face 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1178.177561][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 23392, setting to 1024 [ 1178.189963][ T3684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1178.201072][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.206008][ T3689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.229753][ T3688] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1178.248805][ T3688] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1178.275920][T20406] 8021q: adding VLAN 0 to HW filter on device bond1157 [ 1178.275977][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1178.295111][ T3684] usb 3-1: New USB device found, idVendor=0b40, idProduct=b138, bcdDevice= 1.42 [ 1178.295144][ T3684] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1178.295166][ T3684] usb 3-1: Manufacturer: syz 12:37:07 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1178.297837][ T3684] usb 3-1: config 0 descriptor?? [ 1178.335228][ T3688] usb 1-1: Manufacturer: syz [ 1178.342519][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1178.358271][ T3688] usb 1-1: config 0 descriptor?? [ 1178.372997][T20406] bond0: (slave bond1157): Enslaving as an active interface with an up link [ 1178.382015][ T3689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1178.382048][ T3689] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.477076][ T3689] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1178.489162][ T3689] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1178.508657][ T3689] usb 4-1: Manufacturer: syz [ 1178.520136][T20412] device vlan974 entered promiscuous mode [ 1178.531370][ T3689] usb 4-1: config 0 descriptor?? [ 1178.539568][ T3683] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1178.562335][T20412] device bridge1221 entered promiscuous mode 12:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1178.589204][T20412] bond1157: (slave vlan974): Enslaving as an active interface with an up link 12:37:08 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1178.703254][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1178.817362][ T3683] usb 2-1: Using ep0 maxpacket: 16 [ 1178.823367][ T25] audit: type=1804 audit(1640176628.272:2568): pid=20396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3337382F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1178.863545][T20423] 8021q: adding VLAN 0 to HW filter on device bond1158 [ 1178.922374][T20423] bond0: (slave bond1158): Enslaving as an active interface with an up link [ 1178.936827][ T25] audit: type=1804 audit(1640176628.342:2569): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3534352F48C7C060 dev="sda1" ino=1173 res=1 errno=0 [ 1178.971943][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1178.980679][ T3689] Registered IR keymap rc-empty [ 1178.982095][T20423] device vlan975 entered promiscuous mode [ 1178.986271][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1178.996256][ T3683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.011964][T20423] device bridge1222 entered promiscuous mode [ 1179.020636][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.031697][T20423] bond1158: (slave vlan975): Enslaving as an active interface with an up link [ 1179.040988][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.041024][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1179.041048][ T3683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1179.041073][ T3683] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.057813][ T3689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1179.112957][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input986 [ 1179.136708][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.146629][ T3683] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1179.157866][ T3683] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1179.169873][ T3683] usb 2-1: Manufacturer: syz [ 1179.185831][ T3683] usb 2-1: config 0 descriptor?? [ 1179.195449][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.239102][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.296032][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.338025][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.386662][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.425313][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.467373][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.508028][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.552832][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1179.565521][ T3683] rc_core: IR keymap rc-hauppauge not found [ 1179.571887][ T3683] Registered IR keymap rc-empty [ 1179.579510][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.591157][ T3689] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1179.600944][ T3689] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1179.619824][ T3689] usb 4-1: USB disconnect, device number 66 [ 1179.635411][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.665896][ T25] audit: type=1804 audit(1640176629.122:2570): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337312F48C7C060 dev="sda1" ino=1179 res=1 errno=0 [ 1179.702709][ T3683] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1179.724669][ T3683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input987 [ 1179.751487][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.796380][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.846013][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.875751][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.916139][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1179.966405][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:09 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0xa97c2f863f810b03) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000280)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x2, 0x3d}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/198, 0xc6, 0x0, 0x14}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}], 0xc4, 0x0, &(0x7f0000000440)="6c6d11bddd5edd389cd6a5e2bf5650e56094d5f83c708d3b4bbdf108e3aa040373996bbb0f7d01e9e05059c181c63fea6e4bf6a827571633c7ab77758d1fb1ce4338c6b3080836992967d137a4538080ac5731907d1275920d107647291ded85867472fd33515cb061a8121f526207138c066599d0cffca773c62b8e31545a06afb8686fd9fc76751967c53a0181592724e560baf07beaf9e6b1a725528bb656ddb1dfa363e5811b3a29754d885934f939d0c1214f45384be408fd221a1b4b1c42b57670"}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) pipe2(&(0x7f0000000140), 0xa97c2f863f810b03) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000280)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x2, 0x3d}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/198, 0xc6, 0x0, 0x14}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}], 0xc4, 0x0, &(0x7f0000000440)="6c6d11bddd5edd389cd6a5e2bf5650e56094d5f83c708d3b4bbdf108e3aa040373996bbb0f7d01e9e05059c181c63fea6e4bf6a827571633c7ab77758d1fb1ce4338c6b3080836992967d137a4538080ac5731907d1275920d107647291ded85867472fd33515cb061a8121f526207138c066599d0cffca773c62b8e31545a06afb8686fd9fc76751967c53a0181592724e560baf07beaf9e6b1a725528bb656ddb1dfa363e5811b3a29754d885934f939d0c1214f45384be408fd221a1b4b1c42b57670"}) (async) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000180)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) (async) 12:37:09 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1180.015241][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1180.056558][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1180.098717][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1180.146573][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1180.186509][ T3683] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1180.218351][ T3683] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1180.297577][ T3683] usb 2-1: USB disconnect, device number 120 12:37:09 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read$fb(r0, &(0x7f00000005c0)=""/63, 0x3f) (async) r2 = dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005520f010400b38b142010400000109023800ff00000000090400000371055900090505000000000001020009050276605b11a78bce76f45c521df0d38b9d3f8e22ed0ea0f6d008d9eb6806711bb97f3b8a26f9"], 0x0) (async) syz_usb_connect$hid(0x6fb40be270968a16, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x71, 0x0, 0x1f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x8, 0xb1, 0x1, {0x22, 0xccd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x20, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x40, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x3, 0x2, 0x7f, 0x10, 0x54}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "60ce048fecf6e6a07a086d58f42fe2dc"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x94, 0x80, 0x0, 0x6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "46e9b7a3ad71b487ab7708073522cd6b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x1, 0x9499}]}, 0x4, [{0x88, &(0x7f0000000440)=@string={0x88, 0x3, "062b4a799f1466f6ab34e116655f6613762afd40dfedba83259d1b404484ff9b3cc3ad0f5631675a5d7d74f89dd038205e7af98c43905f6f1aabfc867eec34c24903507615e088901a3903a41e6c199cd03c0a34f9b80a3631dcbb86df5f9a2ed5b95058b32dcf8e7cc0089de31fde0a0994afdf1c10216b118a2245c4b7c0e141db60a65af0"}}, {0x79, &(0x7f0000000300)=@string={0x79, 0x3, "4ca559d08bf11f2063965b56e94e72730eda0f24d00258cc048de4565fdf983f73ef161cc17e96b65a5cd4a81eb7bed701fd166f51edcfead9fa8d340dc5d01f16a6b61a127c802ecf6791b9d8ec354e8a05ed4bb631d60620099ea3ebc15e6dfb9e9a77a717e44a3e0d1c00e549d76e362857303902d5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) 12:37:09 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000140)) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x30b, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401070c9, &(0x7f00000020c0)) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0xdb, 0x0, 0x7d, 0x44046, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x6, 0x1f}, 0x0, 0x4fe4, 0x7, 0x9, 0x1, 0x5, 0x5432, 0x0, 0x8, 0x0, 0x10001}, r4, 0xd, r5, 0x2) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) (rerun: 64) 12:37:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:09 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 12:37:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1180.395109][ T922] usb 1-1: USB disconnect, device number 110 [ 1180.410902][ T3689] usb 3-1: USB disconnect, device number 8 [ 1180.425056][ T3684] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1180.496623][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.612722][ T25] audit: type=1804 audit(1640176630.062:2571): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3534362F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1180.647070][T20462] 8021q: adding VLAN 0 to HW filter on device bond1159 [ 1180.662524][T20462] bond0: (slave bond1159): Enslaving as an active interface with an up link [ 1180.675081][ T3684] usb 4-1: Using ep0 maxpacket: 16 12:37:10 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1180.795039][ T3684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.812763][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1180.830886][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1180.842169][ T3684] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1180.855107][ T3684] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.894889][ T922] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1180.928638][T20462] device bridge1223 entered promiscuous mode [ 1180.938031][ T3683] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1180.955309][ T3684] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1180.966241][ T3684] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1180.975978][ T3684] usb 4-1: Manufacturer: syz [ 1180.985691][ T3684] usb 4-1: config 0 descriptor?? [ 1181.013023][T20462] bond1159: (slave vlan976): Enslaving as an active interface with an up link 12:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:10 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1181.098277][ T3689] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1181.134859][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1181.199659][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1181.255166][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.269705][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.275105][ T3683] usb 2-1: Using ep0 maxpacket: 16 [ 1181.282148][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.375210][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.386094][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.395662][ T922] usb 1-1: Manufacturer: syz [ 1181.402519][ T922] usb 1-1: config 0 descriptor?? [ 1181.425070][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 1181.435236][ T3683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.453526][ T25] audit: type=1804 audit(1640176630.902:2572): pid=20451 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3337392F48C7C060 dev="sda1" ino=1174 res=1 errno=0 [ 1181.454675][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1181.511684][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.512102][ T3684] Registered IR keymap rc-empty [ 1181.545660][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.555052][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.569883][ T3683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1181.582319][ T3683] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.584614][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.598930][ T3689] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1181.616503][ T3689] usb 3-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 1181.628722][ T3689] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 1181.642013][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1181.658024][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 23392, setting to 1024 [ 1181.660139][T20482] 8021q: adding VLAN 0 to HW filter on device bond1160 [ 1181.672545][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1181.682007][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1181.690315][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.718272][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input988 [ 1181.721411][ T3683] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.768766][ T3683] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.777837][T20482] bond0: (slave bond1160): Enslaving as an active interface with an up link [ 1181.790641][ T3683] usb 2-1: Manufacturer: syz [ 1181.798227][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.828067][ T3683] usb 2-1: config 0 descriptor?? [ 1181.849498][T20490] device bridge1224 entered promiscuous mode [ 1181.857389][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.875845][ T3689] usb 3-1: New USB device found, idVendor=0b40, idProduct=b138, bcdDevice= 1.42 12:37:11 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES32]) [ 1181.895065][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.906709][ T3689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.930083][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1181.941035][ T3689] usb 3-1: Manufacturer: syz [ 1181.948842][T20490] bond1160: (slave vlan977): Enslaving as an active interface with an up link [ 1181.977919][ T3689] usb 3-1: config 0 descriptor?? [ 1181.996968][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:37:11 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1182.054704][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1182.085060][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1182.093137][ T25] audit: type=1804 audit(1640176631.542:2573): pid=20459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337322F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1182.144741][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1182.174921][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1182.214793][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1182.231644][ T3689] usb 3-1: USB disconnect, device number 9 [ 1182.246049][ T3684] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1182.276567][ T3683] rc_core: IR keymap rc-hauppauge not found [ 1182.277277][ T3684] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1182.282495][ T3683] Registered IR keymap rc-empty [ 1182.282577][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.330302][ T3684] usb 4-1: USB disconnect, device number 67 [ 1182.386976][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.396240][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.426198][ T3683] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1182.469560][ T3683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input989 [ 1182.528475][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.556734][T20513] 8021q: adding VLAN 0 to HW filter on device bond1161 12:37:12 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1182.576294][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.587075][T20513] bond0: (slave bond1161): Enslaving as an active interface with an up link [ 1182.612042][T20510] device bridge1225 entered promiscuous mode [ 1182.626876][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.635530][T20510] bond1161: (slave vlan978): Enslaving as an active interface with an up link [ 1182.677801][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.725653][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.734848][ T3684] usb 4-1: new high-speed USB device number 68 using dummy_hcd 12:37:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read$fb(r0, &(0x7f00000005c0)=""/63, 0x3f) (async) r2 = dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005520f010400b38b142010400000109023800ff00000000090400000371055900090505000000000001020009050276605b11a78bce76f45c521df0d38b9d3f8e22ed0ea0f6d008d9eb6806711bb97f3b8a26f9"], 0x0) (async, rerun: 64) syz_usb_connect$hid(0x6fb40be270968a16, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x71, 0x0, 0x1f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x8, 0xb1, 0x1, {0x22, 0xccd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x20, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x40, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x3, 0x2, 0x7f, 0x10, 0x54}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "60ce048fecf6e6a07a086d58f42fe2dc"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x94, 0x80, 0x0, 0x6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "46e9b7a3ad71b487ab7708073522cd6b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x1, 0x9499}]}, 0x4, [{0x88, &(0x7f0000000440)=@string={0x88, 0x3, "062b4a799f1466f6ab34e116655f6613762afd40dfedba83259d1b404484ff9b3cc3ad0f5631675a5d7d74f89dd038205e7af98c43905f6f1aabfc867eec34c24903507615e088901a3903a41e6c199cd03c0a34f9b80a3631dcbb86df5f9a2ed5b95058b32dcf8e7cc0089de31fde0a0994afdf1c10216b118a2245c4b7c0e141db60a65af0"}}, {0x79, &(0x7f0000000300)=@string={0x79, 0x3, "4ca559d08bf11f2063965b56e94e72730eda0f24d00258cc048de4565fdf983f73ef161cc17e96b65a5cd4a81eb7bed701fd166f51edcfead9fa8d340dc5d01f16a6b61a127c802ecf6791b9d8ec354e8a05ed4bb631d60620099ea3ebc15e6dfb9e9a77a717e44a3e0d1c00e549d76e362857303902d5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x300a}}]}) (rerun: 64) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1182.776348][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.815334][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.861756][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.911118][ T25] audit: type=1804 audit(1640176632.362:2574): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3534372F48C7C060 dev="sda1" ino=1176 res=1 errno=0 [ 1182.915721][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1182.986294][ T3683] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1183.008216][ T3684] usb 4-1: Using ep0 maxpacket: 16 [ 1183.027878][ T3683] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1183.038045][ T3683] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1183.135017][ T3684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.146427][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.159020][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.186414][ T3684] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1183.202434][ T3684] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.304843][ T3684] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1183.315568][ T3684] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1183.325947][ T3684] usb 4-1: Manufacturer: syz [ 1183.345548][ T3684] usb 4-1: config 0 descriptor?? [ 1183.489881][ T3683] usb 1-1: USB disconnect, device number 111 12:37:13 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x22, 0x63, {0x63, 0x7, "69f1353c8538f0c4b81cca8dd44588b1f9a5d84dbc7056b5cb6490ab9fc64bfd9b67cdb60806af3e09212654d0b3a2581572f8c770f9461290389f1b61c7425234deee3f9158a44b0969b1d4c792abc079192113551baeb881fb70e4ebf4cf267c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "c8a0415b2ed5c8887ce66118ef612d7fbbd1d7d1e34d074c5be49522de2cf161c0c32bfe3826986bb2cddbe1e4e031c668f356d8da318520540e88b5c6a32ff9aadc775b9196318d4dd78b203620ddc66b57e92aa1cbecf039ab46"}}, &(0x7f0000000280)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0x7, 0x16d, [0x3f11, 0xcf, 0xff3f3f, 0xc0, 0x30]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x80, 0x0, 0x7, "db53c92a", "bc43320b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0xfa, 0x40, 0x9d, 0xbb, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0xc0, 0x1, 0x3e, "21d929053f116d8d3df311b583d8184354737b90dc29d3cc213f1b73953339ebf88c795abd71e6e675ef9536d5bb66c47b5942e8da2f736ccbb4931de3af"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ad0a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'x^'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6d}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) 12:37:13 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 12:37:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:13 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x20, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1183.560499][ T3689] usb 2-1: USB disconnect, device number 121 [ 1183.612881][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:13 executing program 4: r0 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1183.805866][ T25] audit: type=1804 audit(1640176633.262:2575): pid=20503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338302F48C7C060 dev="sda1" ino=1174 res=1 errno=0 [ 1183.815248][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1183.846835][T20542] 8021q: adding VLAN 0 to HW filter on device bond1162 [ 1183.880340][T20542] bond0: (slave bond1162): Enslaving as an active interface with an up link [ 1183.889129][ T3684] Registered IR keymap rc-empty [ 1183.889212][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.915017][ T922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1183.925830][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.987895][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1184.006971][T20530] device vlan979 entered promiscuous mode [ 1184.035504][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input990 [ 1184.051750][T20530] device bridge1226 entered promiscuous mode [ 1184.075114][ T3683] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1184.086800][T20530] bond1162: (slave vlan979): Enslaving as an active interface with an up link [ 1184.098812][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:37:13 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1184.135340][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.154617][ T922] usb 3-1: Using ep0 maxpacket: 16 [ 1184.165519][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.166915][ T3689] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1184.205875][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.235056][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.275281][ T922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.286583][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.296460][ T922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.309499][ T922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1184.320513][ T922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1184.331955][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.340565][ T922] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.366390][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.369279][ T3683] usb 1-1: Using ep0 maxpacket: 16 [ 1184.405255][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.435044][ T922] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1184.445143][ T3684] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1184.452484][ T922] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.462346][ T922] usb 3-1: Manufacturer: syz [ 1184.476864][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1184.480997][ T3684] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1184.496391][ T922] usb 3-1: config 0 descriptor?? [ 1184.499040][ T3683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.507630][ T3684] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1184.520128][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.520165][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1184.520189][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.562908][ T3684] usb 4-1: USB disconnect, device number 68 [ 1184.595758][ T3683] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1184.607718][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.621877][ T3683] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.635188][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.659030][ T3683] usb 1-1: Manufacturer: syz [ 1184.671931][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1184.690114][ T3683] usb 1-1: config 0 descriptor?? [ 1184.703884][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1184.717092][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.815526][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1184.833491][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.841621][ T3689] usb 2-1: Manufacturer: syz [ 1184.870793][ T3689] usb 2-1: config 0 descriptor?? [ 1184.924983][ T922] rc_core: IR keymap rc-hauppauge not found [ 1184.930912][ T922] Registered IR keymap rc-empty [ 1184.938139][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1184.981980][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:14 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES32]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES32]) (async) 12:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:14 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1185.016913][ T25] audit: type=1804 audit(1640176634.472:2576): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3534382F48C7C060 dev="sda1" ino=1160 res=1 errno=0 [ 1185.019035][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1185.095046][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.136128][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input991 [ 1185.200307][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.246077][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.280367][T20555] 8021q: adding VLAN 0 to HW filter on device bond1163 [ 1185.285020][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.307004][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1185.320346][ T3689] Registered IR keymap rc-empty [ 1185.326125][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.338404][T20555] bond0: (slave bond1163): Enslaving as an active interface with an up link [ 1185.354995][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.362809][ T25] audit: type=1804 audit(1640176634.812:2577): pid=20541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337332F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1185.396673][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.412528][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.424651][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.456094][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.465698][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.485063][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.507150][ T3689] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1185.517588][ T922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:15 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1185.552456][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input992 [ 1185.568793][ T922] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1185.568819][ T922] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1185.593760][ T3683] usb 4-1: new high-speed USB device number 69 using dummy_hcd 12:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2402}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1185.640729][ T922] usb 3-1: USB disconnect, device number 10 [ 1185.679060][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.725742][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.777063][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.798093][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.816834][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.857249][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.896358][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 1185.901965][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.947115][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1185.978557][T20573] 8021q: adding VLAN 0 to HW filter on device bond1164 [ 1185.990013][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1186.015405][T20573] bond0: (slave bond1164): Enslaving as an active interface with an up link [ 1186.027983][ T3683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.040371][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1186.068320][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1186.071690][T20576] device bridge1228 entered promiscuous mode [ 1186.097515][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1186.110866][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:15 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x20, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1186.115088][T20576] bond1164: (slave vlan980): Enslaving as an active interface with an up link [ 1186.132146][ T3683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1186.150117][ T3689] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1186.195502][ T3689] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1186.233311][ T3683] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1186.286778][ T3689] usb 2-1: USB disconnect, device number 122 [ 1186.385877][ T3683] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1186.396991][ T3683] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1186.408530][ T3683] usb 4-1: Manufacturer: syz [ 1186.428275][ T3683] usb 4-1: config 0 descriptor?? 12:37:16 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x22, 0x63, {0x63, 0x7, "69f1353c8538f0c4b81cca8dd44588b1f9a5d84dbc7056b5cb6490ab9fc64bfd9b67cdb60806af3e09212654d0b3a2581572f8c770f9461290389f1b61c7425234deee3f9158a44b0969b1d4c792abc079192113551baeb881fb70e4ebf4cf267c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "c8a0415b2ed5c8887ce66118ef612d7fbbd1d7d1e34d074c5be49522de2cf161c0c32bfe3826986bb2cddbe1e4e031c668f356d8da318520540e88b5c6a32ff9aadc775b9196318d4dd78b203620ddc66b57e92aa1cbecf039ab46"}}, &(0x7f0000000280)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0x7, 0x16d, [0x3f11, 0xcf, 0xff3f3f, 0xc0, 0x30]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x80, 0x0, 0x7, "db53c92a", "bc43320b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0xfa, 0x40, 0x9d, 0xbb, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0xc0, 0x1, 0x3e, "21d929053f116d8d3df311b583d8184354737b90dc29d3cc213f1b73953339ebf88c795abd71e6e675ef9536d5bb66c47b5942e8da2f736ccbb4931de3af"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ad0a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'x^'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6d}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x22, 0x63, {0x63, 0x7, "69f1353c8538f0c4b81cca8dd44588b1f9a5d84dbc7056b5cb6490ab9fc64bfd9b67cdb60806af3e09212654d0b3a2581572f8c770f9461290389f1b61c7425234deee3f9158a44b0969b1d4c792abc079192113551baeb881fb70e4ebf4cf267c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "c8a0415b2ed5c8887ce66118ef612d7fbbd1d7d1e34d074c5be49522de2cf161c0c32bfe3826986bb2cddbe1e4e031c668f356d8da318520540e88b5c6a32ff9aadc775b9196318d4dd78b203620ddc66b57e92aa1cbecf039ab46"}}, &(0x7f0000000280)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0x7, 0x16d, [0x3f11, 0xcf, 0xff3f3f, 0xc0, 0x30]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x80, 0x0, 0x7, "db53c92a", "bc43320b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0xfa, 0x40, 0x9d, 0xbb, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0xc0, 0x1, 0x3e, "21d929053f116d8d3df311b583d8184354737b90dc29d3cc213f1b73953339ebf88c795abd71e6e675ef9536d5bb66c47b5942e8da2f736ccbb4931de3af"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ad0a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'x^'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6d}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) [ 1186.574837][T14970] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1186.606501][ T922] usb 1-1: USB disconnect, device number 112 12:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:16 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 12:37:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1186.679451][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.831944][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1186.893789][T20587] 8021q: adding VLAN 0 to HW filter on device bond1165 [ 1186.918030][ T3683] rc_core: IR keymap rc-hauppauge not found [ 1186.927060][T20587] bond0: (slave bond1165): Enslaving as an active interface with an up link [ 1186.938274][ T25] audit: type=1804 audit(1640176636.392:2578): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338312F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1186.938653][ T3683] Registered IR keymap rc-empty [ 1186.972220][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.992806][T20593] device vlan981 entered promiscuous mode [ 1187.002534][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.016731][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1187.017475][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.027992][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1187.028023][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.037078][T20593] device bridge1229 entered promiscuous mode [ 1187.070499][ T3721] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1187.085300][ T922] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1187.107072][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.115762][T20593] bond1165: (slave vlan981): Enslaving as an active interface with an up link [ 1187.126577][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1187.137270][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1187.149268][T14970] usb 3-1: Manufacturer: syz 12:37:16 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1187.157083][ T3683] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1187.172225][T14970] usb 3-1: config 0 descriptor?? 12:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1187.199584][ T3683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input993 [ 1187.239046][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.275309][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.293157][ T25] audit: type=1804 audit(1640176636.742:2579): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338312F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1187.296566][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1187.342545][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.354803][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1187.361998][ T3721] usb 2-1: Using ep0 maxpacket: 16 [ 1187.385259][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.414907][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.422379][ T25] audit: type=1804 audit(1640176636.862:2580): pid=20580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3534392F48C7C060 dev="sda1" ino=1170 res=1 errno=0 [ 1187.459923][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.493171][T20601] 8021q: adding VLAN 0 to HW filter on device bond1166 [ 1187.495129][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.501601][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.511409][ T3721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 12:37:17 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES32]) [ 1187.537875][T20601] bond0: (slave bond1166): Enslaving as an active interface with an up link [ 1187.565395][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.575483][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.590124][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.626439][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.638751][ T922] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1187.662141][T20609] device vlan982 entered promiscuous mode [ 1187.668467][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1187.668500][ T3721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1187.668525][ T3721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.687309][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.712394][T20609] device bridge1230 entered promiscuous mode [ 1187.726569][T14970] rc_core: IR keymap rc-hauppauge not found [ 1187.732657][T14970] Registered IR keymap rc-empty [ 1187.735503][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.739426][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1187.765659][ T3721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1187.777839][ T3721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1187.786207][ T3683] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1187.786233][ T3683] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1187.795382][ T3683] usb 4-1: USB disconnect, device number 69 [ 1187.812664][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1187.822818][ T3721] usb 2-1: Manufacturer: syz [ 1187.845593][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1187.848888][T20609] bond1166: (slave vlan982): Enslaving as an active interface with an up link [ 1187.859801][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1187.859831][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1187.859852][ T922] usb 1-1: Manufacturer: syz [ 1187.862442][ T922] usb 1-1: config 0 descriptor?? [ 1187.911139][ T3721] usb 2-1: config 0 descriptor?? [ 1187.918853][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input994 12:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1187.955523][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:17 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1187.996283][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.034854][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.067261][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.104843][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.128194][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1188.145167][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.175377][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.221293][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.225443][ T3683] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1188.254983][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.285115][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1188.293299][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1188.301951][ T3721] Registered IR keymap rc-empty [ 1188.308526][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.318530][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 12:37:17 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1188.328409][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1188.341309][T14970] usb 3-1: USB disconnect, device number 11 [ 1188.354763][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.396214][T20623] 8021q: adding VLAN 0 to HW filter on device bond1167 [ 1188.405094][ T25] audit: type=1804 audit(1640176637.862:2581): pid=20595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337342F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1188.406001][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1188.517342][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 1188.518143][T20623] bond0: (slave bond1167): Enslaving as an active interface with an up link [ 1188.556158][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input995 [ 1188.590289][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.615293][T20626] device bridge1231 entered promiscuous mode [ 1188.639562][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.649916][T20626] bond1167: (slave vlan983): Enslaving as an active interface with an up link [ 1188.670597][ T3683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.674694][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1188.700703][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1188.734933][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.750975][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.766341][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.790414][ T3683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1188.805229][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.828719][ T3683] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.839679][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:18 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x20, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x20, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) (async) 12:37:18 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 12:37:18 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x22, 0x63, {0x63, 0x7, "69f1353c8538f0c4b81cca8dd44588b1f9a5d84dbc7056b5cb6490ab9fc64bfd9b67cdb60806af3e09212654d0b3a2581572f8c770f9461290389f1b61c7425234deee3f9158a44b0969b1d4c792abc079192113551baeb881fb70e4ebf4cf267c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "c8a0415b2ed5c8887ce66118ef612d7fbbd1d7d1e34d074c5be49522de2cf161c0c32bfe3826986bb2cddbe1e4e031c668f356d8da318520540e88b5c6a32ff9aadc775b9196318d4dd78b203620ddc66b57e92aa1cbecf039ab46"}}, &(0x7f0000000280)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0x7, 0x16d, [0x3f11, 0xcf, 0xff3f3f, 0xc0, 0x30]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x80, 0x0, 0x7, "db53c92a", "bc43320b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0xfa, 0x40, 0x9d, 0xbb, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0xc0, 0x1, 0x3e, "21d929053f116d8d3df311b583d8184354737b90dc29d3cc213f1b73953339ebf88c795abd71e6e675ef9536d5bb66c47b5942e8da2f736ccbb4931de3af"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ad0a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'x^'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6d}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) [ 1188.853363][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.905162][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.934817][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.966504][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.986980][ T3683] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.006298][ T3721] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1189.014770][ T3683] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.014800][ T3683] usb 4-1: Manufacturer: syz [ 1189.030565][ T3721] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1189.033746][ T3683] usb 4-1: config 0 descriptor?? [ 1189.042345][ T3721] usb 2-1: USB disconnect, device number 123 12:37:18 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 1189.135014][T20658] 8021q: adding VLAN 0 to HW filter on device bond1168 [ 1189.187572][T20658] bond0: (slave bond1168): Enslaving as an active interface with an up link [ 1189.260518][T20661] device vlan984 entered promiscuous mode [ 1189.296195][T20661] device bridge1232 entered promiscuous mode [ 1189.340647][T20661] bond1168: (slave vlan984): Enslaving as an active interface with an up link [ 1189.384635][T14970] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1189.397667][ T25] audit: type=1804 audit(1640176638.842:2582): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338322F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1189.434764][ T3721] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1189.555312][ T3683] rc_core: IR keymap rc-hauppauge not found [ 1189.561269][ T3683] Registered IR keymap rc-empty [ 1189.569587][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.607176][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.624796][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1189.647445][ T3683] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1189.662159][ T3683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input996 [ 1189.674653][ T3721] usb 2-1: Using ep0 maxpacket: 16 12:37:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:19 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1189.694937][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.698099][T18122] usb 1-1: USB disconnect, device number 113 [ 1189.737459][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.745239][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.745302][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.745330][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1189.745353][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1189.745377][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.749350][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.854879][ T3721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.865148][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.875516][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.897123][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.899576][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.932546][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.953123][T14970] usb 3-1: Manufacturer: syz [ 1189.956663][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1189.980969][T20673] 8021q: adding VLAN 0 to HW filter on device bond1169 [ 1189.983005][T14970] usb 3-1: config 0 descriptor?? [ 1189.997769][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1190.020768][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1190.021224][ T3721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1190.030332][T20673] bond0: (slave bond1169): Enslaving as an active interface with an up link [ 1190.058202][ T3721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.076965][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1190.115176][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1190.119664][T20681] device bridge1233 entered promiscuous mode [ 1190.145295][ T3721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1190.152748][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1190.156101][ T3721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1190.162982][T20681] bond1169: (slave vlan985): Enslaving as an active interface with an up link [ 1190.183112][ T3721] usb 2-1: Manufacturer: syz [ 1190.196803][ T3683] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1190.197307][ T3721] usb 2-1: config 0 descriptor?? [ 1190.238356][ T3683] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1190.248414][ T3683] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1190.254937][T18122] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1190.271190][ T3683] usb 4-1: USB disconnect, device number 70 [ 1190.374893][T14970] rc_core: IR keymap rc-hauppauge not found [ 1190.380831][T14970] Registered IR keymap rc-empty [ 1190.388436][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.428230][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.456043][ T25] audit: type=1804 audit(1640176639.912:2583): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337352F48C7C060 dev="sda1" ino=1172 res=1 errno=0 [ 1190.505411][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1190.519645][T18122] usb 1-1: Using ep0 maxpacket: 16 [ 1190.542817][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input997 [ 1190.568616][ T25] audit: type=1804 audit(1640176639.942:2584): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535302F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1190.606359][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1190.612298][ T3721] Registered IR keymap rc-empty 12:37:20 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 12:37:20 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1190.634787][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1190.642726][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.689263][T18122] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.701685][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.710705][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1190.749111][T18122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.774983][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.795562][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1190.810243][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.819051][T18122] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1190.836599][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1190.850035][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input998 [ 1190.866612][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.883329][T18122] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:37:20 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 1190.907973][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:20 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x40, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000180)) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1190.965050][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1190.984862][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.038594][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1191.046284][T20703] 8021q: adding VLAN 0 to HW filter on device bond1170 [ 1191.059891][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.066706][T20703] bond0: (slave bond1170): Enslaving as an active interface with an up link [ 1191.095210][T18122] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1191.110156][T18122] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1191.120487][T18122] usb 1-1: Manufacturer: syz [ 1191.122732][T20706] device vlan986 entered promiscuous mode [ 1191.135393][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.145376][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1191.165933][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.180261][T20706] device bridge1234 entered promiscuous mode [ 1191.190519][T18122] usb 1-1: config 0 descriptor?? [ 1191.197320][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.236131][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.242023][T20706] bond1170: (slave vlan986): Enslaving as an active interface with an up link [ 1191.244914][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1191.315992][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1191.325922][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.335038][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1191.350383][T14970] usb 3-1: USB disconnect, device number 12 [ 1191.367005][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.375887][ T3686] usb 4-1: new high-speed USB device number 71 using dummy_hcd 12:37:20 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 1191.416942][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.424829][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.464745][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.506244][ T3721] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1191.522689][ T3721] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1191.611572][ T3721] usb 2-1: USB disconnect, device number 124 [ 1191.634801][ T3686] usb 4-1: Using ep0 maxpacket: 16 [ 1191.652999][T20715] 8021q: adding VLAN 0 to HW filter on device bond1171 [ 1191.722966][T20715] bond0: (slave bond1171): Enslaving as an active interface with an up link [ 1191.754969][ T3686] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.782012][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.796597][T14970] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1191.830955][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1191.834139][T20717] device vlan987 entered promiscuous mode [ 1191.866267][ T3686] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 12:37:21 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:37:21 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000440)=""/4096, 0x1000}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1191.889240][ T3686] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.947703][T20717] device bridge1235 entered promiscuous mode [ 1191.995589][ T3686] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.006407][ T3686] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1192.016204][ T3686] usb 4-1: Manufacturer: syz [ 1192.035137][ T3686] usb 4-1: config 0 descriptor?? [ 1192.054903][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1192.057672][T20717] bond1171: (slave vlan987): Enslaving as an active interface with an up link [ 1192.175037][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.188425][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.202961][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1192.216096][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1192.236177][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.255303][ T3721] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1192.344900][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.360162][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1192.369591][T14970] usb 3-1: Manufacturer: syz [ 1192.394610][ T3686] rc_core: IR keymap rc-hauppauge not found [ 1192.400531][ T3686] Registered IR keymap rc-empty [ 1192.413378][T14970] usb 3-1: config 0 descriptor?? [ 1192.419525][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.458619][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.495489][ T3686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1192.510255][ T25] audit: type=1804 audit(1640176641.962:2585): pid=20692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338332F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1192.510733][ T3721] usb 2-1: Using ep0 maxpacket: 16 [ 1192.553075][ T3686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input999 [ 1192.575558][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.604977][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.634931][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.665576][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.685793][ T3721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.698059][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.708414][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.721109][ T3721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1192.732807][ T3721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1192.745451][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.752804][ T3721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.775348][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.815284][ T922] usb 1-1: USB disconnect, device number 114 12:37:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:22 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1192.826741][T14970] rc_core: IR keymap rc-hauppauge not found [ 1192.832668][T14970] Registered IR keymap rc-empty [ 1192.839525][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.861640][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1192.871633][ T25] audit: type=1804 audit(1640176642.322:2586): pid=20709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535312F48C7C060 dev="sda1" ino=1160 res=1 errno=0 [ 1192.872352][ T3721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.915871][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.945237][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.955992][ T3686] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1192.964909][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1192.986193][ T3686] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1193.001874][ T3686] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1193.013016][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1193.032383][ T3721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1193.045722][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1000 [ 1193.090961][ T3686] usb 4-1: USB disconnect, device number 71 [ 1193.133336][ T3721] usb 2-1: Manufacturer: syz [ 1193.165920][ T3721] usb 2-1: config 0 descriptor?? [ 1193.248864][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.294775][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.300469][T20745] 8021q: adding VLAN 0 to HW filter on device bond1172 [ 1193.334932][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.341424][T20745] bond0: (slave bond1172): Enslaving as an active interface with an up link [ 1193.364980][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.370466][T20738] device bridge1236 entered promiscuous mode [ 1193.374914][ T922] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1193.395321][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.411244][T20738] bond1172: (slave vlan988): Enslaving as an active interface with an up link [ 1193.435034][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:22 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 12:37:22 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 12:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4888}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1193.474950][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.505512][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.568770][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1193.574796][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.634733][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.654843][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1193.661385][ T25] audit: type=1804 audit(1640176643.112:2587): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337362F48C7C060 dev="sda1" ino=1170 res=1 errno=0 [ 1193.696773][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1193.707200][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1193.744710][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1193.750644][ T3721] Registered IR keymap rc-empty [ 1193.758337][T14970] usb 3-1: USB disconnect, device number 13 [ 1193.769716][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:23 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1193.805978][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1193.834833][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.846900][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1193.861700][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1193.877292][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input1001 [ 1193.893136][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1193.909501][T20752] 8021q: adding VLAN 0 to HW filter on device bond1173 [ 1193.920217][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1193.931684][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1193.944608][T18122] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1193.973404][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.989530][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1193.998743][T20752] bond0: (slave bond1173): Enslaving as an active interface with an up link [ 1194.046165][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.075323][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.105147][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1194.115932][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.130301][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1194.146989][ T922] usb 1-1: Manufacturer: syz 12:37:23 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x40, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000180)) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1194.154968][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.167673][T20760] device bridge1237 entered promiscuous mode [ 1194.170289][ T922] usb 1-1: config 0 descriptor?? [ 1194.185015][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.195019][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1194.235543][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.264958][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.288559][T20760] bond1173: (slave vlan989): Enslaving as an active interface with an up link [ 1194.304988][ T3721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1194.315440][T18122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.367392][ T3721] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1194.382410][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.397299][ T3721] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:37:23 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 12:37:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1194.411854][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1194.435024][ T3721] usb 2-1: USB disconnect, device number 125 [ 1194.461353][T18122] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1194.500475][T18122] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.569736][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.656282][T18122] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1194.676848][T18122] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1194.690561][T18122] usb 4-1: Manufacturer: syz [ 1194.715768][T18122] usb 4-1: config 0 descriptor?? [ 1194.762601][T20778] 8021q: adding VLAN 0 to HW filter on device bond1174 [ 1194.794797][T20778] bond0: (slave bond1174): Enslaving as an active interface with an up link 12:37:24 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000440)=""/4096, 0x1000}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) 12:37:24 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1194.837669][T20779] device bridge1238 entered promiscuous mode [ 1194.873050][T20779] bond1174: (slave vlan990): Enslaving as an active interface with an up link [ 1194.885095][T14970] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1195.114887][T18122] rc_core: IR keymap rc-hauppauge not found [ 1195.120945][T18122] Registered IR keymap rc-empty [ 1195.127124][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.135784][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1195.175770][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.186111][ T25] audit: type=1804 audit(1640176644.642:2588): pid=20755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338342F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1195.245915][T18122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1195.275168][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.286807][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1002 [ 1195.302098][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1195.305121][ T3689] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1195.318366][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1195.333107][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.342526][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1195.355932][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.370814][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.405057][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.434890][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.455505][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1195.467150][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.475953][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1195.485672][T14970] usb 3-1: Manufacturer: syz [ 1195.495591][T14970] usb 3-1: config 0 descriptor?? [ 1195.516777][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.555118][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.584545][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.616763][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1195.619448][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.654963][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1195.686447][T18122] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1195.696150][T18122] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1195.713176][T18122] usb 4-1: USB disconnect, device number 72 [ 1195.736943][ T25] audit: type=1804 audit(1640176645.192:2589): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535322F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1195.778073][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.801168][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1195.817838][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1195.838458][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1195.858757][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.866587][T14970] rc_core: IR keymap rc-hauppauge not found [ 1195.882094][T14970] Registered IR keymap rc-empty [ 1195.889433][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1195.924661][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1195.948481][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1195.955427][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 12:37:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:25 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1195.971020][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1195.971052][ T3689] usb 2-1: Manufacturer: syz [ 1196.017612][ T3689] usb 2-1: config 0 descriptor?? [ 1196.026285][T20795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1196.101775][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1003 [ 1196.167710][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.205583][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:25 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 12:37:25 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1196.236156][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.276156][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.285488][ T922] rc_core: IR keymap rc-hauppauge not found [ 1196.291413][ T922] Registered IR keymap rc-empty [ 1196.297996][ T25] audit: type=1804 audit(1640176645.742:2590): pid=20786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337372F48C7C060 dev="sda1" ino=1170 res=1 errno=0 [ 1196.303178][T20801] 8021q: adding VLAN 0 to HW filter on device bond1175 [ 1196.344871][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.367178][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.380080][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.424915][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.445477][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.463313][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1196.511470][T20801] bond0: (slave bond1175): Enslaving as an active interface with an up link [ 1196.531778][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1004 [ 1196.548216][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.565697][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1196.572135][ T3689] Registered IR keymap rc-empty [ 1196.575415][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.588266][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1196.595099][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.621979][T20795] device bridge1239 entered promiscuous mode [ 1196.634952][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1196.636505][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1196.642421][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.667588][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1196.688797][ T3689] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2 [ 1196.705519][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1196.725497][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.727005][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2/input1005 [ 1196.735420][T20795] bond1175: (slave vlan991): Enslaving as an active interface with an up link [ 1196.763237][T14970] usb 3-1: USB disconnect, device number 14 [ 1196.765362][ T3326] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1196.785025][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.797177][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1196.815430][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.837146][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1196.854917][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1196.885189][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.909871][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:26 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 1196.935086][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1196.945813][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1196.975223][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1197.008885][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.015112][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1197.036516][ T3326] usb 4-1: Using ep0 maxpacket: 16 [ 1197.042347][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.045861][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1197.053633][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.089956][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:37:26 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x40, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000180)) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1197.156532][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.171342][ T922] usb 1-1: USB disconnect, device number 115 [ 1197.186584][ T3326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.199487][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.209421][ T3326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1197.222968][ T3326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1197.236298][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.245058][ T3326] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1197.256198][ T3326] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.286686][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.338476][ T3689] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1197.348104][ T3689] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1197.359150][ T3326] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 12:37:26 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 1197.385136][ T3326] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1197.406362][ T3689] usb 2-1: USB disconnect, device number 126 [ 1197.418702][ T3326] usb 4-1: Manufacturer: syz [ 1197.470913][T20827] 8021q: adding VLAN 0 to HW filter on device bond1176 [ 1197.497382][ T3326] usb 4-1: config 0 descriptor?? [ 1197.564921][T20827] bond0: (slave bond1176): Enslaving as an active interface with an up link [ 1197.624919][ T3721] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1197.640935][T20828] device bridge1240 entered promiscuous mode [ 1197.655041][ T922] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1197.676954][T20828] bond1176: (slave vlan992): Enslaving as an active interface with an up link 12:37:27 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000440)=""/4096, 0x1000}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000440)=""/4096, 0x1000}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) (async) 12:37:27 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 12:37:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1197.864741][ T3721] usb 3-1: Using ep0 maxpacket: 16 [ 1197.875363][ T3326] rc_core: IR keymap rc-hauppauge not found [ 1197.882019][ T3326] Registered IR keymap rc-empty [ 1197.896496][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1197.897772][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.928949][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.947431][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.956962][ T25] audit: type=1804 audit(1640176647.412:2591): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338352F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1198.000420][ T3326] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1198.004752][ T3721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.023124][ T3326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1006 [ 1198.055267][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.055382][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.087436][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.095851][T20847] 8021q: adding VLAN 0 to HW filter on device bond1177 [ 1198.102905][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1198.108707][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.133076][ T3721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.146222][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1198.158084][ T3721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1198.168096][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.178054][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.182323][T20847] bond0: (slave bond1177): Enslaving as an active interface with an up link [ 1198.192843][ T3721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1198.192876][ T3721] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.233535][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.240747][ T3689] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1198.266739][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1198.275078][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.277395][ T3721] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1198.296260][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1198.305848][ T922] usb 1-1: Manufacturer: syz [ 1198.310948][ T3721] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1198.315139][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.326406][ T922] usb 1-1: config 0 descriptor?? [ 1198.326583][ T3721] usb 3-1: Manufacturer: syz [ 1198.330044][ T3721] usb 3-1: config 0 descriptor?? [ 1198.387610][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.432981][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.465569][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.495984][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1198.515344][ T3326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1198.558326][ T3326] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1198.569960][ T3326] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1198.586041][ T3326] usb 4-1: USB disconnect, device number 73 [ 1198.596000][ T25] audit: type=1804 audit(1640176648.052:2592): pid=20831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1198.630125][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.647778][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.676378][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1198.696847][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1198.720485][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.767099][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1198.773271][ T3721] Registered IR keymap rc-empty [ 1198.780042][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1198.814720][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1198.816537][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1198.846074][ T3721] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1198.851342][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1198.873107][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1007 [ 1198.887800][ T3689] usb 2-1: Manufacturer: syz [ 1198.900432][ T3689] usb 2-1: config 0 descriptor?? [ 1198.908654][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1198.944837][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1198.975075][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.007113][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.044862][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.074929][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.104576][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.136054][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.174824][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.215008][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1199.239803][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1199.245997][ T3721] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1199.249515][ T3689] Registered IR keymap rc-empty [ 1199.261410][ T3721] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1199.272738][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.289718][ T3721] usb 3-1: USB disconnect, device number 15 [ 1199.326787][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.356340][ T25] audit: type=1804 audit(1640176648.812:2593): pid=20843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337382F48C7C060 dev="sda1" ino=1172 res=1 errno=0 [ 1199.399779][ T3689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1199.422577][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input1008 [ 1199.449007][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.495260][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.536877][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:29 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 12:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:29 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x8e, {0x8e, 0x8, "af6d1acc454f4369dfc96f094e2f3fef1c6dba7c607837a0793e342b44803f5777083df61089776189507e8901c5342eac6322372b0dc51da496355e38a2125bb653d79a6d233cab35ab2877e261e97f891a67f2f99e56da736aca8bd7b2ddd951191f638c08500f79f52b8c27a05e8098a1d68e7ed96a9ca82804254e245d10180a0b3b387328d0e0aecef1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000280)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x5, [@generic={0x69, 0x10, 0xa, "381bd8e8934fd29d41b276a2ed5527ac57b220ec6982a680bb9c130d16ed12c278327a1757ea4da089f1faf329210166a3700f523e1ac38ccc82bca7ceb8d6c80f6070d1212ef47aa32f890a996dab300453496179feb24ed3bd1e76f231661f9a13576495b2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x9, 0x89bb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x7, 0xff}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x4, 0x80, "941c4449", "0b4cf11b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x0, 0x3, 0x6, 0x0, 0x5, 0x40}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x30, 0xc8, "85b2e33406ac301ff04a196580f3d46efd1669536fb8b953990e9431ba739741b7ad1865338b8008292a0af7f81bc4dbc1a83cbafff4f01dea95943c4b4f05ea9bae497b12910e9b33f220d3554ef948a10f81d26337a6e4833494013702b5f3023b242ed05a8496406e268b6f1fe4a4dceac7dacc4b392e593e7726231f5e4b4032fb9418f85ccfd26dbc3f1df80507169fe57cc3d711877012d4e3d5805c6890446bedd221eff160945bcdb08b06ce8620942d1a53d1975e9e0712a5450ecf326d6f6e29461176"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0xb, 0x2, "58ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="db5e62544704"}, &(0x7f0000000940)={0x40, 0x19, 0x2, ')J'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2dd6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x64}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1199.581674][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.625840][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.665099][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.685867][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.725481][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:29 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x30, 0x400, 0x556, 0x30, 0x7, 0x100, 0x18, 0x0, {0x5, 0x8, 0x1}, {0x5, 0x21}, {0x8, 0x9, 0x1}, {0x7, 0x1b2a, 0x1}, 0x1, 0x1, 0x4, 0x8001, 0x0, 0x3, 0x1f, 0x100, 0x675, 0x4, 0x366, 0x13, 0x4, 0x1, 0x2, 0x6}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1199.776468][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.795368][ T922] rc_core: IR keymap rc-hauppauge not found [ 1199.801705][ T922] Registered IR keymap rc-empty [ 1199.817581][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:29 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1199.849797][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1199.867415][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1199.888745][T20876] 8021q: adding VLAN 0 to HW filter on device bond1178 12:37:29 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) [ 1199.907008][ T3689] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1199.928013][ T3689] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1199.941306][ T3689] usb 2-1: USB disconnect, device number 127 [ 1199.949169][ T3326] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1199.954672][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1199.964495][T20876] bond0: (slave bond1178): Enslaving as an active interface with an up link [ 1200.065700][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1200.089765][T20858] device bridge1242 entered promiscuous mode [ 1200.116476][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1009 [ 1200.152597][T20858] bond1178: (slave vlan993): Enslaving as an active interface with an up link 12:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1200.211294][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.226373][ T3326] usb 4-1: Using ep0 maxpacket: 16 12:37:29 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) [ 1200.254962][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.285313][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.314818][T20890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.325671][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.346888][ T3685] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1200.365617][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.377476][ T3326] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 1200.390363][ T3326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.396113][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.403890][ T3689] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1200.419885][ T3326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 42055, setting to 1024 [ 1200.433269][ T3326] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1200.447136][ T3326] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.504770][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.523227][T20890] 8021q: adding VLAN 0 to HW filter on device bond1179 [ 1200.534763][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.537767][ T3326] usb 4-1: New USB device found, idVendor=2040, idProduct=f138, bcdDevice= 1.42 12:37:30 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) [ 1200.565334][T20890] bond0: (slave bond1179): Enslaving as an active interface with an up link [ 1200.569751][ T3326] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1200.575895][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.596013][ T3326] usb 4-1: Manufacturer: syz [ 1200.614694][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1200.620007][ T3326] usb 4-1: config 0 descriptor?? [ 1200.628588][ T3685] usb 3-1: Using ep0 maxpacket: 16 [ 1200.646867][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1200.661561][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1200.676676][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1200.718707][ T922] usb 1-1: USB disconnect, device number 116 [ 1200.776140][ T3685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.792617][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.807534][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.822179][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.856149][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1200.889214][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 12:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1200.931062][ T3685] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1200.945340][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 12:37:30 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) [ 1200.971729][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.998684][ T3685] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.025035][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1201.105685][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1201.116496][ T3685] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1201.127555][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1201.137546][ T3685] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1201.147121][ T3689] usb 2-1: Manufacturer: syz [ 1201.151871][ T3685] usb 3-1: Manufacturer: syz [ 1201.160899][ T3689] usb 2-1: config 0 descriptor?? [ 1201.181939][ T3685] usb 3-1: config 0 descriptor?? [ 1201.204754][ T922] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1201.232980][T20903] 8021q: adding VLAN 0 to HW filter on device bond1180 [ 1201.246985][ T25] audit: type=1804 audit(1640176650.702:2594): pid=20909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338362F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1201.257749][T20903] bond0: (slave bond1180): Enslaving as an active interface with an up link [ 1201.317202][T20908] device bridge1244 entered promiscuous mode [ 1201.340237][T20908] bond1180: (slave vlan994): Enslaving as an active interface with an up link [ 1201.474774][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1201.515505][ T3685] rc_core: IR keymap rc-hauppauge not found [ 1201.521428][ T3685] Registered IR keymap rc-empty [ 1201.528991][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.544992][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1201.550923][ T3689] Registered IR keymap rc-empty [ 1201.558181][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.568463][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.595097][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.608390][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1201.615987][ T3685] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1201.621145][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1201.635403][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.647399][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1201.649916][ T25] audit: type=1804 audit(1640176651.102:2595): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3337392F48C7C060 dev="sda1" ino=1168 res=1 errno=0 [ 1201.705328][ T3685] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1011 [ 1201.709190][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.737161][ T3689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1201.755388][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.766505][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input1010 [ 1201.787653][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.796501][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.815042][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1201.825563][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1201.834895][ T922] usb 1-1: Manufacturer: syz [ 1201.840356][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.849403][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.850968][ T922] usb 1-1: config 0 descriptor?? [ 1201.888376][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.897196][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.935216][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.942470][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1201.967059][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.996081][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.003301][ T25] audit: type=1804 audit(1640176651.452:2596): pid=20885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535342F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1202.037732][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.047976][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.087689][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.097311][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.135405][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.142635][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.164994][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.177778][ T3685] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.209403][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.226524][ T3685] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1202.236810][ T3685] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1202.248589][ T3689] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1202.258579][ T3689] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1202.276503][ T3689] usb 2-1: USB disconnect, device number 2 [ 1202.652617][ T3689] usb 4-1: USB disconnect, device number 74 12:37:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:32 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) 12:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:32 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x8e, {0x8e, 0x8, "af6d1acc454f4369dfc96f094e2f3fef1c6dba7c607837a0793e342b44803f5777083df61089776189507e8901c5342eac6322372b0dc51da496355e38a2125bb653d79a6d233cab35ab2877e261e97f891a67f2f99e56da736aca8bd7b2ddd951191f638c08500f79f52b8c27a05e8098a1d68e7ed96a9ca82804254e245d10180a0b3b387328d0e0aecef1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000280)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x5, [@generic={0x69, 0x10, 0xa, "381bd8e8934fd29d41b276a2ed5527ac57b220ec6982a680bb9c130d16ed12c278327a1757ea4da089f1faf329210166a3700f523e1ac38ccc82bca7ceb8d6c80f6070d1212ef47aa32f890a996dab300453496179feb24ed3bd1e76f231661f9a13576495b2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x9, 0x89bb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x7, 0xff}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x4, 0x80, "941c4449", "0b4cf11b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x0, 0x3, 0x6, 0x0, 0x5, 0x40}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x30, 0xc8, "85b2e33406ac301ff04a196580f3d46efd1669536fb8b953990e9431ba739741b7ad1865338b8008292a0af7f81bc4dbc1a83cbafff4f01dea95943c4b4f05ea9bae497b12910e9b33f220d3554ef948a10f81d26337a6e4833494013702b5f3023b242ed05a8496406e268b6f1fe4a4dceac7dacc4b392e593e7726231f5e4b4032fb9418f85ccfd26dbc3f1df80507169fe57cc3d711877012d4e3d5805c6890446bedd221eff160945bcdb08b06ce8620942d1a53d1975e9e0712a5450ecf326d6f6e29461176"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0xb, 0x2, "58ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="db5e62544704"}, &(0x7f0000000940)={0x40, 0x19, 0x2, ')J'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2dd6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x64}}) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) 12:37:32 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x30, 0x400, 0x556, 0x30, 0x7, 0x100, 0x18, 0x0, {0x5, 0x8, 0x1}, {0x5, 0x21}, {0x8, 0x9, 0x1}, {0x7, 0x1b2a, 0x1}, 0x1, 0x1, 0x4, 0x8001, 0x0, 0x3, 0x1f, 0x100, 0x675, 0x4, 0x366, 0x13, 0x4, 0x1, 0x2, 0x6}) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) dup(r1) (async, rerun: 32) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1203.169355][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1203.260076][ T25] audit: type=1804 audit(1640176652.712:2597): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.334821][ T922] rc_core: IR keymap rc-hauppauge not found [ 1203.341655][ T922] Registered IR keymap rc-empty [ 1203.348868][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.385316][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.391079][ T25] audit: type=1804 audit(1640176652.712:2598): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 12:37:32 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) (async) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) (async) [ 1203.423147][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1203.426627][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1012 [ 1203.433400][ T3686] usb 3-1: USB disconnect, device number 16 [ 1203.463308][ T3721] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1203.497171][ T25] audit: type=1804 audit(1640176652.712:2599): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.530119][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:33 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) [ 1203.559878][ T25] audit: type=1804 audit(1640176652.712:2600): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.601886][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.622429][T20935] 8021q: adding VLAN 0 to HW filter on device bond1181 [ 1203.636873][ T25] audit: type=1804 audit(1640176652.712:2601): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.671564][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.721940][ T25] audit: type=1804 audit(1640176652.722:2602): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.747187][T20935] bond0: (slave bond1181): Enslaving as an active interface with an up link [ 1203.756119][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.767623][ T3721] usb 4-1: Using ep0 maxpacket: 16 [ 1203.805381][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.834927][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.859362][ T25] audit: type=1804 audit(1640176652.722:2603): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.878276][T20938] device bridge1245 entered promiscuous mode [ 1203.899631][ T25] audit: type=1804 audit(1640176652.722:2604): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1203.934710][T20938] bond1181: (slave vlan995): Enslaving as an active interface with an up link [ 1203.945130][ T3721] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 1203.957462][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1203.970115][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.991049][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 42055, setting to 1024 [ 1204.005119][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:33 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) 12:37:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1204.037720][ T25] audit: type=1804 audit(1640176652.722:2605): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1204.071230][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1204.084932][ T3721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1204.104580][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1204.117345][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.137141][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1204.146792][ T3686] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1204.166239][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1204.178378][T20950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1204.208985][ T922] usb 1-1: USB disconnect, device number 117 [ 1204.220092][ T25] audit: type=1804 audit(1640176652.722:2606): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1204.288931][ T3721] usb 4-1: New USB device found, idVendor=2040, idProduct=f138, bcdDevice= 1.42 [ 1204.301907][ T3721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1204.327851][ T3721] usb 4-1: Manufacturer: syz [ 1204.348789][ T3721] usb 4-1: config 0 descriptor?? [ 1204.414824][ T3686] usb 3-1: Using ep0 maxpacket: 16 12:37:33 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 1204.445657][T20954] 8021q: adding VLAN 0 to HW filter on device bond1182 [ 1204.472136][T20954] bond0: (slave bond1182): Enslaving as an active interface with an up link [ 1204.535115][ T3686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.536658][T20950] device vlan996 entered promiscuous mode [ 1204.571632][ T3686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.586974][T20950] device bridge1246 entered promiscuous mode [ 1204.589254][ T3686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1204.607792][ T3686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1204.622181][ T3686] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.639852][T20950] bond1182: (slave vlan996): Enslaving as an active interface with an up link [ 1204.715147][ T3686] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1204.725502][ T3686] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1204.735555][ T3686] usb 3-1: Manufacturer: syz [ 1204.754923][ T922] usb 1-1: new high-speed USB device number 118 using dummy_hcd 12:37:34 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 12:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1204.771263][ T3686] usb 3-1: config 0 descriptor?? [ 1204.850862][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1204.979933][T20963] 8021q: adding VLAN 0 to HW filter on device bond1183 [ 1204.995215][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1205.028322][T20963] bond0: (slave bond1183): Enslaving as an active interface with an up link [ 1205.095795][T20963] device bridge1247 entered promiscuous mode [ 1205.118544][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.121481][T20963] bond1183: (slave vlan997): Enslaving as an active interface with an up link [ 1205.130039][ T3686] rc_core: IR keymap rc-hauppauge not found [ 1205.130057][ T3686] Registered IR keymap rc-empty [ 1205.130143][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.130316][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.130348][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1205.130371][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1205.130396][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.154913][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.185191][ T3686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1205.237960][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1205.252952][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1205.262739][ T922] usb 1-1: Manufacturer: syz [ 1205.281996][ T922] usb 1-1: config 0 descriptor?? [ 1205.305269][ T3686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1013 [ 1205.335031][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.364784][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.395014][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.426205][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.455101][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.485101][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.524913][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.565753][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.594992][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.635241][ T3686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1205.667456][ T3686] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1205.677255][ T3686] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1205.959888][T20972] UDC core: couldn't find an available UDC or it's busy: -16 [ 1205.980427][T20972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1206.019068][ T3689] usb 3-1: USB disconnect, device number 17 [ 1206.151480][ T3686] usb 4-1: USB disconnect, device number 75 12:37:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x30, 0x400, 0x556, 0x30, 0x7, 0x100, 0x18, 0x0, {0x5, 0x8, 0x1}, {0x5, 0x21}, {0x8, 0x9, 0x1}, {0x7, 0x1b2a, 0x1}, 0x1, 0x1, 0x4, 0x8001, 0x0, 0x3, 0x1f, 0x100, 0x675, 0x4, 0x366, 0x13, 0x4, 0x1, 0x2, 0x6}) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) 12:37:36 executing program 4: socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 12:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:36 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) (async, rerun: 32) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) (async, rerun: 32) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) 12:37:36 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x8e, {0x8e, 0x8, "af6d1acc454f4369dfc96f094e2f3fef1c6dba7c607837a0793e342b44803f5777083df61089776189507e8901c5342eac6322372b0dc51da496355e38a2125bb653d79a6d233cab35ab2877e261e97f891a67f2f99e56da736aca8bd7b2ddd951191f638c08500f79f52b8c27a05e8098a1d68e7ed96a9ca82804254e245d10180a0b3b387328d0e0aecef1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000280)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x5, [@generic={0x69, 0x10, 0xa, "381bd8e8934fd29d41b276a2ed5527ac57b220ec6982a680bb9c130d16ed12c278327a1757ea4da089f1faf329210166a3700f523e1ac38ccc82bca7ceb8d6c80f6070d1212ef47aa32f890a996dab300453496179feb24ed3bd1e76f231661f9a13576495b2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x9, 0x89bb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x7, 0xff}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x4, 0x80, "941c4449", "0b4cf11b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x0, 0x3, 0x6, 0x0, 0x5, 0x40}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x30, 0xc8, "85b2e33406ac301ff04a196580f3d46efd1669536fb8b953990e9431ba739741b7ad1865338b8008292a0af7f81bc4dbc1a83cbafff4f01dea95943c4b4f05ea9bae497b12910e9b33f220d3554ef948a10f81d26337a6e4833494013702b5f3023b242ed05a8496406e268b6f1fe4a4dceac7dacc4b392e593e7726231f5e4b4032fb9418f85ccfd26dbc3f1df80507169fe57cc3d711877012d4e3d5805c6890446bedd221eff160945bcdb08b06ce8620942d1a53d1975e9e0712a5450ecf326d6f6e29461176"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0xb, 0x2, "58ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="db5e62544704"}, &(0x7f0000000940)={0x40, 0x19, 0x2, ')J'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2dd6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x64}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x8e, {0x8e, 0x8, "af6d1acc454f4369dfc96f094e2f3fef1c6dba7c607837a0793e342b44803f5777083df61089776189507e8901c5342eac6322372b0dc51da496355e38a2125bb653d79a6d233cab35ab2877e261e97f891a67f2f99e56da736aca8bd7b2ddd951191f638c08500f79f52b8c27a05e8098a1d68e7ed96a9ca82804254e245d10180a0b3b387328d0e0aecef1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000280)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x5, [@generic={0x69, 0x10, 0xa, "381bd8e8934fd29d41b276a2ed5527ac57b220ec6982a680bb9c130d16ed12c278327a1757ea4da089f1faf329210166a3700f523e1ac38ccc82bca7ceb8d6c80f6070d1212ef47aa32f890a996dab300453496179feb24ed3bd1e76f231661f9a13576495b2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x9, 0x89bb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x7, 0xff}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x4, 0x80, "941c4449", "0b4cf11b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x0, 0x3, 0x6, 0x0, 0x5, 0x40}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x30, 0xc8, "85b2e33406ac301ff04a196580f3d46efd1669536fb8b953990e9431ba739741b7ad1865338b8008292a0af7f81bc4dbc1a83cbafff4f01dea95943c4b4f05ea9bae497b12910e9b33f220d3554ef948a10f81d26337a6e4833494013702b5f3023b242ed05a8496406e268b6f1fe4a4dceac7dacc4b392e593e7726231f5e4b4032fb9418f85ccfd26dbc3f1df80507169fe57cc3d711877012d4e3d5805c6890446bedd221eff160945bcdb08b06ce8620942d1a53d1975e9e0712a5450ecf326d6f6e29461176"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0xb, 0x2, "58ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="db5e62544704"}, &(0x7f0000000940)={0x40, 0x19, 0x2, ')J'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2dd6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x64}}) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) (async) [ 1206.621312][T20979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:36 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1206.765129][ T922] rc_core: IR keymap rc-hauppauge not found [ 1206.771379][ T922] Registered IR keymap rc-empty [ 1206.789647][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1206.816310][T20979] 8021q: adding VLAN 0 to HW filter on device bond1184 [ 1206.850790][T20979] bond0: (slave bond1184): Enslaving as an active interface with an up link [ 1206.854902][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1206.889120][T20979] device bridge1248 entered promiscuous mode [ 1206.909176][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1206.918033][T20979] bond1184: (slave vlan998): Enslaving as an active interface with an up link 12:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6d0c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1206.938072][ T3689] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1206.965379][ T3685] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1206.972786][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1014 [ 1207.003165][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.011876][T18122] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1207.044716][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.055678][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1207.077463][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.097272][ T3688] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1207.115212][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.150807][T21002] 8021q: adding VLAN 0 to HW filter on device bond1185 [ 1207.154831][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.172556][T21002] bond0: (slave bond1185): Enslaving as an active interface with an up link [ 1207.206162][T21002] device vlan999 entered promiscuous mode [ 1207.214909][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.215237][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 1207.234665][ T3685] usb 2-1: Using ep0 maxpacket: 16 [ 1207.237437][T21002] device bridge1249 entered promiscuous mode [ 1207.248817][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.257548][T18122] usb 4-1: Using ep0 maxpacket: 16 12:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6e0c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1207.285418][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.288090][T21002] bond1185: (slave vlan999): Enslaving as an active interface with an up link [ 1207.315561][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.349533][ T3689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.355084][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1207.361098][ T3688] usb 5-1: Using ep0 maxpacket: 16 [ 1207.374891][T18122] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 1207.374945][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.374975][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 42055, setting to 1024 [ 1207.375003][T18122] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1207.375027][T18122] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.397913][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1207.400197][ T3685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.448572][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1207.464925][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.470162][T18122] usb 4-1: New USB device found, idVendor=2040, idProduct=f138, bcdDevice= 1.42 [ 1207.481819][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1207.505968][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1207.510393][T18122] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1207.515944][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1207.515976][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.520820][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.560941][ T922] usb 1-1: USB disconnect, device number 118 [ 1207.576234][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1207.589780][ T3685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1207.592643][T18122] usb 4-1: Manufacturer: syz [ 1207.599985][ T3685] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.627153][ T3689] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1207.638163][ T3689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1207.649438][ T3688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.662222][ T3689] usb 3-1: Manufacturer: syz [ 1207.668956][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.682441][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1207.697015][ T3685] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1207.708926][ T3689] usb 3-1: config 0 descriptor?? [ 1207.716008][ T3685] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1207.725969][ T3685] usb 2-1: Manufacturer: syz [ 1207.731577][ T3688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1207.750965][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.769159][ T3685] usb 2-1: config 0 descriptor?? [ 1207.780520][T18122] usb 4-1: config 0 descriptor?? [ 1207.830710][T21009] 8021q: adding VLAN 0 to HW filter on device bond1186 [ 1207.865647][ T3688] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1207.875737][T21009] bond0: (slave bond1186): Enslaving as an active interface with an up link [ 1207.883482][ T3688] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1207.905954][ T3688] usb 5-1: Manufacturer: syz [ 1207.910939][T21006] device bridge1250 entered promiscuous mode [ 1207.937357][ T3688] usb 5-1: config 0 descriptor?? 12:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1207.983573][T21006] bond1186: (slave vlan1000): Enslaving as an active interface with an up link [ 1208.096620][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1208.156195][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1208.162125][ T3689] Registered IR keymap rc-empty [ 1208.168794][ T3685] rc_core: IR keymap rc-hauppauge not found [ 1208.174878][ T922] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1208.192369][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.218818][ T3685] Registered IR keymap rc-empty [ 1208.235586][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.257324][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.269258][T21013] 8021q: adding VLAN 0 to HW filter on device bond1187 [ 1208.296282][T21013] bond0: (slave bond1187): Enslaving as an active interface with an up link [ 1208.306692][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.316510][ T3689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1208.325355][T21013] device bridge1251 entered promiscuous mode [ 1208.330601][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1208.348893][ T3688] Registered IR keymap rc-empty [ 1208.359746][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.362338][T21013] bond1187: (slave vlan1001): Enslaving as an active interface with an up link [ 1208.371029][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1015 [ 1208.396523][ T3685] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1208.412220][ T25] kauditd_printk_skb: 75 callbacks suppressed [ 1208.412235][ T25] audit: type=1804 audit(1640176657.862:2682): pid=21018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338382F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1208.425007][ T922] usb 1-1: Using ep0 maxpacket: 16 12:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1208.482337][ T3685] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input1016 [ 1208.499025][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.536098][ T3688] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 1208.550122][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.568369][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.585341][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.592918][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input1017 [ 1208.594944][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.613616][T21023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1208.630754][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.641912][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1208.657446][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.670314][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1208.672531][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.687304][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1208.687430][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.716121][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.756731][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.766551][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.773903][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.798662][T21023] 8021q: adding VLAN 0 to HW filter on device bond1188 [ 1208.809414][ T25] audit: type=1804 audit(1640176658.262:2683): pid=21027 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723836373934393137312F73797A6B616C6C65722E5045574771772F3730322F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1208.845038][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1208.848943][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1208.860191][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.861458][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.872615][ T922] usb 1-1: Manufacturer: syz [ 1208.886202][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.899866][ T922] usb 1-1: config 0 descriptor?? [ 1208.904763][T21023] bond0: (slave bond1188): Enslaving as an active interface with an up link [ 1208.916856][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.926883][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:38 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "18a9738a0ea0d9dcd1bc74732e0555e879299f0857a44b70dd46be33b6b0d6e46420450c02847e54d004d74be29bd7f192e14827a7e78bba64b999e202c13719b32982eddf05a9f4d6717c499291de6c134f64caacd4596eb7c66cd17af1510c63f5adab2609ab6e897f4deec376de2f6189581bc39eb5637804150dbc9f0bdefe285667f3cae58b8cf19c940dd218f6c367e4ff3e1adc3dad5974fd7dd769a9b6f22d76f71f753d7e1ab8346853bb18645bc6d482f49d45831a10cd854ab89f2db21b2d6f3804d6d6b7"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) [ 1208.965259][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.967493][ T3721] usb 4-1: USB disconnect, device number 76 [ 1208.986788][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1208.996761][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1209.008005][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.057514][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.066291][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1209.076019][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.106819][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.116156][ T3685] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.123522][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1209.156278][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.165609][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1209.176152][ T3685] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1209.189291][ T3685] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1209.216012][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.224960][ T3689] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1209.232975][ T3689] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1209.250185][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.273647][ T3685] usb 2-1: USB disconnect, device number 3 [ 1209.316710][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1209.368793][ T3688] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1209.397581][ T3688] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1209.405299][ T3721] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1209.654786][ T3721] usb 4-1: Using ep0 maxpacket: 16 [ 1209.774708][ T3721] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 1209.786409][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.800445][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 5643, setting to 1024 [ 1209.814824][ T3721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1209.826249][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.915156][ T3721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1209.925832][ T3721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1209.935890][ T3721] usb 4-1: Manufacturer: syz [ 1209.955403][ T3721] usb 4-1: config 0 descriptor?? [ 1210.028869][T10050] usb 3-1: USB disconnect, device number 18 12:37:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:39 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x503040, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffff61e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000020c0)={'#! ', './file0', [{0x20, '--\x96(^@]'}], 0xa, "dfffe949c4b720bf2a086059567962d3b2f1592c18b192f47dc4ce292f60b894d008d536bf9c3a8a0e299fea8b8515e55d8a31858d619297da764bfd06a148eca23991184ab0998c31e73f437589fa0d1988ec63cef4ae15d3181d20566d2585c6c34cf8ec0f57e33f89aea1ba3e1df073bb341b9ce2ddf2fec8bc92"}, 0x8f) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d8fb0400000063030000"], 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) 12:37:39 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'wlan1\x00', {}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1210.209851][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:39 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1210.287703][ T3688] usb 5-1: USB disconnect, device number 42 [ 1210.384804][ T922] rc_core: IR keymap rc-hauppauge not found [ 1210.391095][ T922] Registered IR keymap rc-empty [ 1210.413010][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.422415][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1210.423286][ T25] audit: type=1804 audit(1640176659.882:2684): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3338392F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1210.431382][ T3721] Registered IR keymap rc-empty [ 1210.465913][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.467113][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.515282][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.522738][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1210.532429][T21051] 8021q: adding VLAN 0 to HW filter on device bond1189 [ 1210.538969][T18122] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1210.540802][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1018 [ 1210.565515][ T3721] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1210.588584][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1019 [ 1210.618070][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.654487][T21051] bond0: (slave bond1189): Enslaving as an active interface with an up link [ 1210.654933][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.673002][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.685184][T10050] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1210.715144][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.724056][T21055] device bridge1253 entered promiscuous mode [ 1210.725212][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.745992][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.772472][T21055] bond1189: (slave vlan1002): Enslaving as an active interface with an up link [ 1210.784972][T18122] usb 2-1: Using ep0 maxpacket: 16 [ 1210.786075][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.799210][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1210.834951][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.845937][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.866340][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.875864][ T3688] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1210.885178][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.905072][T18122] usb 2-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1210.917681][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1210.928408][T18122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1210.931658][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.941192][T18122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 34312, setting to 1024 [ 1210.941225][T18122] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1210.941251][T18122] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1210.945008][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1210.995103][T10050] usb 3-1: Using ep0 maxpacket: 16 [ 1211.000383][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.054972][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.065149][T18122] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1211.076233][T18122] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1211.087299][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1211.096653][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1211.104606][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1211.109325][T21059] 8021q: adding VLAN 0 to HW filter on device bond1190 [ 1211.113068][T18122] usb 2-1: Manufacturer: syz [ 1211.126375][T10050] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.142419][ T922] usb 1-1: USB disconnect, device number 119 [ 1211.149768][T10050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.162442][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1211.173215][T18122] usb 2-1: config 0 descriptor?? [ 1211.181226][T10050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1211.192317][T10050] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1211.194771][ T3688] usb 5-1: Using ep0 maxpacket: 16 [ 1211.205333][T10050] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.226961][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1211.259861][T21059] bond0: (slave bond1190): Enslaving as an active interface with an up link [ 1211.285129][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1211.315789][ T3721] mceusb 4-1:0.0: Registered ꤘ詳ꀎ병獴Ԯ⥹࢟ꑗ灋䛝㎾낶⁤౅萂呾Ӑ䯗 with mce emulator interface version 1 [ 1211.333075][T10050] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1211.355497][T21061] device vlan1003 entered promiscuous mode [ 1211.361478][T10050] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1211.376332][ T3688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.380244][ T3721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1211.394984][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.399578][T10050] usb 3-1: Manufacturer: syz [ 1211.414893][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1211.414924][ T3688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1211.414950][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.456184][ T25] audit: type=1804 audit(1640176660.912:2685): pid=21044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338322F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1211.483367][T21061] device bridge1254 entered promiscuous mode [ 1211.495064][ T3721] usb 4-1: USB disconnect, device number 77 [ 1211.515622][ T3688] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1211.526297][ T3688] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1211.538120][ T3688] usb 5-1: Manufacturer: syz [ 1211.539871][T10050] usb 3-1: config 0 descriptor?? [ 1211.545639][ T3688] usb 5-1: config 0 descriptor?? [ 1211.578250][T21061] bond1190: (slave vlan1003): Enslaving as an active interface with an up link 12:37:41 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "18a9738a0ea0d9dcd1bc74732e0555e879299f0857a44b70dd46be33b6b0d6e46420450c02847e54d004d74be29bd7f192e14827a7e78bba64b999e202c13719b32982eddf05a9f4d6717c499291de6c134f64caacd4596eb7c66cd17af1510c63f5adab2609ab6e897f4deec376de2f6189581bc39eb5637804150dbc9f0bdefe285667f3cae58b8cf19c940dd218f6c367e4ff3e1adc3dad5974fd7dd769a9b6f22d76f71f753d7e1ab8346853bb18645bc6d482f49d45831a10cd854ab89f2db21b2d6f3804d6d6b7"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "18a9738a0ea0d9dcd1bc74732e0555e879299f0857a44b70dd46be33b6b0d6e46420450c02847e54d004d74be29bd7f192e14827a7e78bba64b999e202c13719b32982eddf05a9f4d6717c499291de6c134f64caacd4596eb7c66cd17af1510c63f5adab2609ab6e897f4deec376de2f6189581bc39eb5637804150dbc9f0bdefe285667f3cae58b8cf19c940dd218f6c367e4ff3e1adc3dad5974fd7dd769a9b6f22d76f71f753d7e1ab8346853bb18645bc6d482f49d45831a10cd854ab89f2db21b2d6f3804d6d6b7"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) 12:37:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1211.685297][ T922] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1211.745324][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1211.879442][T21067] 8021q: adding VLAN 0 to HW filter on device bond1191 [ 1211.902945][T21067] bond0: (slave bond1191): Enslaving as an active interface with an up link [ 1211.934798][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1211.955252][T10050] rc_core: IR keymap rc-hauppauge not found [ 1211.961194][T10050] Registered IR keymap rc-empty [ 1211.980198][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.005584][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1212.011813][ T3688] Registered IR keymap rc-empty [ 1212.016159][ T25] audit: type=1804 audit(1640176661.472:2686): pid=21047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535372F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1212.019055][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.050288][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.065075][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.078036][T10050] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1212.096571][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.108732][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.110537][T10050] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1020 [ 1212.132230][ T3721] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1212.141694][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.156694][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.158819][ T3688] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1212.169173][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.199266][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.218438][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input1021 [ 1212.235002][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.260510][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.264967][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.286355][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.297292][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.305275][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.315880][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.325674][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.331446][ T922] usb 1-1: Manufacturer: syz [ 1212.352262][ T922] usb 1-1: config 0 descriptor?? [ 1212.355124][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.361884][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.394957][ T3721] usb 4-1: Using ep0 maxpacket: 16 [ 1212.405440][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.419371][ T25] audit: type=1804 audit(1640176661.872:2687): pid=21072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723836373934393137312F73797A6B616C6C65722E5045574771772F3730332F48C7C060 dev="sda1" ino=1187 res=1 errno=0 12:37:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1212.462683][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.463578][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.499665][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1212.505073][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.526530][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.534651][ T3721] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 1212.548509][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.559860][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.573068][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 5643, setting to 1024 [ 1212.574864][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.594962][T10050] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1212.627529][ T3721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1212.640020][T10050] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1212.645978][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.650280][T10050] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1212.677561][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.682214][T21074] 8021q: adding VLAN 0 to HW filter on device bond1192 [ 1212.699475][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.732290][T21074] bond0: (slave bond1192): Enslaving as an active interface with an up link [ 1212.742499][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1212.745035][T10050] usb 3-1: USB disconnect, device number 19 [ 1212.798207][ T3688] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1212.815506][T21076] device vlan1004 entered promiscuous mode [ 1212.827656][ T3688] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1212.837306][T21076] device bridge1256 entered promiscuous mode [ 1212.846296][ T3721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.857323][ T3721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.885602][T21076] bond1192: (slave vlan1004): Enslaving as an active interface with an up link [ 1212.896431][ T3721] usb 4-1: Manufacturer: syz [ 1212.910714][ T3721] usb 4-1: config 0 descriptor?? 12:37:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1213.075513][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:42 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'wlan1\x00', {}, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) 12:37:42 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x503040, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffff61e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000020c0)={'#! ', './file0', [{0x20, '--\x96(^@]'}], 0xa, "dfffe949c4b720bf2a086059567962d3b2f1592c18b192f47dc4ce292f60b894d008d536bf9c3a8a0e299fea8b8515e55d8a31858d619297da764bfd06a148eca23991184ab0998c31e73f437589fa0d1988ec63cef4ae15d3181d20566d2585c6c34cf8ec0f57e33f89aea1ba3e1df073bb341b9ce2ddf2fec8bc92"}, 0x8f) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d8fb0400000063030000"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) [ 1213.338288][T18122] rc_core: IR keymap rc-hauppauge not found [ 1213.354871][T18122] Registered IR keymap rc-empty [ 1213.364853][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1213.371049][ T3721] Registered IR keymap rc-empty [ 1213.379760][ T25] audit: type=1804 audit(1640176662.832:2688): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339302F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1213.421114][T21078] 8021q: adding VLAN 0 to HW filter on device bond1193 [ 1213.429870][T21093] warn_alloc: 1 callbacks suppressed [ 1213.429886][T21093] syz-executor.2: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1213.437526][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1213.461651][T21093] ,cpuset=syz2,mems_allowed=0-1 [ 1213.474984][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1213.512648][ T25] audit: type=1804 audit(1640176662.872:2689): pid=21090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3535382F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1213.547374][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1213.556031][T21078] bond0: (slave bond1193): Enslaving as an active interface with an up link [ 1213.566816][T21093] CPU: 1 PID: 21093 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 1213.575597][T21093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.585669][T21093] Call Trace: [ 1213.588958][T21093] [ 1213.591902][T21093] dump_stack_lvl+0x201/0x2d8 [ 1213.596603][T21093] ? show_regs_print_info+0x12/0x12 [ 1213.601819][T21093] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1213.607575][T21093] warn_alloc+0x221/0x370 [ 1213.611934][T21093] ? zone_watermark_ok_safe+0x280/0x280 [ 1213.617519][T21093] ? alloc_pages_bulk_array_mempolicy+0x5be/0x690 [ 1213.623965][T21093] __vmalloc_node_range+0x7c5/0x960 [ 1213.629198][T21093] ? n_tty_open+0x19/0x150 [ 1213.633696][T21093] vzalloc+0x75/0x80 [ 1213.637603][T21093] ? n_tty_open+0x19/0x150 [ 1213.642035][T21093] n_tty_open+0x19/0x150 [ 1213.646301][T21093] tty_ldisc_setup+0x1ba/0x3c0 [ 1213.651096][T21093] tty_init_dev+0x271/0x4c0 [ 1213.655620][T21093] tty_open+0x89a/0xdd0 [ 1213.658799][ T25] audit: type=1804 audit(1640176662.922:2690): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.659786][T21093] ? chrdev_open+0x1f4/0x680 [ 1213.693711][T21093] ? tty_compat_ioctl+0xcc0/0xcc0 [ 1213.698753][T21093] ? do_raw_spin_unlock+0x134/0x8a0 [ 1213.703965][T21093] ? memset+0x1f/0x40 [ 1213.707970][T21093] chrdev_open+0x5fb/0x680 [ 1213.712404][T21093] ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0 [ 1213.719259][T21093] ? cd_forget+0x160/0x160 [ 1213.723692][T21093] ? hook_file_open+0xed/0x220 [ 1213.724362][ T25] audit: type=1804 audit(1640176662.922:2691): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.728525][T21093] ? tomoyo_file_open+0xe6/0x170 [ 1213.728607][T21093] ? security_file_open+0x458/0x570 [ 1213.728633][T21093] ? cd_forget+0x160/0x160 [ 1213.728651][T21093] do_dentry_open+0x78b/0x1020 [ 1213.728687][T21093] path_openat+0x2896/0x3660 [ 1213.758344][ T25] audit: type=1804 audit(1640176662.932:2692): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.762887][T21093] ? do_filp_open+0x4f0/0x4f0 [ 1213.762934][T21093] ? rcu_read_lock_sched_held+0x89/0x130 [ 1213.762956][T21093] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1213.768478][ T25] audit: type=1804 audit(1640176662.932:2693): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.772565][T21093] do_filp_open+0x277/0x4f0 12:37:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1213.772604][T21093] ? vfs_tmpfile+0x230/0x230 [ 1213.772623][T21093] ? alloc_fd+0x5e1/0x680 [ 1213.772669][T21093] ? _raw_spin_unlock+0x24/0x40 [ 1213.777710][ T25] audit: type=1804 audit(1640176662.942:2694): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.781981][T21093] ? alloc_fd+0x5e1/0x680 [ 1213.782019][T21093] do_sys_openat2+0x13b/0x500 [ 1213.782050][T21093] ? do_sys_open+0x220/0x220 [ 1213.782092][T21093] __x64_sys_openat+0x243/0x290 [ 1213.813536][ T25] audit: type=1804 audit(1640176662.952:2695): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.815988][T21093] ? __ia32_sys_open+0x270/0x270 [ 1213.816019][T21093] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1213.816042][T21093] ? lockdep_hardirqs_on+0x95/0x140 [ 1213.816064][T21093] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1213.816093][T21093] do_syscall_64+0x44/0xd0 [ 1213.821964][ T25] audit: type=1804 audit(1640176662.952:2696): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.827676][T21093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1213.827700][T21093] RIP: 0033:0x7f0bbe27cdb4 [ 1213.827720][T21093] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1213.827737][T21093] RSP: 002b:00007f0bbcbfcca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1213.827760][T21093] RAX: ffffffffffffffda RBX: 00007f0bbe3dd100 RCX: 00007f0bbe27cdb4 [ 1213.827774][T21093] RDX: 0000000000000002 RSI: 00007f0bbcbfcd40 RDI: 00000000ffffff9c [ 1213.827787][T21093] RBP: 00007f0bbcbfcd40 R08: 0000000000000000 R09: 000000000000000e [ 1213.827800][T21093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1213.858684][ T25] audit: type=1804 audit(1640176662.962:2697): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1213.861866][T21093] R13: 00007fffc6ee034f R14: 00007f0bbcbfd300 R15: 0000000000022000 [ 1213.861907][T21093] [ 1213.882430][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1213.949406][ T3689] usb 5-1: USB disconnect, device number 43 [ 1213.987441][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1214.016358][ T25] audit: type=1804 audit(1640176662.962:2698): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338332F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1214.081196][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1022 [ 1214.116480][T21093] Mem-Info: [ 1214.159790][T18122] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2 [ 1214.218920][T21093] active_anon:588 inactive_anon:164043 isolated_anon:0 [ 1214.218920][T21093] active_file:4504 inactive_file:82736 isolated_file:0 [ 1214.218920][T21093] unevictable:768 dirty:30 writeback:0 [ 1214.218920][T21093] slab_reclaimable:21890 slab_unreclaimable:268033 [ 1214.218920][T21093] mapped:27899 shmem:2016 pagetables:1162 bounce:0 [ 1214.218920][T21093] kernel_misc_reclaimable:0 [ 1214.218920][T21093] free:1039984 free_pcp:7345 free_cma:0 12:37:43 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502760b16aee46a9063534d0feceddee019ea666fdf5a2210aa4868797f0832e5279f424bba7353a8c294160e68bc1f043e99fe198352702083a7dd61881ad3dc899da4297cb338abd0d5ed805035d6420fe86e1abdf3ed3987bb2c4ba8ce65f951f6f62fe140f4a5ea5a161a3a7431efaeb2a50d876a52aa1efe1fecf21caa55c9872caadc7b8df2676f8ce53ee566ea0ead192d4e2b3564f65620257c59b9395e889323eb4b8091d724b712acece5255b527d7e94c5ea8c82845505625c5af3399bdf8cd5729839f9617d9d010bf8b0201748c88726b33c17f76b1a2e67451017397b5ddc22efe2f367442fea46d7d2fd04a3cb34366067eeeeb6b1a0"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "18a9738a0ea0d9dcd1bc74732e0555e879299f0857a44b70dd46be33b6b0d6e46420450c02847e54d004d74be29bd7f192e14827a7e78bba64b999e202c13719b32982eddf05a9f4d6717c499291de6c134f64caacd4596eb7c66cd17af1510c63f5adab2609ab6e897f4deec376de2f6189581bc39eb5637804150dbc9f0bdefe285667f3cae58b8cf19c940dd218f6c367e4ff3e1adc3dad5974fd7dd769a9b6f22d76f71f753d7e1ab8346853bb18645bc6d482f49d45831a10cd854ab89f2db21b2d6f3804d6d6b7"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "18a9738a0ea0d9dcd1bc74732e0555e879299f0857a44b70dd46be33b6b0d6e46420450c02847e54d004d74be29bd7f192e14827a7e78bba64b999e202c13719b32982eddf05a9f4d6717c499291de6c134f64caacd4596eb7c66cd17af1510c63f5adab2609ab6e897f4deec376de2f6189581bc39eb5637804150dbc9f0bdefe285667f3cae58b8cf19c940dd218f6c367e4ff3e1adc3dad5974fd7dd769a9b6f22d76f71f753d7e1ab8346853bb18645bc6d482f49d45831a10cd854ab89f2db21b2d6f3804d6d6b7"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) [ 1214.279520][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2/input1023 [ 1214.321501][T21093] Node 0 active_anon:2348kB inactive_anon:655448kB active_file:17940kB inactive_file:330944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111596kB dirty:116kB writeback:0kB shmem:5800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 260096kB writeback_tmp:0kB kernel_stack:58000kB pagetables:4644kB all_unreclaimable? no [ 1214.405043][ T922] rc_core: IR keymap rc-hauppauge not found [ 1214.411705][ T922] Registered IR keymap rc-empty [ 1214.423019][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1214.437803][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1214.464954][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1214.471995][T21093] Node 1 active_anon:4kB inactive_anon:724kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1214.481465][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1214.518607][T21093] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.551524][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1214.561761][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1214.569634][T21093] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 1214.569703][T21093] Node 0 DMA32 free:197992kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2356kB inactive_anon:655376kB active_file:17940kB inactive_file:330944kB unevictable:1536kB writepending:116kB present:3129332kB managed:2705604kB mlocked:0kB bounce:0kB free_pcp:28168kB local_pcp:17520kB free_cma:0kB [ 1214.569766][T21093] lowmem_reserve[]: 0 0 1 1 1 [ 1214.569824][T21093] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.569881][T21093] lowmem_reserve[]: 0 0 0 0 0 [ 1214.569939][T21093] Node 1 Normal free:3946584kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:2112kB local_pcp:2112kB free_cma:0kB [ 1214.570009][T21093] lowmem_reserve[]: 0 0 0 0 0 [ 1214.570068][T21093] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1214.570292][T21093] Node 0 DMA32: 26*4kB (UME) 2*8kB (E) 1*16kB (U) 1*32kB (U) 3*64kB (UME) 2*128kB (UE) 1*256kB (E) 3*512kB (ME) 3*1024kB (UME) 4*2048kB (UM) 45*4096kB (M) = 197992kB [ 1214.577619][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1214.578348][ T922] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3 [ 1214.579359][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3/input1024 [ 1214.680336][T21093] Node 0 12:37:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8848}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1214.709420][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1214.777487][T21093] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.793302][T21093] Node 1 Normal: 62*4kB (UM) 18*8kB (UE) 21*16kB [ 1214.794722][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1214.808555][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1214.822336][T21093] (UME) 154*32kB (UE) 53*64kB (UE) 14*128kB (UME) 10*256kB (UME) 6*512kB (UE) 0*1024kB 1*2048kB (E) 959*4096kB (M) = 3946584kB [ 1214.830443][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1214.841794][T21093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.846758][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1214.855809][T21093] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.855832][T21093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.855851][T21093] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.855870][T21093] 13991 total pagecache pages [ 1214.855881][T21093] 0 pages in swap cache [ 1214.855890][T21093] Swap cache stats: add 0, delete 0, find 0/0 [ 1214.855905][T21093] Free swap = 0kB [ 1214.855915][T21093] Total swap = 0kB 12:37:44 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'wlan1\x00', {}, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) 12:37:44 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1214.855926][T21093] 2097051 pages RAM [ 1214.855936][T21093] 0 pages HighMem/MovableOnly [ 1214.855946][T21093] 387049 pages reserved [ 1214.855956][T21093] 0 pages cma reserved [ 1214.856370][T21093] pty pty25: ldisc open failed (-12), clearing slot 25 [ 1215.024757][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.032243][T21117] 8021q: adding VLAN 0 to HW filter on device bond1194 [ 1215.055215][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.074995][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.081698][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.094942][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.096641][T21117] bond0: (slave bond1194): Enslaving as an active interface with an up link [ 1215.125400][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.134931][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.142533][T21128] device bridge1258 entered promiscuous mode [ 1215.155319][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.172815][T21128] bond1194: (slave vlan1005): Enslaving as an active interface with an up link [ 1215.174836][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.205017][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.211738][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 12:37:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9a03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1215.220829][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.255243][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.265357][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.272596][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1215.285249][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.295021][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.305025][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.324907][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.335271][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.354968][T18122] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1215.355124][ T136] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1215.361698][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1215.387590][T18122] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1215.397208][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1215.407862][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1215.417261][ T32] usb 3-1: device descriptor read/64, error -71 [ 1215.425709][T18122] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.435771][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.449051][T18122] usb 2-1: USB disconnect, device number 4 [ 1215.460618][ T922] usb 1-1: USB disconnect, device number 120 [ 1215.469258][ T3721] mceusb 4-1:0.0: Registered ꤘ詳ꀎ병獴Ԯ⥹࢟ꑗ灋䛝㎾낶⁤౅萂呾Ӑ䯗 with mce emulator interface version 1 [ 1215.487037][ T3721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.515090][ T3721] usb 4-1: USB disconnect, device number 78 12:37:45 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x503040, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffff61e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000020c0)={'#! ', './file0', [{0x20, '--\x96(^@]'}], 0xa, "dfffe949c4b720bf2a086059567962d3b2f1592c18b192f47dc4ce292f60b894d008d536bf9c3a8a0e299fea8b8515e55d8a31858d619297da764bfd06a148eca23991184ab0998c31e73f437589fa0d1988ec63cef4ae15d3181d20566d2585c6c34cf8ec0f57e33f89aea1ba3e1df073bb341b9ce2ddf2fec8bc92"}, 0x8f) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d8fb0400000063030000"], 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) [ 1215.603872][T21130] 8021q: adding VLAN 0 to HW filter on device bond1195 [ 1215.657558][ T136] usb 5-1: Using ep0 maxpacket: 16 [ 1215.704927][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1215.719482][T21130] bond0: (slave bond1195): Enslaving as an active interface with an up link [ 1215.776582][ T136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.802132][ T136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1215.822658][ T136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1215.836756][ T136] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1215.848338][ T136] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1215.924845][ T922] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1215.945030][ T32] usb 3-1: Using ep0 maxpacket: 16 12:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9a0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1215.971021][ T136] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1215.981248][ T136] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1215.994765][ T3721] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1216.003125][ T136] usb 5-1: Manufacturer: syz [ 1216.017607][ T136] usb 5-1: config 0 descriptor?? [ 1216.052512][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1216.065173][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.081819][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.085194][ T3688] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1216.095083][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1216.132545][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1216.166248][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.180805][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1216.205455][T21139] 8021q: adding VLAN 0 to HW filter on device bond1196 [ 1216.227769][T21139] bond0: (slave bond1196): Enslaving as an active interface with an up link [ 1216.247628][ T3721] usb 4-1: Using ep0 maxpacket: 16 [ 1216.275444][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.286844][ T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1216.300971][ T32] usb 3-1: Manufacturer: syz [ 1216.307846][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.331124][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.360166][ T32] usb 3-1: config 0 descriptor?? [ 1216.367147][ T3721] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 1216.379489][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1216.384704][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 1216.391379][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.397751][ T136] rc_core: IR keymap rc-hauppauge not found [ 1216.409048][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1216.424863][ T136] Registered IR keymap rc-empty [ 1216.429750][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 5643, setting to 1024 [ 1216.437471][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.443181][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.467491][ T3721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1216.479151][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.496342][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:37:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1216.549177][ T136] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1216.566986][ T3688] usb 2-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1216.574906][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.583957][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.588224][ T3721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.606681][ T136] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1025 [ 1216.626232][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1216.626261][ T922] usb 1-1: Manufacturer: syz [ 1216.627476][ T3721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1216.651924][ T922] usb 1-1: config 0 descriptor?? [ 1216.658952][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1216.663316][ T3721] usb 4-1: Manufacturer: syz [ 1216.677030][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 34312, setting to 1024 [ 1216.694763][ T3721] usb 4-1: config 0 descriptor?? [ 1216.745489][ T3688] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1216.752467][T21144] 8021q: adding VLAN 0 to HW filter on device bond1197 [ 1216.780452][T21144] bond0: (slave bond1197): Enslaving as an active interface with an up link [ 1216.789628][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.817689][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.831271][T21148] device bridge1261 entered promiscuous mode [ 1216.835443][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.885385][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.893352][T21148] bond1197: (slave vlan1006): Enslaving as an active interface with an up link [ 1216.920092][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.934793][ T32] rc_core: IR keymap rc-hauppauge not found [ 1216.941321][ T32] Registered IR keymap rc-empty [ 1216.956993][ T3688] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.959385][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1216.975224][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:37:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1216.990200][ T3688] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1217.011008][ T3688] usb 2-1: Manufacturer: syz [ 1217.044991][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.045513][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.067629][ T3688] usb 2-1: config 0 descriptor?? [ 1217.076008][ T32] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1217.108454][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1217.110756][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1026 [ 1217.121770][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.144637][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1217.153167][ T3721] Registered IR keymap rc-empty [ 1217.175846][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.195071][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.205493][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.221029][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.245952][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.255218][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.263007][T21152] 8021q: adding VLAN 0 to HW filter on device bond1198 [ 1217.272296][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.285346][ T3721] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 1217.299588][ T136] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1217.305068][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.315387][ T136] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1217.356136][T21152] bond0: (slave bond1198): Enslaving as an active interface with an up link [ 1217.372752][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input1027 [ 1217.385777][T21152] device bridge1262 entered promiscuous mode [ 1217.444147][T21152] bond1198: (slave vlan1007): Enslaving as an active interface with an up link [ 1217.445012][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.486144][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.505104][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1217.535130][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.545314][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.576710][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.585678][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.625081][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.637007][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1217.645839][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.655250][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.684994][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.692275][ T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.724878][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.746526][ T32] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1217.764893][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.775130][ T32] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1217.800386][T21163] 8021q: adding VLAN 0 to HW filter on device bond1199 [ 1217.806516][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.822462][T21163] bond0: (slave bond1199): Enslaving as an active interface with an up link [ 1217.905187][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 12:37:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1217.945368][ T3721] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1217.994682][ T3721] mceusb 4-1:0.0: Registered ꤘ詳ꀎ병獴Ԯ⥹࢟ꑗ灋䛝㎾낶⁤౅萂呾Ӑ䯗 with mce emulator interface version 1 [ 1218.033027][ T3721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:37:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1218.215197][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1218.269325][ T922] rc_core: IR keymap rc-hauppauge not found [ 1218.286968][ T922] Registered IR keymap rc-empty [ 1218.325381][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.357056][ T32] usb 5-1: USB disconnect, device number 44 [ 1218.375132][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.401832][T21170] 8021q: adding VLAN 0 to HW filter on device bond1200 [ 1218.419940][ T922] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3 [ 1218.429399][T21170] bond0: (slave bond1200): Enslaving as an active interface with an up link [ 1218.491656][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3/input1028 [ 1218.513229][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.544392][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.574956][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.605596][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.647209][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.652176][ T136] usb 3-1: USB disconnect, device number 21 [ 1218.695413][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.755132][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.794718][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.824789][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1218.854617][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:48 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x60, 0x10, 0xf3, {0xf3, 0xf, "5141c7c19af573fbb9f9c135b9ed24b2c0fe310bfc2fc2908550f741fe173329b2c352e158155f7522051a5e3d1a81fa367dce58057f13e26e04247ac993f5bbba82106a59b246b7f85066368e9b2f978ed0fa611f5e54c5101b0d0c1d15df01f6ae93d112f71543116ebcd7913c1c96130c7e8012d7d0eac9e94bb3b5cfd71711761070c7ac4cfe98197392f400c5c83b6f3d2f7ee9dbe85aaf32816dfbae6b9ba14cd923b17eec607233c36be2a0d73d134103f2d51afcc7caedb95d009046fd0c4fc835f97dd60cd6d009bcd47e3c4d72e50205246ca95c6e18bc2bf6e76a3037e79f9d59533292a9b3a8421c3d46d2"}}, &(0x7f0000000280)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "e8bad153e375f992640d9d68bcf4e7615a2b1f22964b1906e2247884e197fb4a38db67c5479c6d95f95384c4573ce4bf1c3e76e9da1725bfa1499d3f3c8b9fd2a8a4a3d9ff7d8acd43b2dfe928844dd62257cf172298f129a52805e0e1e22de99f3f9d0841a6cf71765a4d3707bb2b5e1e51fb9ae1264aaa11"}}, &(0x7f0000000340)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x76}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x90, 0x88, 0x3e19}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x3, 0x1}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x4, 0x2, "860c7380", "862a1ace"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0xc0, 0x5, 0x0, 0x8000, 0x400}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x60, "ccfd3cfe3b139a027d6872bfb38812f1f7dd9763b7df0bf14bf2038f95ec9aeb5145cb61f108ec2adfd74cc72add69de8a6eb987c3f9d4b7e1dcafc9bba67447a69f3ff66acca27cd8a0e559385f3efb93f32337587e4304eaeeefa4a2f2dbe0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000700)={0x40, 0xb, 0x2, "cf4c"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "da5d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2a}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x80}}) 12:37:48 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) 12:37:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:48 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) 12:37:48 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x30b, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0xe16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1218.875348][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1218.876741][ T3721] usb 4-1: USB disconnect, device number 79 [ 1218.881284][ T3688] Registered IR keymap rc-empty [ 1218.908913][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1218.938373][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1218.967077][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1218.986657][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.046469][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.055065][ T922] usb 1-1: USB disconnect, device number 121 [ 1219.075804][ T3688] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1219.116252][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input1029 [ 1219.225439][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.253372][T21189] 8021q: adding VLAN 0 to HW filter on device bond1201 [ 1219.278615][T21189] bond0: (slave bond1201): Enslaving as an active interface with an up link [ 1219.289120][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.297421][ T3689] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1219.306481][ T136] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1219.372796][T21177] device bridge1265 entered promiscuous mode [ 1219.385703][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.409040][T21177] bond1201: (slave vlan1008): Enslaving as an active interface with an up link 12:37:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1219.446821][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.496000][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.514996][ T3721] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1219.516483][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.585081][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 1219.590350][ T136] usb 5-1: Using ep0 maxpacket: 16 [ 1219.594954][ T922] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1219.597764][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.628842][T21194] 8021q: adding VLAN 0 to HW filter on device bond1202 [ 1219.662157][T21194] bond0: (slave bond1202): Enslaving as an active interface with an up link [ 1219.685221][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.735879][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.742700][ T136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.756081][ T3689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.767757][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.774970][ T3721] usb 4-1: Using ep0 maxpacket: 16 [ 1219.780352][ T136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.797603][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1219.809192][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1219.820359][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 12:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1219.835090][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1219.836775][ T136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1219.852423][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.868368][ T136] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1219.892049][ T136] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.904748][ T3721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.908120][ T3688] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1219.923371][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.941823][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.956337][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.957724][ T3688] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1219.978290][ T3689] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1219.978300][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.978329][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1219.988846][ T3689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1220.008116][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1220.020394][ T3688] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1220.037338][ T3721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1220.044718][ T136] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1220.044747][ T136] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1220.044769][ T136] usb 5-1: Manufacturer: syz [ 1220.048362][ T136] usb 5-1: config 0 descriptor?? [ 1220.078962][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1220.083572][ T3689] usb 3-1: Manufacturer: syz [ 1220.104927][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.128164][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.141123][ T3688] usb 2-1: USB disconnect, device number 5 [ 1220.213370][ T3689] usb 3-1: config 0 descriptor?? [ 1220.225225][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1220.234582][ T3721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1220.247914][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1220.257690][ T3721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1220.272422][T21196] 8021q: adding VLAN 0 to HW filter on device bond1203 [ 1220.280761][ T922] usb 1-1: Manufacturer: syz [ 1220.287304][ T3721] usb 4-1: Manufacturer: syz [ 1220.296479][ T922] usb 1-1: config 0 descriptor?? [ 1220.309137][ T3721] usb 4-1: config 0 descriptor?? [ 1220.343261][T21196] bond0: (slave bond1203): Enslaving as an active interface with an up link 12:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1220.512216][ T136] rc_core: IR keymap rc-hauppauge not found [ 1220.535543][ T136] Registered IR keymap rc-empty [ 1220.540526][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1220.596397][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1220.602340][ T3689] Registered IR keymap rc-empty [ 1220.610354][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1220.620047][ T3688] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1220.637912][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1220.655732][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1220.656150][ T136] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1220.687621][ T25] kauditd_printk_skb: 63 callbacks suppressed [ 1220.687636][ T25] audit: type=1804 audit(1640176670.142:2762): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536302F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1220.688306][ T136] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1030 [ 1220.746915][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1220.780096][ T25] audit: type=1804 audit(1640176670.232:2763): pid=21188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339322F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1220.800395][T21207] 8021q: adding VLAN 0 to HW filter on device bond1204 [ 1220.812814][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1220.825013][ T3721] Registered IR keymap rc-empty [ 1220.829935][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1220.835661][ T3689] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1220.858358][T21207] bond0: (slave bond1204): Enslaving as an active interface with an up link [ 1220.859132][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1220.868535][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1220.895750][ T3721] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 1220.908722][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1031 [ 1220.927353][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 1220.933090][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1220.933119][T21204] device bridge1268 entered promiscuous mode [ 1220.959071][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input1032 [ 1220.976077][ T25] audit: type=1804 audit(1640176670.432:2764): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723836373934393137312F73797A6B616C6C65722E5045574771772F3730352F48C7C060 dev="sda1" ino=1163 res=1 errno=0 [ 1220.977422][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.019441][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe0f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1221.020525][T21204] bond1204: (slave vlan1009): Enslaving as an active interface with an up link [ 1221.053235][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.069988][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.097347][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.104907][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.115759][ T3688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.133138][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.134866][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.149645][T21213] UDC core: couldn't find an available UDC or it's busy: -16 [ 1221.150817][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1221.170130][T21213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1221.183200][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1221.185240][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.195292][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.216541][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.226425][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1221.237027][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.257263][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.264546][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.265267][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.293090][ T3688] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1221.304929][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.313188][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.327128][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.345643][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.364208][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1221.379556][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.387179][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.396844][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.415064][ T3721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1221.423355][T21214] 8021q: adding VLAN 0 to HW filter on device bond1205 [ 1221.448360][ T3721] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1221.455370][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.458253][T21214] bond0: (slave bond1205): Enslaving as an active interface with an up link [ 1221.467896][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.481634][ T3721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1221.506667][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.516457][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.528210][ T3721] usb 4-1: USB disconnect, device number 80 [ 1221.547021][ T3688] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 12:37:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1221.559999][ T3689] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1221.572229][ T136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1221.581359][ T3688] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1221.592215][ T3689] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1221.602966][ T3688] usb 2-1: Manufacturer: syz [ 1221.626515][ T136] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1221.639482][ T3688] usb 2-1: config 0 descriptor?? [ 1221.659744][ T3689] usb 3-1: USB disconnect, device number 22 [ 1221.677578][ T136] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1221.845127][ T922] rc_core: IR keymap rc-hauppauge not found [ 1221.851236][ T922] Registered IR keymap rc-empty [ 1221.878989][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:51 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) (async) [ 1221.945257][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:51 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x60, 0x10, 0xf3, {0xf3, 0xf, "5141c7c19af573fbb9f9c135b9ed24b2c0fe310bfc2fc2908550f741fe173329b2c352e158155f7522051a5e3d1a81fa367dce58057f13e26e04247ac993f5bbba82106a59b246b7f85066368e9b2f978ed0fa611f5e54c5101b0d0c1d15df01f6ae93d112f71543116ebcd7913c1c96130c7e8012d7d0eac9e94bb3b5cfd71711761070c7ac4cfe98197392f400c5c83b6f3d2f7ee9dbe85aaf32816dfbae6b9ba14cd923b17eec607233c36be2a0d73d134103f2d51afcc7caedb95d009046fd0c4fc835f97dd60cd6d009bcd47e3c4d72e50205246ca95c6e18bc2bf6e76a3037e79f9d59533292a9b3a8421c3d46d2"}}, &(0x7f0000000280)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "e8bad153e375f992640d9d68bcf4e7615a2b1f22964b1906e2247884e197fb4a38db67c5479c6d95f95384c4573ce4bf1c3e76e9da1725bfa1499d3f3c8b9fd2a8a4a3d9ff7d8acd43b2dfe928844dd62257cf172298f129a52805e0e1e22de99f3f9d0841a6cf71765a4d3707bb2b5e1e51fb9ae1264aaa11"}}, &(0x7f0000000340)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x76}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x90, 0x88, 0x3e19}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x3, 0x1}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x4, 0x2, "860c7380", "862a1ace"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0xc0, 0x5, 0x0, 0x8000, 0x400}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x60, "ccfd3cfe3b139a027d6872bfb38812f1f7dd9763b7df0bf14bf2038f95ec9aeb5145cb61f108ec2adfd74cc72add69de8a6eb987c3f9d4b7e1dcafc9bba67447a69f3ff66acca27cd8a0e559385f3efb93f32337587e4304eaeeefa4a2f2dbe0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000700)={0x40, 0xb, 0x2, "cf4c"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "da5d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2a}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x80}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x60, 0x10, 0xf3, {0xf3, 0xf, "5141c7c19af573fbb9f9c135b9ed24b2c0fe310bfc2fc2908550f741fe173329b2c352e158155f7522051a5e3d1a81fa367dce58057f13e26e04247ac993f5bbba82106a59b246b7f85066368e9b2f978ed0fa611f5e54c5101b0d0c1d15df01f6ae93d112f71543116ebcd7913c1c96130c7e8012d7d0eac9e94bb3b5cfd71711761070c7ac4cfe98197392f400c5c83b6f3d2f7ee9dbe85aaf32816dfbae6b9ba14cd923b17eec607233c36be2a0d73d134103f2d51afcc7caedb95d009046fd0c4fc835f97dd60cd6d009bcd47e3c4d72e50205246ca95c6e18bc2bf6e76a3037e79f9d59533292a9b3a8421c3d46d2"}}, &(0x7f0000000280)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "e8bad153e375f992640d9d68bcf4e7615a2b1f22964b1906e2247884e197fb4a38db67c5479c6d95f95384c4573ce4bf1c3e76e9da1725bfa1499d3f3c8b9fd2a8a4a3d9ff7d8acd43b2dfe928844dd62257cf172298f129a52805e0e1e22de99f3f9d0841a6cf71765a4d3707bb2b5e1e51fb9ae1264aaa11"}}, &(0x7f0000000340)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x76}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x90, 0x88, 0x3e19}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x3, 0x1}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x4, 0x2, "860c7380", "862a1ace"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0xc0, 0x5, 0x0, 0x8000, 0x400}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x60, "ccfd3cfe3b139a027d6872bfb38812f1f7dd9763b7df0bf14bf2038f95ec9aeb5145cb61f108ec2adfd74cc72add69de8a6eb987c3f9d4b7e1dcafc9bba67447a69f3ff66acca27cd8a0e559385f3efb93f32337587e4304eaeeefa4a2f2dbe0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000700)={0x40, 0xb, 0x2, "cf4c"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "da5d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2a}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x80}}) (async) 12:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1222.005532][ T922] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 12:37:51 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) 12:37:51 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x30b, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0xe16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1222.065278][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input1033 [ 1222.174998][T18122] usb 5-1: USB disconnect, device number 45 [ 1222.188615][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.216303][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.255003][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.287584][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.324836][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.355883][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.375184][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1222.381429][ T3688] Registered IR keymap rc-empty [ 1222.390519][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.394852][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.416501][ T3689] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1222.425993][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.445129][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.453086][T21238] 8021q: adding VLAN 0 to HW filter on device bond1206 [ 1222.462577][ T3688] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1222.475657][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.491675][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input1034 [ 1222.508476][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.517107][T14970] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1222.530257][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.539516][T21238] bond0: (slave bond1206): Enslaving as an active interface with an up link [ 1222.564930][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.576906][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.609025][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1222.618238][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1222.625543][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.639987][ T922] usb 1-1: USB disconnect, device number 122 [ 1222.687000][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.693575][T18122] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1222.716645][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 1222.725509][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1222.774643][T14970] usb 4-1: Using ep0 maxpacket: 16 [ 1222.780064][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.815399][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.821021][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.847045][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.856206][ T3689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.868631][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.881621][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1222.893203][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1222.895226][T14970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.906718][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.922707][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.943380][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.955028][ T3688] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1222.965845][T18122] usb 5-1: Using ep0 maxpacket: 16 [ 1222.995049][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1223.007749][T14970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1223.019902][ T922] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1223.026126][ T3688] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1223.030018][T14970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.039167][ T3689] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1223.069356][T21241] device vlan1010 entered promiscuous mode [ 1223.074648][ T3688] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1223.076889][T21241] device bridge1271 entered promiscuous mode [ 1223.086917][ T3689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1223.095458][T18122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.118517][ T3688] usb 2-1: USB disconnect, device number 6 [ 1223.125015][T14970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1223.125045][T14970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1223.125067][T14970] usb 4-1: Manufacturer: syz [ 1223.127507][T14970] usb 4-1: config 0 descriptor?? [ 1223.153372][ T3689] usb 3-1: Manufacturer: syz [ 1223.159054][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.178355][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1223.190124][T18122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1223.196086][ T3689] usb 3-1: config 0 descriptor?? [ 1223.202010][T18122] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.242574][T21241] device bridge1271 left promiscuous mode [ 1223.274943][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1223.304978][T18122] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1223.326193][T18122] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1223.348112][T18122] usb 5-1: Manufacturer: syz [ 1223.357628][T21244] 8021q: adding VLAN 0 to HW filter on device bond1207 [ 1223.371169][T18122] usb 5-1: config 0 descriptor?? [ 1223.395021][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.412846][T21244] bond0: (slave bond1207): Enslaving as an active interface with an up link [ 1223.417233][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.438069][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1223.449746][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 12:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1223.470896][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.561860][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1223.565197][T14970] rc_core: IR keymap rc-hauppauge not found [ 1223.585110][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1223.595960][T14970] Registered IR keymap rc-empty [ 1223.601161][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1223.610832][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1223.622731][ T922] usb 1-1: Manufacturer: syz [ 1223.631881][ T922] usb 1-1: config 0 descriptor?? [ 1223.650386][ T25] audit: type=1804 audit(1640176673.102:2765): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339332F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1223.683263][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1223.687396][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1223.697305][ T3688] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1223.710520][ T3689] Registered IR keymap rc-empty [ 1223.715516][T14970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1223.717548][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1035 [ 1223.731018][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1223.736817][ T25] audit: type=1804 audit(1640176673.162:2766): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536312F48C7C060 dev="sda1" ino=1161 res=1 errno=0 [ 1223.790640][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1223.816768][T21252] 8021q: adding VLAN 0 to HW filter on device bond1208 [ 1223.825137][T18122] rc_core: IR keymap rc-hauppauge not found [ 1223.825156][T18122] Registered IR keymap rc-empty [ 1223.825240][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.847451][ T3689] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1223.854974][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.878825][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1036 [ 1223.882614][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1223.905872][T21252] bond0: (slave bond1208): Enslaving as an active interface with an up link [ 1223.942059][T21253] device vlan1010 entered promiscuous mode [ 1223.945657][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1223.949656][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1223.965919][T18122] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 1223.975863][T21253] device bridge1272 entered promiscuous mode [ 1223.982144][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input1037 [ 1224.004715][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.006864][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.012118][T21256] UDC core: couldn't find an available UDC or it's busy: -16 [ 1224.021674][T21253] device bridge1272 left promiscuous mode [ 1224.041717][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.052414][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.061626][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 1224.070524][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.076990][T21256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1224.086873][T21220] syz-executor.2: vmalloc error: size 12288, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1224.097358][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.108027][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.111953][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.127885][T21220] CPU: 0 PID: 21220 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 1224.127912][T21220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1224.127924][T21220] Call Trace: [ 1224.127933][T21220] [ 1224.127944][T21220] dump_stack_lvl+0x201/0x2d8 [ 1224.127978][T21220] ? show_regs_print_info+0x12/0x12 [ 1224.127999][T21220] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1224.128050][T21220] warn_alloc+0x221/0x370 [ 1224.128085][T21220] ? zone_watermark_ok_safe+0x280/0x280 [ 1224.128131][T21220] ? alloc_pages+0x44a/0x560 [ 1224.128164][T21220] __vmalloc_node_range+0x7c5/0x960 [ 1224.128213][T21220] dup_task_struct+0x65d/0x9a0 [ 1224.128236][T21220] ? copy_process+0x64d/0x5ca0 [ 1224.128258][T21220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1224.128281][T21220] ? lockdep_hardirqs_on+0x95/0x140 [ 1224.128308][T21220] copy_process+0x64d/0x5ca0 [ 1224.128351][T21220] ? _raw_spin_unlock+0x24/0x40 [ 1224.128370][T21220] ? do_anonymous_page+0xe26/0x14f0 [ 1224.128409][T21220] ? perf_trace_run_bpf_submit+0xf6/0x1d0 [ 1224.128447][T21220] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 1224.128499][T21220] kernel_clone+0x22a/0x7e0 [ 1224.128531][T21220] ? create_io_thread+0x1d0/0x1d0 [ 1224.128572][T21220] ? __context_tracking_exit+0x7a/0xd0 [ 1224.128606][T21220] __x64_sys_clone+0x245/0x2b0 [ 1224.128633][T21220] ? __do_sys_vfork+0x130/0x130 [ 1224.128651][T21220] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1224.128702][T21220] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1224.128725][T21220] ? lockdep_hardirqs_on+0x95/0x140 [ 1224.128748][T21220] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1224.128776][T21220] do_syscall_64+0x44/0xd0 [ 1224.128806][T21220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1224.128826][T21220] RIP: 0033:0x7f0bbe2cb2c1 [ 1224.128846][T21220] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1224.128863][T21220] RSP: 002b:00007fffc6ee0298 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1224.128888][T21220] RAX: ffffffffffffffda RBX: 00007f0bbcb37700 RCX: 00007f0bbe2cb2c1 [ 1224.128904][T21220] RDX: 00007f0bbcb379d0 RSI: 00007f0bbcb372f0 RDI: 00000000003d0f00 [ 1224.128919][T21220] RBP: 00007fffc6ee04e0 R08: 00007f0bbcb37700 R09: 00007f0bbcb37700 [ 1224.128934][T21220] R10: 00007f0bbcb379d0 R11: 0000000000000206 R12: 00007fffc6ee034e [ 1224.128949][T21220] R13: 00007fffc6ee034f R14: 00007f0bbcb37300 R15: 0000000000022000 [ 1224.128994][T21220] [ 1224.129369][T21220] Mem-Info: [ 1224.129382][T21220] active_anon:556 inactive_anon:169177 isolated_anon:0 [ 1224.129382][T21220] active_file:4510 inactive_file:82736 isolated_file:0 [ 1224.129382][T21220] unevictable:768 dirty:34 writeback:0 [ 1224.129382][T21220] slab_reclaimable:21930 slab_unreclaimable:269244 [ 1224.129382][T21220] mapped:27892 shmem:1981 pagetables:1213 bounce:0 [ 1224.129382][T21220] kernel_misc_reclaimable:0 [ 1224.129382][T21220] free:1036860 free_pcp:3760 free_cma:0 [ 1224.129433][T21220] Node 0 active_anon:2220kB inactive_anon:675984kB active_file:17964kB inactive_file:330944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111568kB dirty:132kB writeback:0kB shmem:5660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 280576kB writeback_tmp:0kB kernel_stack:58776kB pagetables:4848kB all_unreclaimable? no [ 1224.129484][T21220] Node 1 active_anon:4kB inactive_anon:724kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1224.129531][T21220] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.129589][T21220] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 1224.129642][T21220] Node 0 DMA32 free:185496kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2220kB inactive_anon:675984kB active_file:17964kB inactive_file:330944kB unevictable:1536kB writepending:132kB present:3129332kB managed:2705604kB mlocked:0kB bounce:0kB free_pcp:12928kB local_pcp:6188kB free_cma:0kB [ 1224.129708][T21220] lowmem_reserve[]: 0 0 1 1 1 [ 1224.129759][T21220] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.129814][T21220] lowmem_reserve[]: 0 0 0 0 0 [ 1224.129865][T21220] Node 1 Normal free:3946584kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:2112kB local_pcp:2112kB free_cma:0kB [ 1224.129923][T21220] lowmem_reserve[]: 0 0 0 0 0 [ 1224.129973][T21220] Node 0 DMA: [ 1224.184695][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.188665][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.191750][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.198756][T21220] 0*4kB 12:37:54 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x60, 0x10, 0xf3, {0xf3, 0xf, "5141c7c19af573fbb9f9c135b9ed24b2c0fe310bfc2fc2908550f741fe173329b2c352e158155f7522051a5e3d1a81fa367dce58057f13e26e04247ac993f5bbba82106a59b246b7f85066368e9b2f978ed0fa611f5e54c5101b0d0c1d15df01f6ae93d112f71543116ebcd7913c1c96130c7e8012d7d0eac9e94bb3b5cfd71711761070c7ac4cfe98197392f400c5c83b6f3d2f7ee9dbe85aaf32816dfbae6b9ba14cd923b17eec607233c36be2a0d73d134103f2d51afcc7caedb95d009046fd0c4fc835f97dd60cd6d009bcd47e3c4d72e50205246ca95c6e18bc2bf6e76a3037e79f9d59533292a9b3a8421c3d46d2"}}, &(0x7f0000000280)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "e8bad153e375f992640d9d68bcf4e7615a2b1f22964b1906e2247884e197fb4a38db67c5479c6d95f95384c4573ce4bf1c3e76e9da1725bfa1499d3f3c8b9fd2a8a4a3d9ff7d8acd43b2dfe928844dd62257cf172298f129a52805e0e1e22de99f3f9d0841a6cf71765a4d3707bb2b5e1e51fb9ae1264aaa11"}}, &(0x7f0000000340)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x76}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x90, 0x88, 0x3e19}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x3, 0x1}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x4, 0x2, "860c7380", "862a1ace"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0xc0, 0x5, 0x0, 0x8000, 0x400}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x60, "ccfd3cfe3b139a027d6872bfb38812f1f7dd9763b7df0bf14bf2038f95ec9aeb5145cb61f108ec2adfd74cc72add69de8a6eb987c3f9d4b7e1dcafc9bba67447a69f3ff66acca27cd8a0e559385f3efb93f32337587e4304eaeeefa4a2f2dbe0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000700)={0x40, 0xb, 0x2, "cf4c"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "da5d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2a}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x80}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x60, 0x10, 0xf3, {0xf3, 0xf, "5141c7c19af573fbb9f9c135b9ed24b2c0fe310bfc2fc2908550f741fe173329b2c352e158155f7522051a5e3d1a81fa367dce58057f13e26e04247ac993f5bbba82106a59b246b7f85066368e9b2f978ed0fa611f5e54c5101b0d0c1d15df01f6ae93d112f71543116ebcd7913c1c96130c7e8012d7d0eac9e94bb3b5cfd71711761070c7ac4cfe98197392f400c5c83b6f3d2f7ee9dbe85aaf32816dfbae6b9ba14cd923b17eec607233c36be2a0d73d134103f2d51afcc7caedb95d009046fd0c4fc835f97dd60cd6d009bcd47e3c4d72e50205246ca95c6e18bc2bf6e76a3037e79f9d59533292a9b3a8421c3d46d2"}}, &(0x7f0000000280)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "e8bad153e375f992640d9d68bcf4e7615a2b1f22964b1906e2247884e197fb4a38db67c5479c6d95f95384c4573ce4bf1c3e76e9da1725bfa1499d3f3c8b9fd2a8a4a3d9ff7d8acd43b2dfe928844dd62257cf172298f129a52805e0e1e22de99f3f9d0841a6cf71765a4d3707bb2b5e1e51fb9ae1264aaa11"}}, &(0x7f0000000340)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x76}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x90, 0x88, 0x3e19}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x3, 0x1}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x4, 0x2, "860c7380", "862a1ace"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0xc0, 0x5, 0x0, 0x8000, 0x400}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x60, "ccfd3cfe3b139a027d6872bfb38812f1f7dd9763b7df0bf14bf2038f95ec9aeb5145cb61f108ec2adfd74cc72add69de8a6eb987c3f9d4b7e1dcafc9bba67447a69f3ff66acca27cd8a0e559385f3efb93f32337587e4304eaeeefa4a2f2dbe0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000700)={0x40, 0xb, 0x2, "cf4c"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "da5d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2a}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x80}}) (async) [ 1224.207559][ T25] audit: type=1804 audit(1640176673.652:2767): pid=21265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D746573746469723836373934393137312F73797A6B616C6C65722E5045574771772F3730362F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1224.210090][T21220] 0*8kB [ 1224.235474][ T25] audit: type=1804 audit(1640176673.682:2768): pid=21256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339332F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1224.245560][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.248387][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.261156][ T25] audit: type=1804 audit(1640176673.712:2769): pid=21256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339332F48C7C060 dev="sda1" ino=1181 res=1 errno=0 [ 1224.262809][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.289402][ T3688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.312233][T21220] 0*16kB [ 1224.316142][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.320630][T21220] 0*32kB [ 1224.346264][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1224.357073][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.362625][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1224.367301][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.394755][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.403539][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1224.453109][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.489126][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.523849][T21220] 0*64kB [ 1224.744731][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.808873][ T3688] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1224.809215][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1224.816639][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.832200][T21220] 0*128kB [ 1224.915282][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:37:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1224.926219][T14970] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1224.957810][ T3688] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1224.967773][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1224.968501][T14970] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1224.995575][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1225.025638][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1225.046040][T18122] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1225.060100][ T3688] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1225.065675][T14970] usb 4-1: USB disconnect, device number 81 [ 1225.083260][T18122] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1225.106934][ T3689] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1225.131353][ T3689] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1225.152882][ T3688] usb 2-1: Manufacturer: syz [ 1225.183235][T21220] 0*256kB [ 1225.194861][ T3688] usb 2-1: config 0 descriptor?? [ 1225.206588][T21220] 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB 12:37:54 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) [ 1225.261850][T21277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.271163][T18122] usb 5-1: USB disconnect, device number 46 [ 1225.297297][T21220] Node 0 DMA32: 30*4kB (UME) 5*8kB (UME) 6*16kB (UME) 10*32kB (UE) 3*64kB (UME) 1*128kB (E) 1*256kB (E) 4*512kB (UME) 2*1024kB (ME) 4*2048kB (M) 43*4096kB (M) = 189568kB 12:37:54 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x30b, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0xe16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) (async, rerun: 32) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1225.354877][ T922] rc_core: IR keymap rc-hauppauge not found [ 1225.360808][ T922] Registered IR keymap rc-empty [ 1225.378077][ T3688] usb 2-1: can't set config #0, error -71 [ 1225.387217][ T3688] usb 2-1: USB disconnect, device number 7 [ 1225.436510][T21220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1225.442123][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.448488][T21220] Node 1 Normal: 62*4kB (UM) 18*8kB (UE) 21*16kB (UME) 154*32kB (UE) 53*64kB (UE) 14*128kB (UME) 10*256kB (UME) 6*512kB (UE) 0*1024kB 1*2048kB (E) 959*4096kB (M) = 3946584kB [ 1225.448709][T21220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1225.448728][T21220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1225.448746][T21220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1225.448765][T21220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1225.448782][T21220] 13964 total pagecache pages [ 1225.448792][T21220] 0 pages in swap cache 12:37:55 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) (async) [ 1225.448801][T21220] Swap cache stats: add 0, delete 0, find 0/0 [ 1225.448816][T21220] Free swap = 0kB [ 1225.448825][T21220] Total swap = 0kB [ 1225.448835][T21220] 2097051 pages RAM [ 1225.448844][T21220] 0 pages HighMem/MovableOnly [ 1225.448852][T21220] 387049 pages reserved [ 1225.448860][T21220] 0 pages cma reserved [ 1225.471890][ T3689] usb 3-1: USB disconnect, device number 23 [ 1225.545162][T14970] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1225.665302][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.666238][T21280] 8021q: adding VLAN 0 to HW filter on device bond1209 [ 1225.715805][ T922] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3 [ 1225.756107][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc3/input1038 [ 1225.796279][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.805850][T14970] usb 4-1: Using ep0 maxpacket: 16 [ 1225.812789][T21280] bond0: (slave bond1209): Enslaving as an active interface with an up link [ 1225.825130][T18122] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1225.835890][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.849316][ T25] audit: type=1804 audit(1640176675.302:2770): pid=21286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1225.885071][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.909177][T21283] device vlan1010 entered promiscuous mode [ 1225.913055][ T25] audit: type=1804 audit(1640176675.342:2771): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1225.949126][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1225.958102][ T25] audit: type=1804 audit(1640176675.352:2772): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1225.978517][T21283] device bridge1273 entered promiscuous mode [ 1225.991759][T14970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.003587][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.015326][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.028519][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.052736][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.076024][ T25] audit: type=1804 audit(1640176675.352:2773): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.092795][T21283] bond1209: (slave vlan1010): Enslaving as an active interface with an up link [ 1226.110180][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.131640][T14970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1226.145170][T14970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.162222][T18122] usb 5-1: Using ep0 maxpacket: 16 12:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3ffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1226.181059][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.211706][ T25] audit: type=1804 audit(1640176675.352:2774): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.246134][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.256460][ T25] audit: type=1804 audit(1640176675.352:2775): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.287432][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1226.303317][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1226.313213][T14970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1226.320173][ T25] audit: type=1804 audit(1640176675.352:2776): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.325302][T14970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1226.363559][T18122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.375048][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1226.403056][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1226.416287][T14970] usb 4-1: Manufacturer: syz [ 1226.421500][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.437763][ T25] audit: type=1804 audit(1640176675.352:2777): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.456723][T14970] usb 4-1: config 0 descriptor?? [ 1226.470964][ T3689] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1226.485149][ T922] usb 1-1: USB disconnect, device number 123 [ 1226.491438][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.507408][T18122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1226.537740][T18122] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.559931][ T25] audit: type=1804 audit(1640176675.362:2778): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.623195][T21293] 8021q: adding VLAN 0 to HW filter on device bond1210 [ 1226.644967][T18122] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 12:37:56 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="cb581a91aabd484c42e03ae1781f0b203bbe76f5599c9f7987b2772b3d3924bd6cded47b6667e50fc32a03053426b0daca48cd7e835dd651ab2c8d897089506305899f73500823558004a96a2d4e89df7b2b"]) [ 1226.675227][T18122] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1226.683262][T18122] usb 5-1: Manufacturer: syz [ 1226.692336][T21293] bond0: (slave bond1210): Enslaving as an active interface with an up link [ 1226.706488][ T25] audit: type=1804 audit(1640176675.362:2779): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338372F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1226.756645][T18122] usb 5-1: config 0 descriptor?? [ 1226.786771][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 1226.803388][T21296] device vlan1011 entered promiscuous mode [ 1226.811529][T21296] device bridge1274 entered promiscuous mode [ 1226.837585][T21296] device bridge1274 left promiscuous mode [ 1226.915134][ T3689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.927082][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.939966][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.944735][T14970] rc_core: IR keymap rc-hauppauge not found 12:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1226.951349][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1226.968628][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.978455][T14970] Registered IR keymap rc-empty [ 1226.988157][ T922] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1227.013389][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.031503][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1227.065154][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.072353][T10050] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1227.087338][ T3689] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1227.100095][T14970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1227.100922][ T3689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1227.125638][ T3689] usb 3-1: Manufacturer: syz [ 1227.141432][ T3689] usb 3-1: config 0 descriptor?? [ 1227.205680][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1039 [ 1227.222846][T21301] 8021q: adding VLAN 0 to HW filter on device bond1211 [ 1227.225046][T18122] rc_core: IR keymap rc-hauppauge not found [ 1227.237644][T18122] Registered IR keymap rc-empty [ 1227.242960][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.252318][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.264887][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1227.286598][T21301] bond0: (slave bond1211): Enslaving as an active interface with an up link [ 1227.305855][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.315097][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.325248][T10050] usb 2-1: Using ep0 maxpacket: 16 [ 1227.339134][T21304] device bridge1275 entered promiscuous mode [ 1227.347447][T21306] UDC core: couldn't find an available UDC or it's busy: -16 [ 1227.357990][T18122] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1227.358449][T21306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1227.372315][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.394959][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.446478][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input1040 [ 1227.459100][T21306] UDC core: couldn't find an available UDC or it's busy: -16 [ 1227.464804][T10050] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.484968][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.492434][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1227.509776][T21304] bond1211: (slave vlan1011): Enslaving as an active interface with an up link [ 1227.519152][T21306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1227.530273][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.539781][T10050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1227.556447][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1227.556804][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.562824][ T3689] Registered IR keymap rc-empty [ 1227.571493][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1227.587497][T10050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 12:37:57 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r2 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) ftruncate(r2, 0xfffffffffffffeff) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x40, 0x30, 0x25, {0x25, 0x6, "4a9e2596394995dd088e8c9e35bba14537c8911d1a0d526270ef7c57ef80eebc183b08"}}, &(0x7f0000000280)={0x0, 0x3, 0xef, @string={0xef, 0x3, "4d88c3b87b4c649dc6107c4d1f7ffbab908c47a8fcb0bb27c3072d668d7d0a01a0dfc7710342c74a77cebc7d31667142285ed0b7245e7c6d1d89873defbe1dc2efca06f5cd43b486b237d32933902fea41adc6770b8762072d6b418cd4e7ac3d9a7e43fffec72a08feb13cb0327ba75a063d5eb5942ca49597bc7ae7590eb68d9e8268fad0d6374df9a46bea87da94f663b34bfd1aa6383ecb75def0c7ada471bf9e8c609a1faca920c4b72c630900127ed1bf6bea4d55230ab56b0561faa3edb0b30b7a9b25c309bf330f7f43e370c2a689d146fef1842e30ad142d9d6a3156ac67d623d406eac8ff679ef65c"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x5, 0x40, "01de286d", "a2bd8b8a"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x3, 0x5d, 0x6, 0x7ff, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0xc, 0x9d, "e594b0f8165e4acd5343e46405c3612fc171c26fc08c2797910b88718bc3dd65e41ff64e8b4df51d10e47fb0c8e9bb6e41483aa96c4f20d809a3a4ead6c278de7894aeb4720bc50595166d2ad4dc6b8e70cacd2a9ecfe185cfb973a2abca638c87cba3f575852d5dafe475ba9e1172d6d3077aeab82884f69f14d3203339b8099eab276358a70690b87c2a0664f376e99574cc9a4a357686d5a878fcb5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0xc0, 0x88, [0xf00f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "71ea"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "eb2d"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x76}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1227.599035][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.609457][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1227.616310][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.624962][T10050] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1227.637696][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.664908][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.687539][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.694867][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.695304][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:37:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1227.696279][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.696408][T10050] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.724730][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.746368][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.784917][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.792361][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.801616][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1227.812528][T10050] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1227.826742][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.828371][ T3689] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc2 [ 1227.835471][T10050] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1227.835498][T10050] usb 2-1: Manufacturer: syz [ 1227.837615][T10050] usb 2-1: config 0 descriptor?? [ 1227.877295][T14970] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1227.885199][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc2/input1041 [ 1227.887890][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1227.910095][T14970] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1227.910369][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1227.934962][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.944966][ T922] usb 1-1: Manufacturer: syz [ 1227.950896][T14970] usb 4-1: USB disconnect, device number 82 [ 1227.964930][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1227.981422][ T922] usb 1-1: config 0 descriptor?? [ 1227.989368][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.004820][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:37:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:37:57 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e21, 0x7, @local, 0x3f}}, 0x0, 0x0, 0x4c, 0x0, "8a113ddff7d7894c5bc1e227ffac071e1479c492d21cbbb32b419a5a1f26aa8e00d67aafb9512d15b00994e07614ddc518baec983f5fa43081f5fb7c0c62eeb8520112e49a774a4477504a7c79f9b9cd"}, 0xd8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) write$hidraw(r3, &(0x7f0000000280)="3d1cf381ed78b25357f93422ab8efb6fe0a21f7e69eac6a29f03f61fbab10a698a6c254801a0665b97c44f804b6d468bd743aafe088a8fd153f3b234954494330bcdca3e0ce4467caa24e3045ee7e649c70ddfc25680f904219167c107e02cf89189ef7a3ca7ed4e516a2ca806b334a4b8803e93cb257bf56b6b94ca4a165cadafda59c9659cfec841c154dea3ba7ae5245499d9202ea0d54f52423beccf8e7cad4a265006aa6bb8be472087e222dde838a1db9ab0c01e28ac147a4ad74f4c1a8c2bd5d441a47e67fe1c96b4dea7619a2b135fe8da", 0xd5) r4 = socket$netlink(0x10, 0x3, 0x13) sendfile(r2, r4, &(0x7f00000001c0)=0x20, 0xfffffffffffff0a4) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120120f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276000000"], 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00030400000000e5332eb7ea735581aa000000e9864255bd24e3c988d78f37308ba9b9919536f076b7dc6cf8fea86f637ac81172a9ca98ae4efee90b75e9183a0b65eff801934ef54432df669ea9ea3c476139133b4891fca14194e1d7a3443df4455d5ac29995e71a2fc6039f5100000000000000"], 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r6]) [ 1228.037475][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1228.058708][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.076525][ T922] usb 1-1: can't set config #0, error -71 [ 1228.086083][ T922] usb 1-1: USB disconnect, device number 124 [ 1228.096145][T18122] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1228.106135][T18122] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1228.116480][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.207816][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.253195][T21331] 8021q: adding VLAN 0 to HW filter on device bond1212 [ 1228.267196][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.306702][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.310547][T21331] bond0: (slave bond1212): Enslaving as an active interface with an up link [ 1228.407640][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.414832][T14970] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1228.435624][T10050] rc_core: IR keymap rc-hauppauge not found [ 1228.441843][T10050] Registered IR keymap rc-empty [ 1228.468239][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.491690][T21320] device bridge1276 entered promiscuous mode [ 1228.523369][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.544760][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.549052][T21320] bond1212: (slave vlan1012): Enslaving as an active interface with an up link [ 1228.562877][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.575754][T10050] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1228.600373][ T3689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.609873][T10050] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input1042 12:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:37:58 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x0, 0x8, 0xdb, {0xdb, 0x22, "2372dfeaaac7dd4a65d7cb380a3d777721912276a8c62d6e6640d7ab8f0477f2f0af88a109420ff3765c3d2488e188a56932d9fad4c8209db326036c39494445b55642e0362ee6052ff21866b396f0dc136c392a750280a4e295958d13a89fc6b8737152f1de2dcc8b97070d87f9f6c0ca7c7f3ab0e17b959882f6f23af90987ad56ebdf8b57abbec83a47844f1a42b91b08f2b2e64924f108704419d33d88b273968bcca22705f0900acf5f7e2b5ea2e336e29cee1d2823ae8f961f0ab3f3fb8440cdb1069d455d157b3b93292a9fa4f086b72767acd23eb2"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x2, "c53e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfee}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xd9, "677d2b807aff7b8b415509eb5b7cdc39b07bd23c162552392b0e73d155c63fe5a0042914144a5d4f4f530c83000482b1aa21db3bd92a73c82c1efffa8d1053fa4b64145520e1944793bed4ff0c064decfa56d80fb6f51e59eb5673fefe185d8742292ff1609da901bbd15731fa001661da4338a57432b4c460964fc1ffce194e8d31d2229ddcbeb0f65e59d0647ab3121e90342771643ad7b1c44d13b461ee1badf1370d566a506434883704e1cd719a0f3bb00c7fc3e859b7b7cc0c2b9667154c751c6cd89ad21172527c113d8f40336653e9669605e537a8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x32, "05b1af035fd6c6acf4f0067cede3c72f8bed02c631dfe2987db505c91b7baadaf985ea26f1c3c457cb1375f07c121b7a310f"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1228.639893][ T922] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1228.660796][ T3688] usb 5-1: USB disconnect, device number 47 [ 1228.664881][T14970] usb 4-1: Using ep0 maxpacket: 16 [ 1228.670024][ T3689] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1228.699340][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.703775][ T3689] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1228.745358][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.760263][ T3689] usb 3-1: USB disconnect, device number 24 [ 1228.776616][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.779200][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.796052][T14970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.815164][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1228.856398][T14970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1228.867694][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.891847][T14970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1228.905133][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.923069][T14970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.950737][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1228.956009][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1228.985136][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.023523][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.045390][T14970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1229.055920][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.065051][T14970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1229.074868][T14970] usb 4-1: Manufacturer: syz [ 1229.082391][T14970] usb 4-1: config 0 descriptor?? [ 1229.089952][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.101292][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1229.109836][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1229.135964][T10050] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1229.156965][T21346] 8021q: adding VLAN 0 to HW filter on device bond1213 [ 1229.165599][T10050] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1229.175657][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1229.190742][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1229.217214][T10050] usb 2-1: USB disconnect, device number 8 [ 1229.233133][T21346] bond0: (slave bond1213): Enslaving as an active interface with an up link [ 1229.243370][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.253854][ T3688] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1229.322366][T21342] device bridge1277 entered promiscuous mode [ 1229.345430][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1229.356473][ T3689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1229.385090][T21342] bond1213: (slave vlan1013): Enslaving as an active interface with an up link [ 1229.392577][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1229.420937][ T922] usb 1-1: Manufacturer: syz 12:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1080000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1229.439567][ T922] usb 1-1: config 0 descriptor?? [ 1229.506311][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.527604][ T3688] usb 5-1: Using ep0 maxpacket: 16 [ 1229.567475][ T3689] usb 3-1: device descriptor read/64, error 18 [ 1229.585014][T14970] rc_core: IR keymap rc-hauppauge not found [ 1229.591221][T14970] Registered IR keymap rc-empty [ 1229.599138][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:37:59 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="cb581a91aabd484c42e03ae1781f0b203bbe76f5599c9f7987b2772b3d3924bd6cded47b6667e50fc32a03053426b0daca48cd7e835dd651ab2c8d897089506305899f73500823558004a96a2d4e89df7b2b"]) [ 1229.613123][T21349] 8021q: adding VLAN 0 to HW filter on device bond1214 [ 1229.637821][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.647994][T21349] bond0: (slave bond1214): Enslaving as an active interface with an up link [ 1229.667138][ T3688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.675210][T14970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1229.688254][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1229.708742][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1043 [ 1229.731901][T21351] device bridge1278 entered promiscuous mode [ 1229.761466][T21351] bond1214: (slave vlan1014): Enslaving as an active interface with an up link [ 1229.768984][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1229.771952][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:37:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1229.814846][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.828782][ T3688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1229.854889][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.861745][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.874787][ T922] rc_core: IR keymap rc-hauppauge not found [ 1229.880988][ T922] Registered IR keymap rc-empty [ 1229.886387][ T3689] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1229.897081][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.901590][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.918023][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.934897][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.974718][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.983321][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.996290][ T3688] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1230.004919][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1230.012619][ T3688] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1230.021461][T21358] 8021q: adding VLAN 0 to HW filter on device bond1215 [ 1230.025440][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1230.044890][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1230.047097][ T3688] usb 5-1: Manufacturer: syz [ 1230.070547][T21358] bond0: (slave bond1215): Enslaving as an active interface with an up link [ 1230.082956][ T3688] usb 5-1: config 0 descriptor?? [ 1230.085765][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1044 [ 1230.102791][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1230.113240][T21360] device bridge1279 entered promiscuous mode [ 1230.114585][T10050] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1230.122189][ T3689] usb 3-1: device descriptor read/64, error 18 [ 1230.158558][T21360] bond1215: (slave vlan1015): Enslaving as an active interface with an up link 12:37:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1230.161278][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.178640][T14970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1230.230590][T21364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1230.246071][T14970] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1230.255724][ T3689] usb usb3-port1: attempt power cycle [ 1230.265241][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.275622][T14970] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1230.300411][T21364] 8021q: adding VLAN 0 to HW filter on device bond1216 [ 1230.304672][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.320188][T21364] bond0: (slave bond1216): Enslaving as an active interface with an up link [ 1230.349204][T21364] device bridge1280 entered promiscuous mode [ 1230.385085][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.395233][T10050] usb 2-1: Using ep0 maxpacket: 16 [ 1230.415480][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:37:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1230.441618][T21364] bond1216: (slave vlan1016): Enslaving as an active interface with an up link [ 1230.460575][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1230.464865][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.470320][ T3688] Registered IR keymap rc-empty [ 1230.484023][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.515222][T10050] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.535055][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.537634][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.549554][T10050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 12:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1230.549590][T10050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1230.549613][T10050] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1230.549644][T10050] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.595503][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.625128][T10050] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1230.650793][T10050] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1230.671858][T10050] usb 2-1: Manufacturer: syz [ 1230.678202][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.684981][ T3689] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1230.700196][ T3688] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 1230.705475][T10050] usb 2-1: config 0 descriptor?? [ 1230.719582][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1230.742285][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1230.744393][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input1045 [ 1230.756309][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1230.795439][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.812788][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1230.815645][ T3689] usb 3-1: Invalid ep0 maxpacket: 56 [ 1230.829428][ T922] usb 1-1: USB disconnect, device number 125 [ 1230.839756][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.876582][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.917087][T21374] 8021q: adding VLAN 0 to HW filter on device bond1217 [ 1230.927677][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1230.958935][T21374] bond0: (slave bond1217): Enslaving as an active interface with an up link [ 1230.977386][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.019963][ T3689] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1231.021485][T21370] device bridge1281 entered promiscuous mode [ 1231.027672][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.098336][T21370] bond1217: (slave vlan1017): Enslaving as an active interface with an up link [ 1231.110784][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.114884][T10050] rc_core: IR keymap rc-hauppauge not found [ 1231.131954][T10050] Registered IR keymap rc-empty [ 1231.139006][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.156698][ T3689] usb 3-1: Invalid ep0 maxpacket: 56 [ 1231.162206][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.178915][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.185215][ T3689] usb usb3-port1: unable to enumerate USB device [ 1231.215131][ T922] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1231.225537][T10050] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1231.247311][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.258768][T10050] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input1046 [ 1231.275498][ T25] kauditd_printk_skb: 16 callbacks suppressed [ 1231.275514][ T25] audit: type=1804 audit(1640176680.712:2796): pid=21353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3338392F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1231.320299][ T3688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1231.336920][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.365329][ T3688] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1231.373375][ T3688] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1231.374932][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:38:00 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async, rerun: 64) r2 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) (rerun: 64) ftruncate(r2, 0xfffffffffffffeff) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x40, 0x30, 0x25, {0x25, 0x6, "4a9e2596394995dd088e8c9e35bba14537c8911d1a0d526270ef7c57ef80eebc183b08"}}, &(0x7f0000000280)={0x0, 0x3, 0xef, @string={0xef, 0x3, "4d88c3b87b4c649dc6107c4d1f7ffbab908c47a8fcb0bb27c3072d668d7d0a01a0dfc7710342c74a77cebc7d31667142285ed0b7245e7c6d1d89873defbe1dc2efca06f5cd43b486b237d32933902fea41adc6770b8762072d6b418cd4e7ac3d9a7e43fffec72a08feb13cb0327ba75a063d5eb5942ca49597bc7ae7590eb68d9e8268fad0d6374df9a46bea87da94f663b34bfd1aa6383ecb75def0c7ada471bf9e8c609a1faca920c4b72c630900127ed1bf6bea4d55230ab56b0561faa3edb0b30b7a9b25c309bf330f7f43e370c2a689d146fef1842e30ad142d9d6a3156ac67d623d406eac8ff679ef65c"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x5, 0x40, "01de286d", "a2bd8b8a"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x3, 0x5d, 0x6, 0x7ff, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0xc, 0x9d, "e594b0f8165e4acd5343e46405c3612fc171c26fc08c2797910b88718bc3dd65e41ff64e8b4df51d10e47fb0c8e9bb6e41483aa96c4f20d809a3a4ead6c278de7894aeb4720bc50595166d2ad4dc6b8e70cacd2a9ecfe185cfb973a2abca638c87cba3f575852d5dafe475ba9e1172d6d3077aeab82884f69f14d3203339b8099eab276358a70690b87c2a0664f376e99574cc9a4a357686d5a878fcb5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0xc0, 0x88, [0xf00f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "71ea"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "eb2d"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x76}}) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) 12:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:38:00 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e21, 0x7, @local, 0x3f}}, 0x0, 0x0, 0x4c, 0x0, "8a113ddff7d7894c5bc1e227ffac071e1479c492d21cbbb32b419a5a1f26aa8e00d67aafb9512d15b00994e07614ddc518baec983f5fa43081f5fb7c0c62eeb8520112e49a774a4477504a7c79f9b9cd"}, 0xd8) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) write$hidraw(r3, &(0x7f0000000280)="3d1cf381ed78b25357f93422ab8efb6fe0a21f7e69eac6a29f03f61fbab10a698a6c254801a0665b97c44f804b6d468bd743aafe088a8fd153f3b234954494330bcdca3e0ce4467caa24e3045ee7e649c70ddfc25680f904219167c107e02cf89189ef7a3ca7ed4e516a2ca806b334a4b8803e93cb257bf56b6b94ca4a165cadafda59c9659cfec841c154dea3ba7ae5245499d9202ea0d54f52423beccf8e7cad4a265006aa6bb8be472087e222dde838a1db9ab0c01e28ac147a4ad74f4c1a8c2bd5d441a47e67fe1c96b4dea7619a2b135fe8da", 0xd5) (async) r4 = socket$netlink(0x10, 0x3, 0x13) sendfile(r2, r4, &(0x7f00000001c0)=0x20, 0xfffffffffffff0a4) (async) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120120f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276000000"], 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00030400000000e5332eb7ea735581aa000000e9864255bd24e3c988d78f37308ba9b9919536f076b7dc6cf8fea86f637ac81172a9ca98ae4efee90b75e9183a0b65eff801934ef54432df669ea9ea3c476139133b4891fca14194e1d7a3443df4455d5ac29995e71a2fc6039f5100000000000000"], 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r6]) [ 1231.414893][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.435204][ T3688] usb 4-1: USB disconnect, device number 83 [ 1231.448254][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.468193][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1231.504867][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.524664][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1231.536971][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.625376][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.665178][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 12:38:01 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r2 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) ftruncate(r2, 0xfffffffffffffeff) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x40, 0x30, 0x25, {0x25, 0x6, "4a9e2596394995dd088e8c9e35bba14537c8911d1a0d526270ef7c57ef80eebc183b08"}}, &(0x7f0000000280)={0x0, 0x3, 0xef, @string={0xef, 0x3, "4d88c3b87b4c649dc6107c4d1f7ffbab908c47a8fcb0bb27c3072d668d7d0a01a0dfc7710342c74a77cebc7d31667142285ed0b7245e7c6d1d89873defbe1dc2efca06f5cd43b486b237d32933902fea41adc6770b8762072d6b418cd4e7ac3d9a7e43fffec72a08feb13cb0327ba75a063d5eb5942ca49597bc7ae7590eb68d9e8268fad0d6374df9a46bea87da94f663b34bfd1aa6383ecb75def0c7ada471bf9e8c609a1faca920c4b72c630900127ed1bf6bea4d55230ab56b0561faa3edb0b30b7a9b25c309bf330f7f43e370c2a689d146fef1842e30ad142d9d6a3156ac67d623d406eac8ff679ef65c"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x5, 0x40, "01de286d", "a2bd8b8a"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x3, 0x5d, 0x6, 0x7ff, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0xc, 0x9d, "e594b0f8165e4acd5343e46405c3612fc171c26fc08c2797910b88718bc3dd65e41ff64e8b4df51d10e47fb0c8e9bb6e41483aa96c4f20d809a3a4ead6c278de7894aeb4720bc50595166d2ad4dc6b8e70cacd2a9ecfe185cfb973a2abca638c87cba3f575852d5dafe475ba9e1172d6d3077aeab82884f69f14d3203339b8099eab276358a70690b87c2a0664f376e99574cc9a4a357686d5a878fcb5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0xc0, 0x88, [0xf00f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "71ea"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "eb2d"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x76}}) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3]) [ 1231.700954][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1231.730759][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.739103][T21396] 8021q: adding VLAN 0 to HW filter on device bond1218 [ 1231.758618][T21396] bond0: (slave bond1218): Enslaving as an active interface with an up link [ 1231.791822][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1231.814760][T21398] device bridge1282 entered promiscuous mode [ 1231.814848][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.857458][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1231.863060][T21398] bond1218: (slave vlan1018): Enslaving as an active interface with an up link [ 1231.882284][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1231.897876][ T25] audit: type=1804 audit(1640176681.332:2797): pid=21403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339372F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1231.932710][T10050] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1231.986348][T10050] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1231.991652][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1232.002627][T10050] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1232.035287][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1232.057534][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1232.111460][ T922] usb 1-1: Manufacturer: syz [ 1232.120525][T10050] usb 2-1: USB disconnect, device number 9 [ 1232.129300][T21405] 8021q: adding VLAN 0 to HW filter on device bond1219 [ 1232.144866][ T3684] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1232.158944][ T3689] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1232.168329][T21405] bond0: (slave bond1219): Enslaving as an active interface with an up link [ 1232.186807][ T922] usb 1-1: config 0 descriptor?? [ 1232.199899][T21407] device bridge1283 entered promiscuous mode [ 1232.228609][T21407] bond1219: (slave vlan1019): Enslaving as an active interface with an up link 12:38:01 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:38:01 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="cb581a91aabd484c42e03ae1781f0b203bbe76f5599c9f7987b2772b3d3924bd6cded47b6667e50fc32a03053426b0daca48cd7e835dd651ab2c8d897089506305899f73500823558004a96a2d4e89df7b2b"]) 12:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1232.345779][ T3684] usb 3-1: device descriptor read/64, error 18 [ 1232.399546][ T3326] usb 5-1: USB disconnect, device number 48 [ 1232.415166][ T3689] usb 4-1: Using ep0 maxpacket: 16 [ 1232.442501][T21413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1232.492256][ T25] audit: type=1804 audit(1640176681.942:2798): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3339302F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1232.565248][ T3689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.585709][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.598462][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1232.612916][ T3689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1232.614704][ T3684] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1232.624392][ T3689] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.704809][ T922] rc_core: IR keymap rc-hauppauge not found [ 1232.711175][ T922] Registered IR keymap rc-empty [ 1232.726568][T21413] bond1220: (slave vlan1020): Enslaving as an active interface with an up link [ 1232.726994][ T3689] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1232.737496][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1232.757639][ T3689] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1232.768291][ T3689] usb 4-1: Manufacturer: syz [ 1232.780155][ T3689] usb 4-1: config 0 descriptor?? [ 1232.791564][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1232.835670][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1232.842432][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1232.864783][ T3326] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1232.865163][ T3684] usb 3-1: device descriptor read/64, error 18 [ 1232.885403][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1047 [ 1232.907071][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1232.944971][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1232.971321][T21423] 8021q: adding VLAN 0 to HW filter on device bond1221 [ 1232.979895][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.001562][T21423] bond0: (slave bond1221): Enslaving as an active interface with an up link [ 1233.024612][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.035642][ T3684] usb usb3-port1: attempt power cycle [ 1233.055024][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.062695][T21424] device bridge1285 entered promiscuous mode [ 1233.086675][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.105160][T21424] bond1221: (slave vlan1021): Enslaving as an active interface with an up link [ 1233.124909][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.136126][ T3326] usb 5-1: Using ep0 maxpacket: 16 12:38:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1233.154905][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.184697][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.184923][ T3689] rc_core: IR keymap rc-hauppauge not found 12:38:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) 12:38:02 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbe4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8060) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000f2ff080400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0xef, 0x0, &(0x7f0000000280)="2fc15b795e8aed7c12fef2fcf67b4f6f0f17d0c9b788fe2765506470a53ebb975761162eee2be2e0d6159c1cabae063ec20c487c21d25e4b90eb35be9f82f39cdc851dd47855c5dbbfa5f8cfbeebb2c5ac85fe74abcd74b934e7157836f7d02015e140cf9152270775d9ccf9603140544dadc61f8d2bb1b9c9eac8dd2528259bdab26adaf4e1cbd5be6ddcb647a0b421847f44790ccda7cb350560a629d2c35a130e1ca43d3b1182fc2d8188151a14a062877f199a16834608a360b426c8c7a2ee10be9ba205693c74684fad9cc7b06182f8d4559931c8dd3630f6989050eb0d42b38fc3ddfab3a78d274e9a7dd843"}) [ 1233.214718][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1233.220139][ T3689] Registered IR keymap rc-empty [ 1233.245187][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.247408][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1233.271511][ T3326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.283168][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1233.295779][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.305420][ T3326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1233.320060][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1233.327877][ T3326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1233.345461][ T922] usb 1-1: USB disconnect, device number 126 [ 1233.355238][ T3689] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1233.402232][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1048 [ 1233.435003][ T3326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1233.444895][ T3684] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1233.483115][ T3326] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.520036][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.534921][ T3684] usb 3-1: Invalid ep0 maxpacket: 56 [ 1233.542893][T21435] 8021q: adding VLAN 0 to HW filter on device bond1222 12:38:03 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x6f0283, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x690, 0x640, 0x140, 0x240, 0x5, 0xff, 0x4, 0x2, {0xa8c4, 0x1, 0x1}, {0x129c, 0x7, 0x8001}, {0xaf9, 0x1, 0x1}, {0x1, 0x6, 0x1}, 0x0, 0x2, 0x80, 0x2e, 0x0, 0x5, 0x8, 0x5c1a0527, 0x5, 0x6, 0x81, 0x8, 0x5, 0x200, 0x3, 0x1}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201e2ffff00090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x200000) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000002c0)={0x0, 0x4b0, 0xf0, 0x960, 0x4b, 0xe04c, 0x8, 0x2, {0x0, 0x5}, {0x20, 0x8, 0x1}, {0x7, 0x3}, {0x82f6, 0x2}, 0x2, 0x1, 0x1, 0x3, 0x1, 0x5, 0x709a, 0x6, 0x9, 0x0, 0x211df086, 0x6, 0x35, 0x2, 0x1, 0x8}) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1233.576679][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.576798][T21435] bond0: (slave bond1222): Enslaving as an active interface with an up link [ 1233.634019][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.650568][ T3326] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1233.667621][ T3326] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 12:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1233.686100][ T3684] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1233.697478][ T3326] usb 5-1: Manufacturer: syz [ 1233.706866][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.707132][T10050] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1233.742469][ T3326] usb 5-1: config 0 descriptor?? [ 1233.750918][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.765176][ T922] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1233.778555][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1233.789632][ T3684] usb 3-1: Invalid ep0 maxpacket: 56 [ 1233.797058][ T3684] usb usb3-port1: unable to enumerate USB device [ 1233.797886][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.835506][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.865064][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.889883][T21442] 8021q: adding VLAN 0 to HW filter on device bond1223 [ 1233.906837][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.912637][T21442] bond0: (slave bond1223): Enslaving as an active interface with an up link [ 1233.946309][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1233.946396][T21442] device bridge1287 entered promiscuous mode [ 1233.962314][T10050] usb 2-1: Using ep0 maxpacket: 16 [ 1233.988650][T21442] bond1223: (slave vlan1022): Enslaving as an active interface with an up link [ 1233.996253][ T3689] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1234.009804][ T3689] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1234.014924][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1234.023316][ T3689] usb 4-1: USB disconnect, device number 84 [ 1234.085213][T10050] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1234.096579][T10050] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.110348][T10050] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1234.146475][ T3326] rc_core: IR keymap rc-hauppauge not found [ 1234.152411][ T3326] Registered IR keymap rc-empty [ 1234.185294][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.185982][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.197331][T10050] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1234.216366][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1234.228902][T10050] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1234.239405][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1234.250746][T10050] usb 2-1: Manufacturer: syz [ 1234.259599][T10050] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1234.271558][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1234.275370][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.282792][T10050] usb 2-1: no configuration chosen from 1 choice [ 1234.299270][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.317608][ T3326] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1234.353206][ T3326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1049 [ 1234.380171][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.414784][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1234.415805][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.430876][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1234.447507][ T3689] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1234.455713][ T922] usb 1-1: Manufacturer: syz 12:38:03 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e21, 0x7, @local, 0x3f}}, 0x0, 0x0, 0x4c, 0x0, "8a113ddff7d7894c5bc1e227ffac071e1479c492d21cbbb32b419a5a1f26aa8e00d67aafb9512d15b00994e07614ddc518baec983f5fa43081f5fb7c0c62eeb8520112e49a774a4477504a7c79f9b9cd"}, 0xd8) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) write$hidraw(r3, &(0x7f0000000280)="3d1cf381ed78b25357f93422ab8efb6fe0a21f7e69eac6a29f03f61fbab10a698a6c254801a0665b97c44f804b6d468bd743aafe088a8fd153f3b234954494330bcdca3e0ce4467caa24e3045ee7e649c70ddfc25680f904219167c107e02cf89189ef7a3ca7ed4e516a2ca806b334a4b8803e93cb257bf56b6b94ca4a165cadafda59c9659cfec841c154dea3ba7ae5245499d9202ea0d54f52423beccf8e7cad4a265006aa6bb8be472087e222dde838a1db9ab0c01e28ac147a4ad74f4c1a8c2bd5d441a47e67fe1c96b4dea7619a2b135fe8da", 0xd5) (async) r4 = socket$netlink(0x10, 0x3, 0x13) sendfile(r2, r4, &(0x7f00000001c0)=0x20, 0xfffffffffffff0a4) (async) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120120f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276000000"], 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00030400000000e5332eb7ea735581aa000000e9864255bd24e3c988d78f37308ba9b9919536f076b7dc6cf8fea86f637ac81172a9ca98ae4efee90b75e9183a0b65eff801934ef54432df669ea9ea3c476139133b4891fca14194e1d7a3443df4455d5ac29995e71a2fc6039f5100000000000000"], 0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r6]) 12:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1234.461905][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.467637][ T922] usb 1-1: config 0 descriptor?? [ 1234.505884][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.520754][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1234.565206][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.615156][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.646719][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.669593][T21448] 8021q: adding VLAN 0 to HW filter on device bond1224 [ 1234.700075][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.708952][ T3689] usb 4-1: Using ep0 maxpacket: 16 [ 1234.719310][T21448] bond0: (slave bond1224): Enslaving as an active interface with an up link [ 1234.735241][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.755639][ T3689] usb 4-1: no configurations [ 1234.760447][ T3689] usb 4-1: can't read configurations, error -22 [ 1234.769020][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1234.783006][T21455] device bridge1288 entered promiscuous mode [ 1234.835059][T21455] bond1224: (slave vlan1023): Enslaving as an active interface with an up link [ 1234.849934][ T3326] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1234.860714][ T3326] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1234.888476][ T3326] usb 5-1: USB disconnect, device number 49 [ 1234.914783][ T922] rc_core: IR keymap rc-hauppauge not found [ 1234.920717][ T922] Registered IR keymap rc-empty [ 1234.949365][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1234.966628][ T3689] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1234.994914][T10050] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1235.001544][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.014956][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.065332][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1235.098041][T21458] 8021q: adding VLAN 0 to HW filter on device bond1225 [ 1235.112640][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1050 [ 1235.124629][T21458] bond0: (slave bond1225): Enslaving as an active interface with an up link [ 1235.156752][T21458] device bridge1289 entered promiscuous mode [ 1235.182085][T21458] bond1225: (slave vlan1024): Enslaving as an active interface with an up link [ 1235.205229][T10050] usb 3-1: device descriptor read/64, error 18 [ 1235.218874][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.235723][ T3689] usb 4-1: Using ep0 maxpacket: 16 12:38:04 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1235.254795][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.276247][ T3689] usb 4-1: no configurations [ 1235.280885][ T3689] usb 4-1: can't read configurations, error -22 [ 1235.284846][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.289915][ T3689] usb usb4-port1: attempt power cycle [ 1235.335211][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.336272][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.375072][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.405397][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.438231][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) [ 1235.453194][T21462] 8021q: adding VLAN 0 to HW filter on device bond1226 [ 1235.475115][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.476485][T21462] bond0: (slave bond1226): Enslaving as an active interface with an up link [ 1235.496475][T10050] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1235.529418][T21462] device bridge1290 entered promiscuous mode [ 1235.534975][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1235.548999][T21462] bond1226: (slave vlan1025): Enslaving as an active interface with an up link [ 1235.577827][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1235.619567][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1235.641573][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1235.664722][T18122] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1235.685805][T21470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.697430][T10050] usb 3-1: device descriptor read/64, error 18 [ 1235.709118][ T922] usb 1-1: USB disconnect, device number 127 [ 1235.729219][ T3689] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1235.830596][T21470] 8021q: adding VLAN 0 to HW filter on device bond1227 [ 1235.834977][T10050] usb usb3-port1: attempt power cycle [ 1235.867028][ T3689] usb 4-1: Using ep0 maxpacket: 16 [ 1235.870182][T21470] bond0: (slave bond1227): Enslaving as an active interface with an up link [ 1235.905021][T18122] usb 5-1: Using ep0 maxpacket: 16 [ 1235.906714][ T3689] usb 4-1: no configurations [ 1235.918745][ T3689] usb 4-1: can't read configurations, error -22 [ 1235.932722][T21472] device bridge1291 entered promiscuous mode 12:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1235.957133][T21472] bond1227: (slave vlan1026): Enslaving as an active interface with an up link [ 1236.025219][T18122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.038245][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.051019][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1236.062749][T18122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1236.076277][T18122] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.099520][ T3689] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1236.105054][ T922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1236.164950][T18122] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1236.170218][T21474] 8021q: adding VLAN 0 to HW filter on device bond1228 [ 1236.176069][T18122] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1236.176098][T18122] usb 5-1: Manufacturer: syz [ 1236.186546][T18122] usb 5-1: config 0 descriptor?? [ 1236.233135][T21474] bond0: (slave bond1228): Enslaving as an active interface with an up link [ 1236.246858][ T3689] usb 4-1: Using ep0 maxpacket: 16 [ 1236.257230][T10050] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1236.280877][T21476] device bridge1292 entered promiscuous mode [ 1236.296842][ T3689] usb 4-1: no configurations [ 1236.301491][ T3689] usb 4-1: can't read configurations, error -22 [ 1236.326307][T21476] bond1228: (slave vlan1027): Enslaving as an active interface with an up link [ 1236.336957][ T3689] usb usb4-port1: unable to enumerate USB device 12:38:05 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbe4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, r0, 0x0, 0xffffffffffffffff, 0x3) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8060) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000f2ff080400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0xef, 0x0, &(0x7f0000000280)="2fc15b795e8aed7c12fef2fcf67b4f6f0f17d0c9b788fe2765506470a53ebb975761162eee2be2e0d6159c1cabae063ec20c487c21d25e4b90eb35be9f82f39cdc851dd47855c5dbbfa5f8cfbeebb2c5ac85fe74abcd74b934e7157836f7d02015e140cf9152270775d9ccf9603140544dadc61f8d2bb1b9c9eac8dd2528259bdab26adaf4e1cbd5be6ddcb647a0b421847f44790ccda7cb350560a629d2c35a130e1ca43d3b1182fc2d8188151a14a062877f199a16834608a360b426c8c7a2ee10be9ba205693c74684fad9cc7b06182f8d4559931c8dd3630f6989050eb0d42b38fc3ddfab3a78d274e9a7dd843"}) [ 1236.366532][T10050] usb 3-1: Invalid ep0 maxpacket: 56 [ 1236.375956][ T3689] usb 2-1: USB disconnect, device number 10 [ 1236.385357][ T922] usb 1-1: Using ep0 maxpacket: 16 12:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1236.489791][T21482] __nla_validate_parse: 1 callbacks suppressed [ 1236.489810][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1236.505039][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.524957][T10050] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1236.571092][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.601772][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1236.625100][T10050] usb 3-1: Invalid ep0 maxpacket: 56 [ 1236.630619][T10050] usb usb3-port1: unable to enumerate USB device [ 1236.638330][T18122] rc_core: IR keymap rc-hauppauge not found [ 1236.646020][T18122] Registered IR keymap rc-empty [ 1236.651119][T21484] 8021q: adding VLAN 0 to HW filter on device bond1229 [ 1236.669395][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.678242][T21484] bond0: (slave bond1229): Enslaving as an active interface with an up link [ 1236.678707][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 12:38:06 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async, rerun: 64) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x6f0283, 0x0) (rerun: 64) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x690, 0x640, 0x140, 0x240, 0x5, 0xff, 0x4, 0x2, {0xa8c4, 0x1, 0x1}, {0x129c, 0x7, 0x8001}, {0xaf9, 0x1, 0x1}, {0x1, 0x6, 0x1}, 0x0, 0x2, 0x80, 0x2e, 0x0, 0x5, 0x8, 0x5c1a0527, 0x5, 0x6, 0x81, 0x8, 0x5, 0x200, 0x3, 0x1}) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201e2ffff00090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (rerun: 32) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x200000) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000002c0)={0x0, 0x4b0, 0xf0, 0x960, 0x4b, 0xe04c, 0x8, 0x2, {0x0, 0x5}, {0x20, 0x8, 0x1}, {0x7, 0x3}, {0x82f6, 0x2}, 0x2, 0x1, 0x1, 0x3, 0x1, 0x5, 0x709a, 0x6, 0x9, 0x0, 0x211df086, 0x6, 0x35, 0x2, 0x1, 0x8}) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1236.716729][T21482] device bridge1293 entered promiscuous mode [ 1236.737748][T21482] bond1229: (slave vlan1028): Enslaving as an active interface with an up link [ 1236.767956][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.780386][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.825881][T18122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 12:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1236.878644][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1051 [ 1236.897216][ T3689] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1236.936287][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.971398][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1236.975033][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1236.991341][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.006456][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1237.017770][ T922] usb 1-1: Manufacturer: syz [ 1237.024900][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.050883][ T922] usb 1-1: config 0 descriptor?? [ 1237.057712][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.077206][ T25] audit: type=1804 audit(1640176686.532:2799): pid=21486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3339392F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1237.094974][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.144828][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.156641][T21495] 8021q: adding VLAN 0 to HW filter on device bond1230 [ 1237.175122][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1237.177842][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.197953][T21495] bond0: (slave bond1230): Enslaving as an active interface with an up link [ 1237.225005][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.231627][T21491] device bridge1294 entered promiscuous mode [ 1237.255772][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.281369][T21491] bond1230: (slave vlan1029): Enslaving as an active interface with an up link [ 1237.285426][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.310831][ T3689] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1237.337088][T18122] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1237.347437][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.355901][T18122] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1237.382113][T18122] usb 5-1: USB disconnect, device number 50 [ 1237.414478][ T3689] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1237.465085][ T922] rc_core: IR keymap rc-hauppauge not found [ 1237.471315][ T922] Registered IR keymap rc-empty [ 1237.487788][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:07 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/224) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) 12:38:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1237.527455][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1237.535009][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.545834][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1237.545871][ T3689] usb 2-1: Manufacturer: syz [ 1237.584333][T21498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.585378][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 12:38:07 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x6f0283, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x690, 0x640, 0x140, 0x240, 0x5, 0xff, 0x4, 0x2, {0xa8c4, 0x1, 0x1}, {0x129c, 0x7, 0x8001}, {0xaf9, 0x1, 0x1}, {0x1, 0x6, 0x1}, 0x0, 0x2, 0x80, 0x2e, 0x0, 0x5, 0x8, 0x5c1a0527, 0x5, 0x6, 0x81, 0x8, 0x5, 0x200, 0x3, 0x1}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201e2ffff00090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x200000) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000002c0)={0x0, 0x4b0, 0xf0, 0x960, 0x4b, 0xe04c, 0x8, 0x2, {0x0, 0x5}, {0x20, 0x8, 0x1}, {0x7, 0x3}, {0x82f6, 0x2}, 0x2, 0x1, 0x1, 0x3, 0x1, 0x5, 0x709a, 0x6, 0x9, 0x0, 0x211df086, 0x6, 0x35, 0x2, 0x1, 0x8}) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x6f0283, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x690, 0x640, 0x140, 0x240, 0x5, 0xff, 0x4, 0x2, {0xa8c4, 0x1, 0x1}, {0x129c, 0x7, 0x8001}, {0xaf9, 0x1, 0x1}, {0x1, 0x6, 0x1}, 0x0, 0x2, 0x80, 0x2e, 0x0, 0x5, 0x8, 0x5c1a0527, 0x5, 0x6, 0x81, 0x8, 0x5, 0x200, 0x3, 0x1}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201e2ffff00090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x200000) (async) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000002c0)={0x0, 0x4b0, 0xf0, 0x960, 0x4b, 0xe04c, 0x8, 0x2, {0x0, 0x5}, {0x20, 0x8, 0x1}, {0x7, 0x3}, {0x82f6, 0x2}, 0x2, 0x1, 0x1, 0x3, 0x1, 0x5, 0x709a, 0x6, 0x9, 0x0, 0x211df086, 0x6, 0x35, 0x2, 0x1, 0x8}) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) (async) [ 1237.641134][ T3689] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1237.658793][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1052 [ 1237.708084][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.736052][ T3689] usb 2-1: no configuration chosen from 1 choice [ 1237.745109][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.775043][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.814836][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:07 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1237.826770][T21498] 8021q: adding VLAN 0 to HW filter on device bond1231 [ 1237.849154][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.859102][T21498] bond0: (slave bond1231): Enslaving as an active interface with an up link [ 1237.894870][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.902083][T21500] device bridge1295 entered promiscuous mode [ 1237.930713][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1237.948106][T21500] bond1231: (slave vlan1030): Enslaving as an active interface with an up link [ 1237.974477][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1238.012834][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1238.024997][ T3684] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1238.027688][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) [ 1238.059400][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1238.068365][T18122] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1238.105986][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1238.138502][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1238.206934][ T3326] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1238.220213][ T922] usb 1-1: USB disconnect, device number 2 [ 1238.250847][T21509] 8021q: adding VLAN 0 to HW filter on device bond1232 [ 1238.274958][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 1238.298342][T21509] bond0: (slave bond1232): Enslaving as an active interface with an up link [ 1238.315337][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1238.355294][T18122] usb 4-1: no configurations [ 1238.362736][T18122] usb 4-1: can't read configurations, error -22 [ 1238.381170][T21512] device bridge1296 entered promiscuous mode [ 1238.395199][ T3684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.410544][T21512] bond1232: (slave vlan1031): Enslaving as an active interface with an up link [ 1238.414849][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.432492][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 12:38:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1238.452426][ T3684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1238.466481][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.486510][ T3326] usb 5-1: Using ep0 maxpacket: 16 [ 1238.525561][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.531902][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.535001][T18122] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1238.550451][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.555251][ T3684] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1238.572895][ T3684] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1238.583064][ T3684] usb 3-1: Manufacturer: syz [ 1238.602159][ T3684] usb 3-1: config 0 descriptor?? [ 1238.646800][ T3326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.658406][ T3326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.664767][ T922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1238.672574][ T3326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1238.680189][T21516] 8021q: adding VLAN 0 to HW filter on device bond1233 [ 1238.690260][ T3326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1238.708382][ T3326] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.740221][T21516] bond0: (slave bond1233): Enslaving as an active interface with an up link [ 1238.777839][T21518] device bridge1297 entered promiscuous mode [ 1238.797192][ T3326] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1238.801140][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1238.806409][ T3326] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1238.806437][ T3326] usb 5-1: Manufacturer: syz [ 1238.810043][T21518] bond1233: (slave vlan1032): Enslaving as an active interface with an up link [ 1238.855267][T18122] usb 4-1: no configurations [ 1238.861017][T18122] usb 4-1: can't read configurations, error -22 [ 1238.863201][ T3326] usb 5-1: config 0 descriptor?? [ 1238.883018][T18122] usb usb4-port1: attempt power cycle 12:38:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1238.945119][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1238.975617][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1238.980994][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.981543][ T3684] Registered IR keymap rc-empty [ 1239.000427][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.035193][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.063167][T21521] 8021q: adding VLAN 0 to HW filter on device bond1234 [ 1239.075325][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.088054][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1239.091664][T21521] bond0: (slave bond1234): Enslaving as an active interface with an up link [ 1239.105433][ T25] audit: type=1804 audit(1640176688.562:2800): pid=21503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536362F48C7C060 dev="sda1" ino=1160 res=1 errno=0 [ 1239.147543][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1239.161469][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1053 [ 1239.184694][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1239.205138][T21523] device bridge1298 entered promiscuous mode [ 1239.219936][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1239.231342][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.256594][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.272053][T21523] bond1234: (slave vlan1033): Enslaving as an active interface with an up link [ 1239.275970][ T3326] rc_core: IR keymap rc-hauppauge not found [ 1239.285042][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.295858][ T3326] Registered IR keymap rc-empty [ 1239.301250][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.304868][T18122] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1239.327315][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.347014][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.365333][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.392653][ T3326] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1239.395128][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 12:38:08 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbe4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8060) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000f2ff080400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0xef, 0x0, &(0x7f0000000280)="2fc15b795e8aed7c12fef2fcf67b4f6f0f17d0c9b788fe2765506470a53ebb975761162eee2be2e0d6159c1cabae063ec20c487c21d25e4b90eb35be9f82f39cdc851dd47855c5dbbfa5f8cfbeebb2c5ac85fe74abcd74b934e7157836f7d02015e140cf9152270775d9ccf9603140544dadc61f8d2bb1b9c9eac8dd2528259bdab26adaf4e1cbd5be6ddcb647a0b421847f44790ccda7cb350560a629d2c35a130e1ca43d3b1182fc2d8188151a14a062877f199a16834608a360b426c8c7a2ee10be9ba205693c74684fad9cc7b06182f8d4559931c8dd3630f6989050eb0d42b38fc3ddfab3a78d274e9a7dd843"}) 12:38:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22010000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1239.414696][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.426402][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1239.437548][ T3326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input1054 [ 1239.450192][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1239.465234][T18122] usb 4-1: no configurations [ 1239.472253][T18122] usb 4-1: can't read configurations, error -22 [ 1239.480134][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.500787][T21527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1239.506097][ T922] usb 1-1: Manufacturer: syz [ 1239.523308][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.524961][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.555615][ T922] usb 1-1: config 0 descriptor?? [ 1239.567617][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.567894][ T3686] usb 2-1: USB disconnect, device number 11 [ 1239.584960][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.615406][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.624915][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.644875][T18122] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1239.647777][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.674891][ T3684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1239.705769][ T3684] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1239.717018][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.717281][ T3684] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1239.735671][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1239.746332][ T3684] usb 3-1: USB disconnect, device number 37 [ 1239.754988][T21535] 8021q: adding VLAN 0 to HW filter on device bond1235 [ 1239.766884][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.778825][T18122] usb 4-1: no configurations [ 1239.786142][T18122] usb 4-1: can't read configurations, error -22 [ 1239.797243][T21535] bond0: (slave bond1235): Enslaving as an active interface with an up link [ 1239.808806][T18122] usb usb4-port1: unable to enumerate USB device [ 1239.817452][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.866655][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.915274][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.920796][T21527] device bridge1299 entered promiscuous mode [ 1239.935610][ T922] rc_core: IR keymap rc-hauppauge not found [ 1239.941534][ T922] Registered IR keymap rc-empty [ 1239.956442][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1239.956922][ T3326] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1239.985477][ T3686] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1240.022068][T21527] bond1235: (slave vlan1034): Enslaving as an active interface with an up link [ 1240.022887][ T3326] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1240.032870][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.044900][ T3326] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:38:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24020000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1240.095915][ T922] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 1240.100681][ T3326] usb 5-1: USB disconnect, device number 51 [ 1240.128161][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input1055 12:38:09 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/224) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) (async) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/224) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) (async) [ 1240.188885][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.234990][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.237157][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1240.245407][ T3686] usb 2-1: Using ep0 maxpacket: 16 [ 1240.265249][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.305022][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.348414][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.369852][T21539] 8021q: adding VLAN 0 to HW filter on device bond1236 [ 1240.391927][T21539] bond0: (slave bond1236): Enslaving as an active interface with an up link [ 1240.401797][ T3686] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1240.412660][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.421702][ T3686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.433136][ T3686] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 12:38:09 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1240.444891][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.461277][T21542] device bridge1300 entered promiscuous mode [ 1240.474724][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.513674][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1240.514984][T21542] bond1236: (slave vlan1035): Enslaving as an active interface with an up link [ 1240.525673][ T3686] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1240.546596][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f"]) [ 1240.578020][ T3686] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1240.597363][ T3686] usb 2-1: Manufacturer: syz [ 1240.605121][T14970] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1240.617079][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1240.635576][ T3686] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1240.664852][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1240.680160][ T3686] usb 2-1: no configuration chosen from 1 choice [ 1240.705825][ T922] usb 1-1: USB disconnect, device number 3 12:38:10 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401070c9, &(0x7f00000020c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x3ff, 0xffffffffffffff80, 0x2, 0x88e8, 0x2, 0x0, 0xaf66, 0x5, 0x400, 0x80, 0x8, 0xdf4d03e, 0x7, 0x1f}}) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000300)=""/38, 0x26}], 0x3, 0x1ff, 0x2, 0x2) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004030200"], 0x0, 0x0, 0x0}, 0x0) execveat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)=[&(0x7f00000001c0)='./binderfs/binder0\x00'], 0x800) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) 12:38:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1240.850354][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1240.884706][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1240.981387][T21550] 8021q: adding VLAN 0 to HW filter on device bond1237 [ 1241.009431][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.020976][ T3684] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1241.036138][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.050645][T21550] bond0: (slave bond1237): Enslaving as an active interface with an up link [ 1241.061795][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.100598][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1241.111817][ T922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1241.130048][T21554] device bridge1301 entered promiscuous mode [ 1241.145202][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.182819][T21554] bond1237: (slave vlan1036): Enslaving as an active interface with an up link 12:38:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1241.268429][T21556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1241.274913][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1241.288376][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 1241.296456][ T3689] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1241.296603][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1241.315262][T14970] usb 3-1: Manufacturer: syz [ 1241.338667][T14970] usb 3-1: config 0 descriptor?? [ 1241.365249][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1241.400171][T21556] 8021q: adding VLAN 0 to HW filter on device bond1238 [ 1241.415243][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.447754][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.462142][T21556] bond0: (slave bond1238): Enslaving as an active interface with an up link [ 1241.472544][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.491343][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.509456][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.526955][ T3684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1241.545948][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.561469][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.565066][ T3689] usb 4-1: Using ep0 maxpacket: 16 [ 1241.589746][T21558] device bridge1302 entered promiscuous mode [ 1241.598914][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1241.621696][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.639008][T21558] bond1238: (slave vlan1037): Enslaving as an active interface with an up link 12:38:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1241.715310][ T3684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1241.726030][T14970] rc_core: IR keymap rc-hauppauge not found [ 1241.731959][T14970] Registered IR keymap rc-empty [ 1241.745617][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1241.756643][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1241.765291][ T3684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1241.767700][ T3689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.775047][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1241.793056][ T3684] usb 5-1: Manufacturer: syz [ 1241.799593][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.801208][ T922] usb 1-1: Manufacturer: syz [ 1241.814094][ T25] audit: type=1804 audit(1640176691.252:2801): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536372F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1241.847015][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1241.868152][ T3684] usb 5-1: config 0 descriptor?? [ 1241.868444][T21561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1241.895143][ T922] usb 1-1: config 0 descriptor?? [ 1241.901423][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.905603][T14970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1241.927874][ T3689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1241.972986][ T3689] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.982538][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1056 [ 1242.020624][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.055092][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.082102][T21561] 8021q: adding VLAN 0 to HW filter on device bond1239 [ 1242.084859][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.107913][ T3689] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1242.113385][T21561] bond0: (slave bond1239): Enslaving as an active interface with an up link [ 1242.118148][ T3689] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1242.135585][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.146200][ T3689] usb 4-1: Manufacturer: syz [ 1242.158092][ T3689] usb 4-1: config 0 descriptor?? [ 1242.165117][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.178611][ T25] audit: type=1804 audit(1640176691.632:2802): pid=21572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536372F48C7C060 dev="sda1" ino=1177 res=1 errno=0 12:38:11 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/224) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) [ 1242.194693][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.245851][T21563] device bridge1303 entered promiscuous mode [ 1242.304963][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.309753][T21563] bond1239: (slave vlan1038): Enslaving as an active interface with an up link [ 1242.335330][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.342690][ T922] rc_core: IR keymap rc-hauppauge not found 12:38:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1242.356586][ T922] Registered IR keymap rc-empty [ 1242.362419][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.372348][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.404928][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.412196][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1242.435372][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1242.437858][T21584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1242.456649][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1242.481612][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1242.515208][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1057 12:38:12 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000c00)=[@timestamp, @mss={0x2, 0xfffffff8}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x7ff, 0xe4}], 0x5) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x8c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x44, 0xff, 0xff}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x40, 0x8, 0x80, 0xff, 0x2}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x51, "8676a864cddc09d53b4d47524d829895"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x3c, 0x7f, 0xfffb, 0xff}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x665, 0xf00, 0x40, [0xc000, 0x60, 0xc030]}]}, 0x1, [{0xcf, &(0x7f0000000440)=@string={0xcf, 0x3, "654629aced36f8b61f54c4a8c43a79894cbdc2dd69fd96acfaffbaa311d61ca1dd5b85e810c0a2363acc72c84f69e970c25ae335295f6a423a4aa4453fd91f1467005e0da0a5a0a7c460ad7313ba5b4bc9532d6deedc9a8659d1e67379b4595e465929b33e5d45459e8643930351556f5ded125e3d374e30ce1c236e309f19d17df613e4cfc1b43095103ab13115cafddc5df5a4589508318b32bd23bc3354e52ee0546ab2009c5cc906928598b9cfb6bdd670b5e5ea1f321d18e5396079cca9eb6ef2fdc86b6bdb68765d96cd"}}]}) syz_usb_control_io(r3, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0xf, {0xf, 0x3a, "14f0b5feedf29b50d5e90256bc"}}, &(0x7f0000000340)={0x0, 0x3, 0x22, @string={0x22, 0x3, "93e40bb0b12fd3869534433990fa69918deba9d004104cbd8ed159fea440ab06"}}, &(0x7f0000000540)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ptm_cap={0x3}, @generic={0x8, 0x10, 0x1, "5a02838ce0"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xc56e, 0xf000, 0x5b, [0x3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fff0, 0xff00, 0x5, [0xc000, 0x3f30, 0xff00f0]}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1, 0x2, '{v;8', "f2b83368"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x9, 0x57, 0x0, 0x7, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0x15, 0xfd, "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"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "76fa"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "74ac"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9c}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5fb9a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f1a922b4686d563e60bc66a400d4721628382842448d91904029330e9ea23000000006e55a8670cc0195b8ffa98b9a4df35969e390cb0396ac721", @ANYRES64=r4]) [ 1242.585113][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1242.591057][ T3689] Registered IR keymap rc-empty [ 1242.600619][T14970] usb 3-1: USB disconnect, device number 38 [ 1242.609640][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.631449][ T25] audit: type=1804 audit(1640176692.082:2803): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1242.662932][T21584] 8021q: adding VLAN 0 to HW filter on device bond1240 [ 1242.669089][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.698589][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.722292][ T3689] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 1242.731053][ T3686] usb 2-1: USB disconnect, device number 12 [ 1242.751396][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input1058 [ 1242.755139][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.801667][T21584] bond0: (slave bond1240): Enslaving as an active interface with an up link [ 1242.839712][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.840229][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.885216][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.886483][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.912591][T21587] device bridge1304 entered promiscuous mode [ 1242.915450][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.955424][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.956664][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.985004][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1242.997104][T21587] bond1240: (slave vlan1039): Enslaving as an active interface with an up link [ 1243.015671][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1243.026583][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:38:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1243.058540][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1243.077205][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.096238][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1243.114869][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.118916][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.135772][ T922] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1243.150355][ T922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1243.154663][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.172839][ T922] usb 1-1: USB disconnect, device number 4 [ 1243.214755][ T3686] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1243.222457][T14970] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1243.236092][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.280166][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.286938][T21593] 8021q: adding VLAN 0 to HW filter on device bond1241 [ 1243.309991][T21593] bond0: (slave bond1241): Enslaving as an active interface with an up link [ 1243.355065][ T3689] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1243.358130][T21593] device bridge1305 entered promiscuous mode [ 1243.389224][T21593] bond1241: (slave vlan1040): Enslaving as an active interface with an up link [ 1243.395634][ T3689] mceusb 4-1:0.0: Registered  with mce emulator interface version 1 [ 1243.410367][ T3689] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1243.426007][ T3689] usb 4-1: USB disconnect, device number 93 12:38:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1243.455701][ T3686] usb 2-1: Using ep0 maxpacket: 16 [ 1243.475091][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1243.528600][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:13 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1243.586392][ T3686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.605036][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 12:38:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f"]) [ 1243.678386][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1243.698706][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 12:38:13 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x3ff, 0xffffffffffffff80, 0x2, 0x88e8, 0x2, 0x0, 0xaf66, 0x5, 0x400, 0x80, 0x8, 0xdf4d03e, 0x7, 0x1f}}) (async) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000300)=""/38, 0x26}], 0x3, 0x1ff, 0x2, 0x2) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004030200"], 0x0, 0x0, 0x0}, 0x0) execveat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)=[&(0x7f00000001c0)='./binderfs/binder0\x00'], 0x800) (async) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) [ 1243.792120][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1243.806487][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1243.868361][ T3686] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1243.888495][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1243.914766][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1243.920703][ T3684] Registered IR keymap rc-empty [ 1243.934729][ T3686] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.954896][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1243.969431][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.001634][T21602] 8021q: adding VLAN 0 to HW filter on device bond1242 [ 1244.010594][ T25] audit: type=1804 audit(1640176693.462:2804): pid=21609 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430322F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1244.024976][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.075435][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1244.088883][T21602] bond0: (slave bond1242): Enslaving as an active interface with an up link [ 1244.102838][ T3686] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1244.114668][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1244.134830][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1244.142860][T14970] usb 3-1: Manufacturer: syz [ 1244.149358][ T3686] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1244.155614][ T3683] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1244.184863][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1059 [ 1244.207099][ T3686] usb 2-1: Manufacturer: syz [ 1244.235599][T14970] usb 3-1: config 0 descriptor?? [ 1244.255842][ T3686] usb 2-1: config 0 descriptor?? [ 1244.286095][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.306470][T21597] device bridge1306 entered promiscuous mode [ 1244.324910][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.365724][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.381780][T21597] bond1242: (slave vlan1041): Enslaving as an active interface with an up link [ 1244.404939][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.416904][ T3683] usb 1-1: Using ep0 maxpacket: 16 12:38:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1244.444949][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.475305][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.484783][ T25] audit: type=1804 audit(1640176693.942:2805): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536382F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1244.519665][T21590] UDC core: couldn't find an available UDC or it's busy: -16 [ 1244.545599][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.561644][T21590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1244.575089][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.585282][ T3683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 12:38:14 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401070c9, &(0x7f00000020c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x3ff, 0xffffffffffffff80, 0x2, 0x88e8, 0x2, 0x0, 0xaf66, 0x5, 0x400, 0x80, 0x8, 0xdf4d03e, 0x7, 0x1f}}) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000300)=""/38, 0x26}], 0x3, 0x1ff, 0x2, 0x2) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004030200"], 0x0, 0x0, 0x0}, 0x0) execveat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)=[&(0x7f00000001c0)='./binderfs/binder0\x00'], 0x800) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r4, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x3ff, 0xffffffffffffff80, 0x2, 0x88e8, 0x2, 0x0, 0xaf66, 0x5, 0x400, 0x80, 0x8, 0xdf4d03e, 0x7, 0x1f}}) (async) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000300)=""/38, 0x26}], 0x3, 0x1ff, 0x2, 0x2) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004030200"], 0x0, 0x0, 0x0}, 0x0) (async) execveat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)=[&(0x7f00000001c0)='./binderfs/binder0\x00'], 0x800) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r5]) (async) [ 1244.604849][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.607696][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1244.628164][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1244.640492][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1244.649305][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1244.681174][ T3683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1244.725619][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.725966][ T3684] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1244.746791][T14970] rc_core: IR keymap rc-hauppauge not found [ 1244.752698][T14970] Registered IR keymap rc-empty [ 1244.794929][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1244.820533][ T3684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1244.839135][ T25] audit: type=1804 audit(1640176694.292:2806): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3339342F48C7C060 dev="sda1" ino=1175 res=1 errno=0 [ 1244.844883][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1244.873635][ T3683] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1244.879607][ T3686] rc_core: IR keymap rc-hauppauge not found [ 1244.896882][ T3686] Registered IR keymap rc-empty [ 1244.902881][ T3684] usb 5-1: USB disconnect, device number 52 [ 1244.915579][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1244.931188][ T3683] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1244.944834][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1244.959870][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1244.978840][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1060 [ 1244.995655][ T3686] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2 [ 1245.008646][ T3683] usb 1-1: Manufacturer: syz [ 1245.022901][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.036332][ T3686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2/input1061 [ 1245.057230][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.075115][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.100097][ T3683] usb 1-1: config 0 descriptor?? [ 1245.105181][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.105497][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.124825][ T922] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1245.135263][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.142539][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.172820][T21623] 8021q: adding VLAN 0 to HW filter on device bond1243 [ 1245.181523][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.190435][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.231621][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.240469][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.257352][T21623] bond0: (slave bond1243): Enslaving as an active interface with an up link [ 1245.285106][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.292393][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.315284][ T3684] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1245.326974][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.336260][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.365151][ T922] usb 4-1: Using ep0 maxpacket: 16 [ 1245.385447][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.392996][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.427372][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1245.437175][T21624] device bridge1307 entered promiscuous mode [ 1245.464954][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.477445][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1245.487432][ T922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.499331][ T3686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1245.512598][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.535400][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1245.556741][ T3686] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1245.579856][T21624] bond1243: (slave vlan1042): Enslaving as an active interface with an up link [ 1245.614928][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 1245.620719][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1245.635572][T14970] usb 3-1: USB disconnect, device number 39 [ 1245.642989][ T3686] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1245.645817][ T3683] rc_core: IR keymap rc-hauppauge not found 12:38:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1245.671239][ T3683] Registered IR keymap rc-empty [ 1245.671448][ T922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1245.685237][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1245.706083][ T3686] usb 2-1: USB disconnect, device number 13 [ 1245.735225][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.753164][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.753269][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1245.774792][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1245.790603][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1245.790639][ T3684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1245.790664][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1245.855722][ T3683] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1245.855825][ T922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1245.880264][ T3684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1245.908476][ T3684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1245.928249][ T3683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1062 [ 1245.932420][ T3684] usb 5-1: Manufacturer: syz 12:38:15 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e50247eeffff651b0e44"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5eb7994c15d469df553e653fcfd0b6aa5f86d463e60bb16a400d472162832448d9190402930cc0195b8ffa98b9a0df353f47472c2ba6279449a5220c9f0313b68622691f089a16def2d2ac42f66b88d21e4521529c161c6e49665b723a015cb1cc323e0180ffffffffffff000000000000000000000020000000000000000000e99900"/182, @ANYRES64=r3]) [ 1245.960011][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1245.962815][ T922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 12:38:15 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000c00)=[@timestamp, @mss={0x2, 0xfffffff8}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x7ff, 0xe4}], 0x5) (async, rerun: 64) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async, rerun: 32) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x8c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x44, 0xff, 0xff}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x40, 0x8, 0x80, 0xff, 0x2}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x51, "8676a864cddc09d53b4d47524d829895"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x3c, 0x7f, 0xfffb, 0xff}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x665, 0xf00, 0x40, [0xc000, 0x60, 0xc030]}]}, 0x1, [{0xcf, &(0x7f0000000440)=@string={0xcf, 0x3, "654629aced36f8b61f54c4a8c43a79894cbdc2dd69fd96acfaffbaa311d61ca1dd5b85e810c0a2363acc72c84f69e970c25ae335295f6a423a4aa4453fd91f1467005e0da0a5a0a7c460ad7313ba5b4bc9532d6deedc9a8659d1e67379b4595e465929b33e5d45459e8643930351556f5ded125e3d374e30ce1c236e309f19d17df613e4cfc1b43095103ab13115cafddc5df5a4589508318b32bd23bc3354e52ee0546ab2009c5cc906928598b9cfb6bdd670b5e5ea1f321d18e5396079cca9eb6ef2fdc86b6bdb68765d96cd"}}]}) (rerun: 32) syz_usb_control_io(r3, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0xf, {0xf, 0x3a, "14f0b5feedf29b50d5e90256bc"}}, &(0x7f0000000340)={0x0, 0x3, 0x22, @string={0x22, 0x3, "93e40bb0b12fd3869534433990fa69918deba9d004104cbd8ed159fea440ab06"}}, &(0x7f0000000540)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ptm_cap={0x3}, @generic={0x8, 0x10, 0x1, "5a02838ce0"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xc56e, 0xf000, 0x5b, [0x3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fff0, 0xff00, 0x5, [0xc000, 0x3f30, 0xff00f0]}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1, 0x2, '{v;8', "f2b83368"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x9, 0x57, 0x0, 0x7, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0x15, 0xfd, "396f8955b09e50dd7ef0157d110bff9211e2beb83688c365ee8f7269275031d4396494a97612ebc2d98893a73d8078738c1076d114163d120e7361ff1dfee0295980400c6f95b77bc93f5aa1ce6e3610a4a59be955355cd8d3d0e6c4780780fe4935cb8ecb26f04a7ad8056f6f651c89f126d20428096498fce98d08ae31c3ce698620955eff3d85c72dd613704e77de76b2c3538bf24e34038bf876dc17b17002e9005b0b72f4fb23139d4e4709f42294532745ebd89d9f96561e3f069dbcfe5f10d7d1f579f9ba088b00c8419343716e7e16f1b10525b9ad8a6851278260e9d281f6320542f1307cb381096501305bb0e98c8bc868e3677a4027728f"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "76fa"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "74ac"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9c}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5fb9a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f1a922b4686d563e60bc66a400d4721628382842448d91904029330e9ea23000000006e55a8670cc0195b8ffa98b9a4df35969e390cb0396ac721", @ANYRES64=r4]) [ 1246.002807][ T922] usb 4-1: Manufacturer: syz [ 1246.013217][ T3684] usb 5-1: config 0 descriptor?? [ 1246.042534][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.072695][ T922] usb 4-1: config 0 descriptor?? [ 1246.147846][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.175540][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.187359][T21638] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.196635][T21638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.206858][T21638] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.215863][T21638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.226382][T21638] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.226823][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.235322][T21638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.235744][T21638] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.262032][T21638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.277309][T21638] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.286740][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.303206][T21638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.330168][T21637] 8021q: adding VLAN 0 to HW filter on device bond1244 [ 1246.335184][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.365918][T21637] bond0: (slave bond1244): Enslaving as an active interface with an up link [ 1246.387192][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.435825][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.445101][ T32] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1246.460729][T21642] device bridge1308 entered promiscuous mode [ 1246.475184][ T922] rc_core: IR keymap rc-hauppauge not found [ 1246.476060][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.481225][ T922] Registered IR keymap rc-empty [ 1246.481295][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.525793][ T3683] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1246.526459][ T25] audit: type=1804 audit(1640176695.982:2807): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430332F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1246.569435][ T3683] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1246.586872][ T3688] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1246.597184][ T3683] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1246.599802][T21642] bond1244: (slave vlan1043): Enslaving as an active interface with an up link [ 1246.613362][ T3683] usb 1-1: USB disconnect, device number 5 [ 1246.623248][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.680313][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 12:38:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1246.737620][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1063 [ 1246.821989][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.848710][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.875148][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 1246.875831][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 1246.890791][ T25] audit: type=1804 audit(1640176696.342:2808): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430332F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1246.928382][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.964767][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:38:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x105, &(0x7f0000000100)=@generic={0x1, 0x0, 0xfd, "7a90b1c5", "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"}) [ 1246.976089][T21646] 8021q: adding VLAN 0 to HW filter on device bond1245 12:38:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) [ 1246.999246][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.010063][T21646] bond0: (slave bond1245): Enslaving as an active interface with an up link [ 1247.020952][ T32] usb 2-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.036898][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.045631][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1247.046841][ T3688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.074637][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.099722][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1247.111539][T21657] device bridge1309 entered promiscuous mode [ 1247.114691][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.143672][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1247.158215][T21657] bond1245: (slave vlan1044): Enslaving as an active interface with an up link [ 1247.165099][ T3688] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1247.190154][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.215137][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=4101, bcdDevice= 0.40 [ 1247.215748][ T3688] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.225649][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.238106][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.256886][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:38:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52020000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1247.281598][ T32] usb 2-1: Product: syz [ 1247.304985][ T922] mceusb 4-1:0.0: Registered  with mce emulator interface version 1 [ 1247.313178][ T922] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1247.329794][ T32] usb 2-1: Manufacturer: syz [ 1247.334086][ T3688] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1247.342271][ T32] usb 2-1: SerialNumber: syz 12:38:16 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1247.351222][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1247.385613][T21639] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1247.393115][ T922] usb 4-1: USB disconnect, device number 94 [ 1247.403199][ T3688] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1247.448309][ T3688] usb 3-1: Manufacturer: syz [ 1247.520922][ T3688] usb 3-1: config 0 descriptor?? [ 1247.574766][ T3721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1247.589354][T21670] 8021q: adding VLAN 0 to HW filter on device bond1246 [ 1247.598023][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1247.625209][ T3684] Registered IR keymap rc-empty [ 1247.630157][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.647834][T21670] bond0: (slave bond1246): Enslaving as an active interface with an up link [ 1247.685313][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.697306][T21664] device bridge1310 entered promiscuous mode [ 1247.721759][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 12:38:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a020000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1247.734999][T21664] bond1246: (slave vlan1045): Enslaving as an active interface with an up link [ 1247.750027][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1064 [ 1247.775633][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.808874][ T25] audit: type=1804 audit(1640176697.262:2809): pid=21632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3536392F48C7C060 dev="sda1" ino=1175 res=1 errno=0 [ 1247.840867][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.849733][ T922] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1247.859017][ T3721] usb 1-1: Using ep0 maxpacket: 16 [ 1247.894836][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.906454][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1247.911467][ T25] audit: type=1804 audit(1640176697.322:2810): pid=21639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3339352F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1247.924962][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1247.995261][ T3721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.006690][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.015466][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1248.028219][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1248.040065][ T3721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1248.051523][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.060687][ T3721] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.077046][ T32] usbhid 2-1:1.0: can't add hid device: -71 [ 1248.083069][ T32] usbhid: probe of 2-1:1.0 failed with error -71 [ 1248.110961][ T922] usb 4-1: Using ep0 maxpacket: 16 [ 1248.117545][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.127393][ T32] usb 2-1: USB disconnect, device number 14 [ 1248.160156][T21673] 8021q: adding VLAN 0 to HW filter on device bond1247 [ 1248.168701][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.177633][ T3721] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1248.190437][ T3721] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1248.199976][ T3721] usb 1-1: Manufacturer: syz [ 1248.222115][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.231923][ T3721] usb 1-1: config 0 descriptor?? [ 1248.245897][T21673] bond0: (slave bond1247): Enslaving as an active interface with an up link [ 1248.265141][ T922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.276970][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.295685][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1248.310333][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1248.322012][ T922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1248.336298][ T3684] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1248.348706][ T3684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1248.359223][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:38:17 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000c00)=[@timestamp, @mss={0x2, 0xfffffff8}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x7ff, 0xe4}], 0x5) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x8c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x44, 0xff, 0xff}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x40, 0x8, 0x80, 0xff, 0x2}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x51, "8676a864cddc09d53b4d47524d829895"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x3c, 0x7f, 0xfffb, 0xff}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x665, 0xf00, 0x40, [0xc000, 0x60, 0xc030]}]}, 0x1, [{0xcf, &(0x7f0000000440)=@string={0xcf, 0x3, "654629aced36f8b61f54c4a8c43a79894cbdc2dd69fd96acfaffbaa311d61ca1dd5b85e810c0a2363acc72c84f69e970c25ae335295f6a423a4aa4453fd91f1467005e0da0a5a0a7c460ad7313ba5b4bc9532d6deedc9a8659d1e67379b4595e465929b33e5d45459e8643930351556f5ded125e3d374e30ce1c236e309f19d17df613e4cfc1b43095103ab13115cafddc5df5a4589508318b32bd23bc3354e52ee0546ab2009c5cc906928598b9cfb6bdd670b5e5ea1f321d18e5396079cca9eb6ef2fdc86b6bdb68765d96cd"}}]}) syz_usb_control_io(r3, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0xf, {0xf, 0x3a, "14f0b5feedf29b50d5e90256bc"}}, &(0x7f0000000340)={0x0, 0x3, 0x22, @string={0x22, 0x3, "93e40bb0b12fd3869534433990fa69918deba9d004104cbd8ed159fea440ab06"}}, &(0x7f0000000540)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ptm_cap={0x3}, @generic={0x8, 0x10, 0x1, "5a02838ce0"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xc56e, 0xf000, 0x5b, [0x3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fff0, 0xff00, 0x5, [0xc000, 0x3f30, 0xff00f0]}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1, 0x2, '{v;8', "f2b83368"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x9, 0x57, 0x0, 0x7, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x40, 0x15, 0xfd, "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"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "76fa"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "74ac"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9c}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5fb9a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f1a922b4686d563e60bc66a400d4721628382842448d91904029330e9ea23000000006e55a8670cc0195b8ffa98b9a4df35969e390cb0396ac721", @ANYRES64=r4]) [ 1248.405204][ T3684] usb 5-1: USB disconnect, device number 53 [ 1248.412711][T21677] device bridge1311 entered promiscuous mode [ 1248.505450][ T922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1248.527794][ T922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1248.555170][ T922] usb 4-1: Manufacturer: syz [ 1248.554832][T21677] bond1247: (slave vlan1046): Enslaving as an active interface with an up link [ 1248.583037][ T922] usb 4-1: config 0 descriptor?? 12:38:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a030000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1248.632945][T21681] UDC core: couldn't find an available UDC or it's busy: -16 [ 1248.654725][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1248.658008][T21681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1248.660862][ T3721] Registered IR keymap rc-empty [ 1248.696070][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1248.710283][ T25] audit: type=1804 audit(1640176698.162:2811): pid=21682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3339362F48C7C060 dev="sda1" ino=1177 res=1 errno=0 [ 1248.759768][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1248.783580][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1248.815168][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1248.831022][ T3684] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1248.873134][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1065 [ 1248.915276][ T3326] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1248.934881][ T922] rc_core: IR keymap rc-hauppauge not found [ 1248.940813][ T922] Registered IR keymap rc-empty [ 1248.965218][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.981346][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.007139][T21690] 8021q: adding VLAN 0 to HW filter on device bond1248 [ 1249.025097][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.033238][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.048283][T21690] bond0: (slave bond1248): Enslaving as an active interface with an up link [ 1249.057678][ T25] audit: type=1804 audit(1640176698.512:2812): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430342F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1249.065460][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.099477][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 1249.108414][ T922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1249.121982][T21686] device bridge1312 entered promiscuous mode [ 1249.138592][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1066 12:38:18 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) (async, rerun: 32) dup(r1) (rerun: 32) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e50247eeffff651b0e44"], 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5eb7994c15d469df553e653fcfd0b6aa5f86d463e60bb16a400d472162832448d9190402930cc0195b8ffa98b9a0df353f47472c2ba6279449a5220c9f0313b68622691f089a16def2d2ac42f66b88d21e4521529c161c6e49665b723a015cb1cc323e0180ffffffffffff000000000000000000000020000000000000000000e99900"/182, @ANYRES64=r3]) [ 1249.176749][ T3326] usb 2-1: Using ep0 maxpacket: 16 [ 1249.182271][T21686] bond1248: (slave vlan1047): Enslaving as an active interface with an up link [ 1249.206787][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.220256][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.255395][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.266933][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.275590][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.293159][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 12:38:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1249.314932][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.315134][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.320737][ T3326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.320788][ T3326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1249.320821][ T3326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.320845][ T3326] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1249.320871][ T3326] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.345127][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.345245][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.347292][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.347322][ T3684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1249.347348][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.360120][ T25] audit: type=1804 audit(1640176698.812:2813): pid=21697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3537302F48C7C060 dev="sda1" ino=1175 res=1 errno=0 [ 1249.375341][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.375458][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.376427][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1249.376442][ T3688] Registered IR keymap rc-empty [ 1249.376509][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.402459][T21700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.405468][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.405575][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.406491][ T3326] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1249.406519][ T3326] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1249.406538][ T3326] usb 2-1: Manufacturer: syz [ 1249.407352][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.421993][ T3326] usb 2-1: config 0 descriptor?? [ 1249.427837][ T3684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1249.427872][ T3684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1249.427895][ T3684] usb 5-1: Manufacturer: syz [ 1249.430131][ T3684] usb 5-1: config 0 descriptor?? [ 1249.435250][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.435373][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1249.438336][ T3688] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc2 [ 1249.439413][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc2/input1067 [ 1249.447537][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.468198][ T3721] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1249.468224][ T3721] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1249.474748][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.489000][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.501181][ T3721] usb 1-1: USB disconnect, device number 6 [ 1249.568325][T21704] 8021q: adding VLAN 0 to HW filter on device bond1249 [ 1249.581501][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.590212][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.630053][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.686540][T21704] bond0: (slave bond1249): Enslaving as an active interface with an up link [ 1249.808171][ T922] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1249.865828][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.905770][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:38:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) [ 1249.905785][T21705] device bridge1313 entered promiscuous mode [ 1249.905851][ T3326] rc_core: IR keymap rc-hauppauge not found 12:38:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6012bfb0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1249.905865][ T3326] Registered IR keymap rc-empty [ 1249.905930][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1249.929353][T21705] bond1249: (slave vlan1048): Enslaving as an active interface with an up link [ 1249.945885][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1249.946004][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.970292][ T922] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1249.985923][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1249.986633][ T3326] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc3 [ 1249.987759][ T3326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc3/input1068 [ 1249.988293][ T922] usb 4-1: USB disconnect, device number 95 [ 1250.011705][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.025746][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1250.045874][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.075285][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:38:19 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (rerun: 64) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x105, &(0x7f0000000100)=@generic={0x1, 0x0, 0xfd, "7a90b1c5", "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"}) [ 1250.078367][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.107506][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.107636][ T3688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1250.133276][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1250.144862][ T3688] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1250.280145][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 12:38:19 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1, &(0x7f0000000440)}, 0x40000001) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x0, 0xb15, 0x9, 0x0, 0x0, 0x899a, 0x0, 0x2800}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x20200, 0xfffffffffffffffe) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 1250.397217][T21713] 8021q: adding VLAN 0 to HW filter on device bond1250 [ 1250.401331][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.445494][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.468254][T21713] bond0: (slave bond1250): Enslaving as an active interface with an up link [ 1250.476289][ T3688] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1250.478900][ T3721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1250.502798][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.537406][ T3688] usb 3-1: USB disconnect, device number 40 [ 1250.548047][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.585283][ T3326] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1250.598823][ T25] audit: type=1804 audit(1640176700.052:2814): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430352F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1250.615705][T21711] device vlan1049 entered promiscuous mode [ 1250.642130][ T3326] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1250.660648][T21711] device bridge1314 entered promiscuous mode [ 1250.666227][ T3326] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:38:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x64000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1250.692809][T21711] bond1250: (slave vlan1049): Enslaving as an active interface with an up link [ 1250.755567][ T3721] usb 1-1: Using ep0 maxpacket: 16 [ 1250.764383][ T3326] usb 2-1: USB disconnect, device number 15 12:38:20 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:38:20 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) (async) dup(r1) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e50247eeffff651b0e44"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5eb7994c15d469df553e653fcfd0b6aa5f86d463e60bb16a400d472162832448d9190402930cc0195b8ffa98b9a0df353f47472c2ba6279449a5220c9f0313b68622691f089a16def2d2ac42f66b88d21e4521529c161c6e49665b723a015cb1cc323e0180ffffffffffff000000000000000000000020000000000000000000e99900"/182, @ANYRES64=r3]) [ 1250.845853][T21724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1250.875131][ T3721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.907089][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.955989][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1250.975648][ T3721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1250.987519][ T3721] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.065242][ T3721] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1251.089030][ T3721] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1251.096104][T21724] 8021q: adding VLAN 0 to HW filter on device bond1251 [ 1251.112691][ T3721] usb 1-1: Manufacturer: syz [ 1251.119212][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1251.126985][T21724] bond0: (slave bond1251): Enslaving as an active interface with an up link [ 1251.128875][ T3684] Registered IR keymap rc-empty [ 1251.147871][ T3721] usb 1-1: config 0 descriptor?? [ 1251.153169][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.190017][T21733] device bridge1315 entered promiscuous mode [ 1251.197529][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.221969][T21733] bond1251: (slave vlan1050): Enslaving as an active interface with an up link 12:38:20 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) (async) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1, &(0x7f0000000440)}, 0x40000001) (async) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x0, 0xb15, 0x9, 0x0, 0x0, 0x899a, 0x0, 0x2800}, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x20200, 0xfffffffffffffffe) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 12:38:20 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x105, &(0x7f0000000100)=@generic={0x1, 0x0, 0xfd, "7a90b1c5", "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"}) [ 1251.235834][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1251.255225][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1069 [ 1251.283264][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.315123][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.322464][T14970] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1251.344996][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:38:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1251.375461][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.404842][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.444731][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.475368][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.490246][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1251.505229][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1251.511159][ T3721] Registered IR keymap rc-empty [ 1251.525535][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.538333][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:21 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1251.565710][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.576112][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.595627][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1251.615370][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.626039][ T3721] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1251.667302][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1070 [ 1251.687170][ T3684] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1251.697642][ T3684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1251.721822][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.730024][T21751] 8021q: adding VLAN 0 to HW filter on device bond1252 [ 1251.739150][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.761794][T21751] bond0: (slave bond1252): Enslaving as an active interface with an up link [ 1251.789866][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1251.802982][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1251.818506][ T3684] usb 5-1: USB disconnect, device number 54 [ 1251.826230][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.839073][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1251.849791][T21744] device bridge1316 entered promiscuous mode [ 1251.857994][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.878562][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.915246][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.918095][T21744] bond1252: (slave vlan1051): Enslaving as an active interface with an up link [ 1251.956603][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1251.967497][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1251.979952][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1251.992633][T14970] usb 3-1: Manufacturer: syz 12:38:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1252.015019][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1252.023236][T14970] usb 3-1: config 0 descriptor?? [ 1252.046050][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1252.053368][ T922] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1252.095334][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1252.101362][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1252.124804][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1252.155051][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1252.188240][ T3721] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1252.197734][ T3721] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1252.209605][T21756] 8021q: adding VLAN 0 to HW filter on device bond1253 [ 1252.221819][ T3721] usb 1-1: USB disconnect, device number 7 [ 1252.266699][ T25] audit: type=1804 audit(1640176701.722:2815): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3537312F48C7C060 dev="sda1" ino=1182 res=1 errno=0 [ 1252.300581][ T922] usb 4-1: Using ep0 maxpacket: 16 [ 1252.308162][T21756] bond0: (slave bond1253): Enslaving as an active interface with an up link [ 1252.372396][T21758] device bridge1317 entered promiscuous mode [ 1252.399388][T21758] bond1253: (slave vlan1052): Enslaving as an active interface with an up link [ 1252.425125][ T922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.436926][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.449694][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1252.460777][ T922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1252.471377][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.564502][ T922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1252.580902][ T922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1252.589890][ T922] usb 4-1: Manufacturer: syz [ 1252.598857][ T922] usb 4-1: config 0 descriptor?? 12:38:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) 12:38:22 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:38:22 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) (async) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1, &(0x7f0000000440)}, 0x40000001) (async, rerun: 32) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x0, 0xb15, 0x9, 0x0, 0x0, 0x899a, 0x0, 0x2800}, 0x0) (async, rerun: 64) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x20200, 0xfffffffffffffffe) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 12:38:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1252.690923][T21767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:22 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x10440, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000552028b9ae0138b14201040000010902380001000000000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5dc006531e3c57461ceaedbdfb3790ef0fbf36c2d57c658e86dc37676211ebc82"], 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="d9da6fe87d46985156c9d6e25f8e47c279164a01eada60963f38ccbb1809251f403f56d96b093e8bb963eb162a5090ded048e4a33f93cf4fd321e0fcaec4d0bb3cfeb9a09fab552a201506142d0fb43d54a566df5189d6d6b81c9028367376701065815b1de9c2ced57018320f11cb13c50cc96e45868ea461fe9b57cea7f0b489c693e86f16fb074a1291643943638f2649fa34", 0x94) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x105481) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) [ 1252.835867][T21775] 8021q: adding VLAN 0 to HW filter on device bond1254 [ 1252.863021][T21775] bond0: (slave bond1254): Enslaving as an active interface with an up link [ 1252.863275][ T25] audit: type=1804 audit(1640176702.312:2816): pid=21745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430362F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1252.960814][T21767] device bridge1318 entered promiscuous mode [ 1252.984748][ T922] rc_core: IR keymap rc-hauppauge not found [ 1252.986504][T21767] bond1254: (slave vlan1053): Enslaving as an active interface with an up link [ 1252.990687][ T922] Registered IR keymap rc-empty 12:38:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6d0c0000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1252.990778][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.064853][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.081332][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1253.092794][ T3721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1253.103056][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1253.129755][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1071 [ 1253.146932][ T3326] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1253.182491][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.212789][T21780] 8021q: adding VLAN 0 to HW filter on device bond1255 [ 1253.225237][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.252071][T21780] bond0: (slave bond1255): Enslaving as an active interface with an up link [ 1253.254867][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.296002][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.297788][T21780] device bridge1319 entered promiscuous mode [ 1253.330925][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.340680][T21780] bond1255: (slave vlan1054): Enslaving as an active interface with an up link [ 1253.354876][ T3721] usb 1-1: Using ep0 maxpacket: 16 [ 1253.365112][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.386664][ T3326] usb 2-1: device descriptor read/64, error 18 [ 1253.408053][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.444728][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.475088][ T3721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.486521][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.495606][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.508503][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1253.529642][ T922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.539064][ T3721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1253.551262][ T3721] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.568414][ T922] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1253.581812][ T922] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1253.597574][ T922] usb 4-1: USB disconnect, device number 96 [ 1253.654761][ T3721] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1253.675466][ T3326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1253.679404][ T3721] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1253.704363][ T3721] usb 1-1: Manufacturer: syz [ 1253.732471][ T3721] usb 1-1: config 0 descriptor?? [ 1253.876629][ T3326] usb 2-1: device descriptor read/64, error 18 12:38:23 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0xff, 0x7, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x7, 0x1) syz_open_dev$hidraw(&(0x7f00000001c0), 0xd587, 0x200c00) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x18, &(0x7f0000000140)=@generic={0x2, 0x0, 0x10, "75d718c3", "a883633c153323c27e0a2976e7fb6d4b"}) 12:38:23 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1254.007091][ T3326] usb usb2-port1: attempt power cycle 12:38:23 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x250, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0x8, 0x8, 0x8, 0x8001, 0x4, 0xb34b, 0x0, 0x1, 0x0, 0xe8d}, 0xffffffffffffffff, 0x2, r3, 0xb) 12:38:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6e0c0000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1254.134718][T14970] rc_core: IR keymap rc-hauppauge not found [ 1254.140764][T14970] Registered IR keymap rc-empty [ 1254.152504][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.168345][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.204916][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.215145][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1254.221257][ T3721] Registered IR keymap rc-empty [ 1254.237886][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1254.252887][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.265793][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1073 [ 1254.280715][ T3684] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1254.289878][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.306588][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.331293][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1254.348141][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.359306][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1072 [ 1254.386894][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.395437][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.408397][T21791] 8021q: adding VLAN 0 to HW filter on device bond1256 [ 1254.426440][ T3326] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1254.429991][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.450977][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.460467][T21791] bond0: (slave bond1256): Enslaving as an active interface with an up link [ 1254.484808][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.495038][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.508438][T21795] device bridge1320 entered promiscuous mode [ 1254.516182][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.517313][T12050] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1254.524873][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.547197][ T3326] usb 2-1: Invalid ep0 maxpacket: 185 [ 1254.575898][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.583109][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 1254.595038][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.615057][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:38:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1254.617180][T21795] bond1256: (slave vlan1055): Enslaving as an active interface with an up link [ 1254.645226][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.652601][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.686537][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1254.695083][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.706215][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.707075][ T3326] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1254.718595][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1254.740995][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1254.751238][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.770263][T21800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.781935][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1254.796306][T12050] usb 4-1: Using ep0 maxpacket: 16 [ 1254.802519][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.810751][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1254.833127][T14970] usb 3-1: USB disconnect, device number 41 [ 1254.840671][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1254.856423][ T3326] usb 2-1: Invalid ep0 maxpacket: 185 [ 1254.861848][ T3684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1254.861879][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.883514][ T3326] usb usb2-port1: unable to enumerate USB device [ 1254.917661][ T3721] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1254.939742][ T3721] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1254.964797][T12050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.969841][ T3721] usb 1-1: USB disconnect, device number 8 [ 1254.979753][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.008134][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1255.024320][T12050] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1255.024992][ T3684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1255.042807][T12050] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.048046][T21803] 8021q: adding VLAN 0 to HW filter on device bond1257 [ 1255.089640][ T3684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1255.110579][ T3684] usb 5-1: Manufacturer: syz [ 1255.111427][T21803] bond0: (slave bond1257): Enslaving as an active interface with an up link [ 1255.135976][ T3684] usb 5-1: config 0 descriptor?? [ 1255.150804][T12050] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1255.183516][T12050] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1255.196076][T12050] usb 4-1: Manufacturer: syz [ 1255.216886][T12050] usb 4-1: config 0 descriptor?? [ 1255.248342][T21800] device bridge1321 entered promiscuous mode 12:38:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB]) [ 1255.291801][T21800] bond1257: (slave vlan1056): Enslaving as an active interface with an up link 12:38:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74030000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1255.447216][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1255.490041][ T3684] rc_core: IR keymap rc-hauppauge not found [ 1255.498309][ T3684] Registered IR keymap rc-empty [ 1255.507533][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.544841][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.565146][T14970] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1255.577828][ T3684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1255.614680][ T3684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1074 [ 1255.617734][T12050] rc_core: IR keymap rc-hauppauge not found [ 1255.641249][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.648348][T21808] 8021q: adding VLAN 0 to HW filter on device bond1258 [ 1255.659123][T12050] Registered IR keymap rc-empty [ 1255.673219][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.677127][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.689888][ T25] audit: type=1804 audit(1640176705.142:2817): pid=21794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430372F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1255.690609][T21808] bond0: (slave bond1258): Enslaving as an active interface with an up link [ 1255.755115][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.762434][ T3721] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1255.777494][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.779462][T21811] device bridge1322 entered promiscuous mode [ 1255.792324][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.816326][T12050] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1255.820330][T14970] usb 3-1: Using ep0 maxpacket: 16 [ 1255.837601][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.848556][T21811] bond1258: (slave vlan1057): Enslaving as an active interface with an up link [ 1255.861841][T12050] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1075 12:38:25 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x10440, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000552028b9ae0138b14201040000010902380001000000000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5dc006531e3c57461ceaedbdfb3790ef0fbf36c2d57c658e86dc37676211ebc82"], 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="d9da6fe87d46985156c9d6e25f8e47c279164a01eada60963f38ccbb1809251f403f56d96b093e8bb963eb162a5090ded048e4a33f93cf4fd321e0fcaec4d0bb3cfeb9a09fab552a201506142d0fb43d54a566df5189d6d6b81c9028367376701065815b1de9c2ced57018320f11cb13c50cc96e45868ea461fe9b57cea7f0b489c693e86f16fb074a1291643943638f2649fa34", 0x94) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x105481) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (rerun: 64) 12:38:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1255.884869][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.922458][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.924904][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.975775][T14970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.987475][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1255.997179][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.015508][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1256.034630][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1256.045709][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.046037][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1256.064647][ T3721] usb 1-1: Using ep0 maxpacket: 16 [ 1256.072076][ T3684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1256.087377][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.098687][T14970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1256.109827][ T25] audit: type=1804 audit(1640176705.552:2818): pid=21817 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.148619][ T3684] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1256.155204][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.158278][ T3684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1256.178588][T14970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1256.196073][T14970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.217317][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.224921][ T3721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.224971][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1256.225000][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1256.225024][ T3721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1256.225047][ T3721] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.230832][ T3684] usb 5-1: USB disconnect, device number 55 [ 1256.247836][ T25] audit: type=1804 audit(1640176705.592:2819): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.325251][ T3721] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1256.352588][ T3721] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1256.369275][ T3721] usb 1-1: Manufacturer: syz [ 1256.376477][T14970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1256.385346][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.391177][T14970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1256.415940][ T3721] usb 1-1: config 0 descriptor?? [ 1256.421195][T14970] usb 3-1: Manufacturer: syz [ 1256.425431][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.430409][ T25] audit: type=1804 audit(1640176705.642:2820): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.468059][T14970] usb 3-1: config 0 descriptor?? [ 1256.469474][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.505898][T12050] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1256.546775][T12050] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1256.558236][T21822] 8021q: adding VLAN 0 to HW filter on device bond1259 [ 1256.561320][T12050] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:38:26 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1256.593194][T21822] bond0: (slave bond1259): Enslaving as an active interface with an up link [ 1256.595733][ T25] audit: type=1804 audit(1640176705.642:2821): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.605394][T12050] usb 4-1: USB disconnect, device number 97 [ 1256.765611][T21825] device bridge1323 entered promiscuous mode 12:38:26 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x10440, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000552028b9ae0138b14201040000010902380001000000000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5dc006531e3c57461ceaedbdfb3790ef0fbf36c2d57c658e86dc37676211ebc82"], 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="d9da6fe87d46985156c9d6e25f8e47c279164a01eada60963f38ccbb1809251f403f56d96b093e8bb963eb162a5090ded048e4a33f93cf4fd321e0fcaec4d0bb3cfeb9a09fab552a201506142d0fb43d54a566df5189d6d6b81c9028367376701065815b1de9c2ced57018320f11cb13c50cc96e45868ea461fe9b57cea7f0b489c693e86f16fb074a1291643943638f2649fa34", 0x94) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x105481) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x10440, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000552028b9ae0138b14201040000010902380001000000000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5dc006531e3c57461ceaedbdfb3790ef0fbf36c2d57c658e86dc37676211ebc82"], 0x0, 0x0, 0x0}, 0x0) (async) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="d9da6fe87d46985156c9d6e25f8e47c279164a01eada60963f38ccbb1809251f403f56d96b093e8bb963eb162a5090ded048e4a33f93cf4fd321e0fcaec4d0bb3cfeb9a09fab552a201506142d0fb43d54a566df5189d6d6b81c9028367376701065815b1de9c2ced57018320f11cb13c50cc96e45868ea461fe9b57cea7f0b489c693e86f16fb074a1291643943638f2649fa34", 0x94) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x105481) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) [ 1256.823340][ T25] audit: type=1804 audit(1640176705.642:2822): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.881646][ T25] audit: type=1804 audit(1640176705.652:2823): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1256.919690][T21825] bond1259: (slave vlan1058): Enslaving as an active interface with an up link 12:38:26 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x250, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0x8, 0x8, 0x8, 0x8001, 0x4, 0xb34b, 0x0, 0x1, 0x0, 0xe8d}, 0xffffffffffffffff, 0x2, r3, 0xb) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x250, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0x8, 0x8, 0x8, 0x8001, 0x4, 0xb34b, 0x0, 0x1, 0x0, 0xe8d}, 0xffffffffffffffff, 0x2, r3, 0xb) (async) [ 1256.929036][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1256.939874][ T3721] Registered IR keymap rc-empty [ 1256.955927][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1256.986776][ T25] audit: type=1804 audit(1640176705.662:2824): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1257.036213][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.043645][T14970] rc_core: IR keymap rc-hauppauge not found [ 1257.049556][T14970] Registered IR keymap rc-empty [ 1257.065110][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.073299][ T25] audit: type=1804 audit(1640176705.662:2825): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430312F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1257.110614][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1257.113273][ T3689] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1257.127178][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.146873][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1076 [ 1257.175344][T14970] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1257.199162][T14970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input1077 [ 1257.225863][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.235475][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.265080][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.272482][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.305475][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.312758][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.336048][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.345094][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.364773][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.375576][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.385023][ T3684] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1257.395329][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.406855][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.416866][ T3689] usb 5-1: Using ep0 maxpacket: 16 [ 1257.425154][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.457087][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.466061][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.504899][ T32] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1257.515559][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.522868][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.554897][T14970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1257.557039][ T3689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.562379][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.586674][ T3684] usb 2-1: device descriptor read/64, error 18 [ 1257.596684][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1257.612244][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1257.615097][ T3721] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1257.630237][ T3689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1257.630268][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.658196][T14970] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1257.668855][T14970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1257.695709][T14970] usb 3-1: USB disconnect, device number 42 [ 1257.726799][ T3689] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1257.737973][ T3689] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1257.748135][ T3689] usb 5-1: Manufacturer: syz [ 1257.757454][ T3721] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1257.758615][ T3689] usb 5-1: config 0 descriptor?? [ 1257.785003][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 1257.797353][ T3721] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1257.850284][ T3721] usb 1-1: USB disconnect, device number 9 [ 1257.857727][ T3684] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1257.904845][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.926528][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1257.955747][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1257.968030][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1257.979400][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.064745][ T3684] usb 2-1: device descriptor read/64, error 18 [ 1258.075360][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1258.085977][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1258.096333][ T32] usb 4-1: Manufacturer: syz 12:38:27 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0xff, 0x7, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x7, 0x1) (async) syz_open_dev$hidraw(&(0x7f00000001c0), 0xd587, 0x200c00) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x18, &(0x7f0000000140)=@generic={0x2, 0x0, 0x10, "75d718c3", "a883633c153323c27e0a2976e7fb6d4b"}) 12:38:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:38:27 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB]) [ 1258.115201][ T32] usb 4-1: config 0 descriptor?? [ 1258.134706][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1258.140727][ T3689] Registered IR keymap rc-empty [ 1258.149453][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.184893][ T3684] usb usb2-port1: attempt power cycle [ 1258.195934][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.229713][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1258.248587][ T3689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1258.291314][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1078 [ 1258.316680][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.358540][T21839] 8021q: adding VLAN 0 to HW filter on device bond1260 [ 1258.369096][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.400663][T21839] bond0: (slave bond1260): Enslaving as an active interface with an up link [ 1258.411814][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.451776][T21839] device bridge1324 entered promiscuous mode [ 1258.464938][ T32] rc_core: IR keymap rc-hauppauge not found [ 1258.467921][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.470859][ T32] Registered IR keymap rc-empty [ 1258.470932][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:38:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x82010000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1258.486034][T21839] bond1260: (slave vlan1059): Enslaving as an active interface with an up link [ 1258.494968][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.525543][ T32] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1258.545315][ T3721] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1258.556731][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.557832][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1079 [ 1258.586538][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.595594][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 1258.595610][ T25] audit: type=1804 audit(1640176708.042:2834): pid=21833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430382F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1258.605381][ T3688] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1258.638795][ T3684] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1258.650956][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1258.666231][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.676277][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.697460][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.715110][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.744962][ T3684] usb 2-1: Invalid ep0 maxpacket: 185 [ 1258.745291][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.750508][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.792418][T21852] 8021q: adding VLAN 0 to HW filter on device bond1261 [ 1258.794717][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.816750][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.829868][T21852] bond0: (slave bond1261): Enslaving as an active interface with an up link [ 1258.840373][ T3721] usb 3-1: Using ep0 maxpacket: 16 [ 1258.847737][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.866998][ T3689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1258.872418][T21854] device bridge1325 entered promiscuous mode [ 1258.885107][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.909926][ T3689] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1258.910750][T21854] bond1261: (slave vlan1060): Enslaving as an active interface with an up link [ 1258.925484][ T3689] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1258.929589][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.947420][ T3684] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1258.984971][ T3721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.001307][ T3689] usb 5-1: USB disconnect, device number 56 [ 1259.008150][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1259.018407][ T3721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1259.036838][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1259.048899][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 1259.055058][ T3684] usb 2-1: Invalid ep0 maxpacket: 185 [ 1259.060697][ T3684] usb usb2-port1: unable to enumerate USB device 12:38:28 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd00d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f000000000000000000000057b83de7f89f3b1c388e3edf2d60d6f0db84d361bfd13f9f0d81c7e19d35ced7b4dc1cea5da8fb0dd688dc0dba6300a6f313070fa6d3191ad285ab6987ec394270a186fa2f2e3b3f4ec99cc0aaebbf9bf3f697dbb7448d2cba34578032b0cb37cc55f088c9dd5e135f3d56a3d955e785473ffd612e3d79a04fa882071775fc93a8bb14092937fe6413381d1449bc5f4f461b46a31958b093f48a2290af1704803256f6ec7bb3e4873d5e973f428fcccd9e3e2cc6cf75c054059ab9899422f11460c3ab3f31eedce2b005e83f4bf3674aaf7fc62a76f791418acc96a4af1002caa63763c360d765fd2e380390d83e351820e7e8a244204d373c8a13f13a8a91e3fd925f4b3cedf6816e3eadbe9d436055b2724eb936a3742919c538", @ANYRES64=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x250, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0x8, 0x8, 0x8, 0x8001, 0x4, 0xb34b, 0x0, 0x1, 0x0, 0xe8d}, 0xffffffffffffffff, 0x2, r3, 0xb) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x250, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x10000, 0x8, 0x8, 0x8, 0x8001, 0x4, 0xb34b, 0x0, 0x1, 0x0, 0xe8d}, 0xffffffffffffffff, 0x2, r3, 0xb) (async) 12:38:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x83000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1259.096484][ T32] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1259.120891][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1259.155911][ T3721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1259.187513][ T32] usb 4-1: USB disconnect, device number 98 [ 1259.188293][ T3688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.197257][ T3721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1259.219366][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1259.260518][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1259.266808][ T3721] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:38:28 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1259.350983][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1259.405165][ T3721] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1259.421092][ T3721] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1259.443150][ T3721] usb 3-1: Manufacturer: syz [ 1259.444189][ T3688] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1259.467146][ T3721] usb 3-1: config 0 descriptor?? [ 1259.478226][T21873] 8021q: adding VLAN 0 to HW filter on device bond1262 [ 1259.501361][T21873] bond0: (slave bond1262): Enslaving as an active interface with an up link [ 1259.523004][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.538148][T21869] device bridge1326 entered promiscuous mode [ 1259.551733][T21869] bond1262: (slave vlan1061): Enslaving as an active interface with an up link 12:38:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88470000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1259.640151][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1259.675944][ T3688] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1259.693614][ T3688] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1259.702038][ T3688] usb 1-1: Manufacturer: syz [ 1259.725063][ T25] audit: type=1804 audit(1640176709.162:2835): pid=21844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3537332F48C7C060 dev="sda1" ino=1187 res=1 errno=0 [ 1259.725410][ T32] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1259.771667][ T3688] usb 1-1: config 0 descriptor?? [ 1259.848693][T21880] 8021q: adding VLAN 0 to HW filter on device bond1263 [ 1259.855042][ T3721] rc_core: IR keymap rc-hauppauge not found [ 1259.861486][ T3721] Registered IR keymap rc-empty [ 1259.879474][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1259.891158][T21880] bond0: (slave bond1263): Enslaving as an active interface with an up link [ 1259.914943][T18122] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1259.921775][T21881] device bridge1327 entered promiscuous mode [ 1259.927136][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 12:38:29 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snps_udc_core', 0x200201, 0x30) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x7, 0x2, 0x20, 0x0, 0x7ff, 0xa0440, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xc690}, 0x2520, 0x4, 0x55, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x5e5, 0x0, 0xfff}, 0x0, 0x9, r2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) [ 1259.948162][T21881] bond1263: (slave vlan1062): Enslaving as an active interface with an up link [ 1259.985576][ T3721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 12:38:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88480000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1260.004719][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 1260.011530][ T3721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input1080 [ 1260.056693][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.077819][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.105376][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.126427][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.140769][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1260.154906][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.165230][T18122] usb 5-1: Using ep0 maxpacket: 16 [ 1260.172562][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1260.185400][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1260.196717][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.206206][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1260.245347][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.251813][T21886] 8021q: adding VLAN 0 to HW filter on device bond1264 [ 1260.274983][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.282101][ T3688] rc_core: IR keymap rc-hauppauge not found [ 1260.286191][T18122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.299773][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1260.305651][ T3688] Registered IR keymap rc-empty [ 1260.310940][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.322554][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1260.331504][T21886] bond0: (slave bond1264): Enslaving as an active interface with an up link [ 1260.341834][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.356087][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1260.374724][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.377588][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.387059][T18122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1260.405920][T21889] device bridge1328 entered promiscuous mode [ 1260.406646][ T3689] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1260.412144][ T32] usb 4-1: Manufacturer: syz [ 1260.427539][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.436673][T18122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1260.437924][ T3688] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1260.448408][T18122] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1260.478069][ T3721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1260.508435][ T32] usb 4-1: config 0 descriptor?? [ 1260.509254][ T3688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input1081 [ 1260.517962][ T3721] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1260.542351][T21889] bond1264: (slave vlan1063): Enslaving as an active interface with an up link [ 1260.559560][ T3721] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1260.579260][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.611192][ T3721] usb 3-1: USB disconnect, device number 43 [ 1260.627226][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 12:38:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1260.655062][T18122] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1260.676998][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.677091][T18122] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1260.715316][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 1260.727555][T18122] usb 5-1: Manufacturer: syz [ 1260.738356][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.760772][T18122] usb 5-1: config 0 descriptor?? [ 1260.777868][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.828238][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.841738][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.851023][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.872422][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1260.895547][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.905252][ T32] rc_core: IR keymap rc-hauppauge not found [ 1260.911518][ T32] Registered IR keymap rc-empty [ 1260.915024][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1260.926343][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1260.938550][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.956028][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1260.968926][T21894] 8021q: adding VLAN 0 to HW filter on device bond1265 [ 1260.972840][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1260.990543][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1260.996853][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 12:38:30 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0xff, 0x7, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000180), 0x7, 0x1) (async) syz_open_dev$hidraw(&(0x7f00000001c0), 0xd587, 0x200c00) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (rerun: 32) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r2]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x18, &(0x7f0000000140)=@generic={0x2, 0x0, 0x10, "75d718c3", "a883633c153323c27e0a2976e7fb6d4b"}) [ 1261.016269][ T25] audit: type=1804 audit(1640176710.472:2836): pid=21870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3430392F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1261.018549][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input1082 [ 1261.048662][T21894] bond0: (slave bond1265): Enslaving as an active interface with an up link [ 1261.086304][ T3688] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1261.090312][T21896] device vlan1064 entered promiscuous mode [ 1261.109989][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.114974][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.131353][T21896] device bridge1329 entered promiscuous mode [ 1261.147393][ T3688] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1261.159392][ T3688] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1261.165912][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.189309][T21896] device bridge1329 left promiscuous mode [ 1261.214885][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.217463][ T3688] usb 1-1: USB disconnect, device number 10 [ 1261.222150][T18122] rc_core: IR keymap rc-hauppauge not found [ 1261.244803][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.256066][T18122] Registered IR keymap rc-empty [ 1261.273211][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.274954][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1261.291436][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.314826][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.323037][ T3689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1261.326833][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.340565][ T3689] usb 2-1: Manufacturer: syz [ 1261.346192][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.366989][ T3689] usb 2-1: config 0 descriptor?? [ 1261.374880][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:38:30 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000002300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="9dd16dff702513d5203d76a8b3f9886dda200a014fadd42f07da771943a5a28450887c7ff796f3bf71953e7f6871d1e65631ce3acfac7f494a7b75767a7855c75000aee28ad11570f50c32ea83dc002e0671e2437320e13ba8d944c0ab623df21845463351366892e907511498832bc7493330607b934f275e4e556ff3934020d54e2c9a6abcb4edde106fd34a1eec8dc790802148d8edac6ebf0c5803d62c59454b785beda13a9b1830437a32ac2cb2cb072974522235eba5e661d3e5049e434f07b13001b89e67ee316ed21a500e6a97bfad8284ff63c0e4fc965281ac589aa557d5817369f5e9ac51e2eaf64a", 0xee, r3}, 0x68) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r6 = pidfd_getfd(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1f}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @clear_death, @request_death, @enter_looper, @enter_looper, @enter_looper, @acquire_done], 0x95, 0x0, &(0x7f0000000580)="0b1d20fa632a42c7c130fcac332fdfb9be71d0e22b450bb6b49b5e3bc038240445acbef216ecd5b2369e1493e50c5d03ce1193ddc6e7364562bdb431afefc5e9a6f58b9dcfb9c1213a9288f866a017315a806919d6445a66acbde41d820a4f0ff670c08df065b07a545c4fafa03fd59f215f47c1b93403b3482a9d1b168c72ab4045cca92507cdaa877d130a93d4ca987db2978444"}) r7 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r7]) [ 1261.391466][T18122] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 1261.418244][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.443006][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input1083 [ 1261.464878][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1261.489414][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.501842][ T32] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1261.512585][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1261.541445][ T32] usb 4-1: USB disconnect, device number 99 [ 1261.544391][T12050] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1261.554929][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 12:38:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB]) 12:38:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8e45e097}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1261.585107][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.634645][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.665126][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.715188][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.745293][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.805395][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.844978][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.888141][T18122] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1261.941891][T18122] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1261.961027][T18122] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1262.055234][ T922] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1262.304936][ T922] usb 1-1: Using ep0 maxpacket: 16 [ 1262.429323][ T922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.459947][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1262.509434][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1262.550480][ T922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1262.578102][ T922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.610477][ T32] usb 5-1: USB disconnect, device number 57 12:38:31 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 1262.685267][ T922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1262.701727][ T922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1262.736298][ T922] usb 1-1: Manufacturer: syz [ 1262.767607][T18122] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1262.780396][ T922] usb 1-1: config 0 descriptor?? 12:38:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000053000000", @ANYRES32=r9, @ANYBLOB="000000200000000008000a000f"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x97e0458e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 1262.965524][ T25] audit: type=1804 audit(1640176712.422:2837): pid=21931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430332F48C7C060 dev="sda1" ino=1178 res=1 errno=0 [ 1263.024854][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1263.145316][T18122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.167627][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.209387][T18122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1263.239496][T18122] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1263.279715][T18122] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.395559][T18122] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1263.421999][T18122] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1263.468736][T18122] usb 4-1: Manufacturer: syz [ 1263.505661][T18122] usb 4-1: config 0 descriptor?? [ 1263.536385][ T922] rc_core: IR keymap rc-hauppauge not found [ 1263.542800][ T922] Registered IR keymap rc-empty [ 1263.566480][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1263.615243][ T922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1263.645976][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1263.690834][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input1084 [ 1263.967412][ T25] audit: type=1804 audit(1640176713.422:2838): pid=21922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723834303836333238302F73797A6B616C6C65722E68556351304C2F3431302F48C7C060 dev="sda1" ino=1180 res=1 errno=0 [ 1264.265230][T18122] rc_core: IR keymap rc-hauppauge not found [ 1264.273222][T18122] Registered IR keymap rc-empty [ 1264.300967][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1264.355368][T18122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1264.396139][T18122] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1264.475421][T18122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input1085 [ 1267.499016][ T25] audit: type=1804 audit(1640176716.952:2839): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723633323432373739332F73797A6B616C6C65722E5247565565382F3430352F48C7C060 dev="sda1" ino=1186 res=1 errno=0 [ 1267.725439][T21964] UDC core: couldn't find an available UDC or it's busy: -16 [ 1267.733079][ T25] audit: type=1804 audit(1640176717.172:2840): pid=21966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723339343134373833342F73797A6B616C6C65722E574347765A322F3537362F48C7C060 dev="sda1" ino=1185 res=1 errno=0 [ 1267.776849][T21964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:38:33 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snps_udc_core', 0x200201, 0x30) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x7, 0x2, 0x20, 0x0, 0x7ff, 0xa0440, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xc690}, 0x2520, 0x4, 0x55, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x5e5, 0x0, 0xfff}, 0x0, 0x9, r2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x18) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snps_udc_core', 0x200201, 0x30) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x7, 0x2, 0x20, 0x0, 0x7ff, 0xa0440, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xc690}, 0x2520, 0x4, 0x55, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x5e5, 0x0, 0xfff}, 0x0, 0x9, r2, 0x1) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) (async) 12:38:33 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) read$fb(r1, &(0x7f0000000140)=""/186, 0xba) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x97c727f47f7904e, 0x3) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}], 0x1000, 0x0, &(0x7f0000000440)="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"}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x100) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e544f691af7c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db3e653fcfd0b6aa5f86d563359ac66a400d472162832448d91904029730e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449", @ANYRES64=r4]) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) 12:38:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e65"]) 12:38:35 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 12:38:36 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x18) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snps_udc_core', 0x200201, 0x30) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x7, 0x2, 0x20, 0x0, 0x7ff, 0xa0440, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xc690}, 0x2520, 0x4, 0x55, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x5e5, 0x0, 0xfff}, 0x0, 0x9, r2, 0x1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r4]) 12:38:37 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401070c9, &(0x7f00000020c0)) (async) read$fb(r1, &(0x7f0000000140)=""/186, 0xba) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x97c727f47f7904e, 0x3) ioctl$IOC_PR_PREEMPT(r3, 0x401070c9, &(0x7f00000020c0)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}], 0x1000, 0x0, &(0x7f0000000440)="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"}) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x100) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e544f691af7c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db3e653fcfd0b6aa5f86d563359ac66a400d472162832448d91904029730e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449", @ANYRES64=r4]) (async) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816c93301090224000100007e000904340102d469e70009058acf22"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_disconnect(r5) 12:38:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917de0f4d5a19a5ae442e66ba5f4e57c42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e65"]) [ 1280.324638][ T3689] rc_core: IR keymap rc-hauppauge not found [ 1280.330576][ T3689] Registered IR keymap rc-empty [ 1280.365307][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1280.401831][ T3689] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1280.472408][ T3689] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc3 [ 1280.520081][ T3689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc3/input1086 [ 1299.972628][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.980341][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1323.076642][ T2971] udevd[2971]: worker [5480] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input1083/event5 is taking a long time [ 1323.110882][ T2971] udevd[2971]: worker [5481] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1326.139091][ T2971] udevd[2971]: worker [5386] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 1341.251786][ T2971] udevd[2971]: worker [18303] /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc3/input1086 is taking a long time [ 1361.411752][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.419328][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1388.103343][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1388.109973][ C0] rcu: 0-....: (1 GPs behind) idle=b79/1/0x4000000000000000 softirq=98888/98889 fqs=5228 [ 1388.121308][ C0] (t=10502 jiffies g=177453 q=2684) [ 1388.126619][ C0] NMI backtrace for cpu 0 [ 1388.130959][ C0] CPU: 0 PID: 21918 Comm: syz-executor.3 Not tainted 5.16.0-rc6-syzkaller #0 [ 1388.139839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.149888][ C0] Call Trace: [ 1388.153187][ C0] [ 1388.156019][ C0] dump_stack_lvl+0x1dc/0x2d8 [ 1388.160793][ C0] ? show_regs_print_info+0x12/0x12 [ 1388.165978][ C0] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1388.171700][ C0] nmi_cpu_backtrace+0x45f/0x490 [ 1388.176631][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1388.182788][ C0] ? vprintk_emit+0xe9/0x140 [ 1388.187385][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 1388.192854][ C0] ? _raw_spin_lock+0x40/0x40 [ 1388.197527][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1388.203715][ C0] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 1388.209682][ C0] rcu_dump_cpu_stacks+0x22d/0x390 [ 1388.214788][ C0] rcu_sched_clock_irq+0x1e33/0x2bc0 [ 1388.220063][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 1388.225685][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1388.231653][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1388.236505][ C0] ? __raise_softirq_irqoff+0xb0/0xb0 [ 1388.241864][ C0] ? hrtimer_run_queues+0x162/0x450 [ 1388.247099][ C0] update_process_times+0x197/0x200 [ 1388.252284][ C0] tick_sched_timer+0x27d/0x420 [ 1388.257143][ C0] __hrtimer_run_queues+0x4cb/0xa60 [ 1388.262342][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1388.267884][ C0] ? hrtimer_interrupt+0x1040/0x1040 [ 1388.273169][ C0] hrtimer_interrupt+0x3b3/0x1040 [ 1388.278208][ C0] __sysvec_apic_timer_interrupt+0xf9/0x270 [ 1388.284182][ C0] sysvec_apic_timer_interrupt+0x3e/0xb0 [ 1388.289801][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.295800][ C0] RIP: 0010:trace_prandom_u32+0x77/0x260 [ 1388.301421][ C0] Code: f6 48 0f a3 1d 62 a7 ea 09 0f 92 c3 40 0f 92 c6 31 ff e8 cc 8a 70 fd 84 db 75 07 e8 f3 87 70 fd eb 6f 65 83 05 a1 6b ee 7b 01 <48> c7 c0 80 c7 ed 8d 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 1388.321035][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00000206 [ 1388.327103][ C0] RAX: 0000000000000102 RBX: 0000000000000001 RCX: ffffffff841403fc [ 1388.335074][ C0] RDX: ffff8880a996d700 RSI: 0000000000000001 RDI: 0000000000000000 [ 1388.343028][ C0] RBP: caa8545fd2014a29 R08: ffffffff84140414 R09: fffffbfff1bfd56e [ 1388.350990][ C0] R10: fffffbfff1bfd56e R11: 0000000000000000 R12: 6db0330c836390cc [ 1388.358974][ C0] R13: ffff8880b9a363f0 R14: ffff8880b9a363f8 R15: 5ad7a309d8d3a634 [ 1388.366937][ C0] ? trace_prandom_u32+0x64/0x260 [ 1388.371967][ C0] ? trace_prandom_u32+0x4c/0x260 [ 1388.376996][ C0] ? trace_prandom_u32+0x64/0x260 [ 1388.382018][ C0] prandom_u32+0x1fd/0x260 [ 1388.386442][ C0] mrp_join_timer+0x44e/0x820 [ 1388.391127][ C0] ? mrp_init_applicant+0x4b0/0x4b0 [ 1388.396318][ C0] call_timer_fn+0xf6/0x210 [ 1388.400818][ C0] ? mrp_init_applicant+0x4b0/0x4b0 [ 1388.406005][ C0] ? __run_timers+0x910/0x910 [ 1388.410668][ C0] ? mrp_init_applicant+0x4b0/0x4b0 [ 1388.415852][ C0] ? mrp_init_applicant+0x4b0/0x4b0 [ 1388.421031][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1388.426223][ C0] ? lockdep_hardirqs_on+0x95/0x140 [ 1388.431489][ C0] ? mrp_init_applicant+0x4b0/0x4b0 [ 1388.436688][ C0] __run_timers+0x71a/0x910 [ 1388.441203][ C0] ? trace_timer_cancel+0x220/0x220 [ 1388.446419][ C0] run_timer_softirq+0x63/0xf0 [ 1388.451180][ C0] __do_softirq+0x392/0x7a3 [ 1388.455686][ C0] ? __irq_exit_rcu+0xec/0x170 [ 1388.460451][ C0] ? __entry_text_end+0x1fecc5/0x1fecc5 [ 1388.466057][ C0] __irq_exit_rcu+0xec/0x170 [ 1388.470634][ C0] ? irq_exit_rcu+0x20/0x20 [ 1388.475127][ C0] irq_exit_rcu+0x5/0x20 [ 1388.479348][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 1388.484963][ C0] [ 1388.487886][ C0] [ 1388.490803][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.496764][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 1388.503390][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 a2 67 ba f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 17 21 44 f7 65 8b 05 38 6a ec 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 1388.522996][ C0] RSP: 0018:ffffc900162af160 EFLAGS: 00000206 [ 1388.529208][ C0] RAX: 39e47af4f8bfc600 RBX: 1ffff92002c55e30 RCX: ffffffff90bb7903 [ 1388.537175][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1388.545129][ C0] RBP: ffffc900162af1e8 R08: ffffffff818b28b0 R09: fffffbfff21ce587 [ 1388.553088][ C0] R10: fffffbfff21ce587 R11: 0000000000000000 R12: dffffc0000000000 [ 1388.561061][ C0] R13: 1ffff92002c55e2c R14: ffffc900162af180 R15: 0000000000000246 [ 1388.569045][ C0] ? trace_hardirqs_on+0x30/0x80 [ 1388.574064][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1388.578917][ C0] ? lockdep_unregister_key+0x5b0/0x5b0 [ 1388.584463][ C0] debug_check_no_obj_freed+0x5a2/0x650 [ 1388.590013][ C0] free_pcp_prepare+0x2a5/0xe00 [ 1388.594871][ C0] free_unref_page+0x7d/0x580 [ 1388.599533][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.605681][ C0] ? mark_free_pages+0x430/0x430 [ 1388.610601][ C0] ? __free_pages+0x4f/0x180 [ 1388.615187][ C0] ? kasan_check_range+0x84/0x2f0 [ 1388.620217][ C0] ? qlink_free+0x25/0x40 [ 1388.624529][ C0] ___cache_free+0xe6/0x120 [ 1388.629021][ C0] kasan_quarantine_reduce+0x151/0x1c0 [ 1388.634486][ C0] __kasan_slab_alloc+0x2f/0xf0 [ 1388.639350][ C0] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1388.645325][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1388.651296][ C0] ? print_irqtrace_events+0x220/0x220 [ 1388.656840][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.662991][ C0] ? lockdep_hardirqs_on+0x95/0x140 [ 1388.668182][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.674344][ C0] kmem_cache_alloc_trace+0x20b/0x330 [ 1388.679701][ C0] ? binder_open+0xff/0xba0 [ 1388.684326][ C0] binder_open+0xff/0xba0 [ 1388.688760][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.694940][ C0] ? binder_mmap+0x360/0x360 [ 1388.699545][ C0] ? binder_mmap+0x360/0x360 [ 1388.704128][ C0] do_dentry_open+0x78b/0x1020 [ 1388.708996][ C0] path_openat+0x2896/0x3660 [ 1388.713608][ C0] ? do_filp_open+0x4f0/0x4f0 [ 1388.718283][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 1388.723903][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1388.729912][ C0] do_filp_open+0x277/0x4f0 [ 1388.734406][ C0] ? vfs_tmpfile+0x230/0x230 [ 1388.738975][ C0] ? alloc_fd+0x5e1/0x680 [ 1388.743318][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1388.748238][ C0] ? alloc_fd+0x5e1/0x680 [ 1388.752562][ C0] do_sys_openat2+0x13b/0x500 [ 1388.757228][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1388.763192][ C0] ? do_sys_open+0x220/0x220 [ 1388.767769][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1388.773998][ C0] __x64_sys_openat+0x243/0x290 [ 1388.778838][ C0] ? __ia32_sys_open+0x270/0x270 [ 1388.783766][ C0] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 1388.789731][ C0] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1388.795955][ C0] do_syscall_64+0x44/0xd0 [ 1388.800375][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1388.806250][ C0] RIP: 0033:0x7f82a27b0e99 [ 1388.810649][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.830321][ C0] RSP: 002b:00007f82a1126168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1388.838715][ C0] RAX: ffffffffffffffda RBX: 00007f82a28c3f60 RCX: 00007f82a27b0e99 [ 1388.846667][ C0] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1388.854622][ C0] RBP: 00007f82a280aff1 R08: 0000000000000000 R09: 0000000000000000 [ 1388.862574][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.870524][ C0] R13: 00007fff4873f02f R14: 00007f82a1126300 R15: 0000000000022000 [ 1388.878497][ C0] [ 1389.102101][T21940] device vlan1064 entered promiscuous mode