last executing test programs: 11.371883203s ago: executing program 0 (id=6362): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="01ffffffffffaaaaaaaaaa008100000086dd602e5cea01703c00200a0000000000000000000000000002ff0200000000000000000000000000012b0a"], 0x0) 10.346714434s ago: executing program 0 (id=6364): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 7.596034865s ago: executing program 0 (id=6366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)='H', 0x1}], 0x1) 6.901284156s ago: executing program 1 (id=6367): timer_create(0x2, 0x0, &(0x7f0000001200)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) init_module(0x0, 0x4000, 0x0) 6.533499467s ago: executing program 0 (id=6368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x8000}, 0x90) 5.632422443s ago: executing program 1 (id=6369): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020020031c0007006000000002000020d3"]) 4.200748046s ago: executing program 1 (id=6370): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 2.919330513s ago: executing program 1 (id=6371): syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x102) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3) 2.412353898s ago: executing program 0 (id=6372): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x540c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.878025994s ago: executing program 1 (id=6373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x184, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xfffffffffffffe6b}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x184}}, 0x0) 151.559795ms ago: executing program 1 (id=6374): syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 0s ago: executing program 0 (id=6375): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000340)=""/44, 0x2c}], 0x8}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): cd.1/usb2/2-1/2-1:0.0/input/input32 [ 4503.778103][ T4006] usb 2-1: USB disconnect, device number 21 [ 4523.737078][T12753] netlink: 'syz.1.2070': attribute type 75 has an invalid length. [ 4533.614772][T12772] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2079'. [ 4536.291679][T12778] netlink: 'syz.0.2082': attribute type 32 has an invalid length. [ 4547.062397][T12802] netlink: 'syz.0.2094': attribute type 3 has an invalid length. [ 4548.739799][ T4006] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 4549.181069][ T4006] usb 1-1: Using ep0 maxpacket: 16 [ 4549.540807][ T4006] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4549.544063][ T4006] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4549.560014][ T4006] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 4549.574927][ T4006] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 4549.581435][ T4006] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 4549.584090][ T4006] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 4549.639838][ T4006] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 4549.811043][ T4006] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 4549.813915][ T4006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 4549.847487][ T4006] usb 1-1: SerialNumber: syz [ 4550.554678][ T4006] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 4550.562440][ T4006] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 4553.241184][ T3166] usb 1-1: USB disconnect, device number 6 [ 4569.245596][T12836] netlink: 'syz.1.2105': attribute type 5 has an invalid length. [ 4570.122399][T12838] xt_ecn: cannot match TCP bits for non-tcp packets [ 4579.057333][T12852] netlink: 'syz.0.2112': attribute type 10 has an invalid length. [ 4579.058860][T12852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2112'. [ 4579.081843][T12852] ipvlan0: entered promiscuous mode [ 4579.090160][T12852] ipvlan0: entered allmulticast mode [ 4579.091802][T12852] veth0_vlan: entered allmulticast mode [ 4579.122436][T12852] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 4588.888575][T12867] netlink: 'syz.0.2119': attribute type 11 has an invalid length. [ 4595.118401][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'. [ 4598.180856][T12890] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 4598.195387][T12890] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2130'. [ 4598.232855][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 4638.563381][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 4638.566413][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 4660.280490][T12981] sit0: entered promiscuous mode [ 4660.304646][T12981] sit0: entered allmulticast mode [ 4665.318583][T12991] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2177'. [ 4675.990624][T13009] raw_sendmsg: syz.0.2186 forgot to set AF_INET. Fix it! [ 4709.964839][T12450] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 4710.252897][T12450] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 4710.256203][T12450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 4710.258275][T12450] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 4710.272329][T12450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4710.348061][T12450] usb 2-1: config 0 descriptor?? [ 4711.325586][T12450] appletouch 2-1:0.0: Failed to read mode from device. [ 4711.329148][T12450] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 4711.844670][T12450] usb 2-1: USB disconnect, device number 22 [ 4732.633990][T12387] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 4733.272045][T12387] usb 2-1: Using ep0 maxpacket: 8 [ 4733.337730][T12387] usb 2-1: config 0 has an invalid interface number: 90 but max is 0 [ 4733.342781][T12387] usb 2-1: config 0 has no interface number 0 [ 4733.593392][T12387] usb 2-1: New USB device found, idVendor=10c4, idProduct=82f9, bcdDevice=1d.fb [ 4733.595973][T12387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4733.598035][T12387] usb 2-1: Product: syz [ 4733.602751][T12387] usb 2-1: Manufacturer: syz [ 4733.604537][T12387] usb 2-1: SerialNumber: syz [ 4733.738818][T12387] usb 2-1: config 0 descriptor?? [ 4733.897584][T12387] cp210x 2-1:0.90: cp210x converter detected [ 4734.732061][T12387] cp210x 2-1:0.90: failed to get vendor val 0x370b size 1: -71 [ 4734.734663][T12387] cp210x 2-1:0.90: querying part number failed [ 4734.920295][T12387] usb 2-1: cp210x converter now attached to ttyUSB0 [ 4735.132438][T12387] usb 2-1: USB disconnect, device number 23 [ 4735.524962][T12387] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 4735.564495][T12387] cp210x 2-1:0.90: device disconnected [ 4745.485288][T13132] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 4760.381987][T13147] netlink: 'syz.0.2234': attribute type 4 has an invalid length. [ 4765.565820][T13153] autofs4:pid:13153:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 4765.570509][T13153] autofs4:pid:13153:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 4781.551511][ T9402] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 4781.877662][ T9402] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 4781.879518][ T9402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4781.951935][ T9402] usb 1-1: config 0 descriptor?? [ 4782.012034][ T9402] gs_usb 1-1:0.0: Required endpoints not found [ 4782.066909][ T4021] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 4782.396483][ T4021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4782.398556][ T4021] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4782.399852][ T4021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 4782.401165][ T4021] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 4782.553508][ T4021] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 4782.565314][ T4021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4782.566586][ T4021] usb 2-1: Product: syz [ 4782.567653][ T4021] usb 2-1: Manufacturer: syz [ 4782.568621][ T4021] usb 2-1: SerialNumber: syz [ 4782.657107][ T4021] usb 2-1: config 0 descriptor?? [ 4782.769513][ T4021] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 4782.819032][ T4021] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 4782.841013][ T4021] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 4783.669763][T12387] usb 2-1: USB disconnect, device number 24 [ 4783.756322][T12387] garmin_gps 2-1:0.0: device disconnected [ 4793.969712][ T9402] usb 1-1: USB disconnect, device number 7 [ 4808.985665][T13233] netlink: 'syz.0.2263': attribute type 3 has an invalid length. [ 4808.988308][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 4815.301591][T13238] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 4839.047587][T12450] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 4839.455518][T12450] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4839.458521][T12450] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 4839.468067][T12450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 4839.473595][T12450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 4839.476106][T12450] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 4839.623627][T12450] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 4839.626205][T12450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4839.628311][T12450] usb 1-1: Product: syz [ 4839.633723][T12450] usb 1-1: Manufacturer: syz [ 4839.635572][T12450] usb 1-1: SerialNumber: syz [ 4839.799345][T12450] usb 1-1: config 0 descriptor?? [ 4839.859183][T13275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4840.057780][T12450] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 4841.778103][T12450] usb 1-1: USB disconnect, device number 8 [ 4855.214863][T13313] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 4855.217542][T13313] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 4855.223273][T13313] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 4872.764181][T13341] kernel profiling enabled (shift: 6) [ 4963.363064][T13510] Illegal XDP return value 1456873365 on prog (id 199) dev N/A, expect packet loss! [ 4964.217880][T13512] xt_hashlimit: overflow, try lower: 3/0 [ 4987.013772][T13550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2387'. [ 4989.449148][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 5002.374852][T13571] tmpfs: Bad value for 'mpol' [ 5017.192143][T13588] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 5019.783390][T13592] netlink: 'syz.0.2407': attribute type 3 has an invalid length. [ 5024.769264][T13599] tmpfs: Bad value for 'mpol' [ 5028.759001][T13608] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 5032.059546][ T4006] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 5032.666030][ T4006] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 5032.668623][ T4006] usb 2-1: config 0 has no interface number 0 [ 5032.671072][ T4006] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 5032.887821][ T4006] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 5032.890646][ T4006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5032.892621][ T4006] usb 2-1: Product: syz [ 5032.904311][ T4006] usb 2-1: Manufacturer: syz [ 5032.906287][ T4006] usb 2-1: SerialNumber: syz [ 5033.146894][ T4006] usb 2-1: config 0 descriptor?? [ 5033.564956][ T4006] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 5036.809655][ T4021] usb 2-1: USB disconnect, device number 25 [ 5036.964931][ T4021] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 5037.192013][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 5037.210006][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2415'. [ 5045.258358][ T3166] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 5045.718436][ T3166] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 5045.720986][ T3166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5045.736810][ T3166] usb 1-1: Product: syz [ 5045.738702][ T3166] usb 1-1: Manufacturer: syz [ 5045.740404][ T3166] usb 1-1: SerialNumber: syz [ 5045.886670][ T3166] usb 1-1: config 0 descriptor?? [ 5047.005719][ T3166] usb 1-1: ignoring: probably an ADSL modem [ 5047.197861][ T3166] usb 1-1: USB disconnect, device number 9 [ 5057.366174][T13662] tmpfs: User quota block hardlimit too large. [ 5076.066410][T13684] xt_NFQUEUE: number of total queues is 0 [ 5082.315983][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 5083.364507][T13702] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 5085.071906][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 5090.861015][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'. [ 5092.806044][T13724] virtio-fs: tag <(null)> not found [ 5104.868842][T13756] tmpfs: Bad value for 'mpol' [ 5108.194740][ T34] audit: type=1400 audit(2000007737.875:11): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A9625292F2F2E212D pid=13764 comm="syz.0.2476" [ 5116.488420][T13781] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 5122.522094][T13796] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 5131.820851][T13810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5156.112799][T11503] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 5156.366857][T11503] usb 1-1: Using ep0 maxpacket: 8 [ 5156.478111][T11503] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 5156.480989][T11503] usb 1-1: config 0 has no interface number 0 [ 5156.490152][T11503] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 5156.494639][T11503] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 5156.497283][T11503] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 5156.500072][T11503] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 5156.502583][T11503] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 5156.649711][T11503] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 5156.652713][T11503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5156.658161][T11503] usb 1-1: Product: syz [ 5156.660022][T11503] usb 1-1: Manufacturer: syz [ 5156.661918][T11503] usb 1-1: SerialNumber: syz [ 5156.892603][T11503] usb 1-1: config 0 descriptor?? [ 5158.600240][T11503] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 5159.276938][T12387] usb 1-1: USB disconnect, device number 10 [ 5189.065627][T11503] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 5189.312856][T11503] usb 1-1: Using ep0 maxpacket: 8 [ 5189.407423][T11503] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 5189.409522][T11503] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 5189.412169][T11503] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 54446, setting to 1024 [ 5189.415562][T11503] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 5189.533999][T11503] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 5189.537111][T11503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5189.539351][T11503] usb 1-1: Product: syz [ 5189.553821][T11503] usb 1-1: Manufacturer: syz [ 5189.556067][T11503] usb 1-1: SerialNumber: syz [ 5189.903389][T13932] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5190.004030][T11503] hso 1-1:6.0: Can't find BULK OUT endpoint [ 5190.816786][T11503] usb 1-1: USB disconnect, device number 11 [ 5205.030975][ T4006] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 5205.319766][ T4006] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 5205.324911][ T4006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 5205.326292][ T4006] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5205.327576][ T4006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 5205.328843][ T4006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 5205.412353][ T4006] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 5205.414116][ T4006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5205.415616][ T4006] usb 2-1: SerialNumber: syz [ 5205.517832][ T4006] usb 2-1: config 0 descriptor?? [ 5205.578252][T13969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5205.616545][T13969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5205.666673][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 5205.681092][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 5205.692256][ T4006] port100 2-1:0.0: NFC: Could not get supported command types [ 5206.256890][T13977] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2562'. [ 5207.053578][ T3166] usb 2-1: USB disconnect, device number 26 [ 5214.199815][T13993] xt_nat: multiple ranges no longer supported [ 5232.049378][T14035] netlink: 'syz.1.2587': attribute type 21 has an invalid length. [ 5232.051824][T14035] netlink: 'syz.1.2587': attribute type 6 has an invalid length. [ 5232.052960][T14035] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2587'. [ 5255.062750][T14080] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 5255.069133][T14080] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2607'. [ 5271.327745][T14114] sctp: [Deprecated]: syz.1.2625 (pid 14114) Use of int in maxseg socket option. [ 5271.327745][T14114] Use struct sctp_assoc_value instead [ 5273.507306][T14119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5289.508835][T14143] netlink: 'syz.0.2638': attribute type 1 has an invalid length. [ 5289.511292][T14143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2638'. [ 5291.654079][ T4021] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 5292.071323][ T4021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5292.076537][ T4021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 5292.114770][ T4021] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 5292.117340][ T4021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5292.119554][ T4021] usb 1-1: SerialNumber: syz [ 5294.266488][ T4021] usb 1-1: 0:2 : does not exist [ 5294.460803][ T4021] usb 1-1: USB disconnect, device number 12 [ 5302.697560][T14180] netlink: 'syz.1.2645': attribute type 21 has an invalid length. [ 5302.718841][T14180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2645'. [ 5302.720930][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'. [ 5315.682962][T14201] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2655'. [ 5370.807408][T14311] netlink: 'syz.1.2709': attribute type 21 has an invalid length. [ 5370.808873][T14311] netlink: 'syz.1.2709': attribute type 20 has an invalid length. [ 5370.810128][T14311] IPv6: NLM_F_CREATE should be specified when creating new route [ 5372.782030][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 5397.358005][T14368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2737'. [ 5401.252750][T14376] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 5401.255155][T14376] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2740'. [ 5412.687036][T14401] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2753'. [ 5423.138612][T14421] usb usb1: usbfs: process 14421 (syz.1.2763) did not claim interface 8 before use [ 5434.737014][T14441] PKCS8: Unsupported PKCS#8 version [ 5466.015377][T14539] tmpfs: User quota inode hardlimit too large. [ 5467.107190][T14541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2802'. [ 5471.222836][T14549] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 5473.766773][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 5475.225816][T14561] devtmpfs: Unknown parameter 'rt' [ 5479.750822][T14571] usb usb1: usbfs: process 14571 (syz.1.2817) did not claim interface 0 before use [ 5488.075090][T14591] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 5488.076408][T14591] netlink: 'syz.1.2827': attribute type 3 has an invalid length. [ 5488.078040][T14591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 5488.079507][T14591] NCSI netlink: No device for ifindex 0 [ 5505.580057][T14626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5511.574731][T14642] veth2: entered promiscuous mode [ 5511.579314][T14642] veth2: entered allmulticast mode [ 5514.959364][T14658] netlink: 'syz.1.2855': attribute type 6 has an invalid length. [ 5516.822422][T14664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2858'. [ 5519.454659][T14670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5521.210449][T14674] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 5521.212777][T14674] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2863'. [ 5528.217842][T14692] Non-string source [ 5538.298984][T14717] syz.1.2883 (14717): /proc/14715/oom_adj is deprecated, please use /proc/14715/oom_score_adj instead. [ 5542.390258][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 5542.392541][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'. [ 5558.506484][T14752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 5567.117537][T14771] xt_policy: output policy not valid in PREROUTING and INPUT [ 5574.555581][T14786] IPv6: NLM_F_REPLACE set, but no existing node found! [ 5586.477304][T14811] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5588.409312][T14814] infiniband syz2: set active [ 5588.427237][T14814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5588.523604][ T3166] lo speed is unknown, defaulting to 1000 [ 5598.314796][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2942'. [ 5598.316347][T14834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2942'. [ 5605.222566][T11503] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 5605.451602][T11503] usb 2-1: Using ep0 maxpacket: 16 [ 5605.681346][T11503] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 5605.684018][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5605.685938][T11503] usb 2-1: Product: syz [ 5605.687454][T11503] usb 2-1: Manufacturer: syz [ 5605.704944][T11503] usb 2-1: SerialNumber: syz [ 5605.815267][T11503] usb 2-1: config 0 descriptor?? [ 5606.877153][T11503] usb_8dev 2-1:0.0 can0: sending command message failed [ 5606.882600][T11503] usb_8dev 2-1:0.0 can0: can't get firmware version [ 5607.151422][T11503] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 5607.453038][T11503] usb 2-1: USB disconnect, device number 27 [ 5613.593593][T14873] infiniband syz2: set active [ 5613.596592][T14873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5613.854606][T12387] lo speed is unknown, defaulting to 1000 [ 5633.833756][T14909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2969'. [ 5643.544763][T14927] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2978'. [ 5652.998382][T14943] tmpfs: Bad value for 'mpol' [ 5656.000228][T14947] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 5656.002560][T14947] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2988'. [ 5660.828215][T14955] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 5660.830703][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 5664.676347][T14963] process 'syz.1.2996' launched '/dev/fd/3' with NULL argv: empty string added [ 5670.532323][T14978] ipt_ECN: cannot use operation on non-tcp rule [ 5692.285766][T15016] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3021'. [ 5727.575954][T15105] netlink: 'syz.0.3049': attribute type 7 has an invalid length. [ 5731.142794][T15109] netlink: 'syz.0.3051': attribute type 1 has an invalid length. [ 5731.145133][T15109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3051'. [ 5750.029146][T15133] xt_hashlimit: size too large, truncated to 1048576 [ 5750.031338][T15133] xt_hashlimit: overflow, rate too high: 0 [ 5758.291547][T15150] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3071'. [ 5771.953361][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 5771.954799][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 5772.433882][T15176] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3084'. [ 5772.435308][T15176] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3084'. [ 5775.159800][T15213] infiniband syz2: set active [ 5775.163669][T13546] lo speed is unknown, defaulting to 1000 [ 5778.221134][T15221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3090'. [ 5780.915996][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 5780.918546][T15227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3094'. [ 5780.919763][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 5780.922692][T15227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3094'. [ 5780.924273][T15227] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3094'. [ 5782.449562][T15233] xt_hashlimit: max too large, truncated to 1048576 [ 5816.036408][T15295] netlink: 'syz.1.3126': attribute type 6 has an invalid length. [ 5830.876694][T15335] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 5887.335228][T15419] IPv6: NLM_F_CREATE should be specified when creating new route [ 5887.360642][T15419] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3178'. [ 5898.933095][T15439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3186'. [ 5911.056649][T11503] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 5911.493282][T11503] usb 2-1: Using ep0 maxpacket: 16 [ 5911.586110][T11503] usb 2-1: config 1 has an invalid interface number: 203 but max is 0 [ 5911.604115][T11503] usb 2-1: config 1 has no interface number 0 [ 5911.606568][T11503] usb 2-1: config 1 interface 203 has no altsetting 0 [ 5911.814815][T11503] usb 2-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 5911.821764][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5911.824058][T11503] usb 2-1: Product: syz [ 5911.825709][T11503] usb 2-1: Manufacturer: syz [ 5911.829999][T11503] usb 2-1: SerialNumber: syz [ 5913.139126][T11503] aqc111 2-1:1.203: probe with driver aqc111 failed with error -22 [ 5913.692691][T13546] usb 2-1: USB disconnect, device number 28 [ 5923.143157][T15474] netlink: 696 bytes leftover after parsing attributes in process `syz.0.3198'. [ 5927.277764][ T34] audit: type=1400 audit(2000008557.025:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=22090EA3680EB06A1A5FD3F7614E16D41267A0590DD509A5EFFE069BBBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07E pid=15481 comm="syz.0.3203" [ 5937.138492][T15504] netlink: 'syz.1.3213': attribute type 12 has an invalid length. [ 5951.157396][T15528] usb usb1: usbfs: process 15528 (syz.1.3225) did not claim interface 0 before use [ 5961.260737][T15550] netlink: 'syz.0.3236': attribute type 1 has an invalid length. [ 5961.263070][T15550] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3236'. [ 5994.111912][ C0] vkms_vblank_simulate: vblank timer overrun [ 5997.040783][T15608] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3265'. [ 5999.433412][T15612] Unknown options in mask 4 [ 6024.890976][ T4021] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 6025.232580][ T4021] usb 2-1: Using ep0 maxpacket: 8 [ 6025.277559][ T4021] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6025.278992][ T4021] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 6025.292491][ T4021] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 6025.293887][ T4021] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 6025.295395][ T4021] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 6025.296669][ T4021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6025.518119][ T4021] hub 2-1:1.0: bad descriptor, ignoring hub [ 6025.519664][ T4021] hub 2-1:1.0: probe with driver hub failed with error -5 [ 6025.532100][ T4021] cdc_wdm 2-1:1.0: skipping garbage [ 6025.533259][ T4021] cdc_wdm 2-1:1.0: skipping garbage [ 6025.566315][ T4021] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 6026.354691][ T4021] usb 2-1: USB disconnect, device number 29 [ 6047.466409][T15687] lo speed is unknown, defaulting to 1000 [ 6065.452810][T15726] xt_policy: too many policy elements [ 6071.561234][T15734] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 6071.562601][T15734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3307'. [ 6110.567623][T15793] tmpfs: Bad value for 'huge' [ 6114.858507][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'. [ 6115.391375][T15802] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 6117.585546][T15805] veth1_macvtap: mtu greater than device maximum [ 6118.006025][T13546] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 6118.205978][T13546] usb 1-1: Using ep0 maxpacket: 16 [ 6118.251691][T13546] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 6118.253014][T13546] usb 1-1: config 0 has no interface number 0 [ 6118.255570][T13546] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 6118.372918][T13546] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 6118.379794][T13546] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 6118.382100][T13546] usb 1-1: Product: syz [ 6118.393610][T13546] usb 1-1: SerialNumber: syz [ 6118.476277][T13546] usb 1-1: config 0 descriptor?? [ 6118.708783][T13546] cm109 1-1:0.8: invalid payload size 239, expected 4 [ 6118.760235][T13546] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input41 [ 6122.438294][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 6122.452554][ C1] cm109_urb_ctl_callback: 6 callbacks suppressed [ 6122.453189][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6122.466514][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6122.472044][T13546] usb 1-1: USB disconnect, device number 13 [ 6122.474750][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6122.475335][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 6122.744962][T13546] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 6127.212009][T15830] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 6147.676838][T15859] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3356'. [ 6150.104471][ T4021] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 6150.556218][ T4021] usb 1-1: Using ep0 maxpacket: 32 [ 6150.630260][ T4021] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 6150.639844][ T4021] usb 1-1: config 0 has no interface number 0 [ 6150.647015][ T4021] usb 1-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 6150.744366][ T4021] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 6150.746690][ T4021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6150.748772][ T4021] usb 1-1: Product: syz [ 6150.753296][ T4021] usb 1-1: Manufacturer: syz [ 6150.755020][ T4021] usb 1-1: SerialNumber: syz [ 6150.919444][ T4021] usb 1-1: config 0 descriptor?? [ 6151.027812][T15863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6153.763643][T15863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6153.897831][ T4021] net1080 1-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, fe:84:b1:7d:ad:49 [ 6154.735791][T15876] (unnamed net_device) (uninitialized): down delay (58844) is not a multiple of miimon (1023), value rounded to 58311 ms [ 6154.895046][ T4021] usb 1-1: USB disconnect, device number 14 [ 6154.947745][ T4021] net1080 1-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 6166.399329][T15931] geneve1: entered allmulticast mode [ 6183.583844][T15960] infiniband syz2: set down [ 6183.585972][T15960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6183.702367][T15961] gretap3: entered promiscuous mode [ 6183.741627][ T4021] lo speed is unknown, defaulting to 1000 [ 6183.771495][ T4021] lo speed is unknown, defaulting to 1000 [ 6203.793980][ T4021] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 6204.402112][ T4021] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 6204.405874][ T4021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6204.407702][ T4021] usb 2-1: Product: syz [ 6204.420592][ T4021] usb 2-1: Manufacturer: syz [ 6204.422384][ T4021] usb 2-1: SerialNumber: syz [ 6204.542299][ T4021] usb 2-1: config 0 descriptor?? [ 6205.524869][ T4021] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 6205.795662][ T4021] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 6205.822819][ T4021] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 6206.413880][ T4021] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 6206.831098][ T4021] usb 2-1: USB disconnect, device number 30 [ 6214.966071][T16020] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 6227.553510][T16044] IPv6: NLM_F_CREATE should be specified when creating new route [ 6236.498329][T15723] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 6236.738531][T15723] usb 2-1: Using ep0 maxpacket: 16 [ 6236.913030][T15723] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 6236.915275][T15723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6236.932163][T15723] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 6237.008295][T15723] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 6237.010576][T15723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6237.012395][T15723] usb 2-1: Product: syz [ 6237.013858][T15723] usb 2-1: Manufacturer: syz [ 6237.015375][T15723] usb 2-1: SerialNumber: syz [ 6239.533956][T15723] usb 2-1: 0:2 : does not exist [ 6239.671372][T15723] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 6240.379247][T15723] usb 2-1: USB disconnect, device number 31 [ 6242.510180][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 6277.791034][T16144] misc userio: The device must be registered before sending interrupts [ 6357.343220][T16228] netlink: 'syz.0.3479': attribute type 3 has an invalid length. [ 6362.626205][T16231] nvme_fabrics: missing parameter 'transport=%s' [ 6362.651642][T16231] nvme_fabrics: missing parameter 'nqn=%s' [ 6365.841970][T16236] netlink: 'syz.1.3484': attribute type 7 has an invalid length. [ 6375.736290][T16246] xt_l2tp: invalid flags combination: 8 [ 6381.222974][T16254] tmpfs: Bad value for 'mpol' [ 6387.081839][T16262] xt_l2tp: v2 tid > 0xffff: 262144 [ 6393.012498][T16270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6395.633833][T16272] capability: warning: `syz.1.3502' uses 32-bit capabilities (legacy support in use) [ 6447.496467][T16340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3535'. [ 6478.607189][T16390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6501.449567][T15723] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 6501.712414][T15723] usb 2-1: Using ep0 maxpacket: 8 [ 6502.024430][T15723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6502.189420][T15723] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 6502.194607][T15723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6502.196709][T15723] usb 2-1: Product: syz [ 6502.202082][T15723] usb 2-1: Manufacturer: syz [ 6502.203973][T15723] usb 2-1: SerialNumber: syz [ 6502.605719][T15723] usb 2-1: bad CDC descriptors [ 6503.727685][T15723] usb 2-1: USB disconnect, device number 32 [ 6507.366068][T16446] netlink: 'syz.0.3583': attribute type 32 has an invalid length. [ 6552.261830][T16520] lo: entered promiscuous mode [ 6552.263420][T16520] lo: entered allmulticast mode [ 6552.346545][T16520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6556.422117][T16526] geneve0: entered promiscuous mode [ 6566.562669][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3633'. [ 6574.745940][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'. [ 6605.875589][T16600] tmpfs: Bad value for 'mpol' [ 6608.029775][T16605] bond0: Error: Cannot enslave bond to itself. [ 6620.883259][T16631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3673'. [ 6623.445531][T16636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3676'. [ 6653.754620][T16689] xt_CT: No such helper "snmp_trap" [ 6672.247652][T16711] xt_cluster: node mask cannot exceed total number of nodes [ 6675.837276][T16719] netlink: 'syz.1.3716': attribute type 58 has an invalid length. [ 6675.838607][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3716'. [ 6689.986715][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 6697.553348][T16763] netlink: 'syz.1.3736': attribute type 12 has an invalid length. [ 6709.491723][T11503] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 6710.473419][T11503] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 6710.477221][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6710.482000][T11503] usb 2-1: Product: syz [ 6710.483674][T11503] usb 2-1: Manufacturer: syz [ 6710.485299][T11503] usb 2-1: SerialNumber: syz [ 6710.613493][T11503] usb 2-1: config 0 descriptor?? [ 6710.944943][T11503] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 033 [ 6712.371681][T11503] (null): failure reading functionality [ 6712.451942][T11503] i2c i2c-0: failure reading functionality [ 6712.568199][T11503] i2c i2c-0: connected i2c-tiny-usb device [ 6712.680732][T11503] usb 2-1: USB disconnect, device number 33 [ 6716.137137][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3747'. [ 6716.139242][T16804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3747'. [ 6723.364861][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 6741.659002][T16841] lo: left promiscuous mode [ 6741.665167][T16841] netlink: 'syz.1.3764': attribute type 2 has an invalid length. [ 6741.668244][T16841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6749.923650][T16857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3772'. [ 6755.932678][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3776'. [ 6759.835085][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'. [ 6768.194065][T11503] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 6768.498646][T11503] usb 2-1: Using ep0 maxpacket: 8 [ 6768.573746][T11503] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 6768.638360][T11503] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 6768.641056][T11503] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 6768.643123][T11503] usb 2-1: Product: syz [ 6768.644808][T11503] usb 2-1: Manufacturer: syz [ 6768.653262][T11503] usb 2-1: SerialNumber: syz [ 6769.280319][T11503] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 6769.284180][T11503] visor 2-1:1.0: probe with driver visor failed with error -110 [ 6783.131949][T13546] usb 2-1: USB disconnect, device number 34 [ 6790.179126][T16929] nbd: must specify at least one socket [ 6800.268168][T16166] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 6800.719841][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 6800.722659][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 6800.727132][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 6800.729627][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 6801.087644][T16166] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 6801.090200][T16166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6801.092402][T16166] usb 2-1: Product: syz [ 6801.096618][T16166] usb 2-1: Manufacturer: syz [ 6801.098398][T16166] usb 2-1: SerialNumber: syz [ 6801.232382][T16166] usb 2-1: config 0 descriptor?? [ 6801.711499][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3809'. [ 6802.739059][T16166] adutux 2-1:0.0: Could not retrieve serial number [ 6802.765149][T16166] adutux 2-1:0.0: probe with driver adutux failed with error -5 [ 6803.359656][T13546] usb 2-1: USB disconnect, device number 35 [ 6827.168414][T13546] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 6827.745255][T13546] usb 2-1: Using ep0 maxpacket: 32 [ 6827.846420][T13546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6827.848274][T13546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6827.849949][T13546] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 6827.851202][T13546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6827.955025][T13546] usb 2-1: config 0 descriptor?? [ 6828.088499][T13546] hub 2-1:0.0: USB hub found [ 6829.184315][T13546] hub 2-1:0.0: 1 port detected [ 6829.445440][T13546] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 6829.447984][T13546] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 6829.528839][T13546] usbhid 2-1:0.0: can't add hid device: -71 [ 6829.534071][T13546] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 6829.634853][T13546] usb 2-1: USB disconnect, device number 36 [ 6846.556093][T17040] netlink: 'syz.1.3838': attribute type 17 has an invalid length. [ 6846.560221][T17040] netlink: 'syz.1.3838': attribute type 27 has an invalid length. [ 6866.134508][T17075] xt_hashlimit: overflow, try lower: 512/9223372036854775808 [ 6875.816898][T17093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3864'. [ 6887.138926][T17117] tmpfs: Bad value for 'mpol' [ 6919.892685][T17177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 6923.093103][T17183] IPv6: NLM_F_CREATE should be specified when creating new route [ 6934.951763][T17263] netlink: 'syz.0.3912': attribute type 22 has an invalid length. [ 6934.954339][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3912'. [ 6947.052016][T17319] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.3914'. [ 6965.932886][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3930'. [ 6982.726524][T17381] xt_CT: No such helper "syz0" [ 6993.116872][ T34] audit: type=1800 audit(2000009622.918:13): pid=17400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3954" name="/newroot/1923/file0" dev="tmpfs" ino=9674 res=0 errno=0 [ 6995.943233][T17412] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 7001.266321][T16166] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 7001.872906][T16166] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 7001.881351][T16166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7001.884898][T16166] usb 1-1: Product: syz [ 7001.886033][T16166] usb 1-1: Manufacturer: syz [ 7001.887035][T16166] usb 1-1: SerialNumber: syz [ 7001.957570][T16166] usb 1-1: config 0 descriptor?? [ 7003.249195][T16166] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 7003.687914][T16166] usb 1-1: USB disconnect, device number 15 [ 7004.352210][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 7012.214056][T17450] xt_socket: unknown flags 0x8 [ 7020.923323][T17468] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3977'. [ 7021.356454][T17469] No such timeout policy "syz1" [ 7050.064264][T17532] lo: entered promiscuous mode [ 7050.065803][T17532] lo: entered allmulticast mode [ 7050.077090][T17532] tunl0: entered promiscuous mode [ 7050.079988][T17532] tunl0: entered allmulticast mode [ 7050.226700][T17532] gre0: entered promiscuous mode [ 7050.228344][T17532] gre0: entered allmulticast mode [ 7050.254088][T17532] gretap0: entered promiscuous mode [ 7050.255450][T17532] gretap0: entered allmulticast mode [ 7050.356075][T17532] erspan0: entered promiscuous mode [ 7050.357591][T17532] erspan0: entered allmulticast mode [ 7050.458592][T17532] ip_vti0: entered promiscuous mode [ 7050.459972][T17532] ip_vti0: entered allmulticast mode [ 7050.560248][T17532] ip6_vti0: entered promiscuous mode [ 7050.573169][T17532] ip6_vti0: entered allmulticast mode [ 7050.757564][T17532] sit0: entered promiscuous mode [ 7050.758906][T17532] sit0: entered allmulticast mode [ 7050.965227][T17532] ip6tnl0: entered promiscuous mode [ 7050.966576][T17532] ip6tnl0: entered allmulticast mode [ 7051.238846][T17532] ip6gre0: entered promiscuous mode [ 7051.240276][T17532] ip6gre0: entered allmulticast mode [ 7051.513830][T17532] syz_tun: entered promiscuous mode [ 7051.515231][T17532] syz_tun: entered allmulticast mode [ 7051.647344][T17532] ip6gretap0: entered promiscuous mode [ 7051.649445][T17532] ip6gretap0: entered allmulticast mode [ 7051.785954][T17532] vcan0: entered promiscuous mode [ 7051.787287][T17532] vcan0: entered allmulticast mode [ 7051.868636][T17532] bond0: entered promiscuous mode [ 7051.870071][T17532] bond_slave_0: entered promiscuous mode [ 7051.883394][T17532] bond_slave_1: entered promiscuous mode [ 7051.886208][T17532] bond0: entered allmulticast mode [ 7051.887590][T17532] bond_slave_0: entered allmulticast mode [ 7051.894868][T17532] bond_slave_1: entered allmulticast mode [ 7052.058547][T17532] infiniband syz0: set down [ 7052.088424][T17532] dummy0: entered promiscuous mode [ 7052.089708][T17532] dummy0: entered allmulticast mode [ 7052.466854][T17532] nlmon0: entered promiscuous mode [ 7052.469081][T17532] nlmon0: entered allmulticast mode [ 7052.767914][T17532] vxcan0: entered promiscuous mode [ 7052.769213][T17532] vxcan0: entered allmulticast mode [ 7052.804468][T17532] vxcan1: entered promiscuous mode [ 7052.806187][T17532] vxcan1: entered allmulticast mode [ 7052.852583][T17532] veth0: entered promiscuous mode [ 7052.853956][T17532] veth0: entered allmulticast mode [ 7053.026076][T17532] veth1: entered promiscuous mode [ 7053.027415][T17532] veth1: entered allmulticast mode [ 7053.191302][T17532] wg0: entered promiscuous mode [ 7053.192672][T17532] wg0: entered allmulticast mode [ 7053.331934][T17532] wg1: entered promiscuous mode [ 7053.333240][T17532] wg1: entered allmulticast mode [ 7053.448726][T17532] wg2: entered promiscuous mode [ 7053.450175][T17532] wg2: entered allmulticast mode [ 7053.537931][T17532] veth0_to_bridge: entered promiscuous mode [ 7053.539395][T17532] veth0_to_bridge: entered allmulticast mode [ 7053.706386][T17532] bridge_slave_0: entered promiscuous mode [ 7053.707933][T17532] bridge_slave_0: entered allmulticast mode [ 7053.864670][T17532] veth1_to_bridge: entered promiscuous mode [ 7053.866327][T17532] veth1_to_bridge: entered allmulticast mode [ 7054.034765][T17532] bridge_slave_1: entered promiscuous mode [ 7054.036145][T17532] bridge_slave_1: entered allmulticast mode [ 7054.144833][T17532] veth0_to_bond: entered promiscuous mode [ 7054.146507][T17532] veth0_to_bond: entered allmulticast mode [ 7054.386236][T17532] veth1_to_bond: entered promiscuous mode [ 7054.387679][T17532] veth1_to_bond: entered allmulticast mode [ 7054.607029][T17532] veth0_to_team: entered promiscuous mode [ 7054.608514][T17532] veth0_to_team: entered allmulticast mode [ 7054.755411][T17532] team_slave_0: entered promiscuous mode [ 7054.756763][T17532] team_slave_0: entered allmulticast mode [ 7054.794017][T17532] veth1_to_team: entered promiscuous mode [ 7054.813394][T17532] veth1_to_team: entered allmulticast mode [ 7054.909708][T17532] team_slave_1: entered promiscuous mode [ 7054.929051][T17532] team_slave_1: entered allmulticast mode [ 7054.956758][T17532] veth0_to_batadv: entered promiscuous mode [ 7054.958273][T17532] veth0_to_batadv: entered allmulticast mode [ 7055.156139][T17532] batadv_slave_0: entered promiscuous mode [ 7055.157682][T17532] batadv_slave_0: entered allmulticast mode [ 7055.487134][T17532] veth1_to_batadv: entered promiscuous mode [ 7055.488677][T17532] veth1_to_batadv: entered allmulticast mode [ 7055.786142][T17532] batadv_slave_1: entered promiscuous mode [ 7055.788401][T17532] batadv_slave_1: entered allmulticast mode [ 7056.053898][T17532] xfrm0: entered promiscuous mode [ 7056.056629][T17532] xfrm0: entered allmulticast mode [ 7056.209473][T17532] veth0_to_hsr: entered promiscuous mode [ 7056.213014][T17532] veth0_to_hsr: entered allmulticast mode [ 7056.474303][T17532] hsr_slave_0: entered allmulticast mode [ 7056.613387][T17532] veth1_to_hsr: entered promiscuous mode [ 7056.615597][T17532] veth1_to_hsr: entered allmulticast mode [ 7056.875402][T17532] hsr_slave_1: entered allmulticast mode [ 7057.027785][T17532] hsr0: entered promiscuous mode [ 7057.029204][T17532] hsr0: entered allmulticast mode [ 7057.352478][T17532] veth1_virt_wifi: entered promiscuous mode [ 7057.355112][T17532] veth1_virt_wifi: entered allmulticast mode [ 7057.593594][T17532] veth0_virt_wifi: entered promiscuous mode [ 7057.595013][T17532] veth0_virt_wifi: entered allmulticast mode [ 7057.771990][T17532] veth1_vlan: entered allmulticast mode [ 7058.166468][T17532] vlan0: entered promiscuous mode [ 7058.167973][T17532] vlan0: entered allmulticast mode [ 7058.206796][T17532] vlan1: entered promiscuous mode [ 7058.208223][T17532] vlan1: entered allmulticast mode [ 7058.243575][T17532] macvlan0: entered promiscuous mode [ 7058.244856][T17532] macvlan0: entered allmulticast mode [ 7058.279360][T17532] macvlan1: entered promiscuous mode [ 7058.284306][T17532] macvlan1: entered allmulticast mode [ 7058.636253][T17532] ipvlan1: entered promiscuous mode [ 7058.637669][T17532] ipvlan1: entered allmulticast mode [ 7058.674377][T17532] veth1_macvtap: entered allmulticast mode [ 7058.875702][T17532] veth0_macvtap: entered allmulticast mode [ 7059.026069][T17532] macvtap0: entered promiscuous mode [ 7059.027435][T17532] macvtap0: entered allmulticast mode [ 7059.183753][T17532] macsec0: entered promiscuous mode [ 7059.185087][T17532] macsec0: entered allmulticast mode [ 7059.299547][T17532] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7059.314821][T17532] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7059.316397][T17532] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7059.317637][T17532] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7059.354895][T17532] geneve1: entered promiscuous mode [ 7059.357113][T17532] geneve1: entered allmulticast mode [ 7059.529885][T17532] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 7059.555720][T17532] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 7059.557170][T17532] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 7059.731795][T17532] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 7059.735037][T17532] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 7059.816510][T17532] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 7059.818031][T17532] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 7059.895904][T17532] vxlan0: entered promiscuous mode [ 7059.897348][T17532] vxlan0: entered allmulticast mode [ 7059.899872][T17532] geneve2: entered promiscuous mode [ 7059.913036][T17532] geneve2: entered allmulticast mode [ 7059.915892][T17532] ipip0: entered promiscuous mode [ 7059.916951][T17532] ipip0: entered allmulticast mode [ 7060.033047][T17532] dvmrp0: entered promiscuous mode [ 7060.145767][T17532] bond1: entered promiscuous mode [ 7060.147955][T17532] bond1: entered allmulticast mode [ 7060.175162][T17532] ipip1: entered promiscuous mode [ 7060.177786][T17532] ipip1: entered allmulticast mode [ 7060.218260][T17532] ip6gre1: entered promiscuous mode [ 7060.243915][T17532] ip6gre1: entered allmulticast mode [ 7060.247371][T17532] syztnl2: entered promiscuous mode [ 7060.248078][T17532] syztnl2: entered allmulticast mode [ 7060.317103][T17532] ip6gre2: entered promiscuous mode [ 7060.319258][T17532] ip6gre2: entered allmulticast mode [ 7061.716553][T17532] ipip2: entered promiscuous mode [ 7061.718056][T17532] ipip2: entered allmulticast mode [ 7061.792559][T17532] erspan1: entered promiscuous mode [ 7061.794089][T17532] erspan1: entered allmulticast mode [ 7065.056745][T17553] pimreg: entered allmulticast mode [ 7073.408932][T17570] netlink: 'syz.1.4023': attribute type 5 has an invalid length. [ 7073.414106][T17570] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4023'. [ 7077.613719][T17578] netlink: 'syz.0.4027': attribute type 3 has an invalid length. [ 7077.616458][T17578] tc_dump_action: action bad kind [ 7079.372282][T17582] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.327680) [ 7081.400319][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4032'. [ 7086.616099][T17596] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 7089.833590][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4039'. [ 7093.502115][ T34] audit: type=1400 audit(2000009723.323:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=17609 comm="syz.0.4043" [ 7095.062609][T17612] netlink: 'syz.1.4044': attribute type 11 has an invalid length. [ 7095.817029][T17614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4045'. [ 7103.069087][T17629] cgroup: none used incorrectly [ 7108.171047][T17641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 7110.982580][T17646] AppArmor: change_hat: Invalid input '0' [ 7119.554685][T17660] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 7132.024199][T17682] hsr0: left promiscuous mode [ 7132.025674][T17682] hsr0: left allmulticast mode [ 7160.121215][T17726] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 7168.194450][T17742] sctp: [Deprecated]: syz.0.4106 (pid 17742) Use of int in maxseg socket option. [ 7168.194450][T17742] Use struct sctp_assoc_value instead [ 7172.384340][T17750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 7197.331632][T13546] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 7197.595589][T13546] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 7197.598107][T13546] usb 2-1: config 0 has no interface number 0 [ 7197.600224][T13546] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 7197.606059][T13546] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 7197.687323][T13546] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 7197.691571][T13546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7197.693078][T13546] usb 2-1: Product: syz [ 7197.696634][T13546] usb 2-1: Manufacturer: syz [ 7197.697784][T13546] usb 2-1: SerialNumber: syz [ 7197.751866][T13546] usb 2-1: config 0 descriptor?? [ 7197.776714][T17805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7197.868754][T13546] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 7198.057023][T13546] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 7200.534042][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 7201.306306][T16166] usb 2-1: USB disconnect, device number 37 [ 7201.459942][T16166] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 7201.485564][T16166] cyberjack 2-1:0.69: device disconnected [ 7221.880904][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'. [ 7223.240479][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4154'. [ 7228.505952][T17873] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4159'. [ 7239.745476][T15723] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 7239.972580][T15723] usb 2-1: Using ep0 maxpacket: 32 [ 7240.056295][T15723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 7240.108464][T15723] usb 2-1: config 8 has an invalid interface number: 10 but max is 0 [ 7240.113593][T15723] usb 2-1: config 8 has no interface number 0 [ 7240.116022][T15723] usb 2-1: config 8 interface 10 altsetting 250 bulk endpoint 0xA has invalid maxpacket 1024 [ 7240.118178][T15723] usb 2-1: config 8 interface 10 has no altsetting 0 [ 7240.270206][T15723] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=d0.01 [ 7240.275204][T15723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7240.277775][T15723] usb 2-1: Product: syz [ 7240.279291][T15723] usb 2-1: Manufacturer: syz [ 7240.280841][T15723] usb 2-1: SerialNumber: syz [ 7240.355067][T17906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4174'. [ 7240.390080][T17901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7241.452624][T15723] usb 2-1: USB disconnect, device number 38 [ 7256.987195][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4190'. [ 7277.254339][T15723] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 7277.474723][T15723] usb 2-1: Using ep0 maxpacket: 8 [ 7277.553353][T15723] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 7277.554692][T15723] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 7277.555872][T15723] usb 2-1: config 0 has no interface number 0 [ 7277.557019][T15723] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 7277.558407][T15723] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 7277.561484][T15723] usb 2-1: config 0 interface 255 has no altsetting 0 [ 7277.980665][T15723] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 7277.982067][T15723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7277.983264][T15723] usb 2-1: Product: syz [ 7277.984223][T15723] usb 2-1: Manufacturer: syz [ 7277.985303][T15723] usb 2-1: SerialNumber: syz [ 7278.053687][T15723] usb 2-1: config 0 descriptor?? [ 7278.781606][T15723] imon 2-1:0.255: unable to register, err -19 [ 7278.827801][T15723] usb 2-1: USB disconnect, device number 39 [ 7291.464920][T18017] netlink: 'syz.1.4219': attribute type 12 has an invalid length. [ 7293.912594][T18021] AppArmor: change_hat: Invalid input 'p' [ 7295.535858][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 7295.542890][T18028] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4224'. [ 7317.676498][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4246'. [ 7324.125156][T18088] ubi0: attaching mtd0 [ 7324.161651][T18088] ubi0: scanning is finished [ 7324.163648][T18088] ubi0: empty MTD device detected [ 7324.512107][T18088] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 7324.513898][T18088] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 7324.515405][T18088] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 7324.516818][T18088] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 7324.522559][T18088] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 7324.524002][T18088] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 7324.525393][T18088] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2137336069 [ 7324.526943][T18088] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 7324.533631][T18091] ubi0: background thread "ubi_bgt0d" started, PID 18091 [ 7339.651215][T18111] netlink: 'syz.0.4263': attribute type 2 has an invalid length. [ 7339.652642][T18111] netlink: 'syz.0.4263': attribute type 11 has an invalid length. [ 7339.653844][T18111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4263'. [ 7340.141732][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4264'. [ 7350.469539][T13546] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 7350.688605][T13546] usb 1-1: Using ep0 maxpacket: 8 [ 7350.753047][T13546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 7350.754803][T13546] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 7350.867626][T13546] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 7350.869061][T13546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7350.870308][T13546] usb 1-1: Product: syz [ 7350.871354][T13546] usb 1-1: Manufacturer: syz [ 7350.872619][T13546] usb 1-1: SerialNumber: syz [ 7350.928842][T13546] usb 1-1: config 0 descriptor?? [ 7353.182168][T16166] usb 1-1: USB disconnect, device number 16 [ 7353.673786][T18151] sock: sock_timestamping_bind_phc: sock not bind to device [ 7396.192177][T18222] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 7412.351448][T18246] tmpfs: Bad value for 'mpol' [ 7419.686896][T18256] xt_hashlimit: size too large, truncated to 1048576 [ 7422.697112][T18263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4331'. [ 7434.418842][T18283] syz.1.4341 uses obsolete (PF_INET,SOCK_PACKET) [ 7437.498894][T18196] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 7437.919215][T18196] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 7437.929938][T18196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7438.037313][T18196] usb 1-1: config 0 descriptor?? [ 7439.865691][T18196] usb 1-1: Cannot read MAC address [ 7439.871073][T18196] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 7440.070692][T18196] usb 1-1: USB disconnect, device number 17 [ 7440.680461][T18306] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7442.676805][T18309] trusted_key: encrypted_key: master key parameter is missing [ 7448.639992][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4350'. [ 7459.188802][T18331] netlink: 'syz.1.4356': attribute type 21 has an invalid length. [ 7459.190297][T18331] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4356'. [ 7462.450257][T18339] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 7462.653738][T18339] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 7465.836965][ T34] audit: type=1400 audit(2000010095.671:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=18345 comm="syz.0.4362" [ 7482.805516][T13546] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 7483.181169][T13546] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 7483.184219][T13546] usb 1-1: config 179 has no interface number 0 [ 7483.185597][T13546] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 7483.187342][T13546] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 7483.189000][T13546] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 7483.192511][T13546] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 7483.194185][T13546] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 7483.196937][T13546] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 7483.198803][T13546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7483.415384][T18379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 7483.575281][T13546] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 7483.615764][T13546] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 7484.642807][T18085] usb 1-1: USB disconnect, device number 18 [ 7493.727239][T18404] netlink: 'syz.1.4385': attribute type 6 has an invalid length. [ 7499.926456][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4391'. [ 7526.914941][T18466] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4415'. [ 7542.296929][T18492] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4429'. [ 7557.609674][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4439'. [ 7557.611378][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4439'. [ 7559.550550][T18550] netlink: 'syz.0.4441': attribute type 61 has an invalid length. [ 7568.567236][T18196] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 7568.758499][T18196] usb 2-1: Using ep0 maxpacket: 16 [ 7568.918512][T18196] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 7568.920916][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7568.922692][T18196] usb 2-1: Product: syz [ 7568.924205][T18196] usb 2-1: Manufacturer: syz [ 7568.943752][T18196] usb 2-1: SerialNumber: syz [ 7569.084909][T18196] usb 2-1: config 0 descriptor?? [ 7569.242553][T18196] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 7572.523388][T18196] usb 2-1: clie_3_5_startup: get config number failed: -110 [ 7572.535333][T18196] visor 2-1:0.0: probe with driver visor failed with error -110 [ 7584.108320][T17426] usb 2-1: USB disconnect, device number 40 [ 7606.721104][T18638] netlink: 'syz.0.4476': attribute type 21 has an invalid length. [ 7606.722579][T18638] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4476'. [ 7623.536237][T18672] netlink: 'syz.0.4492': attribute type 21 has an invalid length. [ 7623.538224][T18672] netlink: 'syz.0.4492': attribute type 2 has an invalid length. [ 7623.539325][T18672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4492'. [ 7625.722550][T18676] ubi0: detaching mtd0 [ 7626.253353][T18676] ubi0: mtd0 is detached [ 7630.489277][T18685] tc_dump_action: action bad kind [ 7681.339629][T18768] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 7697.953653][ T34] audit: type=1400 audit(2000010327.791:16): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18792 comm="syz.0.4550" [ 7717.867673][T18821] cgroup: name respecified [ 7720.356311][T18826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4565'. [ 7720.358147][T18826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4565'. [ 7727.267905][T18836] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 7728.495222][T18838] netlink: 'syz.0.4572': attribute type 12 has an invalid length. [ 7728.496801][T18838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4572'. [ 7740.528242][T18861] netlink: 'syz.1.4583': attribute type 30 has an invalid length. [ 7751.739288][T18907] infiniband syz!: set down [ 7751.742326][T18907] infiniband syz!: added team_slave_0 [ 7752.765183][T18907] RDS/IB: syz!: added [ 7752.767137][T18907] smc: adding ib device syz! with port count 1 [ 7752.779750][T18907] smc: ib device syz! port 1 has pnetid [ 7780.420995][T17426] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 7780.959836][T17426] usb 1-1: Using ep0 maxpacket: 32 [ 7781.039311][T17426] usb 1-1: config 1 interface 0 has no altsetting 0 [ 7781.103875][T17426] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 7781.112553][T17426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7781.114137][T17426] usb 1-1: Product: syz [ 7781.115226][T17426] usb 1-1: Manufacturer: syz [ 7781.116471][T17426] usb 1-1: SerialNumber: syz [ 7783.166049][T17426] aqc111 1-1:1.0: probe with driver aqc111 failed with error -22 [ 7783.411818][T17426] usb 1-1: USB disconnect, device number 19 [ 7797.955915][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4619'. [ 7797.965514][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4619'. [ 7812.336863][T19010] netlink: 'syz.0.4632': attribute type 1 has an invalid length. [ 7812.339175][T19010] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4632'. [ 7849.696215][T19085] netlink: 'syz.0.4668': attribute type 9 has an invalid length. [ 7854.737499][T19096] netlink: 'syz.0.4674': attribute type 12 has an invalid length. [ 7875.601893][T19135] tmpfs: Bad value for 'mpol' [ 7884.056833][T19152] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 7895.959704][T19198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4706'. [ 7912.456876][T19223] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 7912.459592][T19223] bond0: (slave lo): Error: Device type is different from other slaves [ 7924.108178][T19246] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 7926.414434][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4732'. [ 7930.587198][T19257] netlink: 'syz.0.4735': attribute type 5 has an invalid length. [ 7937.491500][T19271] netlink: 'syz.0.4742': attribute type 3 has an invalid length. [ 7939.431970][T19277] netlink: 'syz.1.4744': attribute type 21 has an invalid length. [ 7939.433966][T19277] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4744'. [ 7955.662582][T19306] netlink: 'syz.1.4756': attribute type 11 has an invalid length. [ 7955.664539][T19306] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4756'. [ 7986.051258][T17426] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 7986.321807][T17426] usb 1-1: Using ep0 maxpacket: 16 [ 7986.453340][T17426] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 7986.456134][T17426] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 7986.475531][T17426] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 7986.654489][T17426] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 7986.670334][T17426] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 7986.672920][T17426] usb 1-1: Product: syz [ 7986.674480][T17426] usb 1-1: SerialNumber: syz [ 7986.872438][T17426] r8152-cfgselector 1-1: Unknown version 0x0000 [ 7986.874784][T17426] r8152-cfgselector 1-1: config 0 descriptor?? [ 7986.959204][T17426] hub 1-1:0.0: bad descriptor, ignoring hub [ 7986.962772][T17426] hub 1-1:0.0: probe with driver hub failed with error -5 [ 7987.527066][T19363] ipt_rpfilter: unknown options [ 7987.665971][T18085] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 8006.354649][T19395] tmpfs: Bad value for 'mpol' [ 8007.250994][T19397] netlink: 'syz.0.4791': attribute type 15 has an invalid length. [ 8017.096657][T19408] Zero length message leads to an empty skb [ 8021.396503][T19414] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4799'. [ 8024.653826][T19421] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 8024.831928][T19422] xt_TCPMSS: Only works on TCP SYN packets [ 8033.420575][T19435] [U] [ 8036.745387][T19442] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4813'. [ 8036.755630][T19442] 0ªX¹¦À: renamed from veth0 [ 8036.881772][T19442] 0ªX¹¦À: left promiscuous mode [ 8036.940766][T19442] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 8061.252594][T19482] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 8061.534605][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4834'. [ 8077.931634][T19512] bpf: Bad value for 'gid' [ 8082.302098][T19522] netlink: 'syz.1.4853': attribute type 10 has an invalid length. [ 8086.613664][T19531] netlink: 'syz.0.4858': attribute type 16 has an invalid length. [ 8086.626191][T19531] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4858'. [ 8101.047539][T19588] netlink: 'syz.0.4868': attribute type 9 has an invalid length. [ 8101.057206][T19588] netlink: 'syz.0.4868': attribute type 7 has an invalid length. [ 8101.059411][T19588] netlink: 'syz.0.4868': attribute type 8 has an invalid length. [ 8104.789334][T19594] netlink: 'syz.1.4871': attribute type 2 has an invalid length. [ 8104.790788][T19594] netlink: 'syz.1.4871': attribute type 8 has an invalid length. [ 8104.791937][T19594] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4871'. [ 8118.526693][T19628] netlink: 'syz.1.4887': attribute type 2 has an invalid length. [ 8118.529094][T19628] netlink: 'syz.1.4887': attribute type 1 has an invalid length. [ 8122.475824][T19634] xt_policy: neither incoming nor outgoing policy selected [ 8132.001686][T19651] netlink: 'syz.1.4897': attribute type 6 has an invalid length. [ 8141.967736][T19661] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4903' sets config #1 [ 8158.386235][T19692] netlink: 'syz.1.4918': attribute type 30 has an invalid length. [ 8158.390076][T19692] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 8158.403639][T19692] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 8163.512492][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4925'. [ 8189.056533][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4954'. [ 8192.625123][T19772] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 8205.893787][T19795] xt_l2tp: invalid flags combination: 0 [ 8217.921727][T18085] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 8218.823517][T18085] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 8218.825924][T18085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8218.827281][T18085] usb 2-1: Product: syz [ 8218.828204][T18085] usb 2-1: Manufacturer: syz [ 8218.831233][T18085] usb 2-1: SerialNumber: syz [ 8218.886693][T18085] usb 2-1: config 0 descriptor?? [ 8220.176712][T18085] hso 2-1:0.0: Can't find BULK IN endpoint [ 8220.194851][T18085] usb-storage 2-1:0.0: USB Mass Storage device detected [ 8221.038318][T19616] usb 2-1: USB disconnect, device number 41 [ 8235.231662][T19863] netlink: 'syz.1.4994': attribute type 1 has an invalid length. [ 8235.234034][T19863] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4994'. [ 8240.368613][T19876] lo: left allmulticast mode [ 8260.766812][T19916] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 8262.202341][T19919] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5021'. [ 8269.593543][T19935] netlink: 'syz.1.5029': attribute type 9 has an invalid length. [ 8274.522306][ T34] audit: type=1800 audit(2000010904.215:17): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5036" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 8277.363570][T19960] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 8286.023822][T19980] autofs4:pid:19980:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 8330.659922][T20081] cgroup: Bad value for 'name' [ 8331.131423][T20083] dlm: non-version read from control device 184 [ 8344.786025][T19616] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 8344.986036][T19616] usb 1-1: Using ep0 maxpacket: 8 [ 8345.050898][T19616] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 8345.053148][T19616] usb 1-1: config 179 has no interface number 0 [ 8345.073998][T19616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 8345.078079][T19616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 8345.079931][T19616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 8345.081497][T19616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 8345.082949][T19616] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 8345.088398][T19616] usb 1-1: config 179 interface 65 has no altsetting 0 [ 8345.090527][T19616] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 8345.092253][T19616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8345.368530][T19616] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input48 [ 8347.777329][T19616] usb 1-1: USB disconnect, device number 21 [ 8347.822839][T19616] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 8360.609086][T20158] netlink: 'syz.1.5123': attribute type 46 has an invalid length. [ 8360.658552][T20157] netlink: 'syz.0.5124': attribute type 8 has an invalid length. [ 8360.661191][T20157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5124'. [ 8363.114576][T20162] tmpfs: Bad value for 'mpol' [ 8364.424884][T20164] netlink: 'syz.0.5127': attribute type 21 has an invalid length. [ 8365.003229][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5128'. [ 8366.213107][T20169] smc: removing ib device syz2 [ 8384.125910][T20190] netlink: 'syz.1.5138': attribute type 21 has an invalid length. [ 8391.474072][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5148'. [ 8419.987065][T20272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5177'. [ 8425.990215][T20285] dns_resolver: Unsupported server list version (0) [ 8429.295392][T20292] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 8429.297119][T20292] Error validating options; rc = [-22] [ 8430.745124][T20296] netlink: 'syz.1.5189': attribute type 4 has an invalid length. [ 8430.746568][T20296] netlink: 'syz.1.5189': attribute type 6 has an invalid length. [ 8444.273070][T20318] lo: entered promiscuous mode [ 8444.274522][T20318] lo: entered allmulticast mode [ 8444.313532][T20318] tunl0: entered promiscuous mode [ 8444.314994][T20318] tunl0: entered allmulticast mode [ 8444.407346][T20318] gre0: entered promiscuous mode [ 8444.408715][T20318] gre0: entered allmulticast mode [ 8444.449284][T20318] gretap0: entered promiscuous mode [ 8444.454985][T20318] gretap0: entered allmulticast mode [ 8444.593476][T20318] erspan0: entered promiscuous mode [ 8444.594761][T20318] erspan0: entered allmulticast mode [ 8444.765841][T20318] ip_vti0: entered promiscuous mode [ 8444.767092][T20318] ip_vti0: entered allmulticast mode [ 8444.948549][T20318] ip6_vti0: entered promiscuous mode [ 8444.949840][T20318] ip6_vti0: entered allmulticast mode [ 8445.248063][T20318] ip6tnl0: entered promiscuous mode [ 8445.249433][T20318] ip6tnl0: entered allmulticast mode [ 8445.466665][T20318] ip6gre0: entered promiscuous mode [ 8445.468027][T20318] ip6gre0: entered allmulticast mode [ 8445.786231][T20318] syz_tun: entered promiscuous mode [ 8445.787770][T20318] syz_tun: entered allmulticast mode [ 8445.959251][T20318] ip6gretap0: entered promiscuous mode [ 8445.963787][T20318] ip6gretap0: entered allmulticast mode [ 8446.148748][T20318] vcan0: entered promiscuous mode [ 8446.150042][T20318] vcan0: entered allmulticast mode [ 8446.204919][T20318] bond0: entered promiscuous mode [ 8446.207327][T20318] bond_slave_0: entered promiscuous mode [ 8446.218909][T20318] bond_slave_1: entered promiscuous mode [ 8446.230200][T20318] bond0: entered allmulticast mode [ 8446.233425][T20318] bond_slave_0: entered allmulticast mode [ 8446.237952][T20318] bond_slave_1: entered allmulticast mode [ 8446.268335][T20318] dummy0: entered promiscuous mode [ 8446.272339][T20318] dummy0: entered allmulticast mode [ 8446.397315][T20318] nlmon0: entered promiscuous mode [ 8446.398670][T20318] nlmon0: entered allmulticast mode [ 8446.468171][T20318] vxcan0: entered promiscuous mode [ 8446.469564][T20318] vxcan0: entered allmulticast mode [ 8446.516860][T20318] vxcan1: entered promiscuous mode [ 8446.518188][T20318] vxcan1: entered allmulticast mode [ 8446.665792][T20318] veth0: entered promiscuous mode [ 8446.668779][T20318] veth0: entered allmulticast mode [ 8446.863382][T20318] veth1: entered promiscuous mode [ 8446.864747][T20318] veth1: entered allmulticast mode [ 8447.257531][T20318] wg0: entered promiscuous mode [ 8447.259652][T20318] wg0: entered allmulticast mode [ 8447.443449][T20318] wg1: entered promiscuous mode [ 8447.444719][T20318] wg1: entered allmulticast mode [ 8447.569103][T20318] wg2: entered promiscuous mode [ 8447.570376][T20318] wg2: entered allmulticast mode [ 8447.647352][T20318] veth0_to_bridge: entered promiscuous mode [ 8447.648638][T20318] veth0_to_bridge: entered allmulticast mode [ 8447.734059][T20318] bridge_slave_0: entered promiscuous mode [ 8447.735349][T20318] bridge_slave_0: entered allmulticast mode [ 8447.808184][T20318] veth1_to_bridge: entered promiscuous mode [ 8447.809494][T20318] veth1_to_bridge: entered allmulticast mode [ 8447.919072][T20318] bridge_slave_1: entered promiscuous mode [ 8447.920379][T20318] bridge_slave_1: entered allmulticast mode [ 8448.030041][T20318] veth0_to_bond: entered promiscuous mode [ 8448.047542][T20318] veth0_to_bond: entered allmulticast mode [ 8448.218841][T20318] veth1_to_bond: entered promiscuous mode [ 8448.220180][T20318] veth1_to_bond: entered allmulticast mode [ 8448.375670][T20318] veth0_to_team: entered promiscuous mode [ 8448.378508][T20318] veth0_to_team: entered allmulticast mode [ 8448.672547][T20318] team_slave_0: entered promiscuous mode [ 8448.675087][T20318] team_slave_0: entered allmulticast mode [ 8448.733306][T20318] veth1_to_team: entered promiscuous mode [ 8448.736112][T20318] veth1_to_team: entered allmulticast mode [ 8448.946796][T20318] team_slave_1: entered promiscuous mode [ 8448.949262][T20318] team_slave_1: entered allmulticast mode [ 8449.008253][T20318] veth0_to_batadv: entered promiscuous mode [ 8449.012884][T20318] veth0_to_batadv: entered allmulticast mode [ 8449.687754][T20318] batadv_slave_0: entered promiscuous mode [ 8449.689057][T20318] batadv_slave_0: entered allmulticast mode [ 8449.797114][T20318] veth1_to_batadv: entered promiscuous mode [ 8449.806332][T20318] veth1_to_batadv: entered allmulticast mode [ 8449.913278][T20318] batadv_slave_1: entered promiscuous mode [ 8449.914559][T20318] batadv_slave_1: entered allmulticast mode [ 8450.068125][T20318] xfrm0: entered promiscuous mode [ 8450.069512][T20318] xfrm0: entered allmulticast mode [ 8450.188415][T20318] veth0_to_hsr: entered promiscuous mode [ 8450.189959][T20318] veth0_to_hsr: entered allmulticast mode [ 8450.297784][T20318] hsr_slave_0: entered allmulticast mode [ 8450.375350][T20318] veth1_to_hsr: entered promiscuous mode [ 8450.376634][T20318] veth1_to_hsr: entered allmulticast mode [ 8450.455178][T20318] hsr_slave_1: entered allmulticast mode [ 8450.587137][T20318] hsr0: entered promiscuous mode [ 8450.588450][T20318] hsr0: entered allmulticast mode [ 8450.714575][T20318] veth1_virt_wifi: entered promiscuous mode [ 8450.715882][T20318] veth1_virt_wifi: entered allmulticast mode [ 8450.826304][T20318] veth0_virt_wifi: entered promiscuous mode [ 8450.827607][T20318] veth0_virt_wifi: entered allmulticast mode [ 8450.955201][T20318] veth1_vlan: entered allmulticast mode [ 8451.298300][T20318] veth0_vlan: entered allmulticast mode [ 8451.696984][T20318] vlan1: entered promiscuous mode [ 8451.703854][T20318] vlan1: entered allmulticast mode [ 8451.709201][T20318] macvlan0: entered promiscuous mode [ 8451.716867][T20318] macvlan0: entered allmulticast mode [ 8451.772323][T20318] macvlan1: entered promiscuous mode [ 8451.774450][T20318] macvlan1: entered allmulticast mode [ 8452.155561][T20318] ipvlan0: entered promiscuous mode [ 8452.156828][T20318] ipvlan0: entered allmulticast mode [ 8452.178035][T20318] ipvlan1: entered promiscuous mode [ 8452.179448][T20318] ipvlan1: entered allmulticast mode [ 8452.237544][T20318] veth1_macvtap: entered allmulticast mode [ 8452.335596][T20318] veth0_macvtap: entered allmulticast mode [ 8452.479597][T20318] macvtap0: entered promiscuous mode [ 8452.485475][T20318] macvtap0: entered allmulticast mode [ 8452.663740][T20318] macsec0: entered promiscuous mode [ 8452.669080][T20318] macsec0: entered allmulticast mode [ 8452.842941][T20318] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 8452.848653][T20318] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 8452.853016][T20318] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 8452.855202][T20318] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 8452.907804][T20318] geneve0: entered promiscuous mode [ 8452.909962][T20318] geneve0: entered allmulticast mode [ 8453.086394][T20318] geneve1: entered promiscuous mode [ 8453.098963][T20318] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 8453.147395][T20318] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 8453.149689][T20318] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 8453.782238][T20318] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 8453.784591][T20318] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 8454.156419][T20318] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 8454.158691][T20318] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 8454.425228][T20318] ipip0: entered promiscuous mode [ 8454.429952][T20318] ipip0: entered allmulticast mode [ 8454.456230][T20318] vti0: entered promiscuous mode [ 8454.458406][T20318] vti0: entered allmulticast mode [ 8454.503204][T20318] ip6tnl1: entered promiscuous mode [ 8454.505398][T20318] ip6tnl1: entered allmulticast mode [ 8454.515348][T20318] geneve2: entered promiscuous mode [ 8454.517360][T20318] geneve2: entered allmulticast mode [ 8454.523111][T20318] syztnl0: entered promiscuous mode [ 8454.527397][T20318] syztnl0: entered allmulticast mode [ 8454.533370][T20318] gretap1: entered promiscuous mode [ 8454.535218][T20318] gretap1: entered allmulticast mode [ 8454.576158][T20318] sit1: entered promiscuous mode [ 8454.585187][T20318] sit1: entered allmulticast mode [ 8454.628096][T20318] sit2: entered promiscuous mode [ 8454.651774][T20318] sit2: entered allmulticast mode [ 8454.679558][T20318] gretap2: entered promiscuous mode [ 8454.695120][T20318] gretap2: entered allmulticast mode [ 8454.732599][T20318] bond1: entered promiscuous mode [ 8454.734823][T20318] bond1: entered allmulticast mode [ 8454.739528][T20318] vti1: entered promiscuous mode [ 8454.781832][T20318] vti1: entered allmulticast mode [ 8454.787697][T20318] bond2: entered promiscuous mode [ 8454.789634][T20318] bond2: entered allmulticast mode [ 8454.835874][T20318] bond3: entered promiscuous mode [ 8454.838020][T20318] bond3: entered allmulticast mode [ 8454.865879][T20318] erspan1: entered promiscuous mode [ 8454.884863][T20318] erspan1: entered allmulticast mode [ 8454.889517][T20318] veth2: entered promiscuous mode [ 8454.908037][T20318] veth2: entered allmulticast mode [ 8454.927027][T20318] veth3: entered promiscuous mode [ 8454.929202][T20318] veth3: entered allmulticast mode [ 8454.949775][T20318] sit3: entered promiscuous mode [ 8454.961719][T20318] sit3: entered allmulticast mode [ 8454.996326][T20318] ip6erspan0: entered promiscuous mode [ 8454.998442][T20318] ip6erspan0: entered allmulticast mode [ 8455.034690][T20318] bond4: entered promiscuous mode [ 8455.037481][T20318] bond4: entered allmulticast mode [ 8455.077769][T20318] gretap3: entered allmulticast mode [ 8455.257689][T20318] ip6gre1: entered promiscuous mode [ 8455.259912][T20318] ip6gre1: entered allmulticast mode [ 8456.166513][T20318] ip6gre2: entered promiscuous mode [ 8456.168090][T20318] ip6gre2: entered allmulticast mode [ 8457.196045][T20318] syztnl1: entered promiscuous mode [ 8457.198822][T20318] syztnl1: entered allmulticast mode [ 8457.225462][T20318] pimreg: entered promiscuous mode [ 8457.345132][T20318] gre1: entered promiscuous mode [ 8457.347228][T20318] gre1: entered allmulticast mode [ 8457.645896][T20318] bond5: entered promiscuous mode [ 8457.648202][T20318] bond5: entered allmulticast mode [ 8457.654181][T20318] bond6: entered promiscuous mode [ 8457.655939][T20318] bond6: entered allmulticast mode [ 8457.659926][T20318] bond7: entered promiscuous mode [ 8457.663512][T20318] bond7: entered allmulticast mode [ 8463.073756][T20344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5211'. [ 8465.710854][T20354] netlink: 'syz.0.5216': attribute type 1 has an invalid length. [ 8465.712294][T20354] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5216'. [ 8466.812137][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5217'. [ 8468.948304][T20362] kernel read not supported for file /'- (pid: 20362 comm: syz.0.5220) [ 8468.965829][ T34] audit: type=1800 audit(2000011098.832:18): pid=20362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5220" name="'-" dev="mqueue" ino=36771 res=0 errno=0 [ 8472.571162][T20370] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5224'. [ 8480.021402][T18196] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 8480.391968][T18196] usb 1-1: config 0 interface 0 has no altsetting 0 [ 8480.396977][T18196] usb 1-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 8480.398384][T18196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8480.521512][T18196] usb 1-1: config 0 descriptor?? [ 8480.665979][T18196] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 found [ 8481.175351][T18196] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 8481.178460][T18196] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 now disconnected [ 8481.212586][T18196] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 8481.665136][T13546] usb 1-1: USB disconnect, device number 22 [ 8496.293554][T20434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5250'. [ 8497.325309][T20436] xt_limit: Overflow, try lower: 65536/2147483648 [ 8502.852674][T20444] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 8502.854287][T20444] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 8514.545407][T20472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 8514.548102][T20472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 8514.552814][T20472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 8514.554859][T20472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 8514.561061][T20472] geneve0: entered promiscuous mode [ 8514.570891][T20472] geneve0: entered allmulticast mode [ 8516.487898][T20478] netlink: 'syz.0.5270': attribute type 2 has an invalid length. [ 8516.491965][T20478] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5270'. [ 8535.876279][T20532] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5297'. [ 8540.713481][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 8545.850311][T20561] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 8549.843065][T20573] veth0_to_hsr: left promiscuous mode [ 8549.844475][T20573] veth0_to_hsr: left allmulticast mode [ 8549.859122][T20573] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 8556.508475][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5326'. [ 8559.603128][T20597] netlink: 'syz.0.5329': attribute type 12 has an invalid length. [ 8567.341785][T18085] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 8567.539609][T18085] usb 2-1: Using ep0 maxpacket: 16 [ 8567.620267][T18085] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 8567.623107][T18085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 8567.757238][T18085] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 8567.760091][T18085] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 8567.763306][T18085] usb 2-1: Product: syz [ 8567.765115][T18085] usb 2-1: Manufacturer: syz [ 8567.777403][T18085] usb 2-1: SerialNumber: syz [ 8567.875008][T18085] usb 2-1: config 0 descriptor?? [ 8568.028875][T18085] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 8568.032239][T18085] imon 2-1:0.0: unable to initialize intf0, err -19 [ 8568.034162][T18085] imon:imon_probe: failed to initialize context! [ 8568.036016][T18085] imon 2-1:0.0: unable to register, err -19 [ 8568.969374][T18085] usb 2-1: USB disconnect, device number 42 [ 8576.872532][T20637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5341'. [ 8599.163775][T20685] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.5362'. [ 8607.168410][T20709] netlink: 'syz.1.5373': attribute type 3 has an invalid length. [ 8607.170566][T20709] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5373'. [ 8607.567304][T13546] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 8607.760278][T13546] usb 1-1: Using ep0 maxpacket: 8 [ 8607.896269][T13546] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 8607.897646][T13546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8607.898705][T13546] usb 1-1: Product: syz [ 8607.899738][T13546] usb 1-1: Manufacturer: syz [ 8607.900612][T13546] usb 1-1: SerialNumber: syz [ 8607.954627][T13546] usb 1-1: config 0 descriptor?? [ 8609.078636][T13546] usb 1-1: USB disconnect, device number 23 [ 8609.392411][T20720] erspan0: default FDB implementation only supports local addresses [ 8625.007936][T20771] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 8636.089953][T20791] 0ªX¹¦À: entered promiscuous mode [ 8636.226977][T20791] hsr0: entered promiscuous mode [ 8636.228381][T20791] hsr0: entered allmulticast mode [ 8636.232622][T20791] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 8636.259708][T20791] bond2: entered promiscuous mode [ 8636.261029][T20791] bond2: entered allmulticast mode [ 8636.263610][T20791] syztnl1: entered promiscuous mode [ 8636.289564][T20791] syztnl1: entered allmulticast mode [ 8636.292171][T20791] ip6_vti1: entered promiscuous mode [ 8636.293226][T20791] ip6_vti1: entered allmulticast mode [ 8636.312460][T20791] vxcan2: entered promiscuous mode [ 8636.313704][T20791] vxcan2: entered allmulticast mode [ 8636.370590][T20791] vxcan3: entered promiscuous mode [ 8636.372840][T20791] vxcan3: entered allmulticast mode [ 8636.437304][T20791] sit1: entered promiscuous mode [ 8636.440147][T20791] sit1: entered allmulticast mode [ 8636.526111][T20791] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 8636.528004][T20791] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 8636.529587][T20791] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 8636.531097][T20791] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 8636.611636][T20791] bond3: entered promiscuous mode [ 8636.613066][T20791] bond3: entered allmulticast mode [ 8649.696176][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5407'. [ 8653.558297][T20834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8653.560161][T20834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8653.561711][T20834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8653.600857][T20834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8694.100273][T20902] cgroup: Name too long [ 8704.185793][T20923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5451'. [ 8721.163802][T20971] trusted_key: encrypted_key: hex blob is missing [ 8726.403781][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5479'. [ 8730.022203][T20998] IPv6: Can't replace route, no match found [ 8737.178923][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 8754.023324][T21042] usb usb1: check_ctrlrecip: process 21042 (syz.1.5505) requesting ep 01 but needs 81 [ 8754.046455][T21042] usb usb1: usbfs: process 21042 (syz.1.5505) did not claim interface 0 before use [ 8759.563582][T21054] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5511'. [ 8759.568269][T21054] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5511'. [ 8759.569504][T21054] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5511'. [ 8760.156204][T21056] IPv6: NLM_F_CREATE should be specified when creating new route [ 8770.714802][T21082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 8788.733574][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 8793.904542][T21158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5551'. [ 8793.906096][T21158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5551'. [ 8796.428295][T21166] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 8829.811834][T21294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 8850.793727][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 8868.729764][T21356] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 8868.981276][T21356] usb 1-1: Using ep0 maxpacket: 16 [ 8869.418723][T21356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 8869.420268][T21356] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 8870.922431][T21356] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 8870.924928][T21356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8870.942686][T21356] usb 1-1: Product: syz [ 8870.944509][T21356] usb 1-1: Manufacturer: syz [ 8871.000989][T21356] usb 1-1: SerialNumber: syz [ 8872.534786][T21356] usb 1-1: 0:2 : does not exist [ 8872.554829][T21356] usb 1-1: unit 6 not found! [ 8872.924531][T21356] usb 1-1: USB disconnect, device number 24 [ 8894.097995][T21420] dlm: no locking on control device [ 8899.701220][T21432] netlink: 'syz.0.5641': attribute type 13 has an invalid length. [ 8899.708505][T21432] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5641'. [ 8899.721048][T21432] syz_tun: refused to change device tx_queue_len [ 8899.722376][T21432] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 8902.578068][T21436] netlink: 'syz.0.5643': attribute type 5 has an invalid length. [ 8912.881460][T21455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5650'. [ 8918.103218][T21467] usb usb2: usbfs: process 21467 (syz.0.5657) did not claim interface 0 before use [ 8924.113421][T21479] xt_CT: No such helper "syz1" [ 8952.592855][T21534] syz.0.5688: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 8952.602840][T21534] CPU: 0 UID: 0 PID: 21534 Comm: syz.0.5688 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 8952.604290][T21534] Hardware name: riscv-virtio,qemu (DT) [ 8952.605339][T21534] Call Trace: [ 8952.606196][T21534] [] dump_backtrace+0x2e/0x3c [ 8952.607256][T21534] [] show_stack+0x30/0x3c [ 8952.608231][T21534] [] dump_stack_lvl+0x12e/0x1a6 [ 8952.609199][T21534] [] dump_stack+0x1c/0x24 [ 8952.610164][T21534] [] warn_alloc+0x170/0x292 [ 8952.611100][T21534] [] __vmalloc_node_range_noprof+0xfb6/0x120e [ 8952.612157][T21534] [] vmalloc_user_noprof+0xf8/0x126 [ 8952.613117][T21534] [] xskq_create+0xf2/0x1ae [ 8952.613958][T21534] [] xsk_setsockopt+0x338/0x8f0 [ 8952.614841][T21534] [] do_sock_setsockopt+0x208/0x400 [ 8952.615788][T21534] [] __sys_setsockopt+0x140/0x1cc [ 8952.617158][T21534] [] __riscv_sys_setsockopt+0xa6/0x114 [ 8952.618270][T21534] [] syscall_handler+0x94/0x118 [ 8952.619220][T21534] [] do_trap_ecall_u+0x1aa/0x216 [ 8952.620261][T21534] [] handle_exception+0x146/0x152 [ 8952.624356][T21534] Mem-Info: [ 8952.625956][T21534] active_anon:1367 inactive_anon:0 isolated_anon:0 [ 8952.625956][T21534] active_file:13258 inactive_file:37340 isolated_file:0 [ 8952.625956][T21534] unevictable:768 dirty:69 writeback:0 [ 8952.625956][T21534] slab_reclaimable:2943 slab_unreclaimable:29059 [ 8952.625956][T21534] mapped:12624 shmem:870 pagetables:360 [ 8952.625956][T21534] sec_pagetables:0 bounce:0 [ 8952.625956][T21534] kernel_misc_reclaimable:0 [ 8952.625956][T21534] free:209156 free_pcp:844 free_cma:52608 [ 8952.629386][T21534] Node 0 active_anon:5468kB inactive_anon:0kB active_file:53032kB inactive_file:149360kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50496kB dirty:276kB writeback:0kB shmem:3480kB writeback_tmp:0kB kernel_stack:6136kB pagetables:1440kB sec_pagetables:0kB all_unreclaimable? no [ 8952.632165][T21534] Node 0 DMA32 free:836624kB boost:0kB min:4784kB low:6212kB high:7640kB reserved_highatomic:0KB active_anon:5468kB inactive_anon:0kB active_file:53032kB inactive_file:149360kB unevictable:3072kB writepending:276kB present:2097152kB managed:1434264kB mlocked:0kB bounce:0kB free_pcp:3376kB local_pcp:2032kB free_cma:210432kB [ 8952.638700][T21534] lowmem_reserve[]: 0 0 0 [ 8952.641116][T21534] Node 0 DMA32: 280*4kB (UME) 78*8kB (UME) 444*16kB (UME) 438*32kB (UME) 113*64kB (UME) 53*128kB (UME) 32*256kB (UME) 42*512kB (UMC) 34*1024kB (UMEC) 9*2048kB (UME) 175*4096kB (MC) = 836624kB [ 8952.656792][T21534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 8952.660069][T21534] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 8952.662274][T21534] 51468 total pagecache pages [ 8952.664225][T21534] 0 pages in swap cache [ 8952.665466][T21534] Free swap = 124476kB [ 8952.666373][T21534] Total swap = 124996kB [ 8952.667504][T21534] 524288 pages RAM [ 8952.668379][T21534] 0 pages HighMem/MovableOnly [ 8952.669214][T21534] 165722 pages reserved [ 8952.672504][T21534] 52736 pages cma reserved [ 8959.516880][T21547] dlm: no locking on control device [ 9004.177399][T21637] netlink: 'syz.1.5737': attribute type 21 has an invalid length. [ 9021.254548][T21356] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 9021.473506][T21356] usb 1-1: Using ep0 maxpacket: 16 [ 9021.513372][T21356] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 9021.514800][T21356] usb 1-1: config 0 has an invalid interface number: 153 but max is 97 [ 9021.516056][T21356] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 9021.517506][T21356] usb 1-1: config 0 has no interface number 0 [ 9021.685784][T21356] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 9021.687248][T21356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9021.688359][T21356] usb 1-1: Product: syz [ 9021.689221][T21356] usb 1-1: Manufacturer: syz [ 9021.690174][T21356] usb 1-1: SerialNumber: syz [ 9021.764480][T21356] usb 1-1: config 0 descriptor?? [ 9021.933446][T21356] sierra 1-1:0.153: Sierra USB modem converter detected [ 9022.800024][T21356] usb 1-1: USB disconnect, device number 25 [ 9022.847913][T21356] sierra 1-1:0.153: device disconnected [ 9032.103271][T21356] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 9032.524416][T21356] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 9032.529763][T21356] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 9032.545076][T21356] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 9032.547642][T21356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9032.710567][T21695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9032.879821][T21356] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 9033.888615][T21305] usb 2-1: USB disconnect, device number 43 [ 9054.994941][T21762] xt_NFQUEUE: number of total queues is 0 [ 9081.858546][T21829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5791'. [ 9108.541120][T21871] netlink: 'syz.0.5811': attribute type 5 has an invalid length. [ 9121.881038][T21887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5819'. [ 9121.884148][T21887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5819'. [ 9126.403891][T21895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5823'. [ 9153.145330][T21928] netlink: 'syz.0.5839': attribute type 27 has an invalid length. [ 9165.972420][T21947] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5848'. [ 9169.843572][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5849'. [ 9189.959822][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5860'. [ 9202.539754][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5870'. [ 9220.359575][T22029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5885'. [ 9227.784787][T18085] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 9228.017233][T18085] usb 1-1: Using ep0 maxpacket: 16 [ 9228.093938][T18085] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 9228.104202][T18085] usb 1-1: config 0 has no interface number 0 [ 9228.117330][T18085] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 9228.124286][T18085] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 9228.133602][T18085] usb 1-1: config 0 interface 41 has no altsetting 0 [ 9228.272808][T18085] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 9228.286442][T18085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9228.288790][T18085] usb 1-1: Product: syz [ 9228.296174][T18085] usb 1-1: Manufacturer: syz [ 9228.297924][T18085] usb 1-1: SerialNumber: syz [ 9228.442306][T18085] usb 1-1: config 0 descriptor?? [ 9228.492453][T22041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9228.512015][T22041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9229.023053][T22041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9229.033730][T22041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9229.598535][T18085] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 9229.831249][T18085] usb 1-1: USB disconnect, device number 26 [ 9251.442722][T22082] fuse: blksize only supported for fuseblk [ 9258.383555][ T34] audit: type=1326 audit(2000011888.258:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22091 comm="syz.0.5909" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7fc00000 [ 9275.489039][T22126] tmpfs: Group quota block hardlimit too large. [ 9285.625415][T22147] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5934'. [ 9312.958638][T22196] tmpfs: Cannot change global quota limit on remount [ 9314.426421][T21356] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 9314.661824][T21356] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 9314.668554][T21356] usb 1-1: config 0 has no interface number 0 [ 9314.670876][T21356] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 9314.679327][T21356] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 9314.818972][T21356] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 9314.821945][T21356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9314.828073][T21356] usb 1-1: Product: syz [ 9314.829724][T21356] usb 1-1: Manufacturer: syz [ 9314.831404][T21356] usb 1-1: SerialNumber: syz [ 9314.990813][T21356] usb 1-1: config 0 descriptor?? [ 9315.050362][T22200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9315.290072][T21356] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 9315.467714][T21356] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 9316.596121][T22127] usb 1-1: USB disconnect, device number 27 [ 9316.777544][T22127] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 9316.792021][T22127] cyberjack 1-1:0.69: device disconnected [ 9323.993853][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5964'. [ 9335.097502][T22258] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 9342.679574][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5984'. [ 9342.695926][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5984'. [ 9342.697522][T22280] netlink: 'syz.1.5984': attribute type 25 has an invalid length. [ 9346.695256][T22290] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 9353.812576][T22306] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5997'. [ 9353.814157][T22306] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5997'. [ 9388.145619][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'. [ 9412.966951][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6060'. [ 9412.968567][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6060'. [ 9412.977389][T22440] netlink: 'syz.0.6060': attribute type 15 has an invalid length. [ 9416.936716][T22448] rdma_op ff6000001e5c21f0 conn xmit_rdma 0000000000000000 [ 9418.362228][T22452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6065'. [ 9451.232962][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'. [ 9467.126612][T22546] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 16 [ 9476.035362][T22572] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 752 [ 9495.690423][T18085] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 9495.915280][T22622] netlink: 'syz.0.6138': attribute type 2 has an invalid length. [ 9495.921444][T22622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6138'. [ 9495.953088][T18085] usb 2-1: Using ep0 maxpacket: 16 [ 9496.014597][T18085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9496.025977][T18085] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 9496.033645][T18085] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 9496.039982][T18085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9496.143991][T18085] usb 2-1: config 0 descriptor?? [ 9498.193468][T18085] apple 0003:05AC:0244.0001: unknown main item tag 0x0 [ 9498.196108][T18085] apple 0003:05AC:0244.0001: unknown main item tag 0x0 [ 9498.200687][T18085] apple 0003:05AC:0244.0001: unknown main item tag 0x0 [ 9498.202950][T18085] apple 0003:05AC:0244.0001: unknown main item tag 0x0 [ 9498.204928][T18085] apple 0003:05AC:0244.0001: unknown main item tag 0x0 [ 9498.283451][T18085] apple 0003:05AC:0244.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.1-1/input0 [ 9498.941975][T18085] usb 2-1: USB disconnect, device number 44 [ 9524.469880][T18196] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 9524.707940][T18196] usb 2-1: Using ep0 maxpacket: 16 [ 9524.814312][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9524.815958][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9524.819245][T18196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 9524.820819][T18196] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 9524.822012][T18196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9524.974906][T18196] usb 2-1: config 0 descriptor?? [ 9527.054243][T18196] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 9527.091878][T18196] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 9527.558940][T18196] usb 2-1: USB disconnect, device number 45 [ 9535.431293][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6169'. [ 9535.450033][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'. [ 9535.451638][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 9535.588501][T22719] nbd: couldn't find a device at index 0 [ 9569.204334][T22794] vlan2: entered allmulticast mode [ 9581.876174][T22824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6215'. [ 9602.976084][T18196] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 9603.309878][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 9603.312742][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 9603.329120][T18196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 9603.332233][T18196] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 9603.339211][T18196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9603.453977][T18196] usb 2-1: config 0 descriptor?? [ 9603.487922][T22876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9611.211578][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.212937][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.214705][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.215866][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.216923][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.218033][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.219150][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.220257][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.221376][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.222485][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.223641][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.225955][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.227013][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.228157][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.229602][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.230649][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.231687][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.232712][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.233745][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.236124][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.237200][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.238318][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.239482][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.240616][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.241698][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.242745][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.243831][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.245482][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.246639][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.247876][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.249068][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.250124][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.251171][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.252232][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.253281][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.255119][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.256259][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.257319][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.258646][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.259761][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.260859][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.261913][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.263045][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.265253][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.266341][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.267450][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.268660][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.269728][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.270801][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.271874][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.272923][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.274526][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.275683][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.277039][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.278202][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.279266][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.281056][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.282109][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.283292][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.286297][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.287492][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.288703][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.289793][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.290812][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.291967][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.293141][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.296102][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.297621][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.298770][T18196] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 9611.332667][T18196] aureal 0003:0755:2626.0003: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 9612.029701][T18196] usb 2-1: USB disconnect, device number 46 [ 9614.305343][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6245'. [ 9629.529633][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6258'. [ 9630.931039][T18085] hid-generic 0000:0004:0005.0004: item fetching failed at offset 0/2 [ 9630.954216][T18085] hid-generic 0000:0004:0005.0004: probe with driver hid-generic failed with error -22 [ 9652.902061][T23017] x_tables: ip_tables: udp match: only valid for protocol 17 [ 9660.297416][ T34] audit: type=1326 audit(2000012290.189:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9660.301748][ T34] audit: type=1326 audit(2000012290.199:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9660.309548][ T34] audit: type=1326 audit(2000012290.209:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9660.344215][ T34] audit: type=1326 audit(2000012290.239:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9660.404711][ T34] audit: type=1326 audit(2000012290.299:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9660.426267][ T34] audit: type=1326 audit(2000012290.329:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23030 comm="syz.1.6289" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9663.641893][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6292'. [ 9663.645827][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6292'. [ 9664.987922][ T34] audit: type=1326 audit(2000012294.899:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23041 comm="syz.0.6293" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 9679.393922][T18085] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 9679.659683][T18085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 9679.661208][T18085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9679.667344][T18085] usb 2-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 9679.670082][T18085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9679.723548][T18085] usb 2-1: config 0 descriptor?? [ 9681.040805][T18085] wacom 0003:056A:0090.0005: ignoring exceeding usage max [ 9681.100560][T18085] wacom 0003:056A:0090.0005: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.1-1/input0 [ 9681.950550][T18196] usb 2-1: USB disconnect, device number 47 [ 9690.265402][T18085] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 9690.564536][T18085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9690.567525][T18085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9690.570487][T18085] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 9690.574745][T18085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9690.651383][T18085] usb 1-1: config 0 descriptor?? [ 9691.640972][T18085] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 9691.647049][T18085] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 9691.732994][T18085] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input52 [ 9691.919181][T18085] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 9692.009213][T18085] usb 1-1: USB disconnect, device number 28 [ 9696.128079][T23134] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 9710.020569][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6328'. [ 9710.025899][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6328'. [ 9710.027330][T23164] netlink: 'syz.0.6328': attribute type 13 has an invalid length. [ 9710.028480][T23164] netlink: 'syz.0.6328': attribute type 11 has an invalid length. [ 9725.864924][T23198] hub 1-0:1.0: USB hub found [ 9725.899454][T23198] hub 1-0:1.0: 1 port detected [ 9738.611861][T23227] netlink: 'syz.1.6355': attribute type 16 has an invalid length. [ 9738.613414][T23227] netlink: 'syz.1.6355': attribute type 3 has an invalid length. [ 9738.614517][T23227] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6355'. [ 9744.936357][T23244] hub 1-0:1.0: USB hub found [ 9744.943765][T23244] hub 1-0:1.0: 1 port detected [ 9753.089225][T23266] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6373'. [ 9754.852601][T23270] ubi0: attaching mtd0 [ 9754.867779][T23270] ubi0: scanning is finished [ 9754.876241][T23270] ================================================================== [ 9754.878301][T23270] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x528/0x61a [ 9754.880049][T23270] Read of size 4 at addr ff600000373598e0 by task syz.1.6374/23270 [ 9754.882738][T23270] [ 9754.884376][T23270] CPU: 1 UID: 0 PID: 23270 Comm: syz.1.6374 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 9754.885406][T23270] Hardware name: riscv-virtio,qemu (DT) [ 9754.886152][T23270] Call Trace: [ 9754.886956][T23270] [] dump_backtrace+0x2e/0x3c [ 9754.887886][T23270] [] show_stack+0x30/0x3c [ 9754.888695][T23270] [] dump_stack_lvl+0x12e/0x1a6 [ 9754.889637][T23270] [] print_report+0x28e/0x5aa [ 9754.890924][T23270] [] kasan_report+0xec/0x118 [ 9754.891858][T23270] [] __asan_report_load4_noabort+0x12/0x1a [ 9754.892826][T23270] [] notifier_chain_register+0x528/0x61a [ 9754.893708][T23270] [] blocking_notifier_chain_register+0x80/0xc6 [ 9754.894680][T23270] [] register_reboot_notifier+0x22/0x2c [ 9754.895667][T23270] [] ubi_wl_init+0xd0a/0x15c2 [ 9754.896601][T23270] [] ubi_attach+0x15da/0x4f90 [ 9754.897506][T23270] [] ubi_attach_mtd_dev+0x14d8/0x3646 [ 9754.898463][T23270] [] ctrl_cdev_ioctl+0x496/0x764 [ 9754.899347][T23270] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9754.900603][T23270] [] syscall_handler+0x94/0x118 [ 9754.901447][T23270] [] do_trap_ecall_u+0x1aa/0x216 [ 9754.902366][T23270] [] handle_exception+0x146/0x152 [ 9754.903391][T23270] [ 9754.903999][T23270] Allocated by task 23031: [ 9754.904724][T23270] stack_trace_save+0xa0/0xd2 [ 9754.905484][T23270] kasan_save_stack+0x3e/0x6a [ 9754.906254][T23270] kasan_save_track+0x16/0x28 [ 9754.907006][T23270] kasan_save_alloc_info+0x30/0x3e [ 9754.907906][T23270] __kasan_kmalloc+0xa0/0xa6 [ 9754.908681][T23270] __kmalloc_cache_noprof+0x15e/0x3f4 [ 9754.909554][T23270] audit_log_d_path+0xca/0x196 [ 9754.910616][T23270] audit_log_d_path_exe+0x3e/0x7a [ 9754.911400][T23270] audit_log_task+0x24a/0x2ec [ 9754.912238][T23270] audit_seccomp+0x5c/0x12c [ 9754.913065][T23270] __seccomp_filter+0x696/0xc1a [ 9754.913852][T23270] __secure_computing+0x1bc/0x2c2 [ 9754.914634][T23270] syscall_trace_enter+0x82/0x20c [ 9754.915404][T23270] do_trap_ecall_u+0x1be/0x216 [ 9754.916533][T23270] handle_exception+0x146/0x152 [ 9754.917497][T23270] [ 9754.918011][T23270] Freed by task 23031: [ 9754.918655][T23270] stack_trace_save+0xa0/0xd2 [ 9754.919387][T23270] kasan_save_stack+0x3e/0x6a [ 9754.920309][T23270] kasan_save_track+0x16/0x28 [ 9754.921063][T23270] kasan_save_free_info+0x40/0x5c [ 9754.921908][T23270] __kasan_slab_free+0x4e/0x68 [ 9754.922682][T23270] kfree+0x13e/0x508 [ 9754.923509][T23270] audit_log_d_path+0x118/0x196 [ 9754.924362][T23270] audit_log_d_path_exe+0x3e/0x7a [ 9754.925163][T23270] audit_log_task+0x24a/0x2ec [ 9754.925942][T23270] audit_seccomp+0x5c/0x12c [ 9754.926752][T23270] __seccomp_filter+0x696/0xc1a [ 9754.927558][T23270] __secure_computing+0x1bc/0x2c2 [ 9754.928343][T23270] syscall_trace_enter+0x82/0x20c [ 9754.929147][T23270] do_trap_ecall_u+0x1be/0x216 [ 9754.929940][T23270] handle_exception+0x146/0x152 [ 9754.930862][T23270] [ 9754.931419][T23270] The buggy address belongs to the object at ff60000037358000 [ 9754.931419][T23270] which belongs to the cache kmalloc-8k of size 8192 [ 9754.932595][T23270] The buggy address is located 6368 bytes inside of [ 9754.932595][T23270] freed 8192-byte region [ff60000037358000, ff6000003735a000) [ 9754.933703][T23270] [ 9754.934234][T23270] The buggy address belongs to the physical page: [ 9754.935333][T23270] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xff60000037358000 pfn:0xb7358 [ 9754.937135][T23270] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 9754.938519][T23270] flags: 0xffe000000000240(workingset|head|node=0|zone=0|lastcpupid=0x7ff) [ 9754.940083][T23270] page_type: f5(slab) [ 9754.941338][T23270] raw: 0ffe000000000240 ff60000011402280 ff1c000000c1d210 ff1c0000006b2010 [ 9754.942284][T23270] raw: ff60000037358000 0000000000020001 00000001f5000000 0000000000000000 [ 9754.943310][T23270] head: 0ffe000000000240 ff60000011402280 ff1c000000c1d210 ff1c0000006b2010 [ 9754.944276][T23270] head: ff60000037358000 0000000000020001 00000001f5000000 0000000000000000 [ 9754.945212][T23270] head: 0ffe000000000003 ff1c000000dcd601 ffffffffffffffff 0000000000000000 [ 9754.946215][T23270] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 9754.947860][T23270] page dumped because: kasan: bad access detected [ 9754.949459][T23270] page_owner tracks the page as allocated [ 9754.951484][T23270] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17187, tgid 17186 (syz.1.3910), ts 6931824667900, free_ts 6687812578800 [ 9754.953507][T23270] __set_page_owner+0xa2/0x70c [ 9754.954301][T23270] post_alloc_hook+0xf0/0x1e8 [ 9754.955032][T23270] get_page_from_freelist+0xdb0/0x2c0e [ 9754.955911][T23270] __alloc_pages_noprof+0x1e8/0x1fc2 [ 9754.956714][T23270] alloc_pages_mpol_noprof+0xf8/0x488 [ 9754.957558][T23270] alloc_pages_noprof+0x174/0x2f0 [ 9754.958365][T23270] new_slab+0x2b6/0x40e [ 9754.959164][T23270] ___slab_alloc+0x9c8/0x10e6 [ 9754.959999][T23270] __slab_alloc.constprop.0+0x60/0xb0 [ 9754.960854][T23270] __kmalloc_cache_noprof+0xd4/0x3f4 [ 9754.961715][T23270] cryptomgr_notify+0xc8/0x9a4 [ 9754.962419][T23270] notifier_call_chain+0xa8/0x5f2 [ 9754.963179][T23270] blocking_notifier_call_chain+0x5e/0x8e [ 9754.963956][T23270] crypto_alg_mod_lookup+0x3ac/0x4d2 [ 9754.964736][T23270] crypto_has_alg+0x26/0x66 [ 9754.965515][T23270] xfrm_probe_algs+0x23c/0x3e8 [ 9754.966640][T23270] page last free pid 16747 tgid 16746 stack trace: [ 9754.967453][T23270] __reset_page_owner+0x8c/0x400 [ 9754.968298][T23270] __free_pages_ok+0xa44/0xffc [ 9754.969045][T23270] free_unref_page+0x106/0x11d2 [ 9754.969836][T23270] __folio_put+0x1bc/0x27e [ 9754.970639][T23270] free_large_kmalloc+0xe0/0x138 [ 9754.971519][T23270] kfree+0x34c/0x508 [ 9754.972300][T23270] kvfree+0x62/0x76 [ 9754.972963][T23270] map_update_elem+0x55a/0x742 [ 9754.973744][T23270] __sys_bpf+0x4aa/0x363c [ 9754.974507][T23270] __riscv_sys_bpf+0x6c/0x9e [ 9754.975312][T23270] syscall_handler+0x94/0x118 [ 9754.976080][T23270] do_trap_ecall_u+0x1aa/0x216 [ 9754.976866][T23270] handle_exception+0x146/0x152 [ 9754.977787][T23270] [ 9754.978274][T23270] Memory state around the buggy address: [ 9754.979311][T23270] ff60000037359780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 9754.980197][T23270] ff60000037359800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 9754.981284][T23270] >ff60000037359880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 9754.982347][T23270] ^ [ 9754.983594][T23270] ff60000037359900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 9754.984948][T23270] ff60000037359980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 9754.986386][T23270] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 9755.025324][T23270] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 9755.026915][T23270] CPU: 1 UID: 0 PID: 23270 Comm: syz.1.6374 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 9755.028196][T23270] Hardware name: riscv-virtio,qemu (DT) [ 9755.029019][T23270] Call Trace: [ 9755.029669][T23270] [] dump_backtrace+0x2e/0x3c [ 9755.030908][T23270] [] show_stack+0x30/0x3c [ 9755.031992][T23270] [] dump_stack_lvl+0x110/0x1a6 [ 9755.033071][T23270] [] dump_stack+0x1c/0x24 [ 9755.034155][T23270] [] panic+0x38c/0x870 [ 9755.035443][T23270] [] check_panic_on_warn+0xc0/0xe4 [ 9755.036523][T23270] [] end_report.part.0+0x4e/0xae [ 9755.037530][T23270] [] kasan_report+0x102/0x118 [ 9755.038540][T23270] [] __asan_report_load4_noabort+0x12/0x1a [ 9755.039691][T23270] [] notifier_chain_register+0x528/0x61a [ 9755.040754][T23270] [] blocking_notifier_chain_register+0x80/0xc6 [ 9755.041923][T23270] [] register_reboot_notifier+0x22/0x2c [ 9755.042917][T23270] [] ubi_wl_init+0xd0a/0x15c2 [ 9755.044017][T23270] [] ubi_attach+0x15da/0x4f90 [ 9755.045478][T23270] [] ubi_attach_mtd_dev+0x14d8/0x3646 [ 9755.047038][T23270] [] ctrl_cdev_ioctl+0x496/0x764 [ 9755.048609][T23270] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9755.049580][T23270] [] syscall_handler+0x94/0x118 [ 9755.050843][T23270] [] do_trap_ecall_u+0x1aa/0x216 [ 9755.051814][T23270] [] handle_exception+0x146/0x152 [ 9755.053045][T23270] SMP: stopping secondary CPUs [ 9755.055840][T23270] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:10:06 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81c0589c mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff80065170 sepc ffffffff8014cb2a vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a0013000000953c1 x0/zero 0000000000000000 x1/ra ffffffff81c0587e x2/sp ff20000000007a20 x3/gp ffffffff899f1660 x4/tp ff6000001c76cec0 x5/t0 9a44cefe340f8718 x6/t1 ffebffff028e9b16 x7/t2 0000000000000039 x8/s0 ff20000000007a70 x9/s1 ff2000000005d000 x10/a0 ff600000184765b0 x11/a1 ff60000018476000 x12/a2 00000000000f0000 x13/a3 ffffffff81c0587e x14/a4 1fec00000308ecb6 x15/a5 0000000000000000 x16/a6 00000000000f0000 x17/a7 ff6000001474d8b3 x18/s2 ff60000018476000 x19/s3 000000000000000d x20/s4 ffffffff89af77c0 x21/s5 0000000000000000 x22/s6 fffffffef135eef8 x23/s7 0000000000000000 x24/s8 ff6000001474d800 x25/s9 0000000000000000 x26/s10 1fec0000035e7100 x27/s11 ff6000001474d840 x28/t3 ff6000001c76d9e0 x29/t4 ffebffff028e9b16 x30/t5 ffebffff028e9b17 x31/t6 000000000000000e f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff83078ffe mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff80083676 sepc ffffffff804b6b86 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a1c4c000000b01d1 x0/zero 0000000000000000 x1/ra ffffffff804b6ffa x2/sp ff20000004b17070 x3/gp ffffffff899f1660 x4/tp ff600000291b4ec0 x5/t0 ff20000004b171b4 x6/t1 0000000000000001 x7/t2 7320666f20646165 x8/s0 ff20000004b170f0 x9/s1 0000000000000000 x10/a0 0000000000000000 x11/a1 0000000000000000 x12/a2 0000000000080000 x13/a3 ffffffff83078fee x14/a4 ff2000000ad1b980 x15/a5 00000000000a9980 x16/a6 ffffffff802d7bfa x17/a7 0000000000000001 x18/s2 1ffffffff11abe0b x19/s3 0000000000000000 x20/s4 0000000000000018 x21/s5 ffffffff90baaca0 x22/s6 ff20000004b171c0 x23/s7 ffffffff88d5f058 x24/s8 1ffffffff11abe0c x25/s9 ffffffff88d5f060 x26/s10 dfffffff00000000 x27/s11 ff20000004b17220 x28/t3 ff600000291b4ec8 x29/t4 0000000000000000 x30/t5 1fec0000052369d9 x31/t6 ffffffff90baacb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000