit: type=1400 audit(1597512415.126:31): avc: denied { set_context_mgr } for pid=11988 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 17:26:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1157c0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:55 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 469.481869][ T29] audit: type=1800 audit(1597512415.196:32): pid=11989 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16111 res=0 [ 469.583039][ T29] audit: type=1800 audit(1597512415.336:33): pid=11990 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16111 res=0 17:26:55 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xffff, &(0x7f00000004c0)) 17:26:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) close(0xffffffffffffffff) sync() [ 469.901155][T12000] vcan0: Master is either lo or non-ether device 17:26:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}}}) 17:26:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:55 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:56 executing program 0: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) splice(r3, &(0x7f0000000180)=0xffff, r1, &(0x7f00000001c0)=0x101, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r4, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x800000000000}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000100)={0x4, 0x100000}) [ 470.506623][T12013] vcan0: Master is either lo or non-ether device 17:26:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 17:26:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}}}) 17:26:56 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:56 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xffff, &(0x7f00000004c0)) 17:26:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 471.102032][T12024] vcan0: Master is either lo or non-ether device 17:26:57 executing program 3: sched_setattr(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) inotify_init1(0x0) sync() 17:26:57 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}}}) 17:26:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 17:26:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80a84, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00'], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x44) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on,\x00', @ANYRESDEC]) 17:26:57 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}}}) 17:26:57 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) io_setup(0xffff, &(0x7f00000004c0)) [ 472.206113][ T28] Bluetooth: hci1: command 0x0406 tx timeout 17:26:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0xfe4}) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000080)) r2 = socket(0x28, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x1, 0x4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:26:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x2, 0x0) 17:26:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 17:26:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', 0x0, 0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe71}}, {@nodots='nodots'}], [{@uid_eq={'uid'}}, {@obj_role={'obj_role', 0x3d, 'status\x00'}}, {@uid_lt={'uid<'}}]}) 17:26:58 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:58 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) io_setup(0xffff, &(0x7f00000004c0)) 17:26:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r2 = msgget$private(0x0, 0x41) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/146) 17:26:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 17:26:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x54042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 17:26:59 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:26:59 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0xffff, &(0x7f00000004c0)) [ 473.682505][T12082] device ipvlan2 entered promiscuous mode [ 473.691581][T12082] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 473.701892][T12082] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.714448][T12082] bond0: (slave ipvlan2): slave is up - this may be due to an out of date ifenslave 17:26:59 executing program 0: r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/193) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) r2 = socket(0x400020000000010, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002800270f00"/20, @ANYRES32=r8, @ANYBLOB="840004000000000000000000"], 0x24}}, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r8, 0x3, {0x0, 0x1, 0x3}, 0xfd}, 0x18, &(0x7f0000000240)={&(0x7f00000001c0)="c66df5285cbd5886ada5d591561c93ab83a47f3a2c06ed21b7c1fe03a93cda8c53947b95c67fa6fc8fcb27308ee08470c061488d5e143ef51854528fe20900b12cea372603f77fc28eddb2f65c56", 0x4e}, 0x1, 0x0, 0x0, 0x4}, 0x20044034) 17:26:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 17:26:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 17:27:00 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) [ 474.593870][T12098] input: syz1 as /devices/virtual/input/input26 [ 474.846261][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.008336][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:27:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004f40)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001440)={@map=r0, r1, 0x0, 0x2}, 0x10) 17:27:02 executing program 1: io_setup(0xffff, &(0x7f00000004c0)) 17:27:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 17:27:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:02 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:02 executing program 0: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 476.476787][T12129] device ipvlan2 entered promiscuous mode [ 476.486018][T12129] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 476.496552][T12129] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.509203][T12129] bond0: (slave ipvlan2): slave is up - this may be due to an out of date ifenslave [ 476.560102][T12131] input: syz1 as /devices/virtual/input/input27 17:27:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000c08d93590000006110280000000000050000000000000000000000456cc0b67031efaa21efe822f4862c91826a189bcf9be1a8dc1743c367291d2280a135b4628e04d2300f642f1729247337d421803bf08b7ce72205dec489f0a4de746242efa4e5a3cf113aef8e6263a2942acc05c15c3b5ff16aad30fd7504f4350944a4a87d4810ff2a4a0d32731f08c0c38b950a0745b201f0d5fc09321bf79a517824ed585eeaacc876af23b8333a721f2592827cd144ad6cbc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x74) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:27:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:02 executing program 1: io_setup(0xffff, &(0x7f00000004c0)) 17:27:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:03 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @mcast1}, 0x1c) 17:27:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x2, 0x4cbd}]}, 0xc, 0x0) [ 477.533791][T12154] input: syz1 as /devices/virtual/input/input28 17:27:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded897", 0x19, 0x0, 0x0, 0x0) 17:27:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:03 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x21b6487635b4d857) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 17:27:03 executing program 1: io_setup(0xffff, &(0x7f00000004c0)) [ 478.360735][T12171] device ipvlan2 entered promiscuous mode [ 478.369549][T12171] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 478.380016][T12171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 478.392659][T12171] bond0: (slave ipvlan2): slave is up - this may be due to an out of date ifenslave 17:27:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:04 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) 17:27:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x4000000000dc) 17:27:04 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) io_setup(0xffff, &(0x7f00000004c0)) 17:27:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x38, [@dev, @private, @local]}, @timestamp={0x44, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:27:05 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:05 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x0, 0x3, [@multicast2, @dev, @empty]}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) 17:27:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:05 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) io_setup(0xffff, &(0x7f00000004c0)) [ 480.048608][T12204] device ipvlan2 entered promiscuous mode [ 480.057568][T12204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.067796][T12204] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.080334][T12204] bond0: (slave ipvlan2): slave is up - this may be due to an out of date ifenslave 17:27:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:06 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) io_setup(0xffff, &(0x7f00000004c0)) 17:27:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 480.775372][ T8712] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 481.139032][ T8712] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 481.148433][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.211582][ T8712] usb 4-1: config 0 descriptor?? 17:27:07 executing program 4: r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r2, r1, 0x0, 0x100000004) 17:27:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:07 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 481.310620][ T8712] gspca_main: sunplus-2.14.0 probing 041e:4012 17:27:07 executing program 1: prlimit64(0x0, 0x9, 0x0, 0x0) io_setup(0xffff, &(0x7f00000004c0)) [ 481.782972][T12232] device ipvlan2 entered promiscuous mode [ 481.792013][T12232] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.802329][T12232] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 481.814971][T12232] bond0: (slave ipvlan2): slave is up - this may be due to an out of date ifenslave 17:27:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000280)=""/237, 0x26, 0xed, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x10) r3 = socket(0x400020000000010, 0x803, 0x0) write(r3, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x90, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40044}, 0x8881) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r2, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r7 = fcntl$dupfd(r6, 0x406, r1) ioctl$RTC_IRQP_READ(r7, 0x8004700b, &(0x7f0000000040)) 17:27:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="4c4ced391180"}, 0x14) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) [ 482.148845][ T8712] gspca_sunplus: reg_r err -71 [ 482.153987][ T8712] sunplus: probe of 4-1:0.0 failed with error -71 [ 482.213518][ T8712] usb 4-1: USB disconnect, device number 12 17:27:08 executing program 1: prlimit64(0x0, 0x9, 0x0, 0x0) io_setup(0xffff, &(0x7f00000004c0)) 17:27:08 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 482.905937][ T8712] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 483.278880][ T8712] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 483.288453][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.325808][ T8712] usb 4-1: config 0 descriptor?? [ 483.373357][ T8712] gspca_main: sunplus-2.14.0 probing 041e:4012 17:27:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:27:09 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:09 executing program 1: prlimit64(0x0, 0x9, 0x0, 0x0) io_setup(0xffff, &(0x7f00000004c0)) 17:27:09 executing program 4: syz_io_uring_setup(0x87, &(0x7f0000000900), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lstat(0x0, 0x0) pkey_mprotect(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 483.630443][ T8712] gspca_sunplus: reg_w_riv err -71 [ 483.635984][ T8712] sunplus: probe of 4-1:0.0 failed with error -71 [ 483.772960][ T8712] usb 4-1: USB disconnect, device number 13 [ 483.877195][T12282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12282 comm=syz-executor.0 [ 484.013405][T12293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12293 comm=syz-executor.0 17:27:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:10 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:10 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:10 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0x0, &(0x7f00000004c0)) 17:27:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) geteuid() mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000080)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@default_permissions='default_permissions'}, {@xino_off='xino=off'}, {@default_permissions='default_permissions'}, {@xino_off='xino=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}]}) [ 484.478488][ T9086] usb 4-1: new high-speed USB device number 14 using dummy_hcd 17:27:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 484.865443][ T28] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 484.880349][ T9086] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 484.889702][ T9086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.939807][ T9086] usb 4-1: config 0 descriptor?? [ 485.002158][ T9086] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 485.104999][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 485.227100][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.237678][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.248871][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.258768][ T28] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 485.268695][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.396343][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.405774][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.413840][ T28] usb 5-1: Manufacturer: syz [ 485.467283][ T28] usb 5-1: config 0 descriptor?? [ 485.726024][ T28] Registered IR keymap rc-hauppauge [ 485.763997][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.801119][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.854408][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 485.875109][ T9086] gspca_sunplus: reg_r err -71 [ 485.880287][ T9086] sunplus: probe of 4-1:0.0 failed with error -71 [ 485.906381][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 485.914974][ T9086] usb 4-1: USB disconnect, device number 14 [ 485.971870][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.009227][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.055146][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.085503][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.118059][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.159208][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.198154][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.239726][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.279563][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.318347][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 486.354912][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 486.366832][ T28] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 486.375302][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 486.381478][ T28] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 486.394870][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 486.414844][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 486.434833][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 486.454855][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:12 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x6, 0xc48, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) 17:27:12 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0x0, &(0x7f00000004c0)) 17:27:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 486.472507][ T28] usb 5-1: USB disconnect, device number 4 [ 486.478749][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:12 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0x0, &(0x7f00000004c0)) 17:27:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 487.145714][ T12] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 487.155244][ T28] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 487.420447][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 487.516526][ T28] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 487.525852][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.558967][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.569374][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.571855][ T28] usb 4-1: config 0 descriptor?? [ 487.580591][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.580729][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 487.605348][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.642017][ T28] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 487.748902][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.758184][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.766467][ T12] usb 5-1: Manufacturer: syz [ 487.845060][ T12] usb 5-1: config 0 descriptor?? 17:27:13 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:13 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:13 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0xffff, 0x0) 17:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:27:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 488.038045][ T12] usb 5-1: can't set config #0, error -71 [ 488.062606][ T12] usb 5-1: USB disconnect, device number 5 [ 488.495314][ T28] gspca_sunplus: reg_r err -71 [ 488.500440][ T28] sunplus: probe of 4-1:0.0 failed with error -71 [ 488.528212][ T28] usb 4-1: USB disconnect, device number 15 [ 488.685095][ T12] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 488.965080][ T12] usb 5-1: Using ep0 maxpacket: 16 17:27:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xba020000}, {0x6}]}, 0x8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0) 17:27:14 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0xffff, 0x0) 17:27:14 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 489.093476][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.104091][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.115407][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.125333][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 489.135213][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.425837][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.435220][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.443422][ T12] usb 5-1: Manufacturer: syz 17:27:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:15 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280), 0x0) io_setup(0xffff, 0x0) [ 489.551704][ T12] usb 5-1: config 0 descriptor?? [ 489.787951][ T9543] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 489.838986][ T12] Registered IR keymap rc-hauppauge [ 489.874989][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.957313][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.998985][ T12] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 490.014290][ T12] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 490.102908][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.144866][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.178548][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.218787][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.227325][ T9543] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 490.236927][ T9543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.272313][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.290731][T12403] not chained 10000 origins [ 490.295263][T12403] CPU: 0 PID: 12403 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 490.310185][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.320244][T12403] Call Trace: [ 490.323555][T12403] dump_stack+0x21c/0x280 [ 490.327895][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.333106][T12403] kmsan_internal_chain_origin+0x6f/0x130 [ 490.338833][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.344040][T12403] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 490.349857][T12403] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 490.355986][T12403] ? unix_dgram_sendmsg+0x355e/0x4390 [ 490.361383][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.366592][T12403] ? kmsan_set_origin_checked+0x95/0xf0 [ 490.372151][T12403] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 490.378278][T12403] ? _copy_from_user+0x201/0x310 [ 490.383230][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.388507][T12403] __msan_chain_origin+0x50/0x90 [ 490.393540][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.398676][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.403678][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.408381][T12403] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 490.414284][T12403] ? __msan_poison_alloca+0xf0/0x120 [ 490.419680][T12403] ? kmsan_copy_to_user+0x81/0x90 [ 490.424881][T12403] ? _copy_to_user+0x1bf/0x260 [ 490.429707][T12403] ? put_old_timespec32+0x231/0x2d0 [ 490.434913][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.440141][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.445347][T12403] ? kmsan_get_metadata+0x116/0x180 [ 490.450556][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.455940][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.461503][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.466726][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.471590][T12403] do_SYSENTER_32+0x73/0x90 [ 490.476104][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.482429][T12403] RIP: 0023:0xf7f96549 [ 490.486489][T12403] Code: Bad RIP value. [ 490.490555][T12403] RSP: 002b:00000000f554e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 490.498971][T12403] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001e00 [ 490.507179][T12403] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.515155][T12403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.523128][T12403] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 490.531106][T12403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.539089][T12403] Uninit was stored to memory at: [ 490.544126][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.549849][T12403] __msan_chain_origin+0x50/0x90 [ 490.554789][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.559936][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.564878][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.569561][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.574937][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.580484][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.585688][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.590541][T12403] do_SYSENTER_32+0x73/0x90 [ 490.595054][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.601366][T12403] [ 490.603686][T12403] Uninit was stored to memory at: [ 490.608723][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.614444][T12403] __msan_chain_origin+0x50/0x90 [ 490.619402][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.624605][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.629546][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.634225][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.639629][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.645264][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.650466][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.655322][T12403] do_SYSENTER_32+0x73/0x90 [ 490.659949][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.666266][T12403] [ 490.668586][T12403] Uninit was stored to memory at: [ 490.673613][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.679339][T12403] __msan_chain_origin+0x50/0x90 [ 490.684298][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.689416][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.694359][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.699043][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.704420][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.709972][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.715179][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.720035][T12403] do_SYSENTER_32+0x73/0x90 [ 490.724540][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.730859][T12403] [ 490.733182][T12403] Uninit was stored to memory at: [ 490.738212][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.744024][T12403] __msan_chain_origin+0x50/0x90 [ 490.748969][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.754090][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.759035][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.763718][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.769094][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.774643][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.779849][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.784703][T12403] do_SYSENTER_32+0x73/0x90 [ 490.789205][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.795519][T12403] [ 490.797839][T12403] Uninit was stored to memory at: [ 490.802869][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.808595][T12403] __msan_chain_origin+0x50/0x90 [ 490.813535][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.818657][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.823612][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.828292][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.833672][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.839221][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.844425][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.849277][T12403] do_SYSENTER_32+0x73/0x90 [ 490.853784][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.860101][T12403] [ 490.862421][T12403] Uninit was stored to memory at: [ 490.867451][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.873174][T12403] __msan_chain_origin+0x50/0x90 [ 490.878115][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.883238][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.888178][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.892856][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.898228][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.903778][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.908979][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.913849][T12403] do_SYSENTER_32+0x73/0x90 [ 490.918361][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.924679][T12403] [ 490.927007][T12403] Uninit was stored to memory at: [ 490.932038][T12403] kmsan_internal_chain_origin+0xad/0x130 [ 490.937759][T12403] __msan_chain_origin+0x50/0x90 [ 490.942705][T12403] __get_compat_msghdr+0x6db/0x9d0 [ 490.947819][T12403] get_compat_msghdr+0x108/0x2b0 [ 490.952754][T12403] __sys_sendmmsg+0x755/0xf70 [ 490.957437][T12403] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 490.962811][T12403] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 490.968374][T12403] __do_fast_syscall_32+0x2af/0x480 [ 490.973575][T12403] do_fast_syscall_32+0x6b/0xd0 [ 490.978428][T12403] do_SYSENTER_32+0x73/0x90 [ 490.982939][T12403] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.989254][T12403] [ 490.991577][T12403] Local variable ----msg_sys@__sys_sendmmsg created at: [ 490.998516][T12403] __sys_sendmmsg+0xbb/0xf70 [ 491.003126][T12403] __sys_sendmmsg+0xbb/0xf70 [ 491.008190][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.049605][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 491.058906][ T9543] usb 4-1: config 0 descriptor?? [ 491.084653][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.091536][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 491.106945][ T9543] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 491.114686][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.124929][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 491.134661][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:27:16 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:16 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x0) 17:27:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x20000000005, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x280, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0x2cf}}], 0xa0cbcb, 0x0) [ 491.154629][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.163051][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 491.174700][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.194608][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.214613][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.224309][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 491.244726][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.264710][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.271857][ T12] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 491.280330][ T12] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 491.289031][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.304590][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.324704][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.344608][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.364753][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:27:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x4, 0x4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x1, 0x8001, 0x9ad9, 0x7, 0x0, 0x940d, 0xffffff80, r4}, 0x20) [ 491.384670][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.396759][ T12] usb 5-1: USB disconnect, device number 6 [ 491.404729][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 491.444920][T12433] input: syz1 as /devices/virtual/input/input43 [ 491.985588][ T9543] gspca_sunplus: reg_r err -71 [ 491.990730][ T9543] sunplus: probe of 4-1:0.0 failed with error -71 [ 492.022139][ T9543] usb 4-1: USB disconnect, device number 16 [ 492.075164][ T12] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 492.344820][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 492.485249][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.495687][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.507189][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.517261][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 17:27:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:27:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:18 executing program 1: 17:27:18 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x0) 17:27:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000400)="4ebefa1e92", 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000000)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) [ 492.527226][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.611272][T12464] input: syz1 as /devices/virtual/input/input44 [ 492.678061][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.687489][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.687564][T10095] Bluetooth: hci2: command 0x0406 tx timeout [ 492.695731][ T12] usb 5-1: Manufacturer: syz 17:27:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 492.907587][ T12] usb 5-1: config 0 descriptor?? 17:27:18 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x0) [ 493.175247][ T12] Registered IR keymap rc-hauppauge [ 493.210833][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.283314][T12483] input: syz1 as /devices/virtual/input/input46 [ 493.306126][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.317268][ T3224] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 493.366158][ T12] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 493.381052][ T12] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 493.472170][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.509618][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.545201][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.585629][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.618432][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.656499][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.695493][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.725711][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.749532][ T3224] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 493.759078][ T3224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.768845][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.779956][ T3224] usb 4-1: config 0 descriptor?? [ 493.824186][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 493.856126][ T3224] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 493.864151][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 493.878743][ T12] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 493.887026][ T12] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.898150][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 493.914490][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 493.944499][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 493.959542][ T12] usb 5-1: USB disconnect, device number 7 [ 493.965790][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:27:20 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:20 executing program 1: 17:27:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r2 = socket(0x400020000000010, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 17:27:20 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 17:27:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 494.494608][ T3224] gspca_sunplus: reg_r err -71 [ 494.499805][ T3224] sunplus: probe of 4-1:0.0 failed with error -71 [ 494.520167][ T3224] usb 4-1: USB disconnect, device number 17 [ 494.725788][T12524] input: syz1 as /devices/virtual/input/input47 17:27:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:27:20 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 17:27:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0xfffffffffffffffe, &(0x7f0000000080)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r2 = socket(0x400020000000010, 0x803, 0x0) write(r2, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0xff, @loopback, 0xd14a}, 0x1c) 17:27:20 executing program 1: 17:27:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 495.194562][ T28] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 495.420094][T12541] input: syz1 as /devices/virtual/input/input48 [ 495.436849][ T28] usb 5-1: Using ep0 maxpacket: 16 17:27:21 executing program 1: 17:27:21 executing program 0: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 495.557213][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.567675][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.579063][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.589067][ T28] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 495.599093][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.696501][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.706011][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.714153][ T28] usb 5-1: Manufacturer: syz [ 495.794448][ T9086] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 495.852903][ T28] usb 5-1: config 0 descriptor?? [ 496.125174][ T28] Registered IR keymap rc-hauppauge [ 496.161031][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.176312][ T9086] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 496.185577][ T9086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.195481][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.227419][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 496.239974][ T9086] usb 4-1: config 0 descriptor?? [ 496.242095][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49 [ 496.292715][ T9086] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 496.331281][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.377442][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.416042][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.448380][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.487301][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.533915][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.565045][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.594666][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.627289][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.664675][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.696602][ T28] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 496.704983][ T28] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.805252][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 496.812179][ T28] usb 5-1: USB disconnect, device number 8 [ 496.830576][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 496.954765][ T9086] gspca_sunplus: reg_r err -71 [ 496.959734][ T9086] sunplus: probe of 4-1:0.0 failed with error -71 [ 496.975678][ T9086] usb 4-1: USB disconnect, device number 18 17:27:23 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) 17:27:23 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 17:27:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:27:23 executing program 1: 17:27:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 497.848396][T12587] input: syz1 as /devices/virtual/input/input50 17:27:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:24 executing program 1: 17:27:24 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r2 = signalfd4(r1, &(0x7f0000000000)={[0x3, 0x2]}, 0x8, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) [ 498.655084][ T9087] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 498.870606][T12609] input: syz1 as /devices/virtual/input/input51 [ 498.885090][ T28] usb 5-1: new high-speed USB device number 9 using dummy_hcd 17:27:24 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 499.017307][ T9087] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 499.026732][ T9087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:27:24 executing program 1: [ 499.068850][ T9087] usb 4-1: config 0 descriptor?? [ 499.124580][ T9087] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 499.159552][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 499.284561][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.295303][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.306898][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.316803][ T28] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 499.326765][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.646358][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 499.658430][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 499.666817][ T28] usb 5-1: Manufacturer: syz [ 499.726714][ T28] usb 5-1: config 0 descriptor?? [ 499.804540][ T9087] gspca_sunplus: reg_r err -71 [ 499.809787][ T9087] sunplus: probe of 4-1:0.0 failed with error -71 [ 499.841498][ T9087] usb 4-1: USB disconnect, device number 19 [ 499.985220][ T28] Registered IR keymap rc-hauppauge [ 500.021709][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.054548][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.085605][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 500.100637][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 500.147505][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.188633][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.205447][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.224299][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.236690][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.244346][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.264274][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.284253][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.315161][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.332034][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.339786][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.354344][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.374283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.394331][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.414314][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.434478][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.454299][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.474329][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.491097][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.498756][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.514346][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.534257][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.554283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.574354][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.583648][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.594300][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.614317][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.634297][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.649166][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.656744][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.674285][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.686954][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.694635][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.714302][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.724968][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.734323][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.754323][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.760946][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.774298][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.794270][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.802296][ T28] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 500.810684][ T28] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 500.819436][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:26 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) 17:27:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:26 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:26 executing program 1: 17:27:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write$dsp(r0, &(0x7f00000001c0)="26a08c30c1035700b230b4c80a9ac77bca2fc2b2e41a641dbeb50ad1a6457464996a6a24064afadc5fae3bbfae01166078a01ae1592d3d44a029f3d05ddbad56638cd485634a6a7bc6e5033cf11dae160e0914a387b2eab655237ae97ee938ba0e6176b3e2f61cc659f9265f93897a82820307f5efd49e8647239ef8980f362a7352bf47201e6c76a57f36a37bf220fbc77ef5d40a7d913c03aca8d1d89242524c23805c2480bf1228851a396742f36cd048a6e0170c", 0xb6) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="611e00d084ed54d59649f870d7c9f0ee00", @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf250100000014000100ff010000000000000000000000000001080002007f040000050006001f00000008000200010000ff030002000800000005000600400000000500060007000000d8300e9a79184acba5dbd4b57e0313380da1fba2f3d6b6b16487946c47b20b5a145fb4ea0fd6d8"], 0x58}, 0x1, 0x0, 0x0, 0xc0004}, 0x4048014) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x4004080) r3 = socket(0x400020000000010, 0x803, 0x0) write(r3, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0xd, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000005c0)='trusted.overlay.opaque\x00', &(0x7f0000000600)='y\x00', 0x2, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$vcs(0xffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x20a0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000440)={0x8, 0x0, 0x1015, 0x5, 0x20, {0x5, 0x7}, 0x1}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) mbind(&(0x7f0000493000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04", @ANYRES16=r2, @ANYBLOB="000127bd7000ffdbdf250400000014000100fe880000000000000000000000000001040004000c000400020000007f0000001000040003000000d10000008f0100000500050003000000080003000700000008000300af070000050006007600000014000100000000000000000000000000000000000500050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 17:27:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 500.834326][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.854231][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.874254][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.894243][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.914248][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.934265][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.954298][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.974240][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 500.990286][ T28] usb 5-1: USB disconnect, device number 9 [ 500.996580][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 501.135806][T12646] input: syz1 as /devices/virtual/input/input53 [ 501.217165][T12652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=12652 comm=syz-executor.0 [ 501.326715][T12663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=12663 comm=syz-executor.0 [ 501.394541][ T4008] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 501.426984][T12652] mmap: syz-executor.0 (12652) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:27:27 executing program 1: 17:27:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 17:27:27 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 501.780503][ T4008] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 501.789840][ T4008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.923385][T12664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=12664 comm=syz-executor.0 [ 501.941706][T12665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=12665 comm=syz-executor.0 [ 502.016418][ T4008] usb 4-1: config 0 descriptor?? [ 502.061316][ T4008] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 502.114471][ T12] usb 5-1: new high-speed USB device number 10 using dummy_hcd 17:27:28 executing program 1: [ 502.384225][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 502.399623][T12674] input: syz1 as /devices/virtual/input/input54 [ 502.531613][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.542568][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.553821][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.563853][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.573756][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 17:27:28 executing program 0: 17:27:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 502.704930][ T4008] gspca_sunplus: reg_r err -71 [ 502.710124][ T4008] sunplus: probe of 4-1:0.0 failed with error -71 [ 502.760235][ T4008] usb 4-1: USB disconnect, device number 20 [ 502.955316][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.964738][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.972873][ T12] usb 5-1: Manufacturer: syz [ 503.086264][ T12] usb 5-1: config 0 descriptor?? [ 503.347845][ T12] Registered IR keymap rc-hauppauge [ 503.383563][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.438840][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.485553][ T12] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 503.500603][ T12] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 503.563787][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.574189][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.594185][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.604200][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.614311][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.634190][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.643245][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.654191][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.674149][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.680722][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.694172][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.714141][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.734137][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.744661][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.764120][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.776451][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.784228][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.804189][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.818302][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.825836][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.844098][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.858525][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.866055][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.884126][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.904187][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.922927][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.930457][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.944136][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.964181][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 503.970813][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.994100][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 504.009527][ T12] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 504.017917][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 504.024217][ T12] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.042860][ T12] usb 5-1: USB disconnect, device number 10 [ 504.049087][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:27:29 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) 17:27:29 executing program 1: 17:27:29 executing program 0: 17:27:29 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 17:27:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:30 executing program 0: 17:27:30 executing program 1: [ 504.656368][ T28] usb 4-1: new high-speed USB device number 21 using dummy_hcd 17:27:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 17:27:30 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 505.024973][ T28] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 505.034439][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.130074][ T28] usb 4-1: config 0 descriptor?? [ 505.154299][ T12] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 505.185315][ T28] gspca_main: sunplus-2.14.0 probing 041e:4012 17:27:31 executing program 1: 17:27:31 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 505.454789][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 505.585723][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.596212][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.607379][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.617272][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.627159][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.755083][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.764617][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.772754][ T12] usb 5-1: Manufacturer: syz [ 505.834278][ T12] usb 5-1: config 0 descriptor?? [ 505.844470][ T28] gspca_sunplus: reg_r err -71 [ 505.849656][ T28] sunplus: probe of 4-1:0.0 failed with error -71 [ 505.881294][ T28] usb 4-1: USB disconnect, device number 21 [ 506.114726][ T12] Registered IR keymap rc-hauppauge [ 506.142590][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.194311][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.226057][ T12] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 506.241512][ T12] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 506.283099][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.324120][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.330997][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.344083][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.373990][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.380851][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.394022][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.413972][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.420953][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.434003][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.453989][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.460348][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.474021][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.493973][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.501006][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.514023][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.533935][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.542364][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.554031][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.574002][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.581354][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.596879][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.624014][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.631500][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.644007][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.664021][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.671450][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 506.684050][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.704074][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.715402][ T12] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 506.723609][ T12] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 506.732380][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.743980][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.774019][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.803949][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 506.812069][ T12] usb 5-1: USB disconnect, device number 11 17:27:32 executing program 5: 17:27:32 executing program 0: 17:27:32 executing program 1: 17:27:32 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:32 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:33 executing program 1: 17:27:33 executing program 5: 17:27:33 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:33 executing program 0: [ 507.454178][ T28] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 507.651229][ T4008] usb 5-1: new high-speed USB device number 12 using dummy_hcd 17:27:33 executing program 0: 17:27:33 executing program 1: [ 507.815117][ T28] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 507.824818][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:27:33 executing program 5: [ 507.894559][ T4008] usb 5-1: Using ep0 maxpacket: 16 [ 507.927970][ T28] usb 4-1: config 0 descriptor?? [ 507.971459][ T28] gspca_main: sunplus-2.14.0 probing 041e:4012 17:27:33 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 508.015166][ T4008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.025625][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.036833][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.047332][ T4008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 508.057307][ T4008] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.072417][ T9087] Bluetooth: hci3: command 0x0406 tx timeout 17:27:34 executing program 1: [ 508.346090][ T4008] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.355624][ T4008] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.364677][ T4008] usb 5-1: Manufacturer: syz [ 508.474474][ T4008] usb 5-1: config 0 descriptor?? [ 508.615081][ T28] gspca_sunplus: reg_r err -71 [ 508.620280][ T28] sunplus: probe of 4-1:0.0 failed with error -71 [ 508.650524][ T28] usb 4-1: USB disconnect, device number 22 17:27:36 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:36 executing program 0: 17:27:36 executing program 5: 17:27:36 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:36 executing program 1: 17:27:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 510.566798][ T4008] Registered IR keymap rc-hauppauge [ 510.602719][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.993343][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:27:36 executing program 5: [ 511.103602][ T9843] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 511.116052][ T4008] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 511.131356][ T4008] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input60 17:27:37 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:37 executing program 0: 17:27:37 executing program 1: [ 511.462950][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.473500][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.493638][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.500538][ T9843] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 511.509947][ T9843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.518268][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.533478][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.547777][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.555332][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.573415][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.587493][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.595138][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.609762][ T9843] usb 4-1: config 0 descriptor?? [ 511.615115][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.633525][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.653424][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.671414][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.679034][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.693474][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.699796][ T9843] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 511.713452][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.733398][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.753467][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.771089][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.778670][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.793426][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.813403][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:37 executing program 5: [ 511.833405][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.850909][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.858499][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.873380][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.893430][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.913387][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.933450][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.953462][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.961546][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.973386][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 511.993445][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.013442][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.027122][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 512.034761][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.053418][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.073390][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.081160][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 512.093391][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.113412][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:37 executing program 0: [ 512.133335][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.148269][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 512.155881][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.173372][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.193363][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.213355][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.233335][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.253346][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.273433][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.282152][ T4008] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 512.290826][ T4008] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 512.299568][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.313313][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.323834][ T9843] gspca_sunplus: reg_r err -71 [ 512.328919][ T9843] sunplus: probe of 4-1:0.0 failed with error -71 [ 512.335792][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.353325][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.373292][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.393330][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.400271][ T9843] usb 4-1: USB disconnect, device number 23 [ 512.413343][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.433295][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.447179][ T4008] usb 5-1: USB disconnect, device number 12 [ 512.453497][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 512.983348][ T4008] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 513.223388][ T4008] usb 5-1: Using ep0 maxpacket: 16 [ 513.345059][ T4008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.355514][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.366772][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.376786][ T4008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.386768][ T4008] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.476316][ T4008] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.485906][ T4008] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.494183][ T4008] usb 5-1: Manufacturer: syz [ 513.553172][ T4008] usb 5-1: config 0 descriptor?? 17:27:40 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:40 executing program 1: 17:27:40 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 17:27:40 executing program 5: 17:27:40 executing program 0: 17:27:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 515.114200][ T4008] Registered IR keymap rc-hauppauge [ 515.149489][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 515.533487][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 515.565421][ T4008] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 515.580930][ T4008] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input61 [ 515.665409][ T9843] usb 4-1: new high-speed USB device number 24 using dummy_hcd 17:27:41 executing program 1: 17:27:41 executing program 5: 17:27:41 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 17:27:41 executing program 0: [ 515.872935][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 515.882855][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 515.902809][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 515.922790][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 515.942776][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 515.960922][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 515.969753][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 515.982859][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.002784][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.015210][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.022882][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.034083][ T9843] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 516.043632][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.049726][ T9843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.062900][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.082769][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.094172][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.102834][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.122857][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.135361][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.142963][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.156743][ T9843] usb 4-1: config 0 descriptor?? [ 516.162804][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.177426][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.185029][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.206212][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.212784][ T9843] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 516.222786][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.242713][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.262741][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.282783][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.302778][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.311873][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.322749][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.342750][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.349554][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.363030][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.382766][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.392453][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.402760][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.422781][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.429715][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.442823][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.462720][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.471498][ T4008] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 516.480123][ T4008] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 516.488904][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.502883][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:42 executing program 1: [ 516.522709][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.542707][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.562718][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.582700][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.602720][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 516.621530][ T4008] usb 5-1: USB disconnect, device number 13 [ 516.627998][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:42 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 516.852828][ T9843] gspca_sunplus: reg_r err -71 [ 516.858124][ T9843] sunplus: probe of 4-1:0.0 failed with error -71 [ 516.887338][ T9843] usb 4-1: USB disconnect, device number 24 [ 517.123243][ T4008] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 517.362877][ T4008] usb 5-1: Using ep0 maxpacket: 16 [ 517.485105][ T4008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.495846][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.507211][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 517.517155][ T4008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 517.527200][ T4008] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.663482][ T4008] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 517.672762][ T4008] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 517.680827][ T4008] usb 5-1: Manufacturer: syz [ 517.715093][ T4008] usb 5-1: config 0 descriptor?? 17:27:44 executing program 4: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:44 executing program 5: 17:27:44 executing program 1: 17:27:44 executing program 0: 17:27:44 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:27:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 519.022810][ T4008] Registered IR keymap rc-hauppauge [ 519.058533][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.290158][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:27:45 executing program 0: 17:27:45 executing program 1: [ 519.337278][ T4008] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 519.352322][ T4008] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 17:27:45 executing program 5: 17:27:45 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 519.443287][ T12] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 519.492988][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.512321][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.523517][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.532343][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.552277][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.572319][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.582104][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.592365][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.612266][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.620004][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.632283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.652294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.671258][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.678887][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.692301][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.712245][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.732257][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.752251][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.768622][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.776333][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.792282][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.812261][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.832243][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.833079][ T12] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 519.839950][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.847438][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.854968][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.872256][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.892320][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.912206][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.932308][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.937626][ T12] usb 4-1: config 0 descriptor?? [ 519.938852][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.952275][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.972272][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 519.981565][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 519.992232][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.012274][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.013416][ T12] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 520.032261][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:45 executing program 1: [ 520.052246][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.066479][ T4008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.074089][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.092321][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.112299][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.132231][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.140493][ T4008] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 520.148932][ T4008] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 520.157696][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.172263][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.192228][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:46 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 520.212238][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.232195][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.252227][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:46 executing program 4: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) [ 520.272178][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.292287][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.312242][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:46 executing program 5: [ 520.332209][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.352199][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 520.365494][ T4008] usb 5-1: USB disconnect, device number 14 [ 520.372278][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:27:46 executing program 0: [ 520.632580][ T12] gspca_sunplus: reg_r err -71 [ 520.637785][ T12] sunplus: probe of 4-1:0.0 failed with error -71 [ 520.679552][ T12] usb 4-1: USB disconnect, device number 25 17:27:46 executing program 1: 17:27:46 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:47 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:47 executing program 5: 17:27:47 executing program 0: 17:27:47 executing program 1: 17:27:47 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:47 executing program 4: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:47 executing program 0: 17:27:47 executing program 5: 17:27:47 executing program 1: 17:27:47 executing program 0: 17:27:47 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:47 executing program 1: 17:27:48 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:48 executing program 5: 17:27:48 executing program 0: 17:27:48 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:48 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:48 executing program 1: 17:27:48 executing program 5: 17:27:48 executing program 0: 17:27:48 executing program 1: 17:27:49 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:49 executing program 5: 17:27:49 executing program 0: 17:27:49 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:49 executing program 1: 17:27:49 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:49 executing program 5: 17:27:49 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:49 executing program 0: 17:27:49 executing program 1: 17:27:50 executing program 5: 17:27:50 executing program 0: 17:27:50 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:50 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:50 executing program 1: 17:27:50 executing program 5: 17:27:50 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) [ 524.780624][T13016] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.793629][T13016] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 524.804314][T13016] bond0: (slave ipvlan2): Error -95 calling set_mac_address 17:27:50 executing program 0: 17:27:50 executing program 1: 17:27:51 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:51 executing program 5: 17:27:51 executing program 0: [ 525.510927][T13033] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 525.523662][T13033] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 525.534450][T13033] bond0: (slave ipvlan2): Error -95 calling set_mac_address 17:27:51 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:51 executing program 1: 17:27:51 executing program 5: 17:27:51 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:27:51 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:51 executing program 0: 17:27:51 executing program 5: 17:27:52 executing program 1: [ 526.191998][T13046] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.204509][T13046] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 526.215222][T13046] bond0: (slave ipvlan2): Error -95 calling set_mac_address 17:27:52 executing program 0: 17:27:52 executing program 5: [ 526.565354][ T9843] usb 5-1: new high-speed USB device number 15 using dummy_hcd 17:27:52 executing program 1: 17:27:52 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 17:27:52 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 526.847874][ T9843] usb 5-1: device descriptor read/64, error 18 17:27:52 executing program 0: 17:27:52 executing program 1: 17:27:52 executing program 5: [ 527.109030][T13063] device ipvlan2 entered promiscuous mode [ 527.117951][T13063] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 527.242951][ T9843] usb 5-1: device descriptor read/64, error 18 [ 527.511487][ T9843] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 527.784482][ T9843] usb 5-1: device descriptor read/64, error 18 [ 528.182504][ T9843] usb 5-1: device descriptor read/64, error 18 [ 528.302369][ T9843] usb usb5-port1: attempt power cycle [ 528.522144][ T4008] Bluetooth: hci4: command 0x0406 tx timeout [ 529.021139][ T9843] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 529.192891][ T9843] usb 5-1: device descriptor read/8, error -61 17:27:55 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:55 executing program 0: 17:27:55 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 17:27:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x0, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:27:55 executing program 1: 17:27:55 executing program 5: [ 529.401272][ T9843] usb 5-1: device descriptor read/8, error -71 [ 529.452009][T13089] device ipvlan3 entered promiscuous mode [ 529.461023][T13089] 8021q: adding VLAN 0 to HW filter on device ipvlan3 17:27:55 executing program 5: 17:27:55 executing program 1: [ 529.714200][ T3224] usb 4-1: new high-speed USB device number 26 using dummy_hcd 17:27:55 executing program 0: 17:27:55 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) [ 529.991049][ T3224] usb 4-1: device descriptor read/64, error 18 17:27:56 executing program 1: [ 530.202207][ T9843] usb 5-1: new high-speed USB device number 18 using dummy_hcd 17:27:56 executing program 5: [ 530.343733][T13103] device ipvlan4 entered promiscuous mode [ 530.353206][T13103] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 530.372034][ T9843] usb 5-1: device descriptor read/8, error -61 [ 530.452360][ T3224] usb 4-1: device descriptor read/64, error 18 [ 530.641556][ T9843] usb 5-1: device descriptor read/8, error -61 [ 530.735475][ T3224] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 530.761900][ T9843] usb usb5-port1: unable to enumerate USB device [ 531.021826][ T3224] usb 4-1: device descriptor read/64, error 18 [ 531.441343][ T3224] usb 4-1: device descriptor read/64, error 18 [ 531.564605][ T3224] usb usb4-port1: attempt power cycle [ 532.280985][ T3224] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 532.435647][ T3224] usb 4-1: device descriptor read/8, error -71 17:27:58 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:27:58 executing program 0: 17:27:58 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 17:27:58 executing program 1: 17:27:58 executing program 5: 17:27:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x0, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 532.670657][ T3224] usb 4-1: device descriptor read/8, error -71 [ 532.869304][T13122] device ipvlan5 entered promiscuous mode [ 532.878429][T13122] 8021q: adding VLAN 0 to HW filter on device ipvlan5 17:27:58 executing program 5: 17:27:58 executing program 0: 17:27:58 executing program 1: 17:27:58 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) [ 533.170853][ T3224] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 533.274330][ T3224] usb 4-1: Invalid ep0 maxpacket: 0 [ 533.280577][ T4008] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 533.293907][ T3224] usb usb4-port1: unable to enumerate USB device 17:27:59 executing program 5: 17:27:59 executing program 0: [ 533.553988][T13132] device ipvlan6 entered promiscuous mode [ 533.563396][T13132] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 533.574105][ T4008] usb 5-1: device descriptor read/64, error 18 [ 533.973685][ T4008] usb 5-1: device descriptor read/64, error 18 [ 534.240509][ T4008] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 534.510656][ T4008] usb 5-1: device descriptor read/64, error 18 [ 534.900568][ T4008] usb 5-1: device descriptor read/64, error 18 [ 535.020563][ T4008] usb usb5-port1: attempt power cycle [ 535.734988][ T4008] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 535.914050][ T4008] usb 5-1: device descriptor read/8, error -61 17:28:01 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:01 executing program 1: 17:28:01 executing program 5: 17:28:01 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 17:28:01 executing program 0: 17:28:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x0, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 536.131365][ T4008] usb 5-1: device descriptor read/8, error -71 [ 536.177767][T13154] device ipvlan7 entered promiscuous mode [ 536.186793][T13154] 8021q: adding VLAN 0 to HW filter on device ipvlan7 17:28:02 executing program 0: 17:28:02 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 17:28:02 executing program 1: 17:28:02 executing program 5: [ 536.440734][ T12] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 536.730211][ T12] usb 4-1: device descriptor read/64, error 18 17:28:02 executing program 0: 17:28:02 executing program 5: [ 536.927345][ T4008] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 537.100927][ T4008] usb 5-1: device descriptor read/8, error -61 [ 537.150117][ T12] usb 4-1: device descriptor read/64, error 18 [ 537.370950][ T4008] usb 5-1: device descriptor read/8, error -61 [ 537.420432][ T12] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 537.490558][ T4008] usb usb5-port1: unable to enumerate USB device [ 537.700047][ T12] usb 4-1: device descriptor read/64, error 18 [ 538.099885][ T12] usb 4-1: device descriptor read/64, error 18 [ 538.230020][ T12] usb usb4-port1: attempt power cycle [ 538.959671][ T12] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 539.110683][ T12] usb 4-1: device descriptor read/8, error -71 [ 539.324674][ T12] usb 4-1: device descriptor read/8, error -71 17:28:05 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:05 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 17:28:05 executing program 1: 17:28:05 executing program 5: 17:28:05 executing program 0: 17:28:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:28:05 executing program 1: 17:28:05 executing program 5: 17:28:05 executing program 0: 17:28:05 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) [ 539.899682][ T12] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 540.120935][ T12] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 540.130718][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.140249][ T8712] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 540.196658][ T12] usb 4-1: config 0 descriptor?? 17:28:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000000000000000080019"], 0x24}}, 0x0) 17:28:06 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 540.253233][ T12] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 540.437080][ T8712] usb 5-1: device descriptor read/64, error 18 [ 540.870100][ T8712] usb 5-1: device descriptor read/64, error 18 [ 540.890032][ T12] gspca_sunplus: reg_r err -71 [ 540.895005][ T12] sunplus: probe of 4-1:0.0 failed with error -71 [ 540.912007][ T12] usb 4-1: USB disconnect, device number 33 [ 541.150096][ T8712] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 541.433802][ T8712] usb 5-1: device descriptor read/64, error 18 [ 541.869515][ T8712] usb 5-1: device descriptor read/64, error 18 [ 541.991503][ T8712] usb usb5-port1: attempt power cycle [ 542.709195][ T8712] usb 5-1: new high-speed USB device number 25 using dummy_hcd 17:28:08 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:08 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:28:08 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x40045109, 0x0) 17:28:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"}) 17:28:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 542.849302][ T8712] usb 5-1: device descriptor read/8, error -71 [ 542.908074][T13232] binder: 13229:13232 ioctl c0306201 0 returned -14 [ 542.965244][T13238] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 543.069545][ T8712] usb 5-1: device descriptor read/8, error -71 17:28:08 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:28:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)) [ 543.180927][ T4008] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 543.276256][T13232] binder: 13229:13232 ioctl c0306201 0 returned -14 17:28:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x40000, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) [ 543.563167][ T4008] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 543.572668][ T4008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.590320][ T8712] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 543.667887][ T4008] usb 4-1: config 0 descriptor?? 17:28:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 543.716581][ T4008] gspca_main: sunplus-2.14.0 probing 041e:4012 17:28:09 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) [ 543.800131][ T8712] usb 5-1: device descriptor read/8, error -61 17:28:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) dup3(r4, r1, 0x0) read(r1, &(0x7f00000000c0)=""/19, 0xfffffd28) [ 544.079594][ T8712] usb 5-1: device descriptor read/8, error -61 [ 544.199291][ T8712] usb usb5-port1: unable to enumerate USB device [ 544.567031][ T4008] gspca_sunplus: reg_r err -71 [ 544.572214][ T4008] sunplus: probe of 4-1:0.0 failed with error -71 [ 544.589229][ T4008] usb 4-1: USB disconnect, device number 34 17:28:11 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0x0, 0x148, 0x108, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x40000}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 17:28:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:11 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 17:28:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 17:28:11 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) 17:28:12 executing program 2: socket$inet6(0xa, 0x3, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 17:28:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000000000000000040019"], 0x24}}, 0x0) 17:28:12 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x7) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 546.649295][ T9543] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 546.659444][T10095] usb 4-1: new high-speed USB device number 35 using dummy_hcd 17:28:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 546.888849][ T9543] usb 5-1: Using ep0 maxpacket: 16 [ 546.933375][T13309] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 547.021508][T10095] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 547.030819][T10095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.040302][ T9543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.051311][ T9543] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.107832][T10095] usb 4-1: config 0 descriptor?? [ 547.165597][T10095] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 547.214745][ T9543] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.224617][ T9543] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.232874][ T9543] usb 5-1: Manufacturer: syz 17:28:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0xfffffffd, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:13 executing program 0: [ 547.385103][ T9543] usb 5-1: config 0 descriptor?? [ 547.812462][T10095] gspca_sunplus: reg_r err -71 [ 547.817579][T10095] sunplus: probe of 4-1:0.0 failed with error -71 [ 547.834856][T10095] usb 4-1: USB disconnect, device number 35 17:28:15 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) 17:28:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0x5, 0x1, 'mirred\x00'}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 17:28:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 549.319315][ T4008] usb 5-1: USB disconnect, device number 27 [ 549.492811][T13355] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:28:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 549.749517][T10095] usb 4-1: new high-speed USB device number 36 using dummy_hcd 17:28:15 executing program 0: r0 = fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_mark(r0, 0x9, 0x8000020, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 17:28:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x5, 0x0, 0x0, "02000001086539040400", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a73b8268129e5fa4316a5d8c69"}}}}}}}, 0x0) [ 549.998433][ T9543] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 550.109248][T10095] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 550.120779][T10095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.204275][T10095] usb 4-1: config 0 descriptor?? [ 550.259711][T10095] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 550.268724][ T9543] usb 5-1: Using ep0 maxpacket: 16 17:28:16 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:28:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) [ 550.429012][ T9543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.439582][ T9543] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.604277][ T9543] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.613660][ T9543] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.622415][ T9543] usb 5-1: Manufacturer: syz [ 550.667975][ T9543] usb 5-1: config 0 descriptor?? [ 550.742107][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 550.769389][T13379] bridge1: port 1(syz_tun) entered blocking state [ 550.776130][T13379] bridge1: port 1(syz_tun) entered disabled state [ 550.785682][T13379] device syz_tun entered promiscuous mode [ 550.900590][T10095] gspca_sunplus: reg_r err -71 [ 550.905871][T10095] sunplus: probe of 4-1:0.0 failed with error -71 [ 550.924566][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 550.947141][T10095] usb 4-1: USB disconnect, device number 36 17:28:18 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:18 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x5404, 0x0) 17:28:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:18 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80247009) 17:28:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 552.679153][T10095] usb 5-1: USB disconnect, device number 28 17:28:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:18 executing program 5: clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x1d0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 17:28:18 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7002) 17:28:18 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 553.208001][ T8712] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 553.428194][ T9543] usb 5-1: new high-speed USB device number 29 using dummy_hcd 17:28:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) [ 553.594858][ T8712] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 553.604467][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.668252][ T9543] usb 5-1: Using ep0 maxpacket: 16 [ 553.680384][ T8712] usb 4-1: config 0 descriptor?? [ 553.729523][ T8712] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 553.798996][ T9543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.809393][ T9543] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.929771][ T9543] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 553.939377][ T9543] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 553.947514][ T9543] usb 5-1: Manufacturer: syz [ 554.008816][ T9543] usb 5-1: config 0 descriptor?? [ 554.367898][ T8712] gspca_sunplus: reg_r err -71 [ 554.373163][ T8712] sunplus: probe of 4-1:0.0 failed with error -71 [ 554.402166][ T8712] usb 4-1: USB disconnect, device number 37 17:28:21 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:21 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) 17:28:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 556.055409][ T8712] usb 5-1: USB disconnect, device number 29 17:28:22 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) 17:28:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 556.607628][T10095] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 556.733588][ T9543] usb 5-1: new high-speed USB device number 30 using dummy_hcd 17:28:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) 17:28:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 556.968495][T10095] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 556.977929][T10095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.004227][ T9543] usb 5-1: Using ep0 maxpacket: 16 [ 557.071544][T10095] usb 4-1: config 0 descriptor?? [ 557.114459][T10095] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 557.128577][ T9543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.139351][ T9543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.149564][ T9543] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.359468][ T9543] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 557.368775][ T9543] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 557.379197][ T9543] usb 5-1: Manufacturer: syz [ 557.474307][ T9543] usb 5-1: config 0 descriptor?? [ 557.757750][T10095] gspca_sunplus: reg_r err -71 [ 557.762901][T10095] sunplus: probe of 4-1:0.0 failed with error -71 [ 557.778292][T10095] usb 4-1: USB disconnect, device number 38 [ 559.078125][ T0] NOHZ: local_softirq_pending 08 [ 559.237295][T10095] Bluetooth: hci5: command 0x0406 tx timeout 17:28:25 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:25 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) 17:28:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 559.398865][T10095] usb 5-1: USB disconnect, device number 30 17:28:25 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:25 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) [ 559.937153][ T9543] usb 4-1: new high-speed USB device number 39 using dummy_hcd 17:28:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 560.167457][ T28] usb 5-1: new high-speed USB device number 31 using dummy_hcd 17:28:26 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 560.338117][ T9543] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 560.347705][ T9543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.388170][ T9543] usb 4-1: config 0 descriptor?? [ 560.427778][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 560.444450][ T9543] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 560.548146][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.558734][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.568800][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.781465][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.790837][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.799183][ T28] usb 5-1: Manufacturer: syz [ 560.835333][ T28] usb 5-1: config 0 descriptor?? [ 561.080242][ T9543] gspca_sunplus: reg_r err -71 [ 561.085386][ T9543] sunplus: probe of 4-1:0.0 failed with error -71 [ 561.096169][ T9543] usb 4-1: USB disconnect, device number 39 17:28:28 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:28 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:28 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) 17:28:28 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 562.871207][ T4008] usb 5-1: USB disconnect, device number 31 17:28:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:29 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 563.309975][ T28] usb 4-1: new high-speed USB device number 40 using dummy_hcd 17:28:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:29 executing program 0: ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) [ 563.570018][ T4008] usb 5-1: new high-speed USB device number 32 using dummy_hcd 17:28:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 563.677660][ T28] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 563.687090][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.733356][ T28] usb 4-1: config 0 descriptor?? [ 563.783955][ T28] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 563.826907][ T4008] usb 5-1: Using ep0 maxpacket: 16 17:28:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 563.947986][ T4008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.958927][ T4008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.968978][ T4008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.138086][ T4008] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 564.147402][ T4008] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 564.155541][ T4008] usb 5-1: Manufacturer: syz [ 564.254929][ T4008] usb 5-1: config 0 descriptor?? [ 564.445074][ T28] gspca_sunplus: reg_r err -71 [ 564.450391][ T28] sunplus: probe of 4-1:0.0 failed with error -71 [ 564.482625][ T28] usb 4-1: USB disconnect, device number 40 17:28:31 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:31 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:28:31 executing program 0: ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) 17:28:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) [ 566.179425][ T12] usb 5-1: USB disconnect, device number 32 17:28:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:32 executing program 0: ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) [ 566.657075][ T8712] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 566.856640][ T12] usb 5-1: new high-speed USB device number 33 using dummy_hcd 17:28:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 567.036524][ T8712] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 567.045747][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:28:32 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) [ 567.107184][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 567.135311][ T8712] usb 4-1: config 0 descriptor?? [ 567.195590][ T8712] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 567.227542][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.237975][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.249225][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.407995][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 567.417467][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 567.425593][ T12] usb 5-1: Manufacturer: syz [ 567.477822][ T12] usb 5-1: config 0 descriptor?? [ 567.846420][ T8712] gspca_sunplus: reg_r err -71 [ 567.851664][ T8712] sunplus: probe of 4-1:0.0 failed with error -71 [ 567.869167][ T8712] usb 4-1: USB disconnect, device number 41 [ 568.037967][ T0] NOHZ: local_softirq_pending 08 17:28:35 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:35 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) 17:28:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 569.483049][ T8712] usb 5-1: USB disconnect, device number 33 17:28:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 569.918580][ T9543] usb 4-1: new high-speed USB device number 42 using dummy_hcd 17:28:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:35 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b27, &(0x7f0000000000)) 17:28:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 570.256961][ T9843] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 570.286929][ T9543] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 570.296367][ T9543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.336239][ T9543] usb 4-1: config 0 descriptor?? 17:28:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 570.383230][ T9543] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 570.526110][ T9843] usb 5-1: Using ep0 maxpacket: 16 [ 570.666993][ T9843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.677419][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 570.688680][ T9843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 570.826194][ T9843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 570.835479][ T9843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 570.844312][ T9843] usb 5-1: Manufacturer: syz [ 570.901100][ T9843] usb 5-1: config 0 descriptor?? [ 571.026127][ T9543] gspca_sunplus: reg_r err -71 [ 571.031256][ T9543] sunplus: probe of 4-1:0.0 failed with error -71 [ 571.048893][ T9543] usb 4-1: USB disconnect, device number 42 17:28:38 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 572.904481][T10095] usb 5-1: USB disconnect, device number 34 17:28:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 573.386289][ T4008] usb 4-1: new high-speed USB device number 43 using dummy_hcd 17:28:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 573.676631][ T9086] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 573.756739][ T4008] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 573.766261][ T4008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:28:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) [ 573.869272][ T4008] usb 4-1: config 0 descriptor?? [ 573.912827][ T4008] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 573.926048][ T9086] usb 5-1: Using ep0 maxpacket: 16 [ 574.046501][ T9086] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.056873][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.068069][ T9086] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 574.269866][ T9086] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 574.279243][ T9086] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 574.287569][ T9086] usb 5-1: Manufacturer: syz [ 574.346875][ T9086] usb 5-1: config 0 descriptor?? [ 574.555857][ T4008] gspca_sunplus: reg_r err -71 [ 574.560969][ T4008] sunplus: probe of 4-1:0.0 failed with error -71 [ 574.587121][ T4008] usb 4-1: USB disconnect, device number 43 17:28:42 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 576.344626][ T9543] usb 5-1: USB disconnect, device number 35 17:28:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 576.916765][ T9543] usb 4-1: new high-speed USB device number 44 using dummy_hcd 17:28:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) [ 577.155776][ T9843] usb 5-1: new high-speed USB device number 36 using dummy_hcd 17:28:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 577.281021][ T9543] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 577.290427][ T9543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.386663][ T9543] usb 4-1: config 0 descriptor?? [ 577.415624][ T9843] usb 5-1: Using ep0 maxpacket: 16 [ 577.437858][ T9543] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 577.556171][ T9843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.566670][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.578007][ T9843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.786123][ T9843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.796297][ T9843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.804427][ T9843] usb 5-1: Manufacturer: syz [ 577.873808][ T9843] usb 5-1: config 0 descriptor?? [ 578.079301][ T9543] gspca_sunplus: reg_r err -71 [ 578.084441][ T9543] sunplus: probe of 4-1:0.0 failed with error -71 [ 578.131620][ T9543] usb 4-1: USB disconnect, device number 44 [ 579.556087][ T0] NOHZ: local_softirq_pending 08 17:28:45 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0xc, 0x0, 0x0}, 0x0) [ 579.700245][ T9543] usb 5-1: USB disconnect, device number 36 17:28:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 580.155107][ T9086] usb 4-1: new high-speed USB device number 45 using dummy_hcd 17:28:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) [ 580.455931][ T28] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 580.535860][ T9086] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 580.545163][ T9086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:28:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 580.647388][ T9086] usb 4-1: config 0 descriptor?? [ 580.691991][ T9086] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 580.695073][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 580.815919][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.826556][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.837917][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 581.066263][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 581.075826][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 581.083966][ T28] usb 5-1: Manufacturer: syz [ 581.142990][ T28] usb 5-1: config 0 descriptor?? [ 581.345077][ T9086] gspca_sunplus: reg_r err -71 [ 581.350312][ T9086] sunplus: probe of 4-1:0.0 failed with error -71 [ 581.374163][ T9086] usb 4-1: USB disconnect, device number 45 17:28:48 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0xc, 0x0, 0x0}, 0x0) [ 583.101292][ T28] usb 5-1: USB disconnect, device number 37 17:28:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, &(0x7f0000000000)) 17:28:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 583.575462][ T9843] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 583.854577][ T12] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 583.936029][ T9843] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 583.945565][ T9843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:28:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 584.040567][ T9843] usb 4-1: config 0 descriptor?? 17:28:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 584.092362][ T9843] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 584.105288][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 584.238435][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.249345][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.260662][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 584.418359][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.427673][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.436192][ T12] usb 5-1: Manufacturer: syz [ 584.507025][ T12] usb 5-1: config 0 descriptor?? [ 584.744720][ T9843] gspca_sunplus: reg_r err -71 [ 584.749978][ T9843] sunplus: probe of 4-1:0.0 failed with error -71 [ 584.766787][ T9843] usb 4-1: USB disconnect, device number 46 17:28:52 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) 17:28:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0xc, 0x0, 0x0}, 0x0) [ 586.418656][ T28] usb 5-1: USB disconnect, device number 38 17:28:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) 17:28:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 586.935371][ T8712] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 587.155145][ T12] usb 5-1: new high-speed USB device number 39 using dummy_hcd 17:28:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000000)) [ 587.326002][ T8712] usb 4-1: New USB device found, idVendor=041e, idProduct=4012, bcdDevice=6c.76 [ 587.335450][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:28:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 587.414114][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 587.442870][ T8712] usb 4-1: config 0 descriptor?? [ 587.506461][ T8712] gspca_main: sunplus-2.14.0 probing 041e:4012 [ 587.563450][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.574230][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.585662][ T12] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 587.596405][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.828790][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 587.838213][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 587.846839][ T12] usb 5-1: Manufacturer: syz [ 587.884980][ T12] usb 5-1: config 0 descriptor?? [ 588.137282][ T8712] gspca_sunplus: reg_r err -71 [ 588.142496][ T8712] sunplus: probe of 4-1:0.0 failed with error -71 [ 588.163563][ T8712] usb 4-1: USB disconnect, device number 47 17:28:55 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x0, &(0x7f0000000000)) 17:28:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630e}], 0x0, 0xfffffdfd, 0x0}) [ 589.783475][ T9086] usb 5-1: USB disconnect, device number 39 [ 590.000809][T14068] binder: 14062:14068 unknown command 0 [ 590.006669][T14068] binder: 14062:14068 ioctl c0306201 20000200 returned -22 [ 590.094300][T14072] binder: 14062:14072 unknown command 0 [ 590.099967][T14072] binder: 14062:14072 ioctl c0306201 20000200 returned -22 17:28:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) 17:28:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x0, &(0x7f0000000000)) 17:28:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630e}], 0x0, 0xfffffdfd, 0x0}) 17:28:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) [ 590.484080][ T28] usb 5-1: new high-speed USB device number 40 using dummy_hcd 17:28:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 590.723850][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 590.844828][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.855702][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.866911][ T28] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 590.877711][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.095894][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 591.105515][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 591.113824][ T28] usb 5-1: Manufacturer: syz [ 591.197363][ T28] usb 5-1: config 0 descriptor?? [ 592.354628][ T0] NOHZ: local_softirq_pending 08 17:28:58 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:28:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x0, &(0x7f0000000000)) 17:28:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) 17:28:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010003400fe020000000008000400", @ANYRES32], 0x24}}, 0x0) 17:28:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 593.112257][ T8712] usb 5-1: USB disconnect, device number 40 [ 593.353863][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:28:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 593.490093][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:28:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, 0x0) 17:28:59 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) 17:28:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f0000000080)={@remote={0xac, 0x14, 0x0}, @broadcast}, 0xc) [ 593.803521][ T28] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 594.053656][ T28] usb 5-1: Using ep0 maxpacket: 16 17:28:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 594.174556][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.185114][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.196507][ T28] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 594.207310][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.374900][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 594.384337][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.392465][ T28] usb 5-1: Manufacturer: syz [ 594.465035][ T28] usb 5-1: config 0 descriptor?? 17:29:02 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:29:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, 0x0) 17:29:02 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) 17:29:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="1c1c4e210000000000000000000000000000ffff00"/128, @ANYBLOB="00000100db46e8cb8100000005cf"], 0x98) 17:29:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000100dd"], 0xa) [ 596.468602][T10095] usb 5-1: USB disconnect, device number 41 17:29:02 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x55, 0x1c, 0x1}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1c1c4e2100000000000000000000000000000000000000000000000000000000000008000000000000ffffffde0000bc76961127bced44a76e00000000000000000000000000000000000000000000001c770b1c000000000000000000000000000000000000000000000000000000000000000000000000659ccde5b2761e15e5af5af73e7475867adcc442d7"], 0x98) 17:29:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b27, 0x0) 17:29:02 executing program 1: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) 17:29:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:29:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f000001a700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/43, 0x2b}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/95, 0x5f}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) recvfrom$unix(r8, &(0x7f0000000000)=""/16, 0x10, 0x2, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) [ 597.253360][T10095] usb 5-1: new high-speed USB device number 42 using dummy_hcd 17:29:03 executing program 1: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) [ 597.506514][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 597.627019][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.637624][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.648861][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.658804][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.668729][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.884066][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.893477][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.901605][T10095] usb 5-1: Manufacturer: syz [ 597.946721][T10095] usb 5-1: config 0 descriptor?? 17:29:05 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:05 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @broadcast}}}}, 0x0) 17:29:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x2, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:29:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f000001a700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/95, 0x5f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) recvfrom$unix(r8, &(0x7f0000000000)=""/16, 0x10, 0x2, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) 17:29:05 executing program 1: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) 17:29:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000019c0)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 599.925220][T10095] Registered IR keymap rc-hauppauge [ 599.960423][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.114041][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.167405][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 600.182314][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input63 17:29:06 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) connect(r0, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:29:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xffffffffffffffd7, 0x1c, 0x3}, 0x1c) connect(r0, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:29:06 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) 17:29:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1c1c4e2204000000ff"], &(0x7f0000000180)=0x98) [ 600.419576][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.433117][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.452891][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.473033][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.482953][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.502903][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.522917][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.543137][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.552913][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.572880][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.582353][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.592899][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.612846][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.622521][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.632899][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.652942][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.662020][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.674104][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.692760][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.699252][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.712806][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.742750][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.749226][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.772800][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.792853][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.802787][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.812865][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.833003][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.839825][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.852824][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.872778][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.883251][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 600.891462][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 600.900203][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.922971][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.952751][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.972861][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 600.993062][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.012736][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.032775][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.052735][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.072874][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.103475][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 601.111665][T10095] usb 5-1: USB disconnect, device number 42 17:29:06 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="1c1c01000000f3ffb06305c148c9a20d2e5a0a4de44feb92415eec44e3d1c6d777539c47678820cd15e4c97bd410f531e6edb7365c96bff44ee9783d48351ec7dce4a8e0b583e07194016430808888308c59c9bbb353026a05490618abcc58f8c605acc7f96d06a42c389652d1d91c808a5ce2d909dcedc2b1159c3db68d5bcab1c97cc9969f0528ffb13dc0e6"], 0x98) 17:29:07 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) [ 601.633814][T10095] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 601.873231][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 601.993592][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.004013][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.015406][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 602.025293][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 602.035238][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.166826][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 602.176126][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 602.184537][T10095] usb 5-1: Manufacturer: syz [ 602.220754][T10095] usb 5-1: config 0 descriptor?? 17:29:09 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:09 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x1202, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0x5) 17:29:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="1c1c4e210000000000000000000000000000ffff00"/128, @ANYRES32, @ANYBLOB="000000000010000010"], 0x98) 17:29:09 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, &(0x7f00000001c0)) 17:29:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x1c, 0x1c, 0x1}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 17:29:09 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0x1a}, 0x98) [ 603.663015][T10095] Registered IR keymap rc-hauppauge [ 603.698472][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.953783][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.994266][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 604.009369][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 604.138302][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.152488][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.172468][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.182678][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.203103][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.212920][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.222523][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.252455][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.259089][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.272579][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.302452][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.309502][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.332530][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.352539][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.359266][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.372535][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.402438][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.409128][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.422517][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.442467][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x55, 0x1c, 0x1}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c1c4e2100000000000000000000000000ff"], 0x98) 17:29:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) [ 604.460333][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.467944][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.482455][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.502452][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 17:29:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0xffffff80, 0x178, 0x160, 0x178, 0x240, 0x258, 0x258, 0x242, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x1be, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) [ 604.523341][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.542401][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.562389][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7030000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923d3f56a307e973e9cfd29c78c07f34e4d5b3185b310efd4989147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b67c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a10e9d2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d42b4e54861d0227dbfd2e6d7f715a7f3deadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fcc3dc3dec04b25dfc17975238345d4f71af35910b158c36657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb5b9964e4beba3da8223fe5308e4e65ee93e1d92b9f99f8ddebf70132a4d0175b989b8eccf707882042e716df9bc8b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00159830d7617001154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf7fa92e3c23ebc0a9d0d09504fe8ca28bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe33c3cdafda323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35070669ea69f5e4be1b8e0d6697e97186fc51439d670dba6623279f73db9dec75070cd9ab0fd96b069ef6d2857b6bf955012cf7fe50d133d541da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092d7dde8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead134847425a6da2c8067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4040000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee4ccd8aeeda2919a4bff2ed893f20a6aba26cce2d4eedf35679fa697c7e0cf761f918725704a01c56051a9f748e5aaf30000bd8c40889967a39d63e6615264e3d3f8e0048e55ae289ce2ad77c43c549737d6d79ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c155fbf3d162dc1c27fa30f0dc60b9f253db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff86a4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354fa8de21eada75d3a3afb2f7629a5f14b7981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a300900000026d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712823221eb9ee0b3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb27098b7174bef66fa03a99b5c0c20b378065fac4ef9cd2d0d804b9400000000000000000000a321bc093d8100c593ac652e43e8b20db660275d19b60a121eff3566df60b693e3448c48b7422d5cef2816fc6ebf64dd27cd097ab9c58145c9ea19a10107291f59046322e922bbb078bc0c4d05d91406ad1cd600"/1586], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 604.584539][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.592436][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.612415][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.629628][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.637180][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.652459][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.672432][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.692567][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.712480][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.727907][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 604.736327][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.742686][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 604.762365][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.782356][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.802379][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.822420][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.843216][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.862413][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 604.878326][T10095] usb 5-1: USB disconnect, device number 43 [ 604.884652][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) [ 605.353342][T10095] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 605.592894][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 605.723519][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.733878][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.745002][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 605.754866][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 605.764741][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.896411][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 605.905826][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 605.914199][T10095] usb 5-1: Manufacturer: syz [ 605.929745][T10095] usb 5-1: config 0 descriptor?? 17:29:13 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf67000000000000160600000fff07006706000002000000070600000ee60000bf050000000000002d650000000000006507000002000000070700004c0000001d75000000000000bf54000000000000070500000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 17:29:13 executing program 0: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4083, 0xff3, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="01"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0", 0x7a}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78d", 0x3a}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c2390db325b8f9969aec8c5", 0x2c}, {0x0}, {&(0x7f0000001880)}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x14f8, 0x11, 0x0, 0x27) [ 607.332662][T10095] Registered IR keymap rc-hauppauge 17:29:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x301}, 0x14}, 0x1, 0xf}, 0x0) 17:29:13 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x64) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) 17:29:13 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) [ 607.368889][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.577385][T14387] IPVS: ftp: loaded support on port[0] = 21 [ 607.601654][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.656728][T14390] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.0'. [ 607.666922][T14390] device lo entered promiscuous mode [ 607.674667][T14390] device tunl0 entered promiscuous mode [ 607.684047][T14390] device gre0 entered promiscuous mode [ 607.693212][T14390] device gretap0 entered promiscuous mode [ 607.701149][T14390] device erspan0 entered promiscuous mode [ 607.709097][T14390] device ip_vti0 entered promiscuous mode [ 607.719764][T14390] device ip6_vti0 entered promiscuous mode [ 607.729262][T14390] device sit0 entered promiscuous mode [ 607.738385][T14390] device ip6tnl0 entered promiscuous mode [ 607.747796][T14390] device ip6gre0 entered promiscuous mode [ 607.757243][T14390] device syz_tun entered promiscuous mode [ 607.764958][T14390] device ip6gretap0 entered promiscuous mode [ 607.772945][T14390] device bridge0 entered promiscuous mode [ 607.780466][T14390] device vcan0 entered promiscuous mode [ 607.786461][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.794375][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.802254][T14390] device bond0 entered promiscuous mode [ 607.808178][T14390] device bond_slave_0 entered promiscuous mode [ 607.814971][T14390] device bond_slave_1 entered promiscuous mode [ 607.824907][T14390] device team0 entered promiscuous mode [ 607.830527][T14390] device team_slave_0 entered promiscuous mode [ 607.837294][T14390] device team_slave_1 entered promiscuous mode [ 607.846806][T14390] device dummy0 entered promiscuous mode [ 607.855882][T14390] device nlmon0 entered promiscuous mode [ 607.883130][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 607.898017][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input65 17:29:13 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, 0x0) [ 607.970009][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.982213][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.002040][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.008911][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.032047][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.043068][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.062097][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.073702][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.082080][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.102131][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.111281][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.122118][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.152058][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.159040][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.172121][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.192995][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.212438][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.219654][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.232091][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.252078][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.258347][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.282275][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.293906][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.302119][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) dup2(r0, r1) [ 608.322084][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.329616][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.342109][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.364087][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.372623][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 608.380834][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 608.389567][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.402065][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.422097][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.442059][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.462052][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.482017][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 608.494185][T10095] usb 5-1: USB disconnect, device number 44 [ 608.502066][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@private0}}]}, 0xa0}}, 0x0) [ 608.667021][T14390] device caif0 entered promiscuous mode [ 608.674144][T14390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:29:14 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, 0x0) [ 609.102116][T10095] usb 5-1: new high-speed USB device number 45 using dummy_hcd 17:29:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 17:29:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) [ 609.372297][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 609.502925][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.513389][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.524563][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.534474][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 609.544409][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.885993][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.895781][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.904159][T10095] usb 5-1: Manufacturer: syz [ 609.990057][T10095] usb 5-1: config 0 descriptor?? 17:29:17 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:17 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xfff00000}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0xa, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8000000004ffe0, 0x2) 17:29:17 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x80045113, 0x0) 17:29:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004103) 17:29:17 executing program 0: gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:29:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x2000000) sendmsg$IPVS_CMD_SET_DEST(r0, 0x0, 0x4000041) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40)={r2}, 0xc) [ 611.342134][T10095] Registered IR keymap rc-hauppauge [ 611.377897][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.606508][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.637187][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 611.639320][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input66 17:29:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="8fc878c3b9a30000006f9a2b45000024012ef30f0f26aec4e18912bf33000000660f388130640f01cab9800000c00f3235001000000f3066b807010f00d8c4c2d9931c6fc74424006b000000c744240200300000c7442406000000000f011c24", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:29:17 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 611.682192][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef02", 0x41}, {&(0x7f0000000880)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a73f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2", 0x88}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1460, 0x11, 0x0, 0x27) [ 611.711749][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.712682][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.731914][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.742686][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.751800][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.771768][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.772413][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.801946][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.803143][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.821701][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.832351][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.851715][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.862620][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062200052406010005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e3ed00f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) [ 611.872968][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:18 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 611.901686][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.903174][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:18 executing program 0: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000100)={0x0, 0x0, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, [], [{0x8, 0x5, 0x6, 0x1000, 0x5, 0x5}, {0x7f, 0x10000, 0x7, 0x200, 0x3, 0xffff}], [[]]}) sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x10) syz_open_procfs(r0, &(0x7f0000000040)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x80ffff00000000) [ 611.921743][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.932353][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.941756][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.961739][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.962748][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 611.991750][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 611.994133][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 611.994321][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.001082][T10095] usb 5-1: USB disconnect, device number 45 [ 612.358031][ T29] audit: type=1326 audit(1597512558.150:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.370292][ T29] audit: type=1326 audit(1597512558.170:35): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.373154][ T29] audit: type=1326 audit(1597512558.170:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.378142][ T29] audit: type=1326 audit(1597512558.170:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.379556][ T29] audit: type=1326 audit(1597512558.170:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.382833][ T29] audit: type=1326 audit(1597512558.180:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.386909][ T29] audit: type=1326 audit(1597512558.180:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.388326][ T29] audit: type=1326 audit(1597512558.180:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.391233][ T29] audit: type=1326 audit(1597512558.180:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.402368][ T29] audit: type=1326 audit(1597512558.190:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 612.463226][T10095] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 612.723298][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 612.873321][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.873541][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.873677][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.873814][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 612.873963][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.992770][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 612.992897][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 612.993011][T10095] usb 5-1: Manufacturer: syz [ 613.001075][T10095] usb 5-1: config 0 descriptor?? [ 613.450988][ T9087] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 613.636270][T14506] [ 613.636296][T14506] ********************************************************** [ 613.636323][T14506] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 613.636464][T14506] ** ** [ 613.636498][T14506] ** trace_printk() being used. Allocating extra memory. ** [ 613.636521][T14506] ** ** [ 613.636548][T14506] ** This means that this is a DEBUG kernel and it is ** [ 613.636721][T14506] ** unsafe for production use. ** [ 613.636749][T14506] ** ** [ 613.636772][T14506] ** If you see this message and you are not debugging ** [ 613.636794][T14506] ** the kernel, report this immediately to your vendor! ** [ 613.636816][T14506] ** ** [ 613.636922][T14506] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 613.636943][T14506] ********************************************************** [ 613.825506][ T9087] usb 3-1: Using ep0 maxpacket: 8 [ 614.263207][ T9087] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.263371][ T9087] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.263532][ T9087] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.263653][ T9087] usb 3-1: config 1 interface 0 has no altsetting 0 [ 614.455979][ T9087] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 614.456103][ T9087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.456215][ T9087] usb 3-1: Product: syz [ 614.456328][ T9087] usb 3-1: Manufacturer: syz [ 614.456439][ T9087] usb 3-1: SerialNumber: syz 17:29:20 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:20 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGSOFTCAR(r1, 0x5437, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGSOFTCAR(r3, 0x5437, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xae8d6da7ebfd40b0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000300), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff4de7f9c764360ae28e79667717039c6cbda08b5000"/34, 0x0, 0x0, 0x60000000, 0x63, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='\x00', r4}, 0x10) [ 614.709237][ T9087] usb 3-1: USB disconnect, device number 2 [ 614.871885][T10095] Registered IR keymap rc-hauppauge [ 614.902483][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 614.992361][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.027059][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 615.029239][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 615.098522][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.111404][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.122126][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.131544][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.163393][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.167054][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.192125][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.201061][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.211366][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.238236][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.314037][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.314434][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.331453][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.341616][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.361419][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.381471][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.382976][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.401489][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.412642][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.421631][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.445116][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.449240][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.461442][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.483141][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.483896][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 615.501421][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 615.517910][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 615.518092][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 615.524028][T10095] usb 5-1: USB disconnect, device number 46 [ 615.971644][T10095] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 616.221630][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 616.355312][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.355470][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.355666][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 616.355794][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 616.355932][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.448466][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 616.448595][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 616.448710][T10095] usb 5-1: Manufacturer: syz [ 616.463682][T10095] usb 5-1: config 0 descriptor?? 17:29:23 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007613872ecb4f63a"], 0x63) pipe(&(0x7f0000000140)) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x6, 'veth1_to_team\x00', {0x3f}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x10001) socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40c0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) write$P9_RFLUSH(r1, 0x0, 0x0) lseek(r1, 0x0, 0x7) read$snddsp(r1, &(0x7f0000000040)=""/18, 0x12) 17:29:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x802c550a, &(0x7f0000000380)=@usbdevfs_disconnect={0x8102}) 17:29:23 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000030c0)=ANY=[@ANYBLOB="f800000000000000020000000000000007000000000000100000000000000000061a37ee3ece000000000000002751656d147b0000000000000000000000001f0000000000ac000000000000002fc49aa1cd00b282e9d1e9ff6db8271564b65f4abd7be93af38afa6a36cdf218324f123a0c46863ed5780727b7dc33482fa1d84fabc225aac83cca7200019ca2e968be4defcac97649ddae27bb850fdaebbb3189d632570254c4ad37dc4a31d3c7a3234fa76004d7dee3c96e5577ca9cfb6ffa228e4c9190733df11dbb1ed907dc80dca1261a75fae187e06e683fae012a48f391bb842df608ad7221d34ab4251934f0284361115f9e59b5"], 0xf8) 17:29:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) [ 618.184226][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 618.184287][ T29] audit: type=1326 audit(1597512563.980:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14571 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 618.254501][T14582] CUSE: info not properly terminated [ 618.313629][ T29] audit: type=1326 audit(1597512564.030:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14571 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 618.337106][ T29] audit: type=1326 audit(1597512564.030:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14571 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 17:29:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) [ 618.421488][T10095] Registered IR keymap rc-hauppauge 17:29:24 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) [ 618.456864][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:24 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 17:29:24 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setgid(0x0) 17:29:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000300)=[@register_looper={0x40406300}, @clear_death], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"}) [ 618.611227][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 618.685167][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 618.700343][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 618.859449][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 618.871126][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 618.891079][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 618.911144][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 618.931172][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 618.961067][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 618.981052][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.010055][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.016249][T14597] binder: 14591:14597 ioctl c0306201 200000c0 returned -14 [ 619.017662][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.041130][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.061022][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.082022][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.101026][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.121074][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.129309][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.141250][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.171030][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.191036][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.206656][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.214294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.228645][ T29] audit: type=1326 audit(1597512565.020:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 619.261025][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.281181][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.289784][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.311071][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.331045][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.351015][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.369688][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.377296][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.391899][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.406463][ T29] audit: type=1326 audit(1597512565.050:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14596 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 619.429864][ T29] audit: type=1326 audit(1597512565.050:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14596 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 619.430992][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.452800][ T29] audit: type=1326 audit(1597512565.070:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 619.481191][ T29] audit: type=1326 audit(1597512565.080:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 619.491025][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.504163][ T29] audit: type=1326 audit(1597512565.080:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f52549 code=0x7ffc0000 17:29:25 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGSOFTCAR(r2, 0x5437, 0x0) fcntl$getown(r2, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGSOFTCAR(r3, 0x5437, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xae8d6da7ebfd40b0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000280)="b9ff4de7f9c764360ae28e79667717039c6cbda08b5000"/32, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='\x00', r4}, 0x10) [ 619.532518][ T29] audit: type=1326 audit(1597512565.110:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 619.541024][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.591031][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.599752][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.620976][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:25 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50fc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000000000003, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 619.641086][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.651058][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.661020][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.681204][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.701077][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.720984][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.740941][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.761058][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.772329][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.791039][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.811061][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.838940][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 619.846464][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:25 executing program 3: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a00030800000000a9020000000200000c000000080001"], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:29:25 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 17:29:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000180)={0xf8, 0x0, 0x2, [{0x0, 0x0, 0x6, 0x0, '\'Qem\x14{'}, {0x0, 0x0, 0xac, 0x0, '/\xc4\x9a\xa1\xcd\x00\xb2\x82\xe9\xd1\xe9\xffm\xb8\'\x15d\xb6_J\xbd{\xe9:\xf3\x8a\xfaj6\xcd\xf2\x182O\x12:\fF\x86>\xd5x\a\'\xb7\xdc3H/\xa1\xd8O\xab\xc2%\xaa\xc8<\xcar\x00\x01\x9c\xa2\xe9h\xbeM\xef\xca\xc9vI\xdd\xae\'\xbb\x85\x0f\xda\xeb\xbb1\x89\xd62W\x02T\xc4\xad7\xdcJ1\xd3\xc7\xa3>O\xa7`\x04\xd7\xde\xe3\xc9nUw\xca\x9c\xfbo\xfa\"\x8eL\x91\x90s=\xf1\x1d\xbb\x1e\xd9\a\xdc\x80\xdc\xa1&\x1au\xfa\xe1\x87\xe0nh?\xae\x01*H\xf3\x91\xbb\x84-\xf6\b\xadr!\xd3J\xb4%\x194\xf0(Ca\x11_\x9eY\xb5I'}]}, 0xf8) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 619.860997][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.880983][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.900946][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.920921][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.949888][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 619.958302][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 619.965655][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 619.977418][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.001099][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.030972][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.060957][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.080954][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.100983][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.120922][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.140988][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 620.147905][T10095] usb 5-1: USB disconnect, device number 47 [ 620.661285][T10095] usb 5-1: new high-speed USB device number 48 using dummy_hcd 17:29:26 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 17:29:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, 0x0, 0x0) 17:29:26 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) [ 620.911716][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 621.054244][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.064719][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.076187][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.086106][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 621.096054][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.402366][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.411643][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.419780][T10095] usb 5-1: Manufacturer: syz [ 621.457562][T10095] usb 5-1: config 0 descriptor?? 17:29:28 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 17:29:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x4, 0x0, 0x0) 17:29:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) 17:29:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 622.891254][T10095] Registered IR keymap rc-hauppauge [ 622.927263][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.364492][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 623.461570][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 623.476899][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69 17:29:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x100000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 17:29:29 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$assume_authority(0x10, r2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r6, r3}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000240)={'ghash-clmulni\x00'}, &(0x7f0000002340)="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", 0x1000}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f350f01fc260f54a2af970f01da66b92e0b00000f320fbd21f081a2b0001abe0fc799000066b99a09000066b80400000066ba000000003e3466f20f30", 0x3d}], 0x1, 0x5b, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x793c00, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17:29:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0xa, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000300)=[@register_looper={0x400c630e}, @clear_death], 0x0, 0xfffffdfd, 0x0}) 17:29:29 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) open(0x0, 0x0, 0x20) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) [ 623.805364][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.820692][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.840681][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.860671][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.880660][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.900645][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.913948][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.921487][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.940656][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.960661][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 623.973833][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.981463][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.000683][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.018434][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 624.026079][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.050585][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.070629][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.090727][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.111400][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.130725][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.138512][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 624.150575][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.170604][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.200765][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.220832][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.239223][T14688] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 624.239983][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 624.255261][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.285481][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.311050][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.325835][T14689] binder: 14685:14689 unknown command 0 [ 624.331744][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.337793][T14689] binder: 14685:14689 ioctl c0306201 20000200 returned -22 [ 624.371302][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.390560][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.420568][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.441106][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.470589][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.490753][T14726] binder: 14685:14726 unknown command 0 [ 624.496414][T14726] binder: 14685:14726 ioctl c0306201 200000c0 returned -22 [ 624.500581][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.530580][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.551314][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.568968][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 624.576561][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.590531][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.610538][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 624.640539][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.668807][T14724] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 624.677271][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.690538][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.691878][T14726] binder: 14685:14726 unknown command 0 [ 624.702215][T14726] binder: 14685:14726 ioctl c0306201 20000200 returned -22 [ 624.702915][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 624.717009][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.728721][T14730] binder: 14685:14730 unknown command 0 [ 624.734713][T14730] binder: 14685:14730 ioctl c0306201 200000c0 returned -22 [ 624.740507][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.760626][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.780616][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 624.991190][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.021645][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.040551][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.051369][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 625.060500][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.080570][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.092809][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 625.100636][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.120534][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.141693][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.160487][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.177688][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 625.186103][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.192426][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 625.201166][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.220442][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.250526][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.270504][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.290534][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.321766][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.340521][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.370522][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.390571][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.416066][T10095] usb 5-1: USB disconnect, device number 48 [ 625.422455][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 625.970685][T10095] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 626.220734][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 626.352363][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.363126][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.374411][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.384452][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.394344][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 17:29:32 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0xa, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000300)=[@register_looper={0x400c630e}, @clear_death], 0x0, 0xfffffdfd, 0x0}) 17:29:32 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:29:32 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50fc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000000000003, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) 17:29:32 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:32 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$assume_authority(0x10, r2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r6, r3}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000240)={'ghash-clmulni\x00'}, &(0x7f0000002340)="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", 0x1000}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f350f01fc260f54a2af970f01da66b92e0b00000f320fbd21f081a2b0001abe0fc799000066b99a09000066b80400000066ba000000003e3466f20f30", 0x3d}], 0x1, 0x5b, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x793c00, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 626.680625][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.689852][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.832647][T10095] usb 5-1: config 0 descriptor?? [ 626.850656][T10095] usb 5-1: can't set config #0, error -71 [ 626.889003][T10095] usb 5-1: USB disconnect, device number 49 [ 626.890033][T14767] binder: 14762:14767 unknown command 0 [ 626.900720][T14767] binder: 14762:14767 ioctl c0306201 20000200 returned -22 [ 626.997182][T14775] binder: 14762:14775 unknown command 0 [ 627.003367][T14775] binder: 14762:14775 ioctl c0306201 200000c0 returned -22 [ 627.152151][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 627.152216][ T29] audit: type=1326 audit(1597512572.911:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.181794][ T29] audit: type=1326 audit(1597512572.911:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.204769][ T29] audit: type=1326 audit(1597512572.911:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.227745][ T29] audit: type=1326 audit(1597512572.941:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.251070][ T29] audit: type=1326 audit(1597512572.941:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.274084][ T29] audit: type=1326 audit(1597512572.941:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 627.297097][ T29] audit: type=1326 audit(1597512572.941:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14765 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 17:29:33 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:33 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50fc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000000000003, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) 17:29:33 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$assume_authority(0x10, r2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r6, r3}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000240)={'ghash-clmulni\x00'}, &(0x7f0000002340)="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", 0x1000}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f350f01fc260f54a2af970f01da66b92e0b00000f320fbd21f081a2b0001abe0fc799000066b99a09000066b80400000066ba000000003e3466f20f30", 0x3d}], 0x1, 0x5b, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x793c00, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17:29:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002e00)={0x0, 0x4, 0xf5}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x800) 17:29:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev}}}}) [ 628.143992][T10095] usb 5-1: new high-speed USB device number 50 using dummy_hcd 17:29:34 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007613872ec"], 0x63) pipe(&(0x7f0000000140)) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x6, 'veth1_to_team\x00', {0x3f}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet(0x2, 0x80000, 0x10001) socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) write$P9_RFLUSH(r1, 0x0, 0x0) lseek(r1, 0x0, 0x7) read$snddsp(r1, &(0x7f0000000040)=""/18, 0x12) [ 628.838041][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 628.981011][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.991579][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.002785][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.012667][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 629.022618][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.321732][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 629.331029][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 629.339165][T10095] usb 5-1: Manufacturer: syz [ 629.371104][T10095] usb 5-1: config 0 descriptor?? [ 630.751742][T10095] Registered IR keymap rc-hauppauge 17:29:36 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:36 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:36 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:29:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = pidfd_open(0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setns(r1, 0x2000000) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x82}, 0x4000041) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40), 0xc) 17:29:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007613872ec"], 0x63) pipe(&(0x7f0000000140)) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x6, 'veth1_to_team\x00', {0x3f}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet(0x2, 0x80000, 0x10001) socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, 0x0, 0x700, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40c0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) write$P9_RFLUSH(r1, 0x0, 0x0) lseek(r1, 0x0, 0x7) read$snddsp(r1, &(0x7f0000000040)=""/18, 0x12) 17:29:36 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 630.787686][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.983187][ T29] audit: type=1326 audit(1597512576.781:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14824 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7ffb549 code=0x7ffc0000 [ 631.033836][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.161228][ T29] audit: type=1326 audit(1597512576.811:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14824 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ffb549 code=0x7ffc0000 [ 631.166364][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 631.184532][ T29] audit: type=1326 audit(1597512576.811:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14824 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ffb549 code=0x7ffc0000 [ 631.198637][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 17:29:37 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:37 executing program 2: [ 631.483395][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.509903][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.529947][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.547272][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.556013][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.570038][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:37 executing program 3: [ 631.589972][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.609915][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.629926][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.649943][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.669909][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.690119][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:37 executing program 5: [ 631.700750][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.709927][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.729883][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:37 executing program 0: [ 631.749899][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.756258][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.770005][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.789897][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.809892][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.823036][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.830557][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.849972][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.870924][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.889922][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.900758][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.909960][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.929894][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.944157][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 631.952001][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.969921][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 631.989900][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.009898][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.017679][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 632.029950][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.049904][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.069932][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.085309][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 632.092978][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.109964][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.127528][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 632.135198][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.149879][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:38 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 632.169856][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.189987][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.209888][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.223016][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 632.231386][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.237583][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 632.251360][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.269849][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.289834][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.309922][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.329873][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.350060][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.369834][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.389885][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.409872][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.440638][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.459816][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.470945][T10095] usb 5-1: USB disconnect, device number 50 [ 632.479845][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 632.930240][T10095] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 633.179891][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 633.311074][ T0] NOHZ: local_softirq_pending 08 [ 633.311331][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.326404][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.337498][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 633.347457][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 633.357366][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.451736][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 633.461019][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 633.469111][T10095] usb 5-1: Manufacturer: syz [ 633.491634][T10095] usb 5-1: config 0 descriptor?? 17:29:40 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:40 executing program 2: 17:29:40 executing program 3: 17:29:40 executing program 0: 17:29:40 executing program 5: 17:29:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 634.853008][T10095] Registered IR keymap rc-hauppauge [ 634.888059][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.088437][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:40 executing program 2: 17:29:41 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 635.158522][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 635.178316][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 17:29:41 executing program 0: 17:29:41 executing program 5: 17:29:41 executing program 3: [ 635.391534][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.409587][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.429820][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.449622][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.462944][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.470601][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.489622][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.509614][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.525983][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.533625][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.549716][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.569553][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.589567][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.607161][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.614722][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.629653][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.649542][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.669623][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.689572][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.710227][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.725329][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.732882][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.749561][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.779561][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.800656][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.809633][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.829549][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.836270][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.859534][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:41 executing program 2: [ 635.889510][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.904229][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.911885][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.929565][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.949624][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.970531][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 635.979626][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 635.999701][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.019620][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.040223][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.049632][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.069604][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.089600][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.107374][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 636.116268][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.122706][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 636.131470][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.149504][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.169541][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.199576][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.219581][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.239521][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.259554][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.289472][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.309544][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.329606][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.349592][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.369466][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.389535][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 636.397612][T10095] usb 5-1: USB disconnect, device number 51 [ 636.830621][T10095] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 637.079810][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 637.200563][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.211010][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.222214][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.232170][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 637.242072][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.334872][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.344314][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.352695][T10095] usb 5-1: Manufacturer: syz [ 637.397863][T10095] usb 5-1: config 0 descriptor?? 17:29:44 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:44 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:44 executing program 0: 17:29:44 executing program 3: 17:29:44 executing program 5: 17:29:44 executing program 2: [ 638.710053][T10095] Registered IR keymap rc-hauppauge [ 638.746811][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.966878][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:29:44 executing program 5: 17:29:44 executing program 0: [ 639.036630][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 639.051592][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input72 17:29:44 executing program 3: 17:29:45 executing program 2: 17:29:45 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 639.282939][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.299337][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.319255][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.325874][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.339394][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.359203][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.379292][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.398762][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.406323][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.419270][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.439284][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.459254][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.479290][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.499263][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.519298][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.527795][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.539258][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.559327][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.575281][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.582913][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.599294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.619225][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.639198][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.659388][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.679294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.696234][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.703937][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.719235][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.739262][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.759280][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.779240][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.799188][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.819219][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.838686][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.846304][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.859256][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:45 executing program 2: [ 639.879183][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.899185][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.919184][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.937183][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.944854][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.959263][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.979198][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 639.999173][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.019175][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.039202][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.050832][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 640.059322][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.079166][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.099173][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.118261][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 640.125828][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.139209][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.159209][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.179149][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.191875][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 640.200163][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 640.212346][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.230587][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.264777][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.323045][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.345878][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.359130][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 640.367119][T10095] usb 5-1: USB disconnect, device number 52 [ 640.799839][T10095] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 641.039791][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 641.159791][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.170101][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.181295][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.191252][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.201253][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.310181][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.319563][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.327703][T10095] usb 5-1: Manufacturer: syz [ 641.365356][T10095] usb 5-1: config 0 descriptor?? 17:29:48 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:48 executing program 0: 17:29:48 executing program 5: 17:29:48 executing program 3: 17:29:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:48 executing program 2: [ 642.680540][T10095] Registered IR keymap rc-hauppauge [ 642.716186][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.923704][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.968632][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 642.983737][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input73 17:29:48 executing program 0: 17:29:48 executing program 2: 17:29:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:48 executing program 3: 17:29:48 executing program 5: [ 643.199470][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.218907][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.239150][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.248570][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.259003][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.279000][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.288162][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.299074][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.318915][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.326599][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.338997][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.358982][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.388987][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.403289][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.410900][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.428947][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.439943][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.458922][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.484170][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.491829][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.508949][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.528934][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.547870][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.555556][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.568948][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.598955][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.628955][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.648880][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.668900][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.684222][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.691961][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.719712][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.738935][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.754750][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.762406][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.778902][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.798927][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:49 executing program 2: [ 643.828840][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.858912][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.879003][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.887100][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 643.895508][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.909137][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.929002][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.949066][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.968980][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 643.988894][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 644.018849][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 644.039910][T10095] usb 5-1: USB disconnect, device number 53 [ 644.499401][T10095] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 644.778756][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 644.899727][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.910951][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.922130][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.931984][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.941862][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.049710][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 645.059299][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 645.067367][T10095] usb 5-1: Manufacturer: syz [ 645.101663][T10095] usb 5-1: config 0 descriptor?? 17:29:52 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:52 executing program 0: 17:29:52 executing program 5: 17:29:52 executing program 3: 17:29:52 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:52 executing program 2: [ 646.434249][T10095] Registered IR keymap rc-hauppauge [ 646.469927][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.663180][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.711826][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 646.726656][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input74 17:29:52 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:52 executing program 5: 17:29:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:29:52 executing program 2: 17:29:52 executing program 3: [ 646.940057][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.958591][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 646.970579][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 646.978687][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 646.998641][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.008267][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.028598][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.048605][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.058804][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.068737][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.088637][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.098905][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.108624][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.138604][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.147314][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.158627][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.188606][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.195109][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.218567][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.230614][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.238606][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.268615][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.281282][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.289014][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.309605][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.321651][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 647.329241][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.358611][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.378569][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.389840][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 647.398068][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.406800][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.428547][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.448552][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.478600][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.498612][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.518570][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.538546][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.568688][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:53 executing program 5: [ 647.588716][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.608738][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.629042][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 647.646343][T10095] usb 5-1: USB disconnect, device number 54 [ 647.652709][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 648.169313][T10095] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 648.418443][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 648.539343][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.549745][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.561147][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 648.571071][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 648.581332][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.669891][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 648.679547][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 648.687676][T10095] usb 5-1: Manufacturer: syz [ 648.703755][T10095] usb 5-1: config 0 descriptor?? [ 649.951231][ T0] NOHZ: local_softirq_pending 08 17:29:55 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:55 executing program 2: 17:29:55 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:55 executing program 3: 17:29:55 executing program 0: 17:29:55 executing program 5: [ 650.008856][T10095] Registered IR keymap rc-hauppauge [ 650.044617][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.229524][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.264723][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 650.280988][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input75 17:29:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:56 executing program 2: 17:29:56 executing program 5: [ 650.437665][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.448329][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.468312][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:56 executing program 0: 17:29:56 executing program 3: [ 650.488313][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.508361][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.526534][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.534117][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.548420][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.568321][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.589045][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.608341][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.620216][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.628370][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.648327][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.666650][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.674294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.688372][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.708334][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.728086][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.728460][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.748602][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.768286][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.778598][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.788321][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.808235][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.815060][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.828505][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.848276][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.861082][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.868731][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.888336][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.899130][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.908693][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.928243][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.948283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.965589][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 650.973216][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 650.988294][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.008295][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.028263][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.048248][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.068372][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.077022][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 651.085389][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 651.094111][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.108333][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:29:56 executing program 3: [ 651.128288][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.148998][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.168292][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.188267][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.208274][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.228354][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.248192][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.268274][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.288243][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.308386][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.316218][T10095] usb 5-1: USB disconnect, device number 55 [ 651.329273][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 651.808682][T10095] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 652.048373][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 652.169253][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.179678][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.191133][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 652.201075][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 652.211050][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.329106][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 652.338554][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 652.346613][T10095] usb 5-1: Manufacturer: syz [ 652.380066][T10095] usb 5-1: config 0 descriptor?? 17:29:59 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:29:59 executing program 2: 17:29:59 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) 17:29:59 executing program 0: 17:29:59 executing program 5: 17:29:59 executing program 3: [ 653.714216][T10095] Registered IR keymap rc-hauppauge [ 653.749616][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 653.881420][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 653.938549][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 653.953476][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input76 17:29:59 executing program 2: 17:29:59 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) removexattr(0x0, 0x0) 17:29:59 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5}) 17:30:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xe0, r3, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "21afd30c786185be9a82f3b97b23117cd029ed2bf0a642240bec38a01f0e1a88"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0xe0}}, 0x0) [ 654.222659][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.238105][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.257988][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.278078][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.284618][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.298067][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.317983][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.338030][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.344654][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.358022][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.377999][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.397974][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.414664][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.422318][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.439224][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.458005][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.478015][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.497947][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.518001][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.537987][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.558054][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.578014][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.598007][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.610286][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.618110][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.638041][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.658013][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.673472][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.681117][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.697962][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.717934][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.737979][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.757940][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.766067][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.778013][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.797978][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.810330][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 654.810394][ T29] audit: type=1326 audit(1597512600.613:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15113 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 654.817954][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.839715][ T29] audit: type=1326 audit(1597512600.613:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15113 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 654.845887][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.868040][ T29] audit: type=1326 audit(1597512600.613:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15113 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 654.873918][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.902395][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.917912][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.937951][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.957943][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.974903][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.982577][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 654.997938][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.017958][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.037974][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.058000][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.077951][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.097114][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.104824][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.118057][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.137961][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)) [ 655.158069][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.177988][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.197913][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:01 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 655.217976][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.229134][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.238094][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.257937][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.277943][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.297929][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.313399][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 655.321803][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.328216][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 655.338022][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.357924][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.377927][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.397912][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.417896][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.437888][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.457927][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.477919][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.497896][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.511698][T10095] usb 5-1: USB disconnect, device number 56 [ 655.517985][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 655.775352][ T29] audit: type=1326 audit(1597512601.573:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15137 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x0 [ 655.959695][T10095] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 656.198292][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 656.318928][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.329352][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.340877][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 656.350784][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 656.360732][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.479365][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.488777][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.496918][T10095] usb 5-1: Manufacturer: syz [ 656.530208][T10095] usb 5-1: config 0 descriptor?? 17:30:02 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:02 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(0xffffffffffffffff, 0x0, 0x0) 17:30:02 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x23, 0x0, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080), 0x0, 0x0, 0x0) 17:30:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, 0x0, &(0x7f0000000040)) 17:30:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x5, 0x5]}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:30:02 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, 0x0, 0x0) [ 656.808451][T10095] Registered IR keymap rc-hauppauge [ 656.845546][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 656.932729][ T29] audit: type=1326 audit(1597512602.733:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15151 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x0 [ 656.989077][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.033209][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 657.048479][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 657.114561][ T29] audit: type=1326 audit(1597512602.833:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15150 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 657.137990][ T29] audit: type=1326 audit(1597512602.833:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15150 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 657.161083][ T29] audit: type=1326 audit(1597512602.833:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15150 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 657.184128][ T29] audit: type=1326 audit(1597512602.833:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15150 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 657.207203][ T29] audit: type=1326 audit(1597512602.833:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15150 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x7ffc0000 [ 657.254690][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.260941][T15167] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 657.267772][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.287743][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.307855][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.315173][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.327756][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.347958][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.367747][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.376533][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.388622][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.407822][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.425731][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.433514][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.447769][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.467745][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.487748][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.498917][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.507880][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.527727][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x5]}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 657.538913][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.547916][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.567735][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:03 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20}, 0x20}}, 0x0) [ 657.587827][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.596316][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.607824][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.628740][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5}) [ 657.647724][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.657944][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.667749][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.687775][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.707774][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.727799][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.744844][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.752428][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.767804][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.787756][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.807786][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.816665][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 657.827755][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.847748][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.867480][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 657.867848][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.882241][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 657.892764][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.910168][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) flistxattr(r0, 0x0, 0x0) [ 657.927732][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 657.944906][T10095] usb 5-1: USB disconnect, device number 57 [ 657.951190][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 658.377749][T10095] usb 5-1: new high-speed USB device number 58 using dummy_hcd 17:30:04 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 658.495705][T15208] vivid-000: ================= START STATUS ================= [ 658.503662][T15208] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 658.510603][T15208] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 658.517882][T15208] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 658.525078][T15208] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 658.532209][T15208] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 658.538364][T15208] v4l2-ctrls: vivid-000: Show Border: false [ 658.544329][T15208] v4l2-ctrls: vivid-000: Show Square: false [ 658.550430][T15208] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 658.557923][T15208] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 658.565116][T15208] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 658.572329][T15208] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 658.579553][T15208] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 658.586041][T15208] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 658.593095][T15208] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 658.600234][T15208] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 658.606975][T15208] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 658.614108][T15208] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 658.620030][T15208] v4l2-ctrls: vivid-000: Transfer Function: Default [ 658.626693][T15208] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 658.633306][T15208] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 658.639824][T15208] v4l2-ctrls: vivid-000: Quantization: Default [ 658.646047][T15208] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 658.653203][T15208] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 658.659994][T15208] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 658.668963][T15208] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 658.676065][T15208] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 658.684605][T15208] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 658.691072][T15208] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 658.698499][T15208] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 658.706039][T15208] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 658.712756][T15208] tpg source WxH: 640x360 (Y'CbCr) [ 658.718053][T15208] tpg field: 1 [ 658.721482][T15208] tpg crop: 640x360@0x0 [ 658.725714][T15208] tpg compose: 640x360@0x0 [ 658.730332][T15208] tpg colorspace: 8 [ 658.734198][T15208] tpg transfer function: 0/0 [ 658.739022][T15208] tpg Y'CbCr encoding: 0/0 [ 658.743500][T15208] tpg quantization: 0/0 [ 658.747828][T15208] tpg RGB range: 0/2 [ 658.751773][T15208] vivid-000: ================== END STATUS ================== [ 658.839434][T15208] vivid-000: ================= START STATUS ================= [ 658.847166][T15208] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 658.853999][T15208] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 658.861169][T15208] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 658.868570][T15208] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 658.875599][T15208] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 658.881715][T15208] v4l2-ctrls: vivid-000: Show Border: false [ 658.887855][T15208] v4l2-ctrls: vivid-000: Show Square: false [ 658.893820][T15208] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 658.901422][T15208] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 658.909741][T15208] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 658.916836][T15208] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 658.924108][T15208] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 658.930724][T15208] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 658.937770][T15208] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 658.944793][T15208] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 658.951668][T15208] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 658.958829][T15208] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 658.964631][T15208] v4l2-ctrls: vivid-000: Transfer Function: Default [ 658.971422][T15208] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 658.978043][T15208] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 658.984456][T15208] v4l2-ctrls: vivid-000: Quantization: Default [ 658.990807][T15208] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 658.998003][T15208] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 659.004664][T15208] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 659.013641][T15208] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 659.020881][T15208] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 659.029425][T15208] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 659.035732][T15208] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 659.043146][T15208] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 659.050886][T15208] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 659.057594][T15208] tpg source WxH: 640x360 (Y'CbCr) [ 659.062747][T15208] tpg field: 1 [ 659.066176][T15208] tpg crop: 640x360@0x0 [ 659.070521][T15208] tpg compose: 640x360@0x0 [ 659.075137][T15208] tpg colorspace: 8 [ 659.079124][T15208] tpg transfer function: 0/0 [ 659.083757][T15208] tpg Y'CbCr encoding: 0/0 [ 659.088350][T15208] tpg quantization: 0/0 [ 659.092585][T15208] tpg RGB range: 0/2 [ 659.096560][T15208] vivid-000: ================== END STATUS ================== [ 659.139225][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 659.259402][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.270551][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.281716][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.291661][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 659.301615][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.428918][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.438303][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.446446][T10095] usb 5-1: Manufacturer: syz [ 659.505422][T10095] usb 5-1: config 0 descriptor?? 17:30:06 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) 17:30:06 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) flistxattr(r0, 0x0, 0x0) 17:30:06 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000001, 0x9be}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = getpid() getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0xfffffffffffffede) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="ced418f22c65d9c558c3d7f6848bb02d8abb9c22023976d8f53bef2c0b79c608dba4a8ab75d586dcdbc1671503ad10b557753c52e20fbc99f3078381f6d030bc84ce390852787b09a2ad65dc5dc8c3ab1708", 0x52}, {0x0}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="85519476327d919d483b88a36b1237bb69e46c16c36aec9b654443a9f52eb180a2296d8ab39d59806b3e9e1ea8b0ac22f5568510f9f532420500f006f6f73d121830efcd99d4d9d8d1de9e2765910ceeb138c47a1342c53f5acdfaa512f6f409eebc599dafb39f1aca", 0x69}, {&(0x7f0000000540)}], 0x6) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0x5731}) pipe(&(0x7f0000000000)) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x205}) 17:30:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x134, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:30:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xaeb7, 0x0) [ 661.038149][T10095] Registered IR keymap rc-hauppauge [ 661.074747][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.180725][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 661.180790][ T29] audit: type=1326 audit(1597512606.984:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.183685][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.187347][ T29] audit: type=1326 audit(1597512606.984:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.239983][ T29] audit: type=1326 audit(1597512606.984:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.263014][ T29] audit: type=1326 audit(1597512606.984:148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.292628][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 661.307668][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input78 17:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) [ 661.506390][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.517468][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.537421][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @private0}, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 661.557447][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.570922][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.578544][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.597468][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.617467][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.637474][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.648147][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.657422][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.677391][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.697388][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.709487][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.717420][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.737448][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.755967][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.763571][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.777442][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.797401][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.817357][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.832802][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.840437][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.857409][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.877377][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.892427][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 661.900020][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.917359][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.929276][ T29] audit: type=1326 audit(1597512607.384:149): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.937368][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.952437][ T29] audit: type=1326 audit(1597512607.384:150): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.958250][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 661.981139][ T29] audit: type=1326 audit(1597512607.384:151): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 661.986784][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:07 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) flistxattr(r0, 0x0, 0x0) [ 662.015198][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.027358][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.034801][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 662.047540][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.067390][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.074200][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 662.087437][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.107364][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.113901][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 662.127428][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.147369][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.155723][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 662.164137][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 662.172959][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.187395][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.207387][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.227428][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.247372][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.267500][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.287413][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.307352][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 662.322213][T10095] usb 5-1: USB disconnect, device number 58 [ 662.328588][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bf", 0x2}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 17:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) [ 662.707819][ T29] audit: type=1326 audit(1597512608.154:152): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15259 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 662.731291][ T29] audit: type=1326 audit(1597512608.174:153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15259 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 662.754339][ T29] audit: type=1326 audit(1597512608.174:154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15259 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 17:30:08 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 662.927887][T10095] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 663.170722][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 663.187242][T15244] IPVS: ftp: loaded support on port[0] = 21 [ 663.288527][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.298920][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.310131][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.320061][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 663.329981][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.698723][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.708187][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.716318][T10095] usb 5-1: Manufacturer: syz [ 663.779656][T15309] IPVS: ftp: loaded support on port[0] = 21 [ 663.791250][T10095] usb 5-1: config 0 descriptor?? 17:30:11 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) 17:30:11 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(0xffffffffffffffff, 0x0, 0x0) 17:30:11 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) 17:30:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r1, 0x1}}, 0x18) [ 665.317545][T10095] Registered IR keymap rc-hauppauge [ 665.352359][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.427396][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.459052][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 665.474190][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input79 17:30:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x32, &(0x7f00000001c0)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac00000000000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 665.634399][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.647141][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.667121][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.687158][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.703760][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.712528][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.727196][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.747067][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.767091][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.787103][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:11 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(0xffffffffffffffff, 0x0, 0x0) 17:30:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$pptp(0x18, 0x1, 0x2) 17:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) [ 665.807053][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.827102][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.843837][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.851441][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.867146][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.887059][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.907055][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.927119][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.933936][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.948335][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.967084][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 665.976850][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.987145][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.007080][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.023372][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.031078][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.047198][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.067125][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.076293][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.087080][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.107103][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.113869][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:30:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000500)={0x0, ""/210}, 0x200005da, 0x0, 0x4800) [ 666.127123][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.147036][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.153364][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.167183][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.187103][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.194093][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.207123][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.227042][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.237282][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 666.245496][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.254272][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.267101][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.287078][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.307102][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.327029][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.347046][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.367027][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 666.374482][T10095] usb 5-1: USB disconnect, device number 59 17:30:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) [ 666.495225][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 666.495289][ T29] audit: type=1326 audit(1597512612.294:175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15376 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 666.705041][ T29] audit: type=1326 audit(1597512612.334:176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15376 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 [ 666.728298][ T29] audit: type=1326 audit(1597512612.334:177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15376 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x7ffc0000 17:30:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 666.828524][T10095] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 667.077051][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 667.198523][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.209025][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.220551][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.230448][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.240346][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.417981][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.427311][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.435432][T10095] usb 5-1: Manufacturer: syz [ 667.454495][T10095] usb 5-1: config 0 descriptor?? 17:30:14 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:14 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x4800) 17:30:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x162, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda2f", 0x4}], 0x3, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:30:14 executing program 2: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/54, 0x3e, 0x0, 0x0}, 0xa0) 17:30:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) [ 668.977208][T10095] Registered IR keymap rc-hauppauge [ 669.013523][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:30:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe1, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 669.189640][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.228317][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 669.243132][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 17:30:15 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x4800) [ 669.416572][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.426866][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.446866][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.455163][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:30:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x167, &(0x7f00000001c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f488000000b8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d2a96681290c39a5ece9d99f4f771d82408ebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc86597e12c337a9a5335557abe71f3761d77294e0879a4f6029a2496354181802027994e44fdfecc6e9c842f10267c94b43085dfee050115b71bcc07fcd89f0ec"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bfda", 0x3}], 0x3, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 669.466833][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.486813][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.506754][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:15 executing program 2: clone3(0x0, 0x0) [ 669.526838][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.541612][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.549122][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.566808][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.580659][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.588171][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.606781][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.626807][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.646228][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.653795][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.666796][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.686758][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.706826][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.726795][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.734858][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.746817][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.766784][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.790270][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.814375][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.836734][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.856752][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.863788][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.892499][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.929123][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.960872][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 669.970682][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.999928][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 670.042541][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 670.049343][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 670.092724][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 670.101751][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 670.110025][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 670.142820][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 670.170630][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:16 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x4800) 17:30:16 executing program 2: clone3(0x0, 0x0) [ 670.190518][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 670.198597][T10095] usb 5-1: USB disconnect, device number 60 [ 670.473671][ T29] audit: type=1326 audit(1597512616.274:178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15462 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 670.667073][T10095] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 670.906747][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 671.027795][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.038289][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.049549][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 671.059550][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 671.069570][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.158565][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.168203][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.176352][T10095] usb 5-1: Manufacturer: syz [ 671.203213][T10095] usb 5-1: config 0 descriptor?? [ 671.263064][ T29] audit: type=1326 audit(1597512617.065:179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15462 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:18 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:18 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x4800) 17:30:18 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 17:30:18 executing program 2: clone3(0x0, 0x0) 17:30:18 executing program 0: unshare(0x4060600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}], 0x2b, 0x0) [ 672.756972][T10095] Registered IR keymap rc-hauppauge [ 672.792207][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.874919][ T29] audit: type=1326 audit(1597512618.675:180): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15483 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 672.964753][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.000633][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 17:30:18 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @random="2d10310fdc0e"}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000480)=ANY=[], 0x0) [ 673.015579][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input81 17:30:18 executing program 2: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/205, 0xcd}], 0x1, 0x0, 0x0) 17:30:19 executing program 1: msgrcv(0x0, 0x0, 0xda, 0x1, 0x4800) [ 673.188671][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.206521][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.226694][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.239317][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.246954][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.266480][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.286466][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.307646][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.318473][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.326548][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.346475][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.361838][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.369558][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.386472][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.399921][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.407532][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.426505][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.437557][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.446628][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.467284][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.486548][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.502328][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.510007][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.526469][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.546484][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.566431][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.586477][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.594317][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.606517][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.626572][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.646134][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.653907][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.666492][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.686443][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.706548][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.726448][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.746508][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.757393][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.766508][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.786475][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.800208][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 673.808694][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.814905][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 673.826462][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.846471][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.866475][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.886475][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 673.906463][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.926462][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.946894][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.966386][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 673.986418][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 674.006428][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 674.027070][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 674.046504][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 674.066497][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 674.083458][T10095] usb 5-1: USB disconnect, device number 61 [ 674.089824][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 674.401121][ T29] audit: type=1326 audit(1597512620.205:181): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15524 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 674.576530][T10095] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 674.817117][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 674.940523][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.951628][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.962835][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 674.972835][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 674.982778][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.067906][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 675.077572][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.085706][T10095] usb 5-1: Manufacturer: syz [ 675.129005][T10095] usb 5-1: config 0 descriptor?? 17:30:22 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000004"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:22 executing program 1: msgrcv(0x0, 0x0, 0xda, 0x1, 0x4800) 17:30:22 executing program 2: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x84f0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49) 17:30:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001000"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0xf1, 0x0, 0x0, 0x0, "d576e3e4ccbad9dcf09f833b114db4322fdc59"}) r1 = syz_open_pts(r0, 0x143881) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="17438a2bfba2d9874354d3a484529c5d3b21903a6c7e50a8fef81cbc2c78ad855bdb9cc5074b4bba573e9dce090ea77ca737cc65fd800590ecc52ea47f7c0b7802402739fcc128fad0001bb0d433fc4bc80d") write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 17:30:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 676.646700][T10095] Registered IR keymap rc-hauppauge [ 676.682180][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.813117][ T29] audit: type=1326 audit(1597512622.615:182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15547 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:22 executing program 1: msgrcv(0x0, 0x0, 0xda, 0x1, 0x4800) [ 676.893638][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.968165][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 676.983142][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input82 17:30:22 executing program 2: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:22 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) [ 677.159034][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.176225][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.196247][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.204177][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.216269][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.236329][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.254285][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.261948][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.276220][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.296164][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.309400][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.317064][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.336170][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.346575][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.356228][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.376285][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.383077][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.396321][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.416170][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.422916][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.436187][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.456238][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.464889][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.476229][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.496200][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:23 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x0, 0x4800) [ 677.516225][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.536209][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.556197][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.563023][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.576213][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.596216][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.616214][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.630597][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.638265][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.656186][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.671820][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 677.680214][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.686534][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 677.696201][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.716200][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.736211][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 677.754626][T10095] usb 5-1: USB disconnect, device number 62 [ 677.760949][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:23 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$eventfd(r0, 0x0, 0x0) 17:30:23 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pivot_root(&(0x7f00000000c0)='.\x00', &(0x7f0000000040)='./file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) [ 678.296446][T10095] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 678.537130][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 678.667587][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.678085][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.689299][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.699249][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 678.709173][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.880059][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.889362][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.897667][T10095] usb 5-1: Manufacturer: syz [ 678.956569][T10095] usb 5-1: config 0 descriptor?? 17:30:26 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000004"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:26 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) 17:30:26 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x0, 0x4800) 17:30:26 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) 17:30:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$eventfd(r0, 0x0, 0x0) 17:30:26 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r3 = syz_open_pts(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x14300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xc8], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) [ 680.476426][T10095] Registered IR keymap rc-hauppauge [ 680.513281][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 680.664638][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 680.716591][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 680.731606][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input83 [ 680.971232][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 680.985981][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.005903][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:26 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x0, 0x4800) [ 681.025917][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.037227][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.045965][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.065944][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$eventfd(r0, 0x0, 0x0) [ 681.085885][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.105878][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.125913][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.139255][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.148048][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.165894][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:27 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) 17:30:27 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) [ 681.185866][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.205927][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.225946][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.245873][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.252291][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.265916][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.285900][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.292674][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.305927][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.325945][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.332551][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.345908][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.365876][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.372527][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.386449][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.405904][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.414923][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.425938][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.445843][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.453803][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.466016][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.485860][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.505863][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.521598][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 681.529244][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.545834][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.565871][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.585916][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.592865][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 681.601268][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 681.609971][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.626998][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.645863][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.665832][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.685864][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.705818][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.725903][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:27 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 681.745904][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 681.763086][T10095] usb 5-1: USB disconnect, device number 63 [ 681.769486][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:27 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x0) [ 682.266413][T10095] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 682.516818][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 682.637350][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.647802][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.659136][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.669225][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.679186][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.786022][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.795217][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.803596][T10095] usb 5-1: Manufacturer: syz [ 682.837964][T10095] usb 5-1: config 0 descriptor?? 17:30:30 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000004"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:30 executing program 5: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 17:30:30 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) 17:30:30 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) 17:30:30 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:30 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x0) [ 684.366219][T10095] Registered IR keymap rc-hauppauge [ 684.401319][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 684.538840][ T29] audit: type=1326 audit(1597512630.346:183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15692 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 684.622374][T15703] ptrace attach of "/root/syz-executor.3"[15702] was attempted by "/root/syz-executor.3"[15703] [ 684.628639][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:30:30 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 684.709359][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 684.724483][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input84 17:30:30 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 684.980212][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 684.995675][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.015700][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.035650][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.055690][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.075560][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.089834][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.097498][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.115594][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.135654][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.155614][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.172125][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.179789][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.195573][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.215604][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.229378][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.237072][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:31 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 685.255625][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.275590][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.295619][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.315566][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.333720][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.341289][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.355617][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.375574][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.395577][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.415596][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:31 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 685.435532][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.455577][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.475569][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.482164][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.495658][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.515564][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:31 executing program 1: msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0xda, 0x1, 0x0) [ 685.535574][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.551633][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.559146][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.575561][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.595571][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.615559][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.633226][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 17:30:31 executing program 5: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 685.640770][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.655593][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.675503][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.695550][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.715545][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.735542][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.744850][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.755585][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.775541][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.795508][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.815532][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.825996][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 685.835548][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.855512][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.875514][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.887350][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 685.895751][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.901878][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 685.915561][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.935515][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.955496][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.975635][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 685.995571][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.015611][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.035520][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.055475][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.075545][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.095520][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.115497][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.135503][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 686.142497][T10095] usb 5-1: USB disconnect, device number 64 [ 686.445101][ T29] audit: type=1326 audit(1597512632.246:184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15748 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 686.576255][T10095] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 686.816048][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 686.936515][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.947134][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.958292][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.968207][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.978132][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.087855][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.097459][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.105746][T10095] usb 5-1: Manufacturer: syz [ 687.164891][T10095] usb 5-1: config 0 descriptor?? 17:30:34 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) 17:30:34 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 17:30:34 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 17:30:34 executing program 1: 17:30:34 executing program 5: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 688.717196][T10095] Registered IR keymap rc-hauppauge [ 688.753221][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.828782][ T29] audit: type=1326 audit(1597512634.636:185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15767 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) 17:30:34 executing program 1: [ 689.063682][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.131296][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 689.146665][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input85 [ 689.351939][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.365368][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.385293][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.405265][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.423228][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.430841][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.445301][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:35 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) [ 689.466073][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.485247][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.505261][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.525293][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.544872][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.552469][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.565257][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.585335][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.605235][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.625339][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.645292][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.665260][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.685251][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:35 executing program 1: [ 689.705633][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.725257][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.745245][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.765213][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.773006][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.785585][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.805338][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.823421][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.831029][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.845259][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.865411][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 689.885283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.905237][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.925238][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:35 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 689.940625][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 689.949551][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.965307][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 689.985292][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.005254][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.025245][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.045240][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.065286][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.078968][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 690.086580][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.106150][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.125233][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.143559][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 690.151251][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.165313][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.185305][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.205232][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.225213][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.238542][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 690.246165][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.269361][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.285172][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.324459][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.335334][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.348070][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 690.381971][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.402003][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 690.410291][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 690.451397][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.474627][ T29] audit: type=1326 audit(1597512636.276:186): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15800 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 690.515322][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.566266][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.595733][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 690.607429][T10095] usb 5-1: USB disconnect, device number 65 [ 691.067190][T10095] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 691.315342][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 691.436233][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.446635][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.457932][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.468005][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.478162][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.586470][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.595971][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.604109][T10095] usb 5-1: Manufacturer: syz [ 691.615570][T10095] usb 5-1: config 0 descriptor?? [ 691.876714][T10095] Registered IR keymap rc-hauppauge [ 691.901952][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 691.946974][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 691.976027][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 691.991236][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 692.062911][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.095100][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.101783][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.115093][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.135068][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.141747][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.155099][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.175059][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.182125][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.195114][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.215059][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.225305][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.235222][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.255073][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.261716][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.275087][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.295024][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.301984][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.315067][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.335040][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.341744][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.355094][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.375035][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.382489][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.395115][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.415059][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.421528][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 692.435075][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.455032][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.464115][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 692.472714][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 692.481490][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.495117][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.515024][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.535023][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.555003][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.575011][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.595024][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.615012][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.635015][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 692.649987][T10095] usb 5-1: USB disconnect, device number 66 [ 692.656265][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:38 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:38 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 17:30:38 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:30:38 executing program 1: 17:30:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 17:30:38 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) [ 693.015704][ T29] audit: type=1326 audit(1597512638.816:187): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15848 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:38 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:30:39 executing program 1: 17:30:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 693.737180][ T12] usb 5-1: new high-speed USB device number 67 using dummy_hcd 17:30:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:39 executing program 1: [ 693.985635][ T12] usb 5-1: Using ep0 maxpacket: 16 17:30:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 694.136164][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.146739][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.158279][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 694.168311][ T12] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 694.178244][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.377956][ T12] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 694.387289][ T12] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 694.395587][ T12] usb 5-1: Manufacturer: syz [ 694.480505][ T12] usb 5-1: config 0 descriptor?? [ 694.488305][ T29] audit: type=1326 audit(1597512640.296:188): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15878 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 694.765431][ T12] Registered IR keymap rc-hauppauge [ 694.801225][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.836114][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.866161][ T12] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 694.881101][ T12] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input87 [ 694.903170][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.935302][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.969623][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.994877][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.011920][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.019544][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.044829][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.056729][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.064898][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.094823][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.102011][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.114856][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.134901][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.146481][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.154861][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.174808][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.182399][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.194865][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.214790][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.221928][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.234836][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.254787][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.264607][ T12] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 695.274828][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.294791][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.303552][ T12] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 695.312093][ T12] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 695.320859][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.334830][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.354803][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.374814][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.394762][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.414768][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 695.430108][ T12] usb 5-1: USB disconnect, device number 67 [ 695.436367][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:30:41 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 17:30:41 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 17:30:41 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c03e95fcc376a0f5aa3b6f950d3dae964f98c42dabbeec5a9f"]) 17:30:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(0x0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:41 executing program 1: 17:30:41 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 695.729769][ T29] audit: type=1326 audit(1597512641.526:189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15906 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(0x0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:41 executing program 1: 17:30:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(0x0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 696.384830][T10095] usb 5-1: new high-speed USB device number 68 using dummy_hcd 17:30:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:42 executing program 1: [ 696.625176][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 696.745576][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.756038][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.767286][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.777183][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 17:30:42 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) [ 696.787124][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 17:30:42 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 17:30:42 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 696.949170][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 696.958547][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 696.966869][T10095] usb 5-1: Manufacturer: syz [ 697.046635][T10095] usb 5-1: config 0 descriptor?? [ 697.207725][ T29] audit: type=1326 audit(1597512643.006:190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15945 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 [ 697.305578][T10095] Registered IR keymap rc-hauppauge [ 697.341379][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.472033][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.517009][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 697.532033][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input88 [ 697.619549][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.634824][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.654653][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.662917][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.674725][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.694655][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.701080][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.714688][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.734624][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.741657][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.754659][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.774661][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.781277][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.794730][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.814639][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.832185][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.839835][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.854655][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.874619][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.881437][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.894625][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.914622][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.923037][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.934690][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.954656][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.961706][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.974678][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 697.994638][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.001500][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.014674][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.034625][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.036703][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 698.048895][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 698.057697][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.074646][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.094679][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.114682][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.134690][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.154644][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.174655][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 698.194675][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:44 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, 0x0) 17:30:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:44 executing program 1: 17:30:44 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) dup3(r2, r0, 0x0) [ 698.209561][T10095] usb 5-1: USB disconnect, device number 68 [ 698.215798][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:44 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 17:30:44 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 17:30:44 executing program 1: 17:30:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r3, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 698.790204][ T29] audit: type=1326 audit(1597512644.587:191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15984 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f52549 code=0x0 17:30:44 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 698.985948][ T9086] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 699.225507][ T9086] usb 5-1: Using ep0 maxpacket: 16 17:30:45 executing program 1: [ 699.376610][ T9086] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.386976][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.398198][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 699.408177][ T9086] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 17:30:45 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 699.418110][ T9086] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.615574][ T9086] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 699.625780][ T9086] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 699.633916][ T9086] usb 5-1: Manufacturer: syz 17:30:45 executing program 1: [ 699.796502][ T9086] usb 5-1: config 0 descriptor?? [ 700.065278][ T9086] Registered IR keymap rc-hauppauge [ 700.101033][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.263480][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.295442][ T9086] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 700.335117][ T9086] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input89 [ 700.394142][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.404527][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.424464][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.431354][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.454440][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.467330][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.474896][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.494471][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.505459][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.514488][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.534429][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.542575][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.554451][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.574464][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.581328][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.594487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.614436][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.621013][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.634524][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.654453][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.660871][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.674502][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.694492][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.703949][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.714487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.734465][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.741054][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 700.754501][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.784427][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.792763][ T9086] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 700.801174][ T9086] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 700.810009][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.824539][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.854418][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.874513][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.894438][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:30:46 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, 0x0) 17:30:46 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:46 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) dup3(r2, r0, 0x0) 17:30:46 executing program 5: 17:30:46 executing program 1: 17:30:46 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 700.914512][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 700.924579][ T9086] usb 5-1: USB disconnect, device number 69 17:30:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:47 executing program 5: 17:30:47 executing program 1: 17:30:47 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:47 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 701.795005][T10095] usb 5-1: new high-speed USB device number 70 using dummy_hcd 17:30:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 702.034599][T10095] usb 5-1: Using ep0 maxpacket: 16 [ 702.155612][T10095] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.166158][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.177374][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 702.187585][T10095] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 702.197631][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.535646][T10095] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.544936][T10095] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.553078][T10095] usb 5-1: Manufacturer: syz [ 702.603935][T10095] usb 5-1: config 0 descriptor?? [ 702.855813][T10095] Registered IR keymap rc-hauppauge [ 702.892655][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 702.950936][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 702.990455][T10095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 703.005818][T10095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input90 [ 703.049506][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.064467][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.084281][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.091121][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.104309][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.124265][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.130868][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.145093][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.164267][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.171134][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.184282][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.204239][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.210660][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.224360][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.244254][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.251471][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.264283][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.284242][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.290585][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.304392][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.324252][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.331555][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.344258][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.364252][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.371599][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.385535][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.404244][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.411712][T10095] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 703.424253][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.444247][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.452365][T10095] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 703.460748][T10095] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 703.469543][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.484260][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.504234][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 703.513608][T10095] usb 5-1: USB disconnect, device number 70 17:30:49 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, 0x0) 17:30:49 executing program 5: 17:30:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x121402) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000600)='S', 0x1}], 0x1) 17:30:49 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:49 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:49 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:49 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 703.829162][T16109] sg_write: process 553 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. 17:30:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 17:30:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}) 17:30:50 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:50 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 704.474148][ T3224] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 704.724402][ T3224] usb 5-1: Using ep0 maxpacket: 16 [ 704.866475][ T3224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.877277][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.888496][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.898403][ T3224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.908368][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.086843][ T3224] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.096474][ T3224] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.104759][ T3224] usb 5-1: Manufacturer: syz [ 705.151342][ T3224] usb 5-1: config 0 descriptor?? [ 705.433135][ T3224] Registered IR keymap rc-hauppauge [ 705.468899][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.517414][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.559694][ T3224] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 705.579575][ T3224] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 705.598648][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.732617][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.754091][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.767947][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.775571][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.794040][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.809555][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.817102][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.834066][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.846712][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.854270][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.874049][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.884770][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.894098][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.914069][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.920471][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.934109][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.954148][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.963001][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 705.974114][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 705.994124][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.001024][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 706.014068][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.034037][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.040931][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 706.054085][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.074059][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.083692][ T3224] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 706.092254][ T3224] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 706.100955][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 706.113326][ T3224] usb 5-1: USB disconnect, device number 71 [ 706.119588][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:30:52 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[]) 17:30:52 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000070603000000000000000000000000000500010006"], 0x1c}}, 0x0) 17:30:52 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:30:52 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:52 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 706.548057][T16195] fuse: Bad value for 'fd' [ 706.646883][T16197] fuse: Bad value for 'fd' 17:30:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@private0}}]}, 0xa0}}, 0x0) 17:30:52 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:52 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 707.194320][ T9843] usb 5-1: new high-speed USB device number 72 using dummy_hcd 17:30:53 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) 17:30:53 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 707.435525][ T9843] usb 5-1: Using ep0 maxpacket: 16 [ 707.555280][ T9843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.565706][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.576992][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.587313][ T9843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 707.597245][ T9843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.885514][ T9843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.894949][ T9843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 707.903086][ T9843] usb 5-1: Manufacturer: syz [ 708.004269][ T9843] usb 5-1: config 0 descriptor?? [ 708.264710][ T9843] Registered IR keymap rc-hauppauge [ 708.300760][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.358568][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.394999][ T9843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 708.409994][ T9843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92 [ 708.428997][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.467671][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.507855][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.544303][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.574373][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.607624][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.648266][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.684150][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.715854][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.747831][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 708.789904][ T9843] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 708.798300][ T9843] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 708.850637][ T9843] usb 5-1: USB disconnect, device number 72 17:30:55 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[]) 17:30:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:30:55 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:55 executing program 5: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x18}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r1, &(0x7f00000012c0), 0x100000000000017e, 0x0, 0x0) 17:30:55 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:55 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:55 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) 17:30:56 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 710.354371][ T9087] usb 5-1: new high-speed USB device number 73 using dummy_hcd 17:30:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 710.594619][ T9087] usb 5-1: Using ep0 maxpacket: 16 [ 710.715256][ T9087] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.725751][ T9087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.736955][ T9087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.748553][ T9087] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.758516][ T9087] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.096736][ T9087] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.106224][ T9087] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.114716][ T9087] usb 5-1: Manufacturer: syz [ 711.166792][ T9087] usb 5-1: config 0 descriptor?? [ 711.427019][ T9087] Registered IR keymap rc-hauppauge [ 711.463521][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.502947][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.535722][ T9087] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 711.550695][ T9087] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93 [ 711.697707][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.740685][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.840543][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.878069][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.919233][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.957004][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.996979][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.036933][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.073899][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.093664][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.108786][ T9087] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.116324][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.133619][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.151031][ T9087] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 712.159451][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.165859][ T9087] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 712.174745][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.193607][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.213610][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.233616][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.253626][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 712.268851][ T9087] usb 5-1: USB disconnect, device number 73 [ 712.275085][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:30:58 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[]) 17:30:58 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup3(r2, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x385c, 0x0, [{}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, [], 0x7}]}}) 17:30:58 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:58 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:30:59 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:30:59 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:30:59 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 713.527010][ T8712] usb 5-1: new high-speed USB device number 74 using dummy_hcd 17:30:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xc000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "060800", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88c0}}}}}}}, 0x0) [ 713.774565][ T8712] usb 5-1: Using ep0 maxpacket: 16 17:30:59 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 713.894706][ T8712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.905245][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.916430][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.926315][ T8712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 17:30:59 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 713.936196][ T8712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.127809][ T8712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.137082][ T8712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.145580][ T8712] usb 5-1: Manufacturer: syz [ 714.178738][ T8712] usb 5-1: config 0 descriptor?? [ 714.444031][ T8712] Registered IR keymap rc-hauppauge [ 714.480110][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.590049][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.638094][ T8712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 714.670210][ T8712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input94 [ 714.805967][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.854649][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.894815][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.953199][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 714.987072][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.053722][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.093841][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.142179][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.189460][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.203426][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.223661][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.243401][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.257340][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.264980][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.283519][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.303408][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.311490][ T8712] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 715.320225][ T8712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 715.328945][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.353365][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.373371][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 715.387626][ T8712] usb 5-1: USB disconnect, device number 74 [ 715.393882][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:31:01 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB]) 17:31:01 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:01 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:31:01 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa0050000}]}}}}}}}}, 0x0) 17:31:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 716.135033][T16438] fuse: Bad value for 'fd' 17:31:02 executing program 5: clone(0x2000000002200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) 17:31:02 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:02 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:31:02 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 716.633876][ T9843] usb 5-1: new high-speed USB device number 75 using dummy_hcd 17:31:02 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 716.873329][ T9843] usb 5-1: Using ep0 maxpacket: 16 17:31:02 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 716.998896][ T9843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.009344][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.020624][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 717.030618][ T9843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 717.035560][T16457] fuse: Bad value for 'fd' [ 717.040588][ T9843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.062801][T16456] fuse: Bad value for 'fd' [ 717.254566][ T9843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 717.263944][ T9843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 717.272178][ T9843] usb 5-1: Manufacturer: syz [ 717.300290][ T9843] usb 5-1: config 0 descriptor?? [ 717.554161][ T9843] Registered IR keymap rc-hauppauge [ 717.589971][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.670003][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.706388][ T9843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 717.721415][ T9843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input95 [ 717.783391][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.813789][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.846564][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.886472][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.926516][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.967399][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.013910][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.060835][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.101917][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.133465][ T9843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.165253][ T9843] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 718.173706][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 718.180190][ T9843] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.193190][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 718.213429][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 718.233207][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 718.245853][ T9843] usb 5-1: USB disconnect, device number 75 [ 718.253253][ C1] mceusb 5-1:0.0: Error: urb status = -71 17:31:04 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB]) 17:31:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) dup3(r2, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x385c, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0xff}]}}) 17:31:04 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:31:04 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:31:04 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:04 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 719.011526][T16497] fuse: Bad value for 'fd' 17:31:05 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:05 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:31:05 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 719.785470][ T3224] usb 5-1: new high-speed USB device number 76 using dummy_hcd 17:31:05 executing program 5: getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 720.053538][ T3224] usb 5-1: Using ep0 maxpacket: 16 [ 720.177287][ T3224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.187680][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.198913][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.208883][ T3224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 17:31:06 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 720.218897][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.319508][T16533] fuse: Bad value for 'fd' [ 720.523804][ T3224] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 720.533176][ T3224] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 720.541304][ T3224] usb 5-1: Manufacturer: syz [ 720.562216][ T3224] usb 5-1: config 0 descriptor?? [ 720.638983][T16536] kvm [16534]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000004 data 0x29 [ 720.672101][T16536] kvm [16534]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000029 data 0xdc [ 720.824481][ T3224] Registered IR keymap rc-hauppauge [ 720.860506][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.880067][T16548] kvm [16534]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000004 data 0x29 [ 720.890250][T16548] kvm [16534]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000029 data 0xdc [ 720.941783][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.997245][ T3224] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 721.012364][ T3224] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input96 [ 721.062789][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.102466][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.137595][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.173383][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.203865][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.233367][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.273832][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.313896][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.353630][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.384288][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.417095][ T3224] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 721.425374][ T3224] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.462342][ T3224] usb 5-1: USB disconnect, device number 76 [ 721.473084][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:31:07 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB]) 17:31:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:07 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:07 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:07 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x0, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:07 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e0, &(0x7f0000000100)) 17:31:08 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x0, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:08 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:08 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:08 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0xa, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 723.272951][ T3224] usb 5-1: new high-speed USB device number 77 using dummy_hcd 17:31:09 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x0, 0x8, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 723.523082][ T3224] usb 5-1: Using ep0 maxpacket: 16 [ 723.654283][ T3224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.664829][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.676159][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 723.686138][ T3224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 723.696045][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.761269][T16598] kvm [16595]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000040 data 0xd9 [ 724.043878][ T3224] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 724.053283][ T3224] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 724.061474][ T3224] usb 5-1: Manufacturer: syz [ 724.306158][ T3224] usb 5-1: config 0 descriptor?? [ 724.393511][T16602] kvm [16595]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000040 data 0xd9 [ 724.566970][ T3224] Registered IR keymap rc-hauppauge [ 724.603554][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 724.690948][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 724.723784][ T3224] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 724.738831][ T3224] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 724.838939][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 724.884427][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 724.915768][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 724.963325][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.025231][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.065553][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.102961][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.143712][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.173206][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.203913][ T3224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 725.222731][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 725.235854][ T3224] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 725.244254][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 725.250609][ T3224] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 725.262794][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 725.277122][ T3224] usb 5-1: USB disconnect, device number 77 [ 725.283368][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:31:11 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c0"]) 17:31:11 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:11 executing program 0: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:11 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:11 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:12 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:12 executing program 2: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:12 executing program 0: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:12 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 727.012896][ T8712] usb 5-1: new high-speed USB device number 78 using dummy_hcd 17:31:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 727.262705][ T8712] usb 5-1: Using ep0 maxpacket: 16 [ 727.393681][ T8712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.404220][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.415424][ T8712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.419260][T16671] kvm [16670]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000040 data 0xd9 [ 727.425374][ T8712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 727.425516][ T8712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.613983][ T8712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 727.623351][ T8712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.631474][ T8712] usb 5-1: Manufacturer: syz [ 727.800619][ T8712] usb 5-1: config 0 descriptor?? [ 728.073051][ T8712] Registered IR keymap rc-hauppauge [ 728.108982][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.185940][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.224119][ T8712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 728.239084][ T8712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 728.298780][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.333393][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.370235][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.403082][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.443479][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.476303][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.515994][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.555888][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.606057][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.646775][ T8712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.691876][ T8712] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 728.700347][ T8712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 728.732486][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 728.752443][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 728.772568][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 728.792436][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 728.812424][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 728.822503][ T8712] usb 5-1: USB disconnect, device number 78 17:31:15 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c0"]) 17:31:15 executing program 2: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:15 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:15 executing program 0: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:15 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:16 executing program 2: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:16 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 730.433213][ T9086] usb 5-1: new high-speed USB device number 79 using dummy_hcd 17:31:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 730.712339][ T9086] usb 5-1: Using ep0 maxpacket: 16 [ 730.838694][ T9086] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.849081][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.860243][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 730.870096][ T9086] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 730.879958][ T9086] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.291035][ T9086] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.300308][ T9086] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.308595][ T9086] usb 5-1: Manufacturer: syz [ 731.484266][ T9086] usb 5-1: config 0 descriptor?? [ 731.742973][ T9086] Registered IR keymap rc-hauppauge [ 731.779292][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 731.813424][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 731.847127][ T9086] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 731.862227][ T9086] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input99 [ 731.883376][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 731.912545][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 731.945755][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.003417][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.041689][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.084853][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.140375][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.172750][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.202446][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.237292][ T9086] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 732.274588][ T9086] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 732.283016][ T9086] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.372224][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 732.389078][ T9086] usb 5-1: USB disconnect, device number 79 [ 732.395298][ C0] mceusb 5-1:0.0: Error: urb status = -71 17:31:18 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="8500004e5ded63b7e5b468da09b3bbeed5f241a66177e813c0"]) 17:31:18 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:18 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:18 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 733.149120][T16780] fuse: Bad value for 'fd' [ 733.157992][T16779] fuse: Bad value for 'fd' 17:31:19 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:31:19 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:19 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 17:31:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) socket$inet(0x2, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 17:31:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:31:19 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x40) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 733.932888][ T9086] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 734.063004][T16806] fuse: Bad value for 'fd' [ 734.094494][T16807] fuse: Bad value for 'fd' [ 734.213359][ T9086] usb 5-1: Using ep0 maxpacket: 16 [ 734.402684][ T9086] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.413304][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.424533][ T9086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.434413][ T9086] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.444351][ T9086] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.883279][ T9086] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.892565][ T9086] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.900700][ T9086] usb 5-1: Manufacturer: syz [ 734.944277][ T9086] usb 5-1: config 0 descriptor?? [ 735.195700][ T9086] Registered IR keymap rc-hauppauge [ 735.217430][ T9086] not chained 20000 origins [ 735.222165][ T9086] CPU: 0 PID: 9086 Comm: kworker/0:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 735.230556][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.240743][ T9086] Workqueue: usb_hub_wq hub_event [ 735.245821][ T9086] Call Trace: [ 735.249219][ T9086] dump_stack+0x21c/0x280 [ 735.253661][ T9086] kmsan_internal_chain_origin+0x6f/0x130 [ 735.259496][ T9086] ? kmsan_internal_chain_origin+0xad/0x130 [ 735.265491][ T9086] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 735.271743][ T9086] ? kmsan_memmove_metadata+0xe/0x10 [ 735.277120][ T9086] ? __msan_memmove+0x43/0x50 [ 735.281941][ T9086] ? rc_register_device+0x1164/0x2db0 [ 735.287453][ T9086] ? mceusb_dev_probe+0x2a0c/0x5900 [ 735.292805][ T9086] ? usb_probe_interface+0xece/0x1550 [ 735.298346][ T9086] ? really_probe+0xf20/0x20b0 [ 735.303217][ T9086] ? driver_probe_device+0x293/0x390 [ 735.308604][ T9086] ? __device_attach_driver+0x63f/0x830 [ 735.314244][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 735.319366][ T9086] ? __device_attach+0x4e2/0x7f0 [ 735.324407][ T9086] ? device_initial_probe+0x4a/0x60 [ 735.329697][ T9086] ? bus_probe_device+0x177/0x3d0 [ 735.334813][ T9086] ? device_add+0x3b0e/0x40d0 [ 735.339590][ T9086] ? usb_set_configuration+0x380f/0x3f10 [ 735.345321][ T9086] ? usb_generic_driver_probe+0x138/0x300 [ 735.351134][ T9086] ? usb_probe_device+0x311/0x490 [ 735.356251][ T9086] ? really_probe+0xf20/0x20b0 [ 735.361117][ T9086] ? driver_probe_device+0x293/0x390 [ 735.366512][ T9086] ? __device_attach_driver+0x63f/0x830 [ 735.372156][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 735.377273][ T9086] ? __device_attach+0x4e2/0x7f0 [ 735.382309][ T9086] ? device_initial_probe+0x4a/0x60 [ 735.387618][ T9086] ? bus_probe_device+0x177/0x3d0 [ 735.392725][ T9086] ? device_add+0x3b0e/0x40d0 [ 735.397506][ T9086] ? usb_new_device+0x1bd4/0x2a30 [ 735.402615][ T9086] ? hub_event+0x5e7b/0x8a70 [ 735.407388][ T9086] ? process_one_work+0x1688/0x2140 [ 735.412702][ T9086] ? worker_thread+0x10bc/0x2730 [ 735.417741][ T9086] ? kthread+0x551/0x590 [ 735.422075][ T9086] ? ret_from_fork+0x1f/0x30 [ 735.426776][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.432687][ T9086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 735.438898][ T9086] ? idle_cpu+0x9a/0x1d0 [ 735.443247][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.448540][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.454448][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 735.460527][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 735.465733][ T9086] __msan_memmove+0x43/0x50 [ 735.470333][ T9086] rc_register_device+0x1164/0x2db0 [ 735.475666][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 735.480848][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.486142][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.492036][ T9086] ? vfd_write+0xec0/0xec0 [ 735.496560][ T9086] usb_probe_interface+0xece/0x1550 [ 735.501874][ T9086] ? usb_register_driver+0x900/0x900 [ 735.507250][ T9086] really_probe+0xf20/0x20b0 [ 735.511940][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.517282][ T9086] driver_probe_device+0x293/0x390 [ 735.522595][ T9086] __device_attach_driver+0x63f/0x830 [ 735.528173][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 735.533139][ T9086] ? coredump_store+0xf0/0xf0 [ 735.537926][ T9086] __device_attach+0x4e2/0x7f0 [ 735.542813][ T9086] device_initial_probe+0x4a/0x60 [ 735.547928][ T9086] bus_probe_device+0x177/0x3d0 [ 735.552888][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.558783][ T9086] device_add+0x3b0e/0x40d0 [ 735.563425][ T9086] usb_set_configuration+0x380f/0x3f10 [ 735.568998][ T9086] ? usb_set_configuration+0xb41/0x3f10 [ 735.574680][ T9086] usb_generic_driver_probe+0x138/0x300 [ 735.580337][ T9086] ? usb_choose_configuration+0xe70/0xe70 [ 735.586159][ T9086] usb_probe_device+0x311/0x490 [ 735.591122][ T9086] ? usb_register_device_driver+0x540/0x540 [ 735.597121][ T9086] really_probe+0xf20/0x20b0 [ 735.601814][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.607120][ T9086] driver_probe_device+0x293/0x390 [ 735.612353][ T9086] __device_attach_driver+0x63f/0x830 [ 735.617847][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 735.622799][ T9086] ? coredump_store+0xf0/0xf0 [ 735.627585][ T9086] __device_attach+0x4e2/0x7f0 [ 735.632465][ T9086] device_initial_probe+0x4a/0x60 [ 735.637587][ T9086] bus_probe_device+0x177/0x3d0 [ 735.642547][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.648447][ T9086] device_add+0x3b0e/0x40d0 [ 735.653099][ T9086] usb_new_device+0x1bd4/0x2a30 [ 735.658060][ T9086] hub_event+0x5e7b/0x8a70 [ 735.662631][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.667930][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 735.673814][ T9086] ? led_work+0x7c0/0x7c0 [ 735.678249][ T9086] process_one_work+0x1688/0x2140 [ 735.683407][ T9086] worker_thread+0x10bc/0x2730 [ 735.688266][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 735.693579][ T9086] kthread+0x551/0x590 [ 735.697756][ T9086] ? process_one_work+0x2140/0x2140 [ 735.703051][ T9086] ? kthread_blkcg+0x110/0x110 [ 735.707908][ T9086] ret_from_fork+0x1f/0x30 [ 735.713826][ T9086] Uninit was stored to memory at: [ 735.718957][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 735.724843][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 735.730910][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 735.736176][ T9086] __msan_memmove+0x43/0x50 [ 735.740756][ T9086] rc_register_device+0x1164/0x2db0 [ 735.746105][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 735.751226][ T9086] usb_probe_interface+0xece/0x1550 [ 735.756587][ T9086] really_probe+0xf20/0x20b0 [ 735.761273][ T9086] driver_probe_device+0x293/0x390 [ 735.766590][ T9086] __device_attach_driver+0x63f/0x830 [ 735.772117][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 735.777049][ T9086] __device_attach+0x4e2/0x7f0 [ 735.782012][ T9086] device_initial_probe+0x4a/0x60 [ 735.787129][ T9086] bus_probe_device+0x177/0x3d0 [ 735.792125][ T9086] device_add+0x3b0e/0x40d0 [ 735.796729][ T9086] usb_set_configuration+0x380f/0x3f10 [ 735.802385][ T9086] usb_generic_driver_probe+0x138/0x300 [ 735.808025][ T9086] usb_probe_device+0x311/0x490 [ 735.813115][ T9086] really_probe+0xf20/0x20b0 [ 735.817819][ T9086] driver_probe_device+0x293/0x390 [ 735.823098][ T9086] __device_attach_driver+0x63f/0x830 [ 735.828606][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 735.833679][ T9086] __device_attach+0x4e2/0x7f0 [ 735.838539][ T9086] device_initial_probe+0x4a/0x60 [ 735.843729][ T9086] bus_probe_device+0x177/0x3d0 [ 735.848688][ T9086] device_add+0x3b0e/0x40d0 [ 735.853358][ T9086] usb_new_device+0x1bd4/0x2a30 [ 735.858291][ T9086] hub_event+0x5e7b/0x8a70 [ 735.862871][ T9086] process_one_work+0x1688/0x2140 [ 735.867989][ T9086] worker_thread+0x10bc/0x2730 [ 735.872897][ T9086] kthread+0x551/0x590 [ 735.877058][ T9086] ret_from_fork+0x1f/0x30 [ 735.881511][ T9086] [ 735.883944][ T9086] Uninit was stored to memory at: [ 735.889062][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 735.894934][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 735.901002][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 735.906266][ T9086] __msan_memmove+0x43/0x50 [ 735.910855][ T9086] rc_register_device+0x1164/0x2db0 [ 735.916208][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 735.921332][ T9086] usb_probe_interface+0xece/0x1550 [ 735.926702][ T9086] really_probe+0xf20/0x20b0 [ 735.931395][ T9086] driver_probe_device+0x293/0x390 [ 735.936679][ T9086] __device_attach_driver+0x63f/0x830 [ 735.942200][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 735.947139][ T9086] __device_attach+0x4e2/0x7f0 [ 735.952055][ T9086] device_initial_probe+0x4a/0x60 [ 735.957166][ T9086] bus_probe_device+0x177/0x3d0 [ 735.962164][ T9086] device_add+0x3b0e/0x40d0 [ 735.966766][ T9086] usb_set_configuration+0x380f/0x3f10 [ 735.972381][ T9086] usb_generic_driver_probe+0x138/0x300 [ 735.978040][ T9086] usb_probe_device+0x311/0x490 [ 735.983050][ T9086] really_probe+0xf20/0x20b0 [ 735.987744][ T9086] driver_probe_device+0x293/0x390 [ 735.993021][ T9086] __device_attach_driver+0x63f/0x830 [ 735.998478][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.003479][ T9086] __device_attach+0x4e2/0x7f0 [ 736.008332][ T9086] device_initial_probe+0x4a/0x60 [ 736.013502][ T9086] bus_probe_device+0x177/0x3d0 [ 736.018434][ T9086] device_add+0x3b0e/0x40d0 [ 736.023101][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.028033][ T9086] hub_event+0x5e7b/0x8a70 [ 736.032623][ T9086] process_one_work+0x1688/0x2140 [ 736.037746][ T9086] worker_thread+0x10bc/0x2730 [ 736.042659][ T9086] kthread+0x551/0x590 [ 736.046811][ T9086] ret_from_fork+0x1f/0x30 [ 736.051270][ T9086] [ 736.053714][ T9086] Uninit was stored to memory at: [ 736.058834][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 736.064719][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.070786][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.076047][ T9086] __msan_memmove+0x43/0x50 [ 736.080630][ T9086] rc_register_device+0x1164/0x2db0 [ 736.085980][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.091106][ T9086] usb_probe_interface+0xece/0x1550 [ 736.096465][ T9086] really_probe+0xf20/0x20b0 [ 736.101156][ T9086] driver_probe_device+0x293/0x390 [ 736.106432][ T9086] __device_attach_driver+0x63f/0x830 [ 736.111956][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.116899][ T9086] __device_attach+0x4e2/0x7f0 [ 736.121823][ T9086] device_initial_probe+0x4a/0x60 [ 736.126937][ T9086] bus_probe_device+0x177/0x3d0 [ 736.131928][ T9086] device_add+0x3b0e/0x40d0 [ 736.136528][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.142141][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.147802][ T9086] usb_probe_device+0x311/0x490 [ 736.152821][ T9086] really_probe+0xf20/0x20b0 [ 736.157507][ T9086] driver_probe_device+0x293/0x390 [ 736.162781][ T9086] __device_attach_driver+0x63f/0x830 [ 736.168249][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.173261][ T9086] __device_attach+0x4e2/0x7f0 [ 736.178123][ T9086] device_initial_probe+0x4a/0x60 [ 736.183305][ T9086] bus_probe_device+0x177/0x3d0 [ 736.188255][ T9086] device_add+0x3b0e/0x40d0 [ 736.192927][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.197860][ T9086] hub_event+0x5e7b/0x8a70 [ 736.202443][ T9086] process_one_work+0x1688/0x2140 [ 736.207566][ T9086] worker_thread+0x10bc/0x2730 [ 736.212482][ T9086] kthread+0x551/0x590 [ 736.216644][ T9086] ret_from_fork+0x1f/0x30 [ 736.221094][ T9086] [ 736.223528][ T9086] Uninit was stored to memory at: [ 736.228657][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 736.234530][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.240603][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.245899][ T9086] __msan_memmove+0x43/0x50 [ 736.250485][ T9086] rc_register_device+0x1164/0x2db0 [ 736.255845][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.260966][ T9086] usb_probe_interface+0xece/0x1550 [ 736.266359][ T9086] really_probe+0xf20/0x20b0 [ 736.271047][ T9086] driver_probe_device+0x293/0x390 [ 736.276322][ T9086] __device_attach_driver+0x63f/0x830 [ 736.281846][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.286786][ T9086] __device_attach+0x4e2/0x7f0 [ 736.291665][ T9086] device_initial_probe+0x4a/0x60 [ 736.296848][ T9086] bus_probe_device+0x177/0x3d0 [ 736.301836][ T9086] device_add+0x3b0e/0x40d0 [ 736.306436][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.312051][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.317691][ T9086] usb_probe_device+0x311/0x490 [ 736.322702][ T9086] really_probe+0xf20/0x20b0 [ 736.327389][ T9086] driver_probe_device+0x293/0x390 [ 736.332685][ T9086] __device_attach_driver+0x63f/0x830 [ 736.338158][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.343158][ T9086] __device_attach+0x4e2/0x7f0 [ 736.348011][ T9086] device_initial_probe+0x4a/0x60 [ 736.353188][ T9086] bus_probe_device+0x177/0x3d0 [ 736.358119][ T9086] device_add+0x3b0e/0x40d0 [ 736.362781][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.367706][ T9086] hub_event+0x5e7b/0x8a70 [ 736.372303][ T9086] process_one_work+0x1688/0x2140 [ 736.377426][ T9086] worker_thread+0x10bc/0x2730 [ 736.382337][ T9086] kthread+0x551/0x590 [ 736.386490][ T9086] ret_from_fork+0x1f/0x30 [ 736.390940][ T9086] [ 736.393372][ T9086] Uninit was stored to memory at: [ 736.398492][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 736.404409][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.410481][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.415739][ T9086] __msan_memmove+0x43/0x50 [ 736.420323][ T9086] rc_register_device+0x1164/0x2db0 [ 736.425671][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.430794][ T9086] usb_probe_interface+0xece/0x1550 [ 736.436157][ T9086] really_probe+0xf20/0x20b0 [ 736.440837][ T9086] driver_probe_device+0x293/0x390 [ 736.446105][ T9086] __device_attach_driver+0x63f/0x830 [ 736.451563][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.456569][ T9086] __device_attach+0x4e2/0x7f0 [ 736.461431][ T9086] device_initial_probe+0x4a/0x60 [ 736.466615][ T9086] bus_probe_device+0x177/0x3d0 [ 736.471547][ T9086] device_add+0x3b0e/0x40d0 [ 736.476217][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.481843][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.487514][ T9086] usb_probe_device+0x311/0x490 [ 736.492538][ T9086] really_probe+0xf20/0x20b0 [ 736.497240][ T9086] driver_probe_device+0x293/0x390 [ 736.502524][ T9086] __device_attach_driver+0x63f/0x830 [ 736.507996][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.513011][ T9086] __device_attach+0x4e2/0x7f0 [ 736.517882][ T9086] device_initial_probe+0x4a/0x60 [ 736.523069][ T9086] bus_probe_device+0x177/0x3d0 [ 736.528088][ T9086] device_add+0x3b0e/0x40d0 [ 736.532781][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.537709][ T9086] hub_event+0x5e7b/0x8a70 [ 736.542306][ T9086] process_one_work+0x1688/0x2140 [ 736.547429][ T9086] worker_thread+0x10bc/0x2730 [ 736.552341][ T9086] kthread+0x551/0x590 [ 736.556498][ T9086] ret_from_fork+0x1f/0x30 [ 736.560948][ T9086] [ 736.563384][ T9086] Uninit was stored to memory at: [ 736.568500][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 736.574393][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.580463][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.585737][ T9086] __msan_memmove+0x43/0x50 [ 736.590326][ T9086] rc_register_device+0x1164/0x2db0 [ 736.595725][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.600841][ T9086] usb_probe_interface+0xece/0x1550 [ 736.606241][ T9086] really_probe+0xf20/0x20b0 [ 736.610929][ T9086] driver_probe_device+0x293/0x390 [ 736.616274][ T9086] __device_attach_driver+0x63f/0x830 [ 736.621888][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.626833][ T9086] __device_attach+0x4e2/0x7f0 [ 736.631692][ T9086] device_initial_probe+0x4a/0x60 [ 736.636928][ T9086] bus_probe_device+0x177/0x3d0 [ 736.641976][ T9086] device_add+0x3b0e/0x40d0 [ 736.646652][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.652362][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.658010][ T9086] usb_probe_device+0x311/0x490 [ 736.663088][ T9086] really_probe+0xf20/0x20b0 [ 736.667777][ T9086] driver_probe_device+0x293/0x390 [ 736.673053][ T9086] __device_attach_driver+0x63f/0x830 [ 736.678518][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.683527][ T9086] __device_attach+0x4e2/0x7f0 [ 736.688387][ T9086] device_initial_probe+0x4a/0x60 [ 736.693569][ T9086] bus_probe_device+0x177/0x3d0 [ 736.698502][ T9086] device_add+0x3b0e/0x40d0 [ 736.703173][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.708102][ T9086] hub_event+0x5e7b/0x8a70 [ 736.712685][ T9086] process_one_work+0x1688/0x2140 [ 736.717805][ T9086] worker_thread+0x10bc/0x2730 [ 736.722719][ T9086] kthread+0x551/0x590 [ 736.726873][ T9086] ret_from_fork+0x1f/0x30 [ 736.731335][ T9086] [ 736.733767][ T9086] Uninit was stored to memory at: [ 736.738887][ T9086] kmsan_internal_chain_origin+0xad/0x130 [ 736.744770][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.750833][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.756096][ T9086] __msan_memmove+0x43/0x50 [ 736.760680][ T9086] rc_register_device+0x1164/0x2db0 [ 736.766033][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.771152][ T9086] usb_probe_interface+0xece/0x1550 [ 736.776513][ T9086] really_probe+0xf20/0x20b0 [ 736.781188][ T9086] driver_probe_device+0x293/0x390 [ 736.786503][ T9086] __device_attach_driver+0x63f/0x830 [ 736.792028][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.796976][ T9086] __device_attach+0x4e2/0x7f0 [ 736.801892][ T9086] device_initial_probe+0x4a/0x60 [ 736.807089][ T9086] bus_probe_device+0x177/0x3d0 [ 736.812078][ T9086] device_add+0x3b0e/0x40d0 [ 736.816673][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.822293][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.827926][ T9086] usb_probe_device+0x311/0x490 [ 736.832921][ T9086] really_probe+0xf20/0x20b0 [ 736.837607][ T9086] driver_probe_device+0x293/0x390 [ 736.842866][ T9086] __device_attach_driver+0x63f/0x830 [ 736.848321][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.853320][ T9086] __device_attach+0x4e2/0x7f0 [ 736.858178][ T9086] device_initial_probe+0x4a/0x60 [ 736.863363][ T9086] bus_probe_device+0x177/0x3d0 [ 736.868291][ T9086] device_add+0x3b0e/0x40d0 [ 736.872952][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.877874][ T9086] hub_event+0x5e7b/0x8a70 [ 736.882456][ T9086] process_one_work+0x1688/0x2140 [ 736.887575][ T9086] worker_thread+0x10bc/0x2730 [ 736.892911][ T9086] kthread+0x551/0x590 [ 736.897067][ T9086] ret_from_fork+0x1f/0x30 [ 736.901515][ T9086] [ 736.903947][ T9086] Uninit was created at: [ 736.914695][ T9086] ===================================================== [ 736.914700][ T9086] BUG: KMSAN: uninit-value in kallsyms_lookup+0x1c2/0x8d0 [ 736.914705][ T9086] CPU: 0 PID: 9086 Comm: kworker/0:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 736.914710][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.914713][ T9086] Workqueue: usb_hub_wq hub_event [ 736.914718][ T9086] Call Trace: [ 736.914721][ T9086] dump_stack+0x21c/0x280 [ 736.914724][ T9086] kmsan_report+0xf7/0x1e0 [ 736.914728][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914731][ T9086] __msan_warning+0x58/0xa0 [ 736.914735][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914738][ T9086] kallsyms_lookup+0x1c2/0x8d0 [ 736.914741][ T9086] ? __msan_poison_alloca+0xf0/0x120 [ 736.914745][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914748][ T9086] __sprint_symbol+0x140/0x5b0 [ 736.914752][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914755][ T9086] ? __msan_poison_alloca+0xf0/0x120 [ 736.914758][ T9086] sprint_symbol+0x7c/0x90 [ 736.914762][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914765][ T9086] symbol_string+0x197/0x4c0 [ 736.914769][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914772][ T9086] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 736.914776][ T9086] ? vsnprintf+0x3509/0x35c0 [ 736.914779][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914782][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914786][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914789][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914793][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914796][ T9086] ? kmsan_internal_set_origin+0x75/0xb0 [ 736.914800][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914803][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914806][ T9086] pointer+0x60c/0x1c30 [ 736.914810][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914813][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914817][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914820][ T9086] vsnprintf+0x1b35/0x35c0 [ 736.914823][ T9086] vscnprintf+0xbe/0x1c0 [ 736.914826][ T9086] vprintk_store+0xf5/0x1440 [ 736.914829][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914833][ T9086] ? kmsan_set_origin_checked+0x95/0xf0 [ 736.914836][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914840][ T9086] vprintk_emit+0x300/0x990 [ 736.914843][ T9086] vprintk_default+0x90/0xa0 [ 736.914846][ T9086] vprintk_func+0x2f7/0x300 [ 736.914849][ T9086] printk+0x18b/0x1d3 [ 736.914852][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914856][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914860][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.914863][ T9086] stack_trace_print+0x1b1/0x1f0 [ 736.914866][ T9086] kmsan_print_origin+0x1a0/0x1b0 [ 736.914870][ T9086] kmsan_internal_chain_origin+0x76/0x130 [ 736.914874][ T9086] ? kmsan_internal_chain_origin+0xad/0x130 [ 736.914877][ T9086] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.914881][ T9086] ? kmsan_memmove_metadata+0xe/0x10 [ 736.914884][ T9086] ? __msan_memmove+0x43/0x50 [ 736.914887][ T9086] ? rc_register_device+0x1164/0x2db0 [ 736.914891][ T9086] ? mceusb_dev_probe+0x2a0c/0x5900 [ 736.914894][ T9086] ? usb_probe_interface+0xece/0x1550 [ 736.914898][ T9086] ? really_probe+0xf20/0x20b0 [ 736.914901][ T9086] ? driver_probe_device+0x293/0x390 [ 736.914904][ T9086] ? __device_attach_driver+0x63f/0x830 [ 736.914908][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 736.914911][ T9086] ? __device_attach+0x4e2/0x7f0 [ 736.914914][ T9086] ? device_initial_probe+0x4a/0x60 [ 736.914917][ T9086] ? bus_probe_device+0x177/0x3d0 [ 736.914920][ T9086] ? device_add+0x3b0e/0x40d0 [ 736.914924][ T9086] ? usb_set_configuration+0x380f/0x3f10 [ 736.914928][ T9086] ? usb_generic_driver_probe+0x138/0x300 [ 736.914931][ T9086] ? usb_probe_device+0x311/0x490 [ 736.914934][ T9086] ? really_probe+0xf20/0x20b0 [ 736.914937][ T9086] ? driver_probe_device+0x293/0x390 [ 736.914941][ T9086] ? __device_attach_driver+0x63f/0x830 [ 736.914944][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 736.914947][ T9086] ? __device_attach+0x4e2/0x7f0 [ 736.914951][ T9086] ? device_initial_probe+0x4a/0x60 [ 736.914954][ T9086] ? bus_probe_device+0x177/0x3d0 [ 736.914957][ T9086] ? device_add+0x3b0e/0x40d0 [ 736.914960][ T9086] ? usb_new_device+0x1bd4/0x2a30 [ 736.914963][ T9086] ? hub_event+0x5e7b/0x8a70 [ 736.914967][ T9086] ? process_one_work+0x1688/0x2140 [ 736.914970][ T9086] ? worker_thread+0x10bc/0x2730 [ 736.914973][ T9086] ? kthread+0x551/0x590 [ 736.914976][ T9086] ? ret_from_fork+0x1f/0x30 [ 736.914980][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914983][ T9086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 736.914986][ T9086] ? idle_cpu+0x9a/0x1d0 [ 736.914990][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.914993][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.914997][ T9086] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.915000][ T9086] kmsan_memmove_metadata+0xe/0x10 [ 736.915003][ T9086] __msan_memmove+0x43/0x50 [ 736.915006][ T9086] rc_register_device+0x1164/0x2db0 [ 736.915010][ T9086] mceusb_dev_probe+0x2a0c/0x5900 [ 736.915013][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915016][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915020][ T9086] ? vfd_write+0xec0/0xec0 [ 736.915023][ T9086] usb_probe_interface+0xece/0x1550 [ 736.915026][ T9086] ? usb_register_driver+0x900/0x900 [ 736.915029][ T9086] really_probe+0xf20/0x20b0 [ 736.915033][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915036][ T9086] driver_probe_device+0x293/0x390 [ 736.915039][ T9086] __device_attach_driver+0x63f/0x830 [ 736.915042][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.915046][ T9086] ? coredump_store+0xf0/0xf0 [ 736.915049][ T9086] __device_attach+0x4e2/0x7f0 [ 736.915052][ T9086] device_initial_probe+0x4a/0x60 [ 736.915055][ T9086] bus_probe_device+0x177/0x3d0 [ 736.915059][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915062][ T9086] device_add+0x3b0e/0x40d0 [ 736.915065][ T9086] usb_set_configuration+0x380f/0x3f10 [ 736.915069][ T9086] ? usb_set_configuration+0xb41/0x3f10 [ 736.915072][ T9086] usb_generic_driver_probe+0x138/0x300 [ 736.915075][ T9086] ? usb_choose_configuration+0xe70/0xe70 [ 736.915079][ T9086] usb_probe_device+0x311/0x490 [ 736.915082][ T9086] ? usb_register_device_driver+0x540/0x540 [ 736.915085][ T9086] really_probe+0xf20/0x20b0 [ 736.915089][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915092][ T9086] driver_probe_device+0x293/0x390 [ 736.915095][ T9086] __device_attach_driver+0x63f/0x830 [ 736.915099][ T9086] bus_for_each_drv+0x2ca/0x3f0 [ 736.915102][ T9086] ? coredump_store+0xf0/0xf0 [ 736.915105][ T9086] __device_attach+0x4e2/0x7f0 [ 736.915108][ T9086] device_initial_probe+0x4a/0x60 [ 736.915112][ T9086] bus_probe_device+0x177/0x3d0 [ 736.915115][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915118][ T9086] device_add+0x3b0e/0x40d0 [ 736.915122][ T9086] usb_new_device+0x1bd4/0x2a30 [ 736.915125][ T9086] hub_event+0x5e7b/0x8a70 [ 736.915128][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915132][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915135][ T9086] ? led_work+0x7c0/0x7c0 [ 736.915138][ T9086] process_one_work+0x1688/0x2140 [ 736.915141][ T9086] worker_thread+0x10bc/0x2730 [ 736.915144][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915147][ T9086] kthread+0x551/0x590 [ 736.915150][ T9086] ? process_one_work+0x2140/0x2140 [ 736.915154][ T9086] ? kthread_blkcg+0x110/0x110 [ 736.915157][ T9086] ret_from_fork+0x1f/0x30 [ 736.915159][ T9086] [ 736.915162][ T9086] Uninit was created at: [ 736.915165][ T9086] kmsan_save_stack_with_flags+0x3c/0x90 [ 736.915169][ T9086] kmsan_alloc_page+0xc5/0x1a0 [ 736.915172][ T9086] __alloc_pages_nodemask+0xdf0/0x1030 [ 736.915175][ T9086] alloc_pages_current+0x685/0xb50 [ 736.915179][ T9086] skb_page_frag_refill+0x540/0x780 [ 736.915182][ T9086] sk_page_frag_refill+0xa3/0x3b0 [ 736.915185][ T9086] tcp_sendmsg_locked+0x2a62/0x7e60 [ 736.915188][ T9086] tcp_sendmsg+0xb2/0x100 [ 736.915191][ T9086] inet_sendmsg+0x15b/0x1d0 [ 736.915194][ T9086] __sys_sendto+0x9f8/0xca0 [ 736.915197][ T9086] __se_sys_sendto+0x107/0x130 [ 736.915200][ T9086] __ia32_sys_sendto+0x6e/0x90 [ 736.915204][ T9086] __do_fast_syscall_32+0x2af/0x480 [ 736.915207][ T9086] do_fast_syscall_32+0x6b/0xd0 [ 736.915210][ T9086] do_SYSENTER_32+0x73/0x90 [ 736.915214][ T9086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 736.915218][ T9086] ===================================================== [ 736.915222][ T9086] Disabling lock debugging due to kernel taint [ 736.915226][ T9086] Kernel panic - not syncing: panic_on_warn set ... [ 736.915236][ T9086] CPU: 0 PID: 9086 Comm: kworker/0:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 736.915242][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.915245][ T9086] Workqueue: usb_hub_wq hub_event [ 736.915249][ T9086] Call Trace: [ 736.915252][ T9086] dump_stack+0x21c/0x280 [ 736.915255][ T9086] panic+0x4d7/0xef7 [ 736.915258][ T9086] ? add_taint+0x17c/0x210 [ 736.915261][ T9086] kmsan_report+0x1df/0x1e0 [ 736.915265][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915268][ T9086] __msan_warning+0x58/0xa0 [ 736.915272][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915275][ T9086] kallsyms_lookup+0x1c2/0x8d0 [ 736.915278][ T9086] ? __msan_poison_alloca+0xf0/0x120 [ 736.915282][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915285][ T9086] __sprint_symbol+0x140/0x5b0 [ 736.915289][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915292][ T9086] ? __msan_poison_alloca+0xf0/0x120 [ 736.915295][ T9086] sprint_symbol+0x7c/0x90 [ 736.915299][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915302][ T9086] symbol_string+0x197/0x4c0 [ 736.915305][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915309][ T9086] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 736.915312][ T9086] ? vsnprintf+0x3509/0x35c0 [ 736.915315][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915319][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915322][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915326][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915329][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915333][ T9086] ? kmsan_internal_set_origin+0x75/0xb0 [ 736.915336][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915340][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915343][ T9086] pointer+0x60c/0x1c30 [ 736.915346][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915350][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915353][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915356][ T9086] vsnprintf+0x1b35/0x35c0 [ 736.915359][ T9086] vscnprintf+0xbe/0x1c0 [ 736.915362][ T9086] vprintk_store+0xf5/0x1440 [ 736.915366][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915369][ T9086] ? kmsan_set_origin_checked+0x95/0xf0 [ 736.915373][ T9086] ? kmsan_get_metadata+0x116/0x180 [ 736.915376][ T9086] vprintk_emit+0x300/0x990 [ 736.915379][ T9086] vprintk_default+0x90/0xa0 [ 736.915382][ T9086] vprintk_func+0x2f7/0x300 [ 736.915385][ T9086] printk+0x18b/0x1d3 [ 736.915388][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915392][ T9086] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.915395][ T9086] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 736.915399][ T9086] stack_trace_print+0x1b1/0x1f0 [ 736.915402][ T9086] kmsan_print_origin+0x1a0/0x1b0 [ 736.915405][ T9086] kmsan_internal_chain_origin+0x76/0x130 [ 736.915409][ T9086] ? kmsan_internal_chain_origin+0xad/0x130 [ 736.915413][ T9086] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 736.915416][ T9086] ? kmsan_memmove_metadata+0xe/0x10 [ 736.915419][ T9086] ? __msan_memmove+0x43/0x50 [ 736.915423][ T9086] ? rc_register_device+0x1164/0x2db0 [ 736.915426][ T9086] ? mceusb_dev_probe+0x2a0c/0x5900 [ 736.915429][ T9086] ? usb_probe_interface+0xece/0x1550 [ 736.915432][ T9086] ? really_probe+0xf20/0x20b0 [ 736.915436][ T9086] ? driver_probe_device+0x293/0x390 [ 736.915439][ T9086] ? __device_attach_driver+0x63f/0x830 [ 736.915443][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 736.915446][ T9086] ? __device_attach+0x4e2/0x7f0 [ 736.915449][ T9086] ? device_initial_probe+0x4a/0x60 [ 736.915452][ T9086] ? bus_probe_device+0x177/0x3d0 [ 736.915455][ T9086] ? device_add+0x3b0e/0x40d0 [ 736.915459][ T9086] ? usb_set_configuration+0x380f/0x3f10 [ 736.915462][ T9086] ? usb_generic_driver_probe+0x138/0x300 [ 736.915465][ T9086] ? usb_probe_device+0x311/0x490 [ 736.915469][ T9086] ? really_probe+0xf20/0x20b0 [ 736.915472][ T9086] ? driver_probe_device+0x293/0x390 [ 736.915475][ T9086] ? __device_attach_driver+0x63f/0x830 [ 736.915479][ T9086] ? bus_for_each_drv+0x2ca/0x3f0 [ 736.915482][ T9086] ? __device_attach+0x4e2/0x7f0 [ 736.915485][ T9086] ? device_initial_probe+0x4a/0x60 [ 736.915488][ T9086] ? bus_probe_device+0x177/0x3d0 [ 736.915491][ T9086] ? device_add+0x3b0e/0x40d0 [ 736.915495][ T9086] ? usb_new_device+0x1bd4/0x2a30 [ 736.915498][ T9086] ? hub_event+0x5e7b/0x8a70 [ 736.915501][ T9086] ? process_one_work+0x1688/0x2140 [ 736.915503][ T9086] ? worker_thre [ 736.915509][ T9086] Lost 58 message(s)!