last executing test programs: 1h11m49.653392054s ago: executing program 1 (id=3502): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x14) 1h11m48.645017094s ago: executing program 1 (id=3504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@ipv6_newrule={0x38, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbff, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x16}]}, 0x38}, 0x1, 0x0, 0x0, 0xd}, 0x4008040) 1h11m47.325714672s ago: executing program 1 (id=3505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 1h11m45.899583724s ago: executing program 1 (id=3507): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0xffffffff, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 1h11m43.746782737s ago: executing program 1 (id=3509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1h11m40.464350252s ago: executing program 1 (id=3511): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) 1h10m50.309201935s ago: executing program 32 (id=3511): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) 10.369329803s ago: executing program 2 (id=6479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffd0f, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x500}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 8.336019334s ago: executing program 2 (id=6480): socket$unix(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f0000000400)="9f44948721919580684010a486dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.470103679s ago: executing program 0 (id=6481): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 6.551444596s ago: executing program 2 (id=6482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f616400240002800800044000deff1b08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 5.814996168s ago: executing program 0 (id=6483): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 5.223644085s ago: executing program 2 (id=6484): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x701, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.319814302s ago: executing program 0 (id=6485): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8}) 2.934398093s ago: executing program 0 (id=6486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x3}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x2c}}, 0x0) 2.389660089s ago: executing program 2 (id=6487): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) 1.369312569s ago: executing program 0 (id=6488): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x0, 0xef28, 0x5}) 501.273045ms ago: executing program 2 (id=6489): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfd}, 0x0) 0s ago: executing program 0 (id=6490): syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) kernel console output (not intermixed with test programs): 8688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 4433.767195][T13550] CPU: 0 UID: 0 PID: 13550 Comm: syz.0.2379 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 4433.769353][T13550] Hardware name: riscv-virtio,qemu (DT) [ 4433.770566][T13550] Call Trace: [ 4433.771691][T13550] [] dump_backtrace+0x2e/0x3c [ 4433.773435][T13550] [] show_stack+0x30/0x3c [ 4433.774924][T13550] [] dump_stack_lvl+0x12e/0x1a6 [ 4433.776665][T13550] [] dump_stack+0x1c/0x24 [ 4433.778374][T13550] [] warn_alloc+0x170/0x292 [ 4433.779996][T13550] [] __vmalloc_node_range_noprof+0xfb6/0x120e [ 4433.781966][T13550] [] vmalloc_user_noprof+0xf8/0x126 [ 4433.784209][T13550] [] xskq_create+0xf2/0x1ae [ 4433.785857][T13550] [] xsk_setsockopt+0x338/0x8f0 [ 4433.787626][T13550] [] do_sock_setsockopt+0x208/0x400 [ 4433.789358][T13550] [] __sys_setsockopt+0x140/0x1cc [ 4433.790997][T13550] [] __riscv_sys_setsockopt+0xa6/0x114 [ 4433.792343][T13550] [] syscall_handler+0x94/0x118 [ 4433.793294][T13550] [] do_trap_ecall_u+0x1aa/0x216 [ 4433.794338][T13550] [] handle_exception+0x146/0x152 [ 4433.829638][T13550] Mem-Info: [ 4433.831415][T13550] active_anon:1605 inactive_anon:0 isolated_anon:0 [ 4433.831415][T13550] active_file:12260 inactive_file:36236 isolated_file:0 [ 4433.831415][T13550] unevictable:768 dirty:83 writeback:0 [ 4433.831415][T13550] slab_reclaimable:2471 slab_unreclaimable:26868 [ 4433.831415][T13550] mapped:12574 shmem:876 pagetables:358 [ 4433.831415][T13550] sec_pagetables:0 bounce:0 [ 4433.831415][T13550] kernel_misc_reclaimable:0 [ 4433.831415][T13550] free:215680 free_pcp:884 free_cma:52588 [ 4433.842989][T13550] Node 0 active_anon:6420kB inactive_anon:0kB active_file:49040kB inactive_file:144944kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50296kB dirty:332kB writeback:0kB shmem:3504kB writeback_tmp:0kB kernel_stack:5824kB pagetables:1432kB sec_pagetables:0kB all_unreclaimable? no [ 4433.863049][T13550] Node 0 DMA32 free:862720kB boost:0kB min:4784kB low:6212kB high:7640kB reserved_highatomic:0KB active_anon:6336kB inactive_anon:0kB active_file:49040kB inactive_file:144944kB unevictable:3072kB writepending:332kB present:2097152kB managed:1434256kB mlocked:0kB bounce:0kB free_pcp:3552kB local_pcp:2708kB free_cma:210352kB [ 4433.868680][T13550] lowmem_reserve[]: 0 0 0 [ 4433.907442][T13550] Node 0 DMA32: 28*4kB (UMEC) 536*8kB (UMEC) 515*16kB (UMEC) 330*32kB (UMEC) 495*64kB (UMEC) 337*128kB (UMEC) 307*256kB (UMEC) 284*512kB (UMC) 224*1024kB (UMEC) 18*2048kB (UMC) 67*4096kB (UMC) = 862688kB [ 4433.959866][T13550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 4433.965539][T13550] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 4433.991370][T13550] 49372 total pagecache pages [ 4433.992693][T13550] 0 pages in swap cache [ 4433.993667][T13550] Free swap = 124476kB [ 4433.994531][T13550] Total swap = 124996kB [ 4433.995410][T13550] 524288 pages RAM [ 4433.996192][T13550] 0 pages HighMem/MovableOnly [ 4433.997034][T13550] 165724 pages reserved [ 4433.997843][T13550] 52736 pages cma reserved [ 4441.791990][T13562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4445.035654][T13566] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.2388'. [ 4472.176052][T12547] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 4472.727249][T12547] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 4472.728926][T12547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4472.730183][T12547] usb 1-1: Product: syz [ 4472.731170][T12547] usb 1-1: Manufacturer: syz [ 4472.732175][T12547] usb 1-1: SerialNumber: syz [ 4472.837631][T12547] usb 1-1: config 0 descriptor?? [ 4473.727259][T12547] usb-storage 1-1:0.0: USB Mass Storage device detected [ 4474.352033][T12547] usb 1-1: USB disconnect, device number 15 [ 4482.432276][T13638] netlink: 'syz.1.2414': attribute type 21 has an invalid length. [ 4482.435899][T13638] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2414'. [ 4483.023300][T13639] tunl0: entered promiscuous mode [ 4483.025701][T13639] tunl0: entered allmulticast mode [ 4483.254998][T13639] gre0: entered promiscuous mode [ 4483.256390][T13639] gre0: entered allmulticast mode [ 4483.505553][T13639] gretap0: entered promiscuous mode [ 4483.549131][T13639] gretap0: entered allmulticast mode [ 4483.903779][T13639] erspan0: entered promiscuous mode [ 4483.906044][T13639] erspan0: entered allmulticast mode [ 4484.044846][T13639] ip_vti0: entered promiscuous mode [ 4484.046452][T13639] ip_vti0: entered allmulticast mode [ 4484.141002][T13639] ip6_vti0: entered promiscuous mode [ 4484.142415][T13639] ip6_vti0: entered allmulticast mode [ 4484.319120][T13639] sit0: entered promiscuous mode [ 4484.322613][T13639] sit0: entered allmulticast mode [ 4484.511108][T13639] ip6tnl0: entered promiscuous mode [ 4484.514605][T13639] ip6tnl0: entered allmulticast mode [ 4484.954771][T13639] ip6gre0: entered promiscuous mode [ 4484.966394][T13639] ip6gre0: entered allmulticast mode [ 4486.374989][T13639] syz_tun: entered promiscuous mode [ 4486.377210][T13639] syz_tun: entered allmulticast mode [ 4488.143424][T13639] ip6gretap0: entered promiscuous mode [ 4488.144798][T13639] ip6gretap0: entered allmulticast mode [ 4488.586287][T13639] vcan0: entered promiscuous mode [ 4488.587779][T13639] vcan0: entered allmulticast mode [ 4488.651558][T13639] bond0: entered promiscuous mode [ 4488.653009][T13639] bond_slave_0: entered promiscuous mode [ 4488.664436][T13639] bond_slave_1: entered promiscuous mode [ 4488.705781][T13639] bond0: entered allmulticast mode [ 4488.707266][T13639] bond_slave_0: entered allmulticast mode [ 4488.708947][T13639] bond_slave_1: entered allmulticast mode [ 4488.736379][T13639] dummy0: entered promiscuous mode [ 4488.737996][T13639] dummy0: entered allmulticast mode [ 4489.122759][T13639] nlmon0: entered promiscuous mode [ 4489.124999][T13639] nlmon0: entered allmulticast mode [ 4489.984344][T13639] vxcan0: entered promiscuous mode [ 4489.985790][T13639] vxcan0: entered allmulticast mode [ 4490.026553][T13639] vxcan1: entered promiscuous mode [ 4490.028374][T13639] vxcan1: entered allmulticast mode [ 4490.089504][T13639] veth0: entered promiscuous mode [ 4490.091656][T13639] veth0: entered allmulticast mode [ 4490.269254][T13639] veth1: entered promiscuous mode [ 4490.275000][T13639] veth1: entered allmulticast mode [ 4490.482389][T13639] wg0: entered promiscuous mode [ 4490.485437][T13639] wg0: entered allmulticast mode [ 4490.622551][T13639] wg1: entered promiscuous mode [ 4490.630977][T13639] wg1: entered allmulticast mode [ 4490.933508][T13639] wg2: entered promiscuous mode [ 4490.935685][T13639] wg2: entered allmulticast mode [ 4491.335385][T13639] veth0_to_bridge: entered promiscuous mode [ 4491.337561][T13639] veth0_to_bridge: entered allmulticast mode [ 4491.889532][T13639] bridge_slave_0: entered promiscuous mode [ 4491.892353][T13639] bridge_slave_0: entered allmulticast mode [ 4492.566704][T13639] veth1_to_bridge: entered promiscuous mode [ 4492.571845][T13639] veth1_to_bridge: entered allmulticast mode [ 4492.996864][T13639] bridge_slave_1: entered promiscuous mode [ 4492.999223][T13639] bridge_slave_1: entered allmulticast mode [ 4493.270665][T13639] veth0_to_bond: entered promiscuous mode [ 4493.277055][T13639] veth0_to_bond: entered allmulticast mode [ 4494.655710][T13639] veth1_to_bond: entered promiscuous mode [ 4494.657848][T13639] veth1_to_bond: entered allmulticast mode [ 4494.967997][T13639] veth0_to_team: entered promiscuous mode [ 4494.970228][T13639] veth0_to_team: entered allmulticast mode [ 4495.102410][T13639] team_slave_0: entered promiscuous mode [ 4495.108771][T13639] team_slave_0: entered allmulticast mode [ 4495.160095][T13639] veth1_to_team: entered promiscuous mode [ 4495.162244][T13639] veth1_to_team: entered allmulticast mode [ 4495.314076][T13639] team_slave_1: entered promiscuous mode [ 4495.316432][T13639] team_slave_1: entered allmulticast mode [ 4495.370978][T13639] veth0_to_batadv: entered promiscuous mode [ 4495.373281][T13639] veth0_to_batadv: entered allmulticast mode [ 4495.594030][T13639] batadv_slave_0: entered promiscuous mode [ 4495.596701][T13639] batadv_slave_0: entered allmulticast mode [ 4495.746455][T13639] veth1_to_batadv: entered promiscuous mode [ 4495.749081][T13639] veth1_to_batadv: entered allmulticast mode [ 4495.932436][T13639] batadv_slave_1: entered promiscuous mode [ 4495.934994][T13639] batadv_slave_1: entered allmulticast mode [ 4496.104463][T13639] xfrm0: entered promiscuous mode [ 4496.106712][T13639] xfrm0: entered allmulticast mode [ 4496.314756][T13639] veth0_to_hsr: entered promiscuous mode [ 4496.330832][T13639] veth0_to_hsr: entered allmulticast mode [ 4496.638192][T13639] hsr_slave_0: entered allmulticast mode [ 4496.797415][T13639] veth1_to_hsr: entered promiscuous mode [ 4496.799724][T13639] veth1_to_hsr: entered allmulticast mode [ 4496.960258][T13639] hsr_slave_1: entered allmulticast mode [ 4497.080105][T13639] hsr0: entered promiscuous mode [ 4497.082098][T13639] hsr0: entered allmulticast mode [ 4497.241211][T13639] veth1_virt_wifi: entered promiscuous mode [ 4497.244153][T13639] veth1_virt_wifi: entered allmulticast mode [ 4497.460778][T13639] veth0_virt_wifi: entered promiscuous mode [ 4497.463106][T13639] veth0_virt_wifi: entered allmulticast mode [ 4497.728682][T13639] veth1_vlan: entered allmulticast mode [ 4498.600127][T13639] vlan0: entered promiscuous mode [ 4498.602281][T13639] vlan0: entered allmulticast mode [ 4498.631317][T13639] vlan1: entered promiscuous mode [ 4498.633587][T13639] vlan1: entered allmulticast mode [ 4498.691943][T13639] macvlan0: entered promiscuous mode [ 4498.694093][T13639] macvlan0: entered allmulticast mode [ 4498.934111][T13639] macvlan1: entered promiscuous mode [ 4498.936342][T13639] macvlan1: entered allmulticast mode [ 4499.203849][T13639] ipvlan1: entered promiscuous mode [ 4499.206037][T13639] ipvlan1: entered allmulticast mode [ 4499.223664][T13639] veth1_macvtap: entered allmulticast mode [ 4499.383840][T13639] veth0_macvtap: entered allmulticast mode [ 4499.566099][T13639] macvtap0: entered promiscuous mode [ 4499.571524][T13639] macvtap0: entered allmulticast mode [ 4499.867759][T13639] macsec0: entered promiscuous mode [ 4499.870005][T13639] macsec0: entered allmulticast mode [ 4500.085496][T13639] geneve0: entered promiscuous mode [ 4500.087740][T13639] geneve0: entered allmulticast mode [ 4500.330394][T13639] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4500.333233][T13639] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4500.336058][T13639] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4500.351691][T13639] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4500.384039][T13639] geneve1: entered promiscuous mode [ 4500.386225][T13639] geneve1: entered allmulticast mode [ 4500.548997][T13639] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 4500.601900][T13639] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 4500.604446][T13639] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 4500.734263][T13639] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 4500.736770][T13639] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 4500.875752][T13639] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 4500.878141][T13639] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 4500.969298][T13639] bond1: entered promiscuous mode [ 4500.971526][T13639] bond1: entered allmulticast mode [ 4500.975956][T13639] bond2: entered promiscuous mode [ 4500.987793][T13639] bond2: entered allmulticast mode [ 4501.006987][T13639] gre1: entered promiscuous mode [ 4501.009001][T13639] gre1: entered allmulticast mode [ 4501.089951][T13639] ip6gretap1: entered promiscuous mode [ 4501.092153][T13639] ip6gretap1: entered allmulticast mode [ 4501.103860][T13639] ipip0: entered promiscuous mode [ 4501.105866][T13639] ipip0: entered allmulticast mode [ 4501.115798][T13639] geneve2: entered promiscuous mode [ 4501.118043][T13639] geneve2: entered allmulticast mode [ 4501.124472][T13639] syztnl1: entered promiscuous mode [ 4501.126291][T13639] syztnl1: entered allmulticast mode [ 4501.163599][T13639] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4501.166339][T13639] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4501.168613][T13639] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4501.171420][T13639] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4501.429768][T13639] bond3: entered promiscuous mode [ 4501.435420][T13639] bond3: entered allmulticast mode [ 4501.471537][T13639] sit1: entered promiscuous mode [ 4501.477762][T13639] sit1: entered allmulticast mode [ 4501.588031][T13639] syztnl2: entered promiscuous mode [ 4501.590148][T13639] syztnl2: entered allmulticast mode [ 4501.603071][T13639] bond4: entered promiscuous mode [ 4501.605142][T13639] bond4: entered allmulticast mode [ 4501.611404][T13639] xfrm1: entered promiscuous mode [ 4501.613535][T13639] xfrm1: entered allmulticast mode [ 4501.636899][T13643] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 4524.080060][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 4524.086788][T13678] netlink: 'syz.1.2432': attribute type 3 has an invalid length. [ 4546.502258][T13717] xt_nat: multiple ranges no longer supported [ 4554.597670][T13725] netlink: 'syz.0.2451': attribute type 2 has an invalid length. [ 4554.600226][T13725] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 4554.637286][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 4571.342524][T13750] ubi0: attaching mtd0 [ 4571.550461][T13750] ubi0: scanning is finished [ 4571.552305][T13750] ubi0: empty MTD device detected [ 4571.908243][T13752] netlink: 'syz.0.2463': attribute type 5 has an invalid length. [ 4572.121198][T13750] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 4572.123594][T13750] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 4572.125520][T13750] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 4572.157198][T13750] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 4572.178808][T13750] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 4572.187888][T13750] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 4572.402198][T13750] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2873315442 [ 4572.404824][T13750] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 4572.424235][T13754] ubi0: background thread "ubi_bgt0d" started, PID 13754 [ 4588.479361][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 4593.147316][T13787] netlink: 'syz.0.2480': attribute type 3 has an invalid length. [ 4593.148946][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'. [ 4601.991542][T13802] netlink: 'syz.0.2487': attribute type 10 has an invalid length. [ 4601.994344][T13802] nlmon0: left promiscuous mode [ 4602.004093][T13802] nlmon0: left allmulticast mode [ 4617.590045][T13838] xt_hashlimit: Unknown mode mask 8C, kernel too old? [ 4634.892742][T13859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2509'. [ 4651.791271][T13887] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 4662.657334][ T34] audit: type=1326 audit(4462.415:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz.1.2532" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 4663.234707][ T34] audit: type=1326 audit(4462.950:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz.1.2532" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdb636 code=0x0 [ 4668.607427][T13914] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 4682.375400][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 4699.802246][T13996] sctp: [Deprecated]: syz.1.2553 (pid 13996) Use of int in maxseg socket option. [ 4699.802246][T13996] Use struct sctp_assoc_value instead [ 4710.033681][T14017] AppArmor: change_hat: Invalid input 'p' [ 4711.962962][T14021] ubi: mtd0 is already attached to ubi0 [ 4716.969716][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 4716.972090][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2567'. [ 4727.305555][T14047] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 4739.368053][T13012] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 4739.628430][T13012] usb 1-1: Using ep0 maxpacket: 16 [ 4740.109734][T13012] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4740.113452][T13012] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 4740.321450][T13012] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4740.324013][T13012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4740.325987][T13012] usb 1-1: Product: syz [ 4740.327648][T13012] usb 1-1: Manufacturer: syz [ 4740.367772][T13012] usb 1-1: SerialNumber: syz [ 4742.753937][T13012] usb 1-1: cannot find UAC_HEADER [ 4743.471030][T13012] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 4743.535497][T13012] usb 1-1: USB disconnect, device number 16 [ 4770.088920][T14139] sctp: [Deprecated]: syz.1.2607 (pid 14139) Use of int in max_burst socket option deprecated. [ 4770.088920][T14139] Use struct sctp_assoc_value instead [ 4780.780332][T14160] usb usb1: usbfs: process 14160 (syz.1.2617) did not claim interface 0 before use [ 4784.206975][T14166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2620'. [ 4784.209693][T14166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2620'. [ 4787.348235][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 4787.350012][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 4787.352478][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 4789.106428][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 4810.697345][T14218] xt_socket: unknown flags 0x8 [ 4813.682048][T13012] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 4814.195231][T13012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 4814.197851][T13012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 4814.209166][T13012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 4814.224848][T13012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 4814.311344][T13012] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 4814.312970][T13012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4814.316931][T13012] usb 1-1: Product: syz [ 4814.342916][T13012] usb 1-1: Manufacturer: syz [ 4814.344222][T13012] usb 1-1: SerialNumber: syz [ 4814.409095][T13012] usb 1-1: config 0 descriptor?? [ 4815.362362][T13012] adutux 1-1:0.0: Could not retrieve serial number [ 4815.367012][T13012] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 4816.073478][ T25] usb 1-1: USB disconnect, device number 17 [ 4826.711017][T14247] binder: BC_ACQUIRE_RESULT not supported [ 4826.712456][T14247] binder: 14246:14247 ioctl c0306201 200001c0 returned -22 [ 4827.134820][T14249] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2651'. [ 4827.137427][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'. [ 4827.153046][T14249] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2651'. [ 4827.155497][T14249] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 4827.159320][T14249] netlink: 'syz.1.2651': attribute type 2 has an invalid length. [ 4827.174170][T14249] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2651'. [ 4829.085303][T14253] netlink: 'syz.1.2653': attribute type 6 has an invalid length. [ 4832.643176][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 4837.582643][T13012] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 4837.871363][T13012] usb 2-1: Using ep0 maxpacket: 32 [ 4838.071923][T13012] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 4838.073276][T13012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4838.074698][T13012] usb 2-1: Product: syz [ 4838.077739][T13012] usb 2-1: Manufacturer: syz [ 4838.078774][T13012] usb 2-1: SerialNumber: syz [ 4838.127401][T13012] usb 2-1: config 0 descriptor?? [ 4839.220610][T13012] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 4839.935170][T13012] usb 2-1: USB disconnect, device number 16 [ 4842.739309][T14308] erspan0: default FDB implementation only supports local addresses [ 4850.504859][T14316] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 4867.076077][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 4867.210278][T14358] vlan2: entered promiscuous mode [ 4873.716641][T14368] xt_policy: too many policy elements [ 4878.517045][T14376] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 4878.519776][T14376] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 4878.527815][T14376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 4880.294123][T14380] netlink: 'syz.0.2699': attribute type 21 has an invalid length. [ 4880.296629][T14380] netlink: 'syz.0.2699': attribute type 20 has an invalid length. [ 4882.111232][T14384] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 4882.113104][T14384] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 4882.877505][T14386] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 4885.647096][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 4886.132051][ T25] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 4886.134641][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4886.136664][ T25] usb 1-1: Product: syz [ 4886.138264][ T25] usb 1-1: Manufacturer: syz [ 4886.145780][ T25] usb 1-1: SerialNumber: syz [ 4886.331094][ T25] usb 1-1: config 0 descriptor?? [ 4888.228393][ T25] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 4889.552582][ T25] usb 1-1: USB disconnect, device number 18 [ 4900.637632][T14414] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2710'. [ 4912.884905][T14438] netlink: 'syz.0.2721': attribute type 4 has an invalid length. [ 4912.887721][T14438] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2721'. [ 4925.195117][T14233] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 4925.485039][T14233] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 4925.487589][T14233] usb 1-1: config 0 has no interface number 0 [ 4925.489441][T14233] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 38728, setting to 64 [ 4925.586287][T14233] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 4925.588552][T14233] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 4925.593738][T14233] usb 1-1: Product: syz [ 4925.595328][T14233] usb 1-1: SerialNumber: syz [ 4925.715569][T14233] usb 1-1: config 0 descriptor?? [ 4925.756888][T14464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4926.374123][T14233] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 4926.388157][T14233] usb 1-1: invalid MIDI in EP 0 [ 4927.290861][T14233] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 4927.348252][T14484] dlm: no locking on control device [ 4927.402136][T14233] usb 1-1: USB disconnect, device number 19 [ 4929.702070][T14496] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 4929.704507][T14496] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2736'. [ 4954.183733][T14536] usb usb1: usbfs: process 14536 (syz.1.2756) did not claim interface 0 before use [ 4962.175231][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 4964.251590][T13012] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 4964.489890][T13012] usb 1-1: Using ep0 maxpacket: 8 [ 4964.585883][T13012] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 4964.588747][T13012] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 4964.590919][T13012] usb 1-1: config 0 has no interface number 0 [ 4964.592955][T13012] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4964.601032][T13012] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 4964.603617][T13012] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 4964.608808][T13012] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 4964.617529][T13012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4964.743348][T13012] usb 1-1: config 0 descriptor?? [ 4966.365051][T13012] usb 1-1: USB disconnect, device number 20 [ 4992.569181][T14600] netlink: 'syz.1.2781': attribute type 5 has an invalid length. [ 4997.718438][T14610] netlink: 'syz.0.2786': attribute type 9 has an invalid length. [ 4997.734748][T14610] netlink: 'syz.0.2786': attribute type 7 has an invalid length. [ 4997.740902][T14610] netlink: 'syz.0.2786': attribute type 8 has an invalid length. [ 5006.578450][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 5014.636893][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 5015.365482][ T25] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 5015.368154][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5015.373063][ T25] usb 2-1: Product: syz [ 5015.374880][ T25] usb 2-1: Manufacturer: syz [ 5015.376565][ T25] usb 2-1: SerialNumber: syz [ 5015.452717][ T25] usb 2-1: config 0 descriptor?? [ 5015.672390][ T25] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 017 [ 5017.108017][ T25] (null): failure reading functionality [ 5017.207058][ T25] i2c i2c-0: failure reading functionality [ 5017.361584][ T25] i2c i2c-0: connected i2c-tiny-usb device [ 5017.475351][ T25] usb 2-1: USB disconnect, device number 17 [ 5019.755971][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 5020.011649][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 5020.111518][ T25] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 5020.118134][ T25] usb 1-1: config 0 has no interface number 0 [ 5020.120606][ T25] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 5020.123102][ T25] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 5020.125547][ T25] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 5020.131384][ T25] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 5020.140054][ T25] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 5020.224753][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 5020.231888][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5020.233969][ T25] usb 1-1: Product: syz [ 5020.238019][ T25] usb 1-1: Manufacturer: syz [ 5020.240084][ T25] usb 1-1: SerialNumber: syz [ 5020.348791][ T25] usb 1-1: config 0 descriptor?? [ 5022.760987][ T25] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 5023.434960][ T25] usb 1-1: USB disconnect, device number 21 [ 5031.471682][T14694] netlink: 'syz.1.2811': attribute type 3 has an invalid length. [ 5056.802510][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'. [ 5069.789535][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 5077.751962][ T34] audit: type=1326 audit(4845.427:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2854" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 5081.950619][T14788] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 5083.703157][T14795] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 5102.405306][T14830] binder: 14829:14830 ioctl c0046209 0 returned -22 [ 5145.237561][T14919] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 5150.055303][T14931] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2921'. [ 5167.487652][T14957] netlink: 'syz.1.2934': attribute type 13 has an invalid length. [ 5167.491991][T14957] netlink: 'syz.1.2934': attribute type 58 has an invalid length. [ 5167.493239][T14957] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2934'. [ 5172.881804][ T34] audit: type=1400 audit(4933.204:16): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=14965 comm="syz.1.2939" [ 5177.767327][T14976] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.2943'. [ 5186.568404][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 5189.648444][T14914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 5189.870717][T14914] usb 1-1: Using ep0 maxpacket: 16 [ 5190.005377][T14914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5190.007121][T14914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 5190.008474][T14914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 5190.022855][T14914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 5190.024627][T14914] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5190.065846][T14914] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 5190.067656][T14914] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 5190.069042][T14914] usb 1-1: Manufacturer: syz [ 5190.116874][T14914] usb 1-1: config 0 descriptor?? [ 5192.098486][T14914] rc_core: IR keymap rc-hauppauge not found [ 5192.104419][T14914] Registered IR keymap rc-empty [ 5192.108659][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.150115][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.220211][T14914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 5192.331229][T14914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 5192.446077][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.474403][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.496189][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.516840][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.538477][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.559758][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.583673][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.603153][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.630762][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.657077][T14914] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 5192.715256][T14914] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 5192.717576][T14914] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 5192.853489][T14914] usb 1-1: USB disconnect, device number 22 [ 5206.728924][T15046] netlink: 'syz.1.2965': attribute type 6 has an invalid length. [ 5213.465977][T15059] netlink: 'syz.0.2970': attribute type 1 has an invalid length. [ 5213.468220][T15059] netlink: 'syz.0.2970': attribute type 3 has an invalid length. [ 5213.469983][T15059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2970'. [ 5213.472319][T15059] NCSI netlink: No device for ifindex 0 [ 5216.187959][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 5221.148422][T15077] netlink: 'syz.1.2978': attribute type 10 has an invalid length. [ 5221.151917][T15077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2978'. [ 5234.194976][T15091] tmpfs: Bad value for 'mpol' [ 5264.447898][T15146] netlink: 'syz.1.3014': attribute type 11 has an invalid length. [ 5265.826208][T15148] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 5265.828884][T15148] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3015'. [ 5268.640677][T15154] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3017'. [ 5270.290261][T15158] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3020'. [ 5272.309904][T15160] tc_dump_action: action bad kind [ 5291.608161][T15192] xt_TCPMSS: Only works on TCP SYN packets [ 5294.443665][T15195] virtio-fs: tag <(null)> not found [ 5295.665720][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 5295.668939][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3040'. [ 5318.107204][T15237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5322.781935][T15244] trusted_key: encrypted_key: master key parameter is missing [ 5323.369691][T15246] netlink: 'syz.1.3064': attribute type 4 has an invalid length. [ 5329.885898][T15260] gre0: left promiscuous mode [ 5329.889578][T15260] gre0: left allmulticast mode [ 5331.097272][T15264] tmpfs: User quota block hardlimit too large. [ 5340.852762][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3083'. [ 5353.925584][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 5357.206466][ T25] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 5357.208253][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5357.209955][ T25] usb 1-1: config 0 has no interface number 0 [ 5357.212480][ T25] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 5357.215920][ T25] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5357.303468][ T25] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 5357.305730][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5357.307294][ T25] usb 1-1: Product: syz [ 5357.308552][ T25] usb 1-1: Manufacturer: syz [ 5357.309804][ T25] usb 1-1: SerialNumber: syz [ 5357.428245][ T25] usb 1-1: config 0 descriptor?? [ 5359.261793][T14914] usb 1-1: USB disconnect, device number 23 [ 5374.827592][T15374] netlink: 'syz.0.3105': attribute type 4 has an invalid length. [ 5400.189671][T15419] xt_hashlimit: invalid rate [ 5400.951859][T15421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3127'. [ 5402.449700][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 5403.422707][T15425] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 5403.703962][T15425] bond0: (slave lo): Enslaving as an active interface with an up link [ 5403.708223][T14914] lo speed is unknown, defaulting to 1000 [ 5403.715851][T14233] lo speed is unknown, defaulting to 1000 [ 5407.160404][T14233] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 5407.449580][T14233] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 5407.452006][T14233] usb 1-1: config 0 has no interface number 0 [ 5407.463335][T14233] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 5407.466064][T14233] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 5407.659276][T14233] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 5407.690086][T14233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5407.692522][T14233] usb 1-1: Product: syz [ 5407.694169][T14233] usb 1-1: Manufacturer: syz [ 5407.696621][T14233] usb 1-1: SerialNumber: syz [ 5407.886407][T14233] usb 1-1: config 0 descriptor?? [ 5407.961923][T15435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5408.080616][T14233] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 5408.521718][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 5408.569374][T14233] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 5408.858330][T14914] usb 1-1: USB disconnect, device number 24 [ 5409.007221][T14914] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 5409.047586][T14914] cyberjack 1-1:0.69: device disconnected [ 5427.323200][T15510] netlink: 600 bytes leftover after parsing attributes in process `syz.0.3146'. [ 5428.661890][T15513] ipvlan1: left promiscuous mode [ 5428.663127][T15513] ipvlan1: left allmulticast mode [ 5433.855470][T15524] xt_hashlimit: overflow, try lower: 3/0 [ 5443.208476][T15538] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3160'. [ 5447.767286][T15552] netlink: 'syz.0.3167': attribute type 2 has an invalid length. [ 5447.768731][T15552] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 5462.972400][T15583] netlink: 696 bytes leftover after parsing attributes in process `syz.1.3180'. [ 5474.687099][T15605] netlink: 'syz.0.3191': attribute type 13 has an invalid length. [ 5474.688518][T15605] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3191'. [ 5474.709644][T15605] syz_tun: refused to change device tx_queue_len [ 5474.711015][T15605] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 5482.703888][T15623] netlink: 'syz.1.3200': attribute type 4 has an invalid length. [ 5482.789968][ T3827] lo speed is unknown, defaulting to 1000 [ 5488.182023][ T3827] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 5490.017560][ T3827] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 5490.019099][ T3827] usb 1-1: config 0 has no interface number 0 [ 5490.251557][ T3827] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd [ 5490.253359][ T3827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5490.254853][ T3827] usb 1-1: Product: syz [ 5490.256177][ T3827] usb 1-1: Manufacturer: syz [ 5490.257243][ T3827] usb 1-1: SerialNumber: syz [ 5490.325502][ T3827] usb 1-1: config 0 descriptor?? [ 5490.402867][ T3827] kalmia 1-1:0.19: probe with driver kalmia failed with error -22 [ 5490.421210][ T3827] option 1-1:0.19: GSM modem (1-port) converter detected [ 5491.151837][ T3827] usb 1-1: USB disconnect, device number 25 [ 5491.229320][ T3827] option 1-1:0.19: device disconnected [ 5505.143520][T15671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3215'. [ 5531.054956][T15728] kernel profiling enabled (shift: 6) [ 5540.668061][ T3827] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 5540.791275][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 5540.955773][ T3827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5540.977957][ T3827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 5541.037526][ T3827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 5541.040100][ T3827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5541.042139][ T3827] usb 1-1: SerialNumber: syz [ 5541.781363][ T3827] usb 1-1: 0:2 : does not exist [ 5541.791970][ T3827] usb 1-1: unit 5 not found! [ 5541.995683][ T3827] usb 1-1: USB disconnect, device number 26 [ 5544.338399][T15774] autofs4:pid:15774:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 5549.643721][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 5555.342824][ T3827] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 5555.559256][ T3827] usb 2-1: Using ep0 maxpacket: 32 [ 5555.649634][ T3827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 5555.652294][ T3827] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 5555.743800][ T3827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 5555.746361][ T3827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5555.748443][ T3827] usb 2-1: Product: syz [ 5555.750084][ T3827] usb 2-1: Manufacturer: syz [ 5555.777809][ T3827] usb 2-1: SerialNumber: syz [ 5556.956578][ T3827] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 5557.575569][ T3827] usb 2-1: USB disconnect, device number 18 [ 5557.820967][ T3827] usblp0: removed [ 5566.250420][T15822] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 5574.462111][T14081] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 5574.749804][T14081] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 5574.756549][T14081] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 5574.771434][T14081] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 5574.777296][T14081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5575.019497][T15836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5575.135233][T14081] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 5579.641482][ T3827] usb 1-1: USB disconnect, device number 27 [ 5581.227101][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 5581.243546][T15875] gre0: left promiscuous mode [ 5581.245817][T15875] gre0: left allmulticast mode [ 5581.259581][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 5587.915808][T15883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5587.919701][T15883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5587.921063][T15883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5587.933679][T15883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5587.942662][T15883] geneve5: entered promiscuous mode [ 5587.949596][T15883] geneve5: entered allmulticast mode [ 5602.395415][T15911] xt_hashlimit: overflow, try lower: 512/9223372036854775808 [ 5610.947008][T15929] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 5613.186763][T15935] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 5644.799175][T16015] lo speed is unknown, defaulting to 1000 [ 5660.983060][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3355'. [ 5663.345393][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'. [ 5665.283470][T16067] lo speed is unknown, defaulting to 1000 [ 5665.302803][T16067] lo speed is unknown, defaulting to 1000 [ 5665.313030][T16067] lo speed is unknown, defaulting to 1000 [ 5668.840774][T15841] lo speed is unknown, defaulting to 1000 [ 5668.847271][T16067] infiniband syz2: set down [ 5668.848418][T16067] infiniband syz2: added lo [ 5668.858845][T16067] syz2: rxe_create_cq: returned err = -12 [ 5668.860605][T16067] infiniband syz2: Couldn't create ib_mad CQ [ 5668.863102][T16067] infiniband syz2: Couldn't open port 1 [ 5669.287583][T16067] RDS/IB: syz2: added [ 5669.293082][T16067] smc: adding ib device syz2 with port count 1 [ 5669.294356][T16067] smc: ib device syz2 port 1 has pnetid [ 5669.296164][T14233] lo speed is unknown, defaulting to 1000 [ 5669.308569][T16067] lo speed is unknown, defaulting to 1000 [ 5672.472489][T16067] lo speed is unknown, defaulting to 1000 [ 5679.282878][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 5690.123922][T16120] xt_NFQUEUE: number of total queues is 0 [ 5690.780846][T16122] xt_HMARK: spi-set and port-set can't be combined [ 5705.751796][T16164] wireguard1: entered promiscuous mode [ 5705.754175][T16164] wireguard1: entered allmulticast mode [ 5708.144495][T16173] netlink: 2756 bytes leftover after parsing attributes in process `syz.0.3406'. [ 5708.146094][T16173] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.3406'. [ 5708.150305][T16173] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.3406'. [ 5711.354895][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 5711.413877][T16181] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3409'. [ 5711.436762][T16181] 0ªX¹¦À: renamed from veth0 [ 5711.562960][T16181] 0ªX¹¦À: left promiscuous mode [ 5711.641514][T16181] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 5714.704514][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 5714.706076][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 5714.707629][T16189] netlink: 'syz.0.3414': attribute type 3 has an invalid length. [ 5717.539664][T15841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 5717.980654][T15841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 5717.986257][T15841] usb 2-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 5717.988606][T15841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5718.092633][T15841] usb 2-1: config 0 descriptor?? [ 5718.277997][T15841] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 found [ 5719.214271][T15841] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 5719.222751][T15841] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 now disconnected [ 5719.269114][T15841] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 5719.795502][T14233] usb 2-1: USB disconnect, device number 19 [ 5728.535443][T16226] pimreg: entered allmulticast mode [ 5737.703041][T16254] ./file0: Can't lookup blockdev [ 5750.641487][T16282] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 5761.156281][T16296] lo speed is unknown, defaulting to 1000 [ 5763.866817][T16296] lo speed is unknown, defaulting to 1000 [ 5779.379447][T15841] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 5779.684907][T15841] usb 2-1: Using ep0 maxpacket: 8 [ 5779.760615][T15841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 5779.836629][T15841] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 5779.856884][T15841] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 5779.859102][T15841] usb 2-1: Product: syz [ 5779.860740][T15841] usb 2-1: Manufacturer: syz [ 5779.863118][T15841] usb 2-1: SerialNumber: syz [ 5780.435657][T15841] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 5780.443536][T15841] visor 2-1:1.0: probe with driver visor failed with error -110 [ 5791.703458][T16368] usb usb1: usbfs: process 16368 (syz.0.3481) did not claim interface 0 before use [ 5793.317315][T15841] usb 2-1: USB disconnect, device number 20 [ 5799.241602][T16387] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 5799.301368][T16387] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 5799.304325][T16387] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 5841.698321][T16461] netlink: 'syz.0.3524': attribute type 40 has an invalid length. [ 5846.309836][T16467] syz.0.3527 uses obsolete (PF_INET,SOCK_PACKET) [ 5869.575704][T16489] lo speed is unknown, defaulting to 1000 [ 5873.555542][T16489] lo speed is unknown, defaulting to 1000 [ 5889.603413][T16493] lo speed is unknown, defaulting to 1000 [ 5890.700983][T16493] lo speed is unknown, defaulting to 1000 [ 5902.663048][T16493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5902.706677][T16493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5908.590852][T16493] hsr_slave_0: entered promiscuous mode [ 5908.620934][T16493] hsr_slave_1: entered promiscuous mode [ 5908.646905][T16493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5908.648193][T16493] Cannot create hsr debugfs directory [ 5912.839462][T16493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5912.961626][T16493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5913.101304][T16493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5913.255550][T16493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5916.095768][T16853] tmpfs: Bad value for 'mpol' [ 5918.270890][T16493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5930.210311][T16880] netlink: 'syz.0.3560': attribute type 1 has an invalid length. [ 5944.320148][T16493] veth0_vlan: entered promiscuous mode [ 5944.506745][T16493] veth1_vlan: entered promiscuous mode [ 5945.499763][T16493] veth0_macvtap: entered promiscuous mode [ 5945.746821][T16493] veth1_macvtap: entered promiscuous mode [ 5946.581355][T16493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5946.607337][T16493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5946.609770][T16493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5946.611948][T16493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5951.131470][T16919] IPv6: Can't replace route, no match found [ 5962.288806][T16944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3579'. [ 5962.290205][T16944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3579'. [ 5968.459499][T16959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5975.154003][T16974] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 5985.710394][T17001] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3607'. [ 5985.714168][T17001] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3607'. [ 5988.996458][T17009] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 6002.573505][T16870] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 6002.833522][T16870] usb 1-1: Using ep0 maxpacket: 16 [ 6003.104237][T16870] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 6003.106730][T16870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6003.108743][T16870] usb 1-1: Product: syz [ 6003.110362][T16870] usb 1-1: Manufacturer: syz [ 6003.113561][T16870] usb 1-1: SerialNumber: syz [ 6003.204625][T16870] usb 1-1: config 0 descriptor?? [ 6003.357075][T16870] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 6004.710252][T16870] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 6004.713260][T16870] visor 1-1:0.0: probe with driver visor failed with error -5 [ 6005.548110][T16834] usb 1-1: USB disconnect, device number 28 [ 6011.680948][T17063] erspan1: entered promiscuous mode [ 6013.037337][T17067] xt_ecn: cannot match TCP bits for non-tcp packets [ 6016.601597][T17075] tmpfs: Bad value for 'nr_blocks' [ 6018.629022][T17081] netlink: 'syz.0.3636': attribute type 21 has an invalid length. [ 6028.285082][T17102] netlink: 'syz.2.3644': attribute type 21 has an invalid length. [ 6043.488769][T17145] netlink: 'syz.2.3662': attribute type 10 has an invalid length. [ 6044.651090][T17147] binder: BC_ATTEMPT_ACQUIRE not supported [ 6044.652182][T17147] binder: 17146:17147 ioctl c0306201 20000880 returned -22 [ 6053.024617][T17159] erspan1: left promiscuous mode [ 6053.317653][T17164] netlink: 'syz.0.3672': attribute type 21 has an invalid length. [ 6082.520047][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3703'. [ 6084.956831][T17231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 6084.958406][T17231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 6086.146319][T17234] sit1: entered promiscuous mode [ 6091.097166][T17245] tmpfs: Bad value for 'mpol' [ 6093.837937][T17250] netlink: 'syz.2.3714': attribute type 15 has an invalid length. [ 6095.324050][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3715'. [ 6096.996902][T17257] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 6109.776593][T17288] xt_l2tp: invalid flags combination: 0 [ 6117.768111][T17308] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3743'. [ 6129.087524][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3754'. [ 6129.425283][T17332] lo: left promiscuous mode [ 6129.429369][T17332] lo: left allmulticast mode [ 6129.585227][T17332] tunl0: left promiscuous mode [ 6129.594100][T17332] tunl0: left allmulticast mode [ 6129.972764][T17332] gretap0: left promiscuous mode [ 6129.975977][T17332] gretap0: left allmulticast mode [ 6130.266518][T17332] erspan0: left promiscuous mode [ 6130.268731][T17332] erspan0: left allmulticast mode [ 6130.558406][T17332] ip_vti0: left promiscuous mode [ 6130.560670][T17332] ip_vti0: left allmulticast mode [ 6130.799937][T17332] ip6_vti0: left promiscuous mode [ 6130.802544][T17332] ip6_vti0: left allmulticast mode [ 6130.904519][T17332] sit0: left promiscuous mode [ 6130.906669][T17332] sit0: left allmulticast mode [ 6131.242165][T17332] ip6tnl0: left promiscuous mode [ 6131.243651][T17332] ip6tnl0: left allmulticast mode [ 6131.299610][T17332] ip6gre0: left promiscuous mode [ 6131.306084][T17332] ip6gre0: left allmulticast mode [ 6131.621215][T17332] syz_tun: left promiscuous mode [ 6131.622473][T17332] syz_tun: left allmulticast mode [ 6131.685721][T17332] ip6gretap0: left promiscuous mode [ 6131.687016][T17332] ip6gretap0: left allmulticast mode [ 6131.719690][T17332] vcan0: left promiscuous mode [ 6131.720936][T17332] vcan0: left allmulticast mode [ 6131.744998][T17332] bond0: left promiscuous mode [ 6131.752148][T17332] bond0: left allmulticast mode [ 6131.835820][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6131.869319][T17332] dummy0: left promiscuous mode [ 6131.870566][T17332] dummy0: left allmulticast mode [ 6131.993740][T17332] vxcan0: left promiscuous mode [ 6132.012490][T17332] vxcan0: left allmulticast mode [ 6132.085973][T17332] vxcan1: left promiscuous mode [ 6132.087269][T17332] vxcan1: left allmulticast mode [ 6132.133457][T17332] 0ªX¹¦À: left allmulticast mode [ 6132.156692][T17332] veth1: left promiscuous mode [ 6132.169313][T17332] veth1: left allmulticast mode [ 6132.279815][T17332] wg0: left promiscuous mode [ 6132.281062][T17332] wg0: left allmulticast mode [ 6132.806143][T17332] wg1: left promiscuous mode [ 6132.826360][T17332] wg1: left allmulticast mode [ 6132.933241][T17332] wg2: left promiscuous mode [ 6132.934546][T17332] wg2: left allmulticast mode [ 6133.098481][T17332] veth0_to_bridge: left promiscuous mode [ 6133.100044][T17332] veth0_to_bridge: left allmulticast mode [ 6133.150394][T17332] bridge_slave_0: left promiscuous mode [ 6133.152642][T17332] bridge_slave_0: left allmulticast mode [ 6133.226076][T17332] veth1_to_bridge: left promiscuous mode [ 6133.228403][T17332] veth1_to_bridge: left allmulticast mode [ 6133.293437][T17332] bridge_slave_1: left promiscuous mode [ 6133.295097][T17332] bridge_slave_1: left allmulticast mode [ 6133.317043][T17332] veth0_to_bond: left promiscuous mode [ 6133.321303][T17332] veth0_to_bond: left allmulticast mode [ 6133.347630][T17332] bond_slave_0: left promiscuous mode [ 6133.349200][T17332] bond_slave_0: left allmulticast mode [ 6133.380015][T17332] veth1_to_bond: left promiscuous mode [ 6133.381324][T17332] veth1_to_bond: left allmulticast mode [ 6133.404986][T17332] bond_slave_1: left promiscuous mode [ 6133.406291][T17332] bond_slave_1: left allmulticast mode [ 6133.424053][T17332] veth0_to_team: left promiscuous mode [ 6133.436095][T17332] veth0_to_team: left allmulticast mode [ 6133.474552][T17332] team_slave_0: left promiscuous mode [ 6133.476108][T17332] team_slave_0: left allmulticast mode [ 6133.506252][T17332] infiniband syz!: set active [ 6133.511993][T17332] infiniband syz!: set active [ 6133.517561][T17332] infiniband syz!: set active [ 6133.520969][T17332] veth1_to_team: left promiscuous mode [ 6133.522064][T17332] veth1_to_team: left allmulticast mode [ 6133.612824][T17332] team_slave_1: left promiscuous mode [ 6133.614403][T17332] team_slave_1: left allmulticast mode [ 6133.680631][T17332] veth0_to_batadv: left promiscuous mode [ 6133.681939][T17332] veth0_to_batadv: left allmulticast mode [ 6133.793278][T17332] batadv_slave_0: left promiscuous mode [ 6133.853709][T17332] batadv_slave_0: left allmulticast mode [ 6133.984647][T17332] veth1_to_batadv: left promiscuous mode [ 6133.986011][T17332] veth1_to_batadv: left allmulticast mode [ 6134.037332][T17332] batadv_slave_1: left promiscuous mode [ 6134.040651][T17332] batadv_slave_1: left allmulticast mode [ 6134.115802][T17332] xfrm0: left promiscuous mode [ 6134.117169][T17332] xfrm0: left allmulticast mode [ 6134.237976][T17332] veth0_to_hsr: left promiscuous mode [ 6134.255012][T17332] veth0_to_hsr: left allmulticast mode [ 6134.333053][T17332] veth1_to_hsr: left promiscuous mode [ 6134.334494][T17332] veth1_to_hsr: left allmulticast mode [ 6134.377905][T17332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 6134.382855][T17332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 6134.384472][T17332] hsr0: left promiscuous mode [ 6134.385550][T17332] hsr0: left allmulticast mode [ 6134.386510][T17332] hsr_slave_0: left allmulticast mode [ 6134.387655][T17332] hsr_slave_1: left allmulticast mode [ 6134.428026][T17332] veth1_virt_wifi: left promiscuous mode [ 6134.429347][T17332] veth1_virt_wifi: left allmulticast mode [ 6134.460334][T17332] veth0_virt_wifi: left promiscuous mode [ 6134.461813][T17332] veth0_virt_wifi: left allmulticast mode [ 6134.497511][T17332] veth1_vlan: left promiscuous mode [ 6134.499963][T17332] veth1_vlan: left allmulticast mode [ 6134.536739][T17332] veth0_vlan: left promiscuous mode [ 6134.561399][T17332] veth0_vlan: entered promiscuous mode [ 6134.637365][T17332] vlan0: left promiscuous mode [ 6134.647382][T17332] vlan0: left allmulticast mode [ 6134.666633][T17332] vlan1: left promiscuous mode [ 6134.671572][T17332] vlan1: left allmulticast mode [ 6134.741040][T17332] veth1_vlan: entered promiscuous mode [ 6134.742572][T17332] veth1_vlan: entered allmulticast mode [ 6134.746039][T17332] macvlan0: left promiscuous mode [ 6134.787351][T17332] macvlan0: left allmulticast mode [ 6134.788678][T17332] veth1_vlan: left allmulticast mode [ 6134.851762][T17332] veth1_vlan: entered allmulticast mode [ 6134.855650][T17332] macvlan1: left promiscuous mode [ 6134.873414][T17332] macvlan1: left allmulticast mode [ 6134.874874][T17332] veth1_vlan: left allmulticast mode [ 6134.897921][T17332] ipvlan0: left promiscuous mode [ 6134.903288][T17332] ipvlan0: left allmulticast mode [ 6134.959667][T17332] ipvlan1: left promiscuous mode [ 6134.960996][T17332] ipvlan1: left allmulticast mode [ 6134.961941][T17332] veth0_vlan: left allmulticast mode [ 6134.991804][T17332] veth1_macvtap: left promiscuous mode [ 6134.993087][T17332] veth1_macvtap: left allmulticast mode [ 6135.050086][T17332] veth0_macvtap: left promiscuous mode [ 6135.064608][T17332] veth0_macvtap: left allmulticast mode [ 6135.088064][T17332] veth0_macvtap: entered promiscuous mode [ 6135.089297][T17332] veth0_macvtap: entered allmulticast mode [ 6135.093787][T17332] macvtap0: left promiscuous mode [ 6135.108906][T17332] macvtap0: left allmulticast mode [ 6135.110162][T17332] veth0_macvtap: left allmulticast mode [ 6135.126361][T17332] veth1_macvtap: entered promiscuous mode [ 6135.129200][T17332] veth1_macvtap: entered allmulticast mode [ 6135.143059][T17332] macsec0: left promiscuous mode [ 6135.146468][T17332] macsec0: left allmulticast mode [ 6135.147566][T17332] veth1_macvtap: left allmulticast mode [ 6135.177485][T17332] geneve0: left promiscuous mode [ 6135.178861][T17332] geneve0: left allmulticast mode [ 6135.229338][T17332] geneve1: left promiscuous mode [ 6135.230694][T17332] geneve1: left allmulticast mode [ 6135.293799][T17332] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 6135.295377][T17332] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 6135.317166][T17332] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 6135.318876][T17332] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 6135.438340][T17332] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 6135.439981][T17332] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 6135.482731][T17332] bond1: left promiscuous mode [ 6135.484271][T17332] bond1: left allmulticast mode [ 6135.495151][T17332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 6135.589166][T17332] bond2: left promiscuous mode [ 6135.590482][T17332] bond2: left allmulticast mode [ 6135.620344][T17332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 6135.652762][T17332] gre1: left promiscuous mode [ 6135.654275][T17332] gre1: left allmulticast mode [ 6135.689284][T17332] ip6gretap1: left promiscuous mode [ 6135.692196][T17332] ip6gretap1: left allmulticast mode [ 6135.762218][T17332] ipip0: left promiscuous mode [ 6135.786822][T17332] ipip0: left allmulticast mode [ 6135.815802][T17332] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 42475 - 0 [ 6135.818224][T17332] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 42475 - 0 [ 6135.820553][T17332] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 42475 - 0 [ 6135.828492][T17332] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 42475 - 0 [ 6135.983004][T17332] geneve2: left promiscuous mode [ 6135.996292][T17332] geneve2: left allmulticast mode [ 6136.024805][T17332] syztnl1: left promiscuous mode [ 6136.026303][T17332] syztnl1: left allmulticast mode [ 6136.048734][T17332] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 6136.051975][T17332] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 6136.054962][T17332] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 6136.056242][T17332] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 6136.087779][T17332] geneve3: left promiscuous mode [ 6136.088997][T17332] geneve3: left allmulticast mode [ 6136.154358][T17332] bond3: left promiscuous mode [ 6136.155882][T17332] bond3: left allmulticast mode [ 6136.167199][T17332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 6136.198624][T17332] sit1: left promiscuous mode [ 6136.206929][T17332] sit1: left allmulticast mode [ 6136.284093][T17332] syztnl2: left promiscuous mode [ 6136.285394][T17332] syztnl2: left allmulticast mode [ 6136.343326][T17332] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 6137.200254][ T3187] infiniband syz!: set active [ 6144.694272][T17357] tmpfs: Bad value for 'mpol' [ 6164.957482][T17383] capability: warning: `syz.2.3776' uses 32-bit capabilities (legacy support in use) [ 6210.983130][T17439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3805'. [ 6231.152453][T17465] netlink: 'syz.0.3817': attribute type 61 has an invalid length. [ 6262.772997][T14081] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 6263.092528][T14081] usb 1-1: Using ep0 maxpacket: 32 [ 6263.160336][T14081] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6263.162914][T14081] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6263.419541][T14081] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 6263.424987][T14081] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 6263.427014][T14081] usb 1-1: Product: syz [ 6263.428620][T14081] usb 1-1: Manufacturer: syz [ 6263.725179][T14081] hub 1-1:4.0: USB hub found [ 6264.659114][T14081] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 6265.279487][T14081] usb 1-1: USB disconnect, device number 29 [ 6270.484419][T17537] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 6280.149751][T17550] netlink: 'syz.2.3850': attribute type 3 has an invalid length. [ 6308.437858][T17586] xt_CT: No such helper "syz0" [ 6311.635082][T17591] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 6347.186385][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'. [ 6347.195492][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'. [ 6353.980348][T17688] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 6354.003251][T17688] Error validating options; rc = [-22] [ 6360.266346][T17697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6376.156082][T17731] syz.0.3921 (17731): drop_caches: 0 [ 6378.616022][T17736] autofs4:pid:17736:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 6378.617620][T17736] autofs4:pid:17736:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 6398.797448][T17805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6426.137584][T17845] dvmrp0: entered allmulticast mode [ 6427.511226][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3962'. [ 6440.098083][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 6441.708600][T17866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6441.735389][T17866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6450.460791][T17877] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 6465.603807][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3985'. [ 6468.924468][T17908] netlink: 'syz.2.3987': attribute type 21 has an invalid length. [ 6468.926953][T17908] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3987'. [ 6468.976924][T17908] netlink: 'syz.2.3987': attribute type 5 has an invalid length. [ 6468.978488][T17908] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3987'. [ 6472.706949][T17914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'. [ 6475.771115][T17923] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3996'. [ 6500.065685][T17962] kernel read not supported for file /'- (pid: 17962 comm: syz.2.4014) [ 6500.147527][ T34] audit: type=1800 audit(6157.830:17): pid=17962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4014" name="'-" dev="mqueue" ino=29793 res=0 errno=0 [ 6513.436272][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6513.480897][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6527.795280][T18003] sit0: entered promiscuous mode [ 6527.796738][T18003] sit0: entered allmulticast mode [ 6532.671967][T18015] dns_resolver: Unsupported server list version (0) [ 6567.188158][T18104] netlink: 'syz.2.4061': attribute type 21 has an invalid length. [ 6567.190696][T18104] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4061'. [ 6581.485139][T18126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4071'. [ 6600.410973][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 6602.617305][T18162] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 6606.208560][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 6630.399465][T18233] xt_l2tp: wrong L2TP version: 0 [ 6631.591996][T18235] cgroup: Name too long [ 6637.886487][T18249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6639.109775][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6639.154391][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6652.184956][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'. [ 6656.717858][T18272] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 6666.603878][T18291] geneve6: entered promiscuous mode [ 6667.918460][T18297] Zero length message leads to an empty skb [ 6673.929239][T18307] usb usb1: check_ctrlrecip: process 18307 (syz.2.4141) requesting ep 01 but needs 81 [ 6673.931332][T18307] usb usb1: usbfs: process 18307 (syz.2.4141) did not claim interface 0 before use [ 6681.159461][T18319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'. [ 6681.160939][T18319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4147'. [ 6703.385875][T18352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6716.452830][T18368] tmpfs: Bad value for 'mpol' [ 6724.501837][ T34] audit: type=1800 audit(6364.884:18): pid=18374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4174" name="/newroot/2082/file0" dev="tmpfs" ino=10467 res=0 errno=0 [ 6735.438265][T18393] netlink: 'syz.2.4182': attribute type 1 has an invalid length. [ 6735.439783][T18393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4182'. [ 6774.300690][T18456] netlink: 'syz.0.4212': attribute type 21 has an invalid length. [ 6774.304113][T18456] netlink: 'syz.0.4212': attribute type 1 has an invalid length. [ 6789.918250][T18485] snd_dummy snd_dummy.0: control 3:0:0:syz1:0 is already present [ 6799.740344][T18499] netlink: 'syz.2.4233': attribute type 2 has an invalid length. [ 6799.744690][T18499] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 6804.176623][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4236'. [ 6805.966904][T18509] netlink: 'syz.0.4238': attribute type 1 has an invalid length. [ 6805.971023][T18509] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4238'. [ 6810.831834][T18515] netlink: 'syz.2.4241': attribute type 17 has an invalid length. [ 6810.834181][T18515] netlink: 'syz.2.4241': attribute type 27 has an invalid length. [ 6814.561386][T17336] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 6814.825316][T17336] usb 1-1: Using ep0 maxpacket: 16 [ 6814.963340][T17336] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 6814.965632][T17336] usb 1-1: config 0 has no interface number 0 [ 6814.967588][T17336] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 6815.082091][T17336] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 6815.084446][T17336] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 6815.086350][T17336] usb 1-1: Product: syz [ 6815.102692][T17336] usb 1-1: SerialNumber: syz [ 6815.280612][T17336] usb 1-1: config 0 descriptor?? [ 6815.734248][T17336] cm109 1-1:0.8: invalid payload size 239, expected 4 [ 6815.809543][T17336] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input43 [ 6819.288172][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 6819.292151][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.297277][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.300155][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.302947][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.309805][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.312572][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.315759][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.318616][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.321370][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.324134][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 6819.346090][T16917] usb 1-1: USB disconnect, device number 30 [ 6819.348687][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 6819.453875][T16917] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 6873.528665][T18622] tc_dump_action: action bad kind [ 6904.624348][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4309'. [ 6924.920308][T18704] veth1_macvtap: mtu greater than device maximum [ 6952.172116][T18747] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4346'. [ 6968.396490][T18774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4359'. [ 6972.159132][T18780] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 6972.163119][T18780] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 6977.501909][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4367'. [ 7011.185719][T18851] @ÿ: renamed from bond_slave_0 (while UP) [ 7022.021983][T18859] ubi0: detaching mtd0 [ 7022.212594][T18859] ubi0: mtd0 is detached [ 7026.069005][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 7028.784398][T18875] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 7033.333182][T18881] netlink: 'syz.0.4407': attribute type 12 has an invalid length. [ 7080.100272][T18944] netlink: 'syz.0.4438': attribute type 1 has an invalid length. [ 7080.102688][T18944] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4438'. [ 7080.915054][T18946] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4439'. [ 7095.676650][T18967] netlink: 'syz.2.4449': attribute type 21 has an invalid length. [ 7095.686951][T18967] netlink: 'syz.2.4449': attribute type 6 has an invalid length. [ 7095.694468][T18967] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4449'. [ 7139.416607][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 7167.765052][T19094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4503'. [ 7171.277030][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4507'. [ 7171.278476][T19098] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 7172.131730][T19100] ipt_ECN: cannot use operation on non-tcp rule [ 7198.470887][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 7198.473751][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 7210.397050][T19163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 7232.089360][T19190] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 7232.095465][T19190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4550'. [ 7232.097349][T19190] netlink: 'syz.2.4550': attribute type 1 has an invalid length. [ 7232.098798][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4550'. [ 7247.750083][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 7257.036877][T19226] netlink: 'syz.2.4568': attribute type 16 has an invalid length. [ 7257.038485][T19226] netlink: 'syz.2.4568': attribute type 3 has an invalid length. [ 7257.039630][T19226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4568'. [ 7264.160079][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7264.170399][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7264.699227][T19238] binder: 19234:19238 ioctl c0306201 20000100 returned -22 [ 7271.013354][T19242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4575'. [ 7271.016536][T19242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4575'. [ 7290.949043][T19274] tmpfs: Bad value for 'mpol' [ 7299.532835][T19286] netlink: 'syz.0.4596': attribute type 2 has an invalid length. [ 7299.534218][T19286] netlink: 46 bytes leftover after parsing attributes in process `syz.0.4596'. [ 7300.874002][T19288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 7319.882879][T19013] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 7320.196369][T19013] usb 1-1: Using ep0 maxpacket: 16 [ 7320.282821][T19013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 7320.285366][T19013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 7320.288087][T19013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 7320.292546][T19013] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 7320.294941][T19013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 7320.297201][T19013] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 7320.299634][T19013] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 7320.867567][T19013] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 7320.870172][T19013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 7320.872314][T19013] usb 1-1: SerialNumber: syz [ 7321.199328][T19013] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 7321.206787][T19013] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 7323.093668][T19013] usb 1-1: USB disconnect, device number 31 [ 7332.107958][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4615'. [ 7332.109851][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4615'. [ 7361.611788][T19382] netlink: 'syz.2.4639': attribute type 2 has an invalid length. [ 7361.613221][T19382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4639'. [ 7362.498025][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4638'. [ 7376.981303][T19405] netlink: 'syz.2.4649': attribute type 5 has an invalid length. [ 7386.216006][T19422] netlink: 'syz.2.4658': attribute type 4 has an invalid length. [ 7387.609274][T19423] netlink: 'syz.0.4657': attribute type 12 has an invalid length. [ 7402.704753][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4670'. [ 7424.827030][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4685'. [ 7433.786915][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4692'. [ 7434.102020][T19495] vlan0: entered allmulticast mode [ 7453.108389][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4705'. [ 7471.893480][T19545] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4714'. [ 7500.552622][T19620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4735'. [ 7512.450499][T19638] xt_l2tp: missing protocol rule (udp|l2tpip) [ 7514.430885][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'. [ 7514.434256][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'. [ 7564.664491][T19705] netlink: 'syz.0.4777': attribute type 16 has an invalid length. [ 7564.668390][T19705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4777'. [ 7571.283806][ T34] audit: type=1326 audit(7146.207:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.2.4783" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 7571.343875][ T34] audit: type=1326 audit(7146.254:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.2.4783" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 7571.606948][ T34] audit: type=1326 audit(7146.493:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.2.4783" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb636 code=0x7ffc0000 [ 7571.614081][ T34] audit: type=1326 audit(7146.503:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.2.4783" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 7571.622754][ T34] audit: type=1326 audit(7146.503:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.2.4783" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 7579.886830][T19735] netlink: 'syz.0.4792': attribute type 5 has an invalid length. [ 7596.695624][T19801] netlink: 'syz.0.4808': attribute type 21 has an invalid length. [ 7596.720160][T19801] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4808'. [ 7605.857295][T19820] netlink: 'syz.2.4814': attribute type 10 has an invalid length. [ 7632.756781][T19013] hid-generic D158:334EB097:0E39.0001: item fetching failed at offset 0/1 [ 7632.767363][T19013] hid-generic D158:334EB097:0E39.0001: probe with driver hid-generic failed with error -22 [ 7636.844127][T19872] autofs4:pid:19872:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 7636.847048][T19872] autofs4:pid:19872:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 7637.181619][T19874] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 7648.611702][T19891] netlink: 'syz.2.4848': attribute type 27 has an invalid length. [ 7674.083497][T19939] netlink: 'syz.2.4869': attribute type 7 has an invalid length. [ 7674.085331][T19939] netlink: 'syz.2.4869': attribute type 6 has an invalid length. [ 7678.899518][T19947] ipt_REJECT: TCP_RESET invalid for non-tcp [ 7699.930653][T19977] netlink: 'syz.2.4888': attribute type 1 has an invalid length. [ 7699.932132][T19977] netlink: 'syz.2.4888': attribute type 2 has an invalid length. [ 7714.375669][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4899'. [ 7741.386731][T20039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4917'. [ 7770.931792][T20075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4936'. [ 7775.978084][T20083] cgroup: Bad value for 'name' [ 7777.894303][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'. [ 7781.117406][T20091] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 7785.409967][T20128] ipt_REJECT: ECHOREPLY no longer supported. [ 7787.415178][T20132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 7795.714944][T20146] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 7798.823145][T20151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7798.857722][T20151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7817.217576][T20178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7817.291210][T20178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7826.302507][T20188] binder: 20187:20188 ioctl c018620c 20003640 returned -1 [ 7831.968307][T20196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4977'. [ 7838.420051][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 7863.866324][T20244] netlink: 'syz.0.4999': attribute type 1 has an invalid length. [ 7879.135765][T20262] xt_connbytes: Forcing CT accounting to be enabled [ 7909.060780][T20303] xt_ecn: cannot match TCP bits for non-tcp packets [ 7932.863201][T20340] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5046'. [ 7943.513122][T20356] netlink: 'syz.0.5053': attribute type 2 has an invalid length. [ 7971.753633][T20388] usb usb2: usbfs: process 20388 (syz.2.5069) did not claim interface 0 before use [ 7988.404928][T20414] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5082'. [ 7992.924252][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 8004.476352][T20436] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5093'. [ 8014.323883][T20452] xt_CT: No such helper "pptp" [ 8042.369200][T20487] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 8046.505042][T20525] netlink: 'syz.2.5120': attribute type 5 has an invalid length. [ 8056.400356][T20540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5128'. [ 8062.137187][T20545] Unknown options in mask 4 [ 8063.441247][T20547] netlink: 'syz.2.5131': attribute type 1 has an invalid length. [ 8063.443959][T20547] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5131'. [ 8073.024061][T20559] devtmpfs: Cannot enable quota on remount [ 8132.932844][T17336] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 8133.216094][T17336] usb 1-1: Using ep0 maxpacket: 16 [ 8133.387279][T17336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 8133.460243][T17336] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 8133.462783][T17336] usb 1-1: config 0 has no interface number 0 [ 8133.464886][T17336] usb 1-1: config 0 interface 213 altsetting 251 bulk endpoint 0x5 has invalid maxpacket 24 [ 8133.467238][T17336] usb 1-1: config 0 interface 213 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 8 [ 8133.491945][T17336] usb 1-1: config 0 interface 213 has no altsetting 0 [ 8133.562876][T17336] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=de.91 [ 8133.567196][T17336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8133.571763][T17336] usb 1-1: Product: syz [ 8133.573551][T17336] usb 1-1: Manufacturer: syz [ 8133.575363][T17336] usb 1-1: SerialNumber: syz [ 8133.866301][T17336] usb 1-1: config 0 descriptor?? [ 8133.917173][T20713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 8133.937520][T20713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 8134.235674][T20719] netlink: 'syz.2.5178': attribute type 7 has an invalid length. [ 8134.589766][T17336] usb 1-1: probing VID:PID(0424:012C) [ 8134.600121][T17336] usb 1-1: vub300 testing BULK OUT EndPoint(0) 05 [ 8134.601371][T17336] usb 1-1: vub300 testing BULK OUT EndPoint(1) 0D [ 8134.602496][T17336] usb 1-1: vub300 testing BULK OUT EndPoint(2) 09 [ 8134.603877][T17336] usb 1-1: ignoring unexpected bulk_out endpoint [ 8134.604870][T17336] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 8134.658540][T17336] vub300 1-1:0.213: probe with driver vub300 failed with error -22 [ 8134.733106][T17336] usb 1-1: USB disconnect, device number 32 [ 8175.130191][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'. [ 8223.497006][T20819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5223'. [ 8234.700999][T20837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5231'. [ 8237.492222][ T34] audit: type=1326 audit(7760.919:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20838 comm="syz.0.5233" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 8246.396573][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5240'. [ 8262.426337][T20880] xt_hashlimit: size too large, truncated to 1048576 [ 8262.433398][T20880] xt_hashlimit: overflow, rate too high: 0 [ 8265.222650][T20884] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5253'. [ 8265.301735][T20884] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5253'. [ 8265.304538][T20884] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5253'. [ 8266.130117][T20886] bpf: Bad value for 'gid' [ 8289.279816][ T34] audit: type=1107 audit(7808.678:25): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 8339.509721][T20976] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5295'. [ 8339.584794][T20976] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5295'. [ 8339.587416][T20976] netlink: 'syz.2.5295': attribute type 6 has an invalid length. [ 8339.589269][T20976] netlink: 'syz.2.5295': attribute type 5 has an invalid length. [ 8339.591121][T20976] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5295'. [ 8351.574943][T17336] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 8357.890516][T17336] usb 1-1: Using ep0 maxpacket: 8 [ 8358.066513][T17336] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 8358.069280][T17336] usb 1-1: config 0 has no interface number 0 [ 8358.229298][T17336] usb 1-1: New USB device found, idVendor=10c4, idProduct=82f9, bcdDevice=1d.fb [ 8358.235520][T17336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8358.238144][T17336] usb 1-1: Product: syz [ 8358.239378][T17336] usb 1-1: Manufacturer: syz [ 8358.240739][T17336] usb 1-1: SerialNumber: syz [ 8358.322885][T17336] usb 1-1: config 0 descriptor?? [ 8358.481206][T17336] cp210x 1-1:0.90: cp210x converter detected [ 8359.260768][T17336] cp210x 1-1:0.90: failed to get vendor val 0x370b size 1: -71 [ 8359.281528][T17336] cp210x 1-1:0.90: querying part number failed [ 8359.487312][T17336] usb 1-1: cp210x converter now attached to ttyUSB0 [ 8359.681481][T17336] usb 1-1: USB disconnect, device number 33 [ 8360.006384][T17336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 8360.084555][T17336] cp210x 1-1:0.90: device disconnected [ 8371.914294][T17336] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 8373.215765][T17336] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 8373.219277][T17336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8373.259157][T17336] usb 1-1: Product: syz [ 8373.261457][T17336] usb 1-1: Manufacturer: syz [ 8373.263222][T17336] usb 1-1: SerialNumber: syz [ 8373.458733][T17336] usb 1-1: config 0 descriptor?? [ 8375.289455][T17336] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 8375.590168][T17336] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 8375.593500][T17336] peak_usb 1-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 8376.130178][T17336] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 8376.576538][T17336] usb 1-1: USB disconnect, device number 34 [ 8407.344535][T21077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 8413.865630][T21087] Timeout policy `syz1' can only be used by L3 protocol number 8944 [ 8446.316756][T21127] xt_bpf: check failed: parse error [ 8468.752096][T21155] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 8504.828877][T16834] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 8505.089146][T16834] usb 1-1: Using ep0 maxpacket: 32 [ 8505.376194][T16834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 8505.379959][T16834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 8505.381563][T16834] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 8505.382879][T16834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8505.437822][T16834] usb 1-1: config 0 descriptor?? [ 8505.663916][T16834] hub 1-1:0.0: USB hub found [ 8506.909960][T16834] hub 1-1:0.0: 1 port detected [ 8507.172580][T16834] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 8507.180593][T16834] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 8507.272925][T16834] usbhid 1-1:0.0: can't add hid device: -71 [ 8507.280336][T16834] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 8507.441764][T16834] usb 1-1: USB disconnect, device number 35 [ 8534.797055][T21281] netlink: 'syz.0.5397': attribute type 2 has an invalid length. [ 8536.248438][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5399'. [ 8536.250356][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5399'. [ 8548.454537][T21299] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 8576.634905][T21363] xt_SECMARK: invalid mode: 0 [ 8591.198680][T21383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8623.093138][T21450] netlink: 'syz.0.5446': attribute type 3 has an invalid length. [ 8632.663372][T21459] Device name cannot be null; rc = [-22] [ 8636.201289][T21465] xt_policy: output policy not valid in PREROUTING and INPUT [ 8658.248706][T21499] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 8675.149097][T21518] xt_ecn: cannot match TCP bits for non-tcp packets [ 8695.622225][T19728] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 8695.889552][T19728] usb 1-1: Using ep0 maxpacket: 8 [ 8696.529270][T19728] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 8696.530746][T19728] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 8696.531956][T19728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 8697.028034][T19728] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 8697.031106][T19728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8697.036445][T19728] usb 1-1: Product: syz [ 8697.038313][T19728] usb 1-1: Manufacturer: syz [ 8697.040040][T19728] usb 1-1: SerialNumber: syz [ 8698.433033][T19728] usb 1-1: 0:2 : does not exist [ 8698.866623][T19728] usb 1-1: USB disconnect, device number 36 [ 8718.867265][T21586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8723.176994][T21592] dlm: no locking on control device [ 8753.168988][T21627] netlink: 'syz.0.5519': attribute type 22 has an invalid length. [ 8753.170664][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5519'. [ 8775.949660][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'. [ 8776.047644][T21661] gre0: Master is either lo or non-ether device [ 8788.361355][T21691] ip6t_srh: unknown srh invflags 7863 [ 8799.970112][T21709] xt_SECMARK: invalid mode: 0 [ 8808.852048][T21723] xt_l2tp: v2 tid > 0xffff: 262144 [ 8834.260661][T21792] netlink: 'syz.2.5579': attribute type 7 has an invalid length. [ 8834.263153][T21792] netlink: 'syz.2.5579': attribute type 8 has an invalid length. [ 8838.084039][T21796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8871.477082][T21845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5603'. [ 8873.945589][T21849] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5605'. [ 8876.296136][T21853] ip6t_srh: unknown srh invflags 7D00 [ 8888.172049][T21863] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 8898.681752][T21873] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 8909.882128][T21895] IPv6: NLM_F_CREATE should be specified when creating new route [ 8954.249843][T21951] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5656'. [ 8966.861965][T21968] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5664'. [ 8966.865124][T21968] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5664'. [ 8967.840791][T21970] netlink: 'syz.2.5665': attribute type 3 has an invalid length. [ 8997.557039][T22020] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 9022.934078][T22053] smc: removing ib device syz! [ 9072.967873][T22108] netlink: 'syz.2.5728': attribute type 13 has an invalid length. [ 9087.873425][T22128] autofs4:pid:22128:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 9113.831036][T22172] tmpfs: Bad value for 'mpol' [ 9135.103620][T22210] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 9166.121229][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 9175.390014][T22266] usb usb1: usbfs: process 22266 (syz.0.5806) did not claim interface 0 before use [ 9181.211378][T22277] netlink: 'syz.0.5811': attribute type 1 has an invalid length. [ 9181.219636][T22277] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5811'. [ 9192.404682][T19013] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 9192.661882][T19013] usb 1-1: Using ep0 maxpacket: 16 [ 9193.330688][T19013] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 9193.332666][T19013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9193.339414][T19013] usb 1-1: Product: syz [ 9193.340644][T19013] usb 1-1: Manufacturer: syz [ 9193.341666][T19013] usb 1-1: SerialNumber: syz [ 9193.401505][T19013] usb 1-1: config 0 descriptor?? [ 9196.794121][T19013] usb_8dev 1-1:0.0 can0: sending command message failed [ 9196.798071][T19013] usb_8dev 1-1:0.0 can0: can't get firmware version [ 9197.225870][T19013] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 9197.627458][T19013] usb 1-1: USB disconnect, device number 37 [ 9231.772519][T22349] lo: entered promiscuous mode [ 9231.775091][T22349] lo: entered allmulticast mode [ 9231.862916][T22349] tunl0: entered promiscuous mode [ 9231.865063][T22349] tunl0: entered allmulticast mode [ 9232.212401][T22349] gre0: entered promiscuous mode [ 9232.214550][T22349] gre0: entered allmulticast mode [ 9232.583864][T22349] gretap0: entered promiscuous mode [ 9232.586009][T22349] gretap0: entered allmulticast mode [ 9232.929213][T22349] erspan0: entered promiscuous mode [ 9232.941967][T22349] erspan0: entered allmulticast mode [ 9233.196882][T22349] ip_vti0: entered promiscuous mode [ 9233.199081][T22349] ip_vti0: entered allmulticast mode [ 9233.925785][T22349] ip6_vti0: entered promiscuous mode [ 9233.927929][T22349] ip6_vti0: entered allmulticast mode [ 9234.176366][T22349] sit0: entered promiscuous mode [ 9234.178653][T22349] sit0: entered allmulticast mode [ 9234.489171][T22349] ip6tnl0: entered promiscuous mode [ 9234.492610][T22349] ip6tnl0: entered allmulticast mode [ 9234.664372][T22349] ip6gre0: entered promiscuous mode [ 9234.665884][T22349] ip6gre0: entered allmulticast mode [ 9235.431549][T22349] syz_tun: entered promiscuous mode [ 9235.433747][T22349] syz_tun: entered allmulticast mode [ 9236.203830][T22349] ip6gretap0: entered promiscuous mode [ 9236.222334][T22349] ip6gretap0: entered allmulticast mode [ 9236.405957][T22349] vcan0: entered promiscuous mode [ 9236.408255][T22349] vcan0: entered allmulticast mode [ 9236.495896][T22349] bond0: entered promiscuous mode [ 9236.511330][T22349] bond_slave_0: entered promiscuous mode [ 9236.516286][T22349] bond_slave_1: entered promiscuous mode [ 9236.555896][T22349] bond0: entered allmulticast mode [ 9236.558055][T22349] bond_slave_0: entered allmulticast mode [ 9236.560005][T22349] bond_slave_1: entered allmulticast mode [ 9236.866190][T22349] dummy0: entered promiscuous mode [ 9236.880080][T22349] dummy0: entered allmulticast mode [ 9237.175028][T22349] nlmon0: entered promiscuous mode [ 9237.177114][T22349] nlmon0: entered allmulticast mode [ 9237.512542][T22349] vxcan0: entered promiscuous mode [ 9237.556422][T22349] vxcan0: entered allmulticast mode [ 9237.794903][T22349] vxcan1: entered promiscuous mode [ 9237.797355][T22349] vxcan1: entered allmulticast mode [ 9237.847036][T22349] 0ªX¹¦À: entered promiscuous mode [ 9237.849700][T22349] 0ªX¹¦À: entered allmulticast mode [ 9237.991083][T22349] veth1: entered promiscuous mode [ 9238.005489][T22349] veth1: entered allmulticast mode [ 9238.301478][T22349] wg0: entered promiscuous mode [ 9238.303761][T22349] wg0: entered allmulticast mode [ 9238.737552][T22349] wg1: entered promiscuous mode [ 9238.759092][T22349] wg1: entered allmulticast mode [ 9239.212030][T22349] wg2: entered promiscuous mode [ 9239.214158][T22349] wg2: entered allmulticast mode [ 9239.529208][T22349] veth0_to_bridge: entered promiscuous mode [ 9239.539361][T22349] veth0_to_bridge: entered allmulticast mode [ 9240.047665][T22349] bridge_slave_0: entered promiscuous mode [ 9240.049849][T22349] bridge_slave_0: entered allmulticast mode [ 9240.295302][T22349] veth1_to_bridge: entered promiscuous mode [ 9240.297703][T22349] veth1_to_bridge: entered allmulticast mode [ 9240.483599][T22349] bridge_slave_1: entered promiscuous mode [ 9240.490049][T22349] bridge_slave_1: entered allmulticast mode [ 9240.720563][T22349] veth0_to_bond: entered promiscuous mode [ 9240.725179][T22349] veth0_to_bond: entered allmulticast mode [ 9241.091597][T22349] veth1_to_bond: entered promiscuous mode [ 9241.092858][T22349] veth1_to_bond: entered allmulticast mode [ 9241.305587][T22349] veth0_to_team: entered promiscuous mode [ 9241.313402][T22349] veth0_to_team: entered allmulticast mode [ 9241.554357][T22349] team_slave_0: entered promiscuous mode [ 9241.563975][T22349] team_slave_0: entered allmulticast mode [ 9241.751314][T22349] veth1_to_team: entered promiscuous mode [ 9241.769157][T22349] veth1_to_team: entered allmulticast mode [ 9241.953851][T22349] team_slave_1: entered promiscuous mode [ 9241.955208][T22349] team_slave_1: entered allmulticast mode [ 9242.080725][T22349] veth0_to_batadv: entered promiscuous mode [ 9242.081967][T22349] veth0_to_batadv: entered allmulticast mode [ 9242.222572][T22349] batadv_slave_0: entered promiscuous mode [ 9242.223880][T22349] batadv_slave_0: entered allmulticast mode [ 9242.373375][T22349] veth1_to_batadv: entered promiscuous mode [ 9242.375720][T22349] veth1_to_batadv: entered allmulticast mode [ 9242.541822][T22349] batadv_slave_1: entered promiscuous mode [ 9242.545887][T22349] batadv_slave_1: entered allmulticast mode [ 9242.771948][T22349] xfrm0: entered promiscuous mode [ 9242.773504][T22349] xfrm0: entered allmulticast mode [ 9242.873510][T22349] veth0_to_hsr: entered promiscuous mode [ 9242.876530][T22349] veth0_to_hsr: entered allmulticast mode [ 9242.961405][T22349] hsr_slave_0: entered allmulticast mode [ 9243.045887][T22349] veth1_to_hsr: entered promiscuous mode [ 9243.048048][T22349] veth1_to_hsr: entered allmulticast mode [ 9243.304121][T22349] hsr_slave_1: entered allmulticast mode [ 9243.392685][T22349] hsr0: entered promiscuous mode [ 9243.393924][T22349] hsr0: entered allmulticast mode [ 9243.597956][T22349] veth1_virt_wifi: entered promiscuous mode [ 9243.600282][T22349] veth1_virt_wifi: entered allmulticast mode [ 9243.837958][T22349] veth0_virt_wifi: entered promiscuous mode [ 9243.839400][T22349] veth0_virt_wifi: entered allmulticast mode [ 9244.270334][T22349] veth1_vlan: entered allmulticast mode [ 9244.486928][T22349] veth0_vlan: entered allmulticast mode [ 9245.056768][T22349] vlan0: entered promiscuous mode [ 9245.058933][T22349] vlan0: entered allmulticast mode [ 9245.063746][T22349] vlan1: entered promiscuous mode [ 9245.073087][T22349] vlan1: entered allmulticast mode [ 9245.133810][T22349] macvlan0: entered promiscuous mode [ 9245.136058][T22349] macvlan0: entered allmulticast mode [ 9245.961721][T22349] macvlan1: entered promiscuous mode [ 9245.963902][T22349] macvlan1: entered allmulticast mode [ 9246.169609][T22349] ipvlan0: entered promiscuous mode [ 9246.173837][T22349] ipvlan0: entered allmulticast mode [ 9246.386528][T22349] ipvlan1: entered promiscuous mode [ 9246.403417][T22349] ipvlan1: entered allmulticast mode [ 9246.737620][T22349] veth1_macvtap: entered allmulticast mode [ 9246.958832][T22349] veth0_macvtap: entered allmulticast mode [ 9247.389005][T22349] macvtap0: entered promiscuous mode [ 9247.391220][T22349] macvtap0: entered allmulticast mode [ 9247.584746][T22349] macsec0: entered promiscuous mode [ 9247.587226][T22349] macsec0: entered allmulticast mode [ 9247.784396][T22349] geneve0: entered promiscuous mode [ 9247.788239][T22349] geneve0: entered allmulticast mode [ 9247.976435][T22349] geneve1: entered promiscuous mode [ 9247.978733][T22349] geneve1: entered allmulticast mode [ 9248.606931][T22349] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 9248.621556][T22349] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 9248.925344][T22349] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 9248.927273][T22349] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 9248.975595][T22349] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 9248.980520][T22349] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 9249.051069][T22349] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 9249.054090][T22349] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 9249.250337][T22349] bond1: entered promiscuous mode [ 9249.252482][T22349] bond1: entered allmulticast mode [ 9249.454271][T22349] bond2: entered promiscuous mode [ 9249.458715][T22349] bond2: entered allmulticast mode [ 9249.588288][T22349] gre1: entered promiscuous mode [ 9249.590445][T22349] gre1: entered allmulticast mode [ 9249.956704][T22349] ip6gretap1: entered promiscuous mode [ 9249.958879][T22349] ip6gretap1: entered allmulticast mode [ 9250.267635][T22349] ipip0: entered promiscuous mode [ 9250.269678][T22349] ipip0: entered allmulticast mode [ 9250.631701][T22349] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 42475 - 0 [ 9250.636318][T22349] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 42475 - 0 [ 9250.637849][T22349] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 42475 - 0 [ 9250.639215][T22349] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 42475 - 0 [ 9250.646304][T22349] geneve2: entered promiscuous mode [ 9250.647692][T22349] geneve2: entered allmulticast mode [ 9250.717760][T22349] syztnl1: entered promiscuous mode [ 9250.719127][T22349] syztnl1: entered allmulticast mode [ 9250.794249][T22349] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 9250.798203][T22349] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 9250.799611][T22349] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 9250.800336][T22349] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 9250.808957][T22349] geneve3: entered promiscuous mode [ 9250.810284][T22349] geneve3: entered allmulticast mode [ 9250.895601][T22349] bond3: entered promiscuous mode [ 9250.897098][T22349] bond3: entered allmulticast mode [ 9250.986048][T22349] sit1: entered promiscuous mode [ 9250.987614][T22349] sit1: entered allmulticast mode [ 9251.041557][T22349] syztnl2: entered promiscuous mode [ 9251.043643][T22349] syztnl2: entered allmulticast mode [ 9251.048683][T22349] bond5: entered promiscuous mode [ 9251.049860][T22349] bond5: entered allmulticast mode [ 9251.053167][T22349] wireguard0: entered promiscuous mode [ 9251.054672][T22349] wireguard0: entered allmulticast mode [ 9251.063501][T22349] geneve4: entered promiscuous mode [ 9251.064696][T22349] geneve4: entered allmulticast mode [ 9251.069472][T22349] veth2: entered promiscuous mode [ 9251.070614][T22349] veth2: entered allmulticast mode [ 9251.073246][T22349] veth3: entered promiscuous mode [ 9251.074454][T22349] veth3: entered allmulticast mode [ 9251.094532][T22349] ipip1: entered promiscuous mode [ 9251.103636][T22349] ipip1: entered allmulticast mode [ 9251.259720][T22349] ipip2: entered promiscuous mode [ 9251.266918][T22349] ipip2: entered allmulticast mode [ 9251.272357][T22349] sit2: entered promiscuous mode [ 9251.277346][T22349] sit2: entered allmulticast mode [ 9251.283199][T22349] bond6: entered promiscuous mode [ 9251.287016][T22349] bond6: entered allmulticast mode [ 9251.333553][T22349] ip6gre1: entered promiscuous mode [ 9251.335118][T22349] ip6gre1: entered allmulticast mode [ 9251.416456][T22349] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9251.418038][T22349] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9251.422771][T22349] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9251.427991][T22349] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9251.498784][T22349] ip6erspan0: entered promiscuous mode [ 9251.503249][T22349] ip6erspan0: entered allmulticast mode [ 9251.507084][T22349] ip6tnl1: entered promiscuous mode [ 9251.508452][T22349] ip6tnl1: entered allmulticast mode [ 9251.514324][T22349] syztnl0: entered promiscuous mode [ 9251.517380][T22349] syztnl0: entered allmulticast mode [ 9251.534939][T22349] dvmrp0: entered promiscuous mode [ 9251.615295][T22349] bond7: entered promiscuous mode [ 9251.618989][T22349] bond7: entered allmulticast mode [ 9251.626580][T22349] erspan1: entered promiscuous mode [ 9251.627710][T22349] erspan1: entered allmulticast mode [ 9251.632724][T22349] bond8: entered promiscuous mode [ 9251.635655][T22349] bond8: entered allmulticast mode [ 9251.638508][T22349] bond9: entered promiscuous mode [ 9251.639569][T22349] bond9: entered allmulticast mode [ 9251.650184][T22349] ip6tnl2: entered promiscuous mode [ 9251.656890][T22349] ip6tnl2: entered allmulticast mode [ 9251.725896][T22349] wireguard1: entered promiscuous mode [ 9251.730570][T22349] wireguard1: entered allmulticast mode [ 9251.753630][T22349] bond10: entered promiscuous mode [ 9251.755385][T22349] bond10: entered allmulticast mode [ 9251.779026][T22349] gre2: entered promiscuous mode [ 9251.781094][T22349] gre2: entered allmulticast mode [ 9251.873568][T22349] geneve6: entered promiscuous mode [ 9251.875184][T22349] geneve6: entered allmulticast mode [ 9251.884633][T22349] bond11: entered promiscuous mode [ 9251.886343][T22349] bond11: entered allmulticast mode [ 9251.889123][T22349] bond12: entered promiscuous mode [ 9251.894510][T22349] bond12: entered allmulticast mode [ 9251.907841][T22349] ip6gre2: entered promiscuous mode [ 9251.909197][T22349] ip6gre2: entered allmulticast mode [ 9252.977146][T22349] bond13: entered promiscuous mode [ 9252.979478][T22349] bond13: entered allmulticast mode [ 9252.987085][T22349] veth0: entered promiscuous mode [ 9252.989047][T22349] veth0: entered allmulticast mode [ 9252.993422][T22349] veth4: entered promiscuous mode [ 9252.998095][T22349] veth4: entered allmulticast mode [ 9253.002869][T22349] bond14: entered promiscuous mode [ 9253.003623][T22349] bond14: entered allmulticast mode [ 9259.935827][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 9272.540342][T22394] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 9286.651913][T22414] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 9303.305754][T22448] binder: 22447:22448 ioctl 541b 0 returned -22 [ 9307.875815][T22460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5892'. [ 9307.878250][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5892'. [ 9307.895540][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5892'. [ 9309.081301][T22462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9309.087865][T22462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9319.721903][T22477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9319.729091][T22477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9382.148994][T22571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5945'. [ 9424.049761][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5973'. [ 9424.055664][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5973'. [ 9432.278012][T20657] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 9432.731768][T20657] usb 1-1: Using ep0 maxpacket: 32 [ 9432.842518][T20657] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 9432.846227][T20657] usb 1-1: config 0 has no interface number 0 [ 9432.851523][T20657] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 9432.854018][T20657] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 9432.856754][T20657] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 9432.870619][T20657] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 9432.873319][T20657] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 9432.875742][T20657] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 9432.991996][T20657] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 9432.993737][T20657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9432.995205][T20657] usb 1-1: Product: syz [ 9432.996191][T20657] usb 1-1: Manufacturer: syz [ 9432.997442][T20657] usb 1-1: SerialNumber: syz [ 9433.093255][T20657] usb 1-1: config 0 descriptor?? [ 9433.145680][T22645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9433.150145][T22645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9434.296797][T20657] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 9434.522269][T20657] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 9434.883782][T20657] usb 1-1: USB disconnect, device number 38 [ 9435.059027][T20657] etas_es58x 1-1:0.219: Disconnecting syz syz [ 9482.201848][ T34] audit: type=1400 audit(8924.207:26): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22735 comm="syz.2.6007" [ 9490.933491][ T34] audit: type=1326 audit(8932.331:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.2.6011" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 9501.573733][T22762] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 9501.576583][T22762] [U] J"—e:ÀÆ" [ 9593.280486][ T34] audit: type=1326 audit(9026.811:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.296506][ T34] audit: type=1326 audit(9026.829:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.610713][ T34] audit: type=1326 audit(9027.116:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.624253][ T34] audit: type=1326 audit(9027.134:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.666355][ T34] audit: type=1326 audit(9027.171:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.850397][ T34] audit: type=1326 audit(9027.346:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=209 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.892974][ T34] audit: type=1326 audit(9027.374:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9593.923943][ T34] audit: type=1326 audit(9027.374:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.0.6080" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 9595.918456][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6081'. [ 9597.305699][T22911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6082'. [ 9609.112288][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 9609.116623][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 9609.119899][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.121605][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.123274][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.124924][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.129734][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.131505][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.133136][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.134846][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.138988][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.140727][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.142391][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.144061][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.145818][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.149671][T22917] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 9609.251629][T22917] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 9630.885415][T22957] lo speed is unknown, defaulting to 1000 [ 9630.971306][T22957] lo speed is unknown, defaulting to 1000 [ 9650.133489][T23000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6110'. [ 9658.881105][T23020] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 9668.263047][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 9668.266157][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 9668.277405][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.290399][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.291783][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.292847][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.293903][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.296765][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.297928][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.299324][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.307918][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.309137][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.310507][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.317181][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.318688][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.320059][T21978] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 9668.357321][T21978] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 9690.590015][ T34] audit: type=1326 audit(9116.648:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23081 comm="syz.2.6146" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7fc00000 [ 9696.645593][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 9696.646960][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6152'. [ 9698.022023][T23097] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6153'. [ 9698.025513][T23097] nbd: couldn't find a device at index 127 [ 9705.364510][T23119] netlink: 798 bytes leftover after parsing attributes in process `syz.2.6161'. [ 9708.863047][T23129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6165'. [ 9709.654877][T23130] x_tables: ip_tables: udp match: only valid for protocol 17 [ 9710.277131][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6166'. [ 9717.619571][T23140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9717.643086][T23140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9737.957975][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6183'. [ 9738.587097][T23176] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 9742.512513][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 9742.514938][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6188'. [ 9749.812452][T21978] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 9750.494315][T21978] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 9750.496486][T21978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 9750.497839][T21978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 9750.499509][T21978] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 9750.500723][T21978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9750.552600][T21978] usb 1-1: config 0 descriptor?? [ 9752.011578][T21978] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 9752.013370][T21978] holtek 0003:1241:5015.0004: no inputs found [ 9752.209880][T21978] usb 1-1: USB disconnect, device number 39 [ 9756.848456][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 9766.546974][T23233] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 9772.409413][T23241] netlink: 'syz.0.6205': attribute type 3 has an invalid length. [ 9772.413649][T23241] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6205'. [ 9776.065753][T23247] rdma_op ff6000001b4631f0 conn xmit_rdma 0000000000000000 [ 9803.434801][T23303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6235'. [ 9870.185623][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 9870.187782][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 9878.501177][T23439] [U] ^@ [ 9902.716346][T23269] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 9903.073931][T23269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 9903.076726][T23269] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 9903.078859][T23269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9903.218214][T23269] usb 1-1: config 0 descriptor?? [ 9903.400225][T23269] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 9904.300389][T23269] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 9904.465144][T23269] usb 1-1: USB disconnect, device number 40 [ 9925.609758][T23525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9925.620505][T23525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9945.410832][T23561] macvtap1: entered promiscuous mode [ 9945.412334][T23561] vlan0: entered promiscuous mode [ 9945.435790][T23561] xfrm0: entered promiscuous mode [ 9945.526861][T23561] vlan0: left promiscuous mode [ 9945.528067][T23561] xfrm0: left promiscuous mode [ 9955.737854][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6349'. [ 9961.871897][T23594] autofs: Bad value for 'fd' [ 9966.463826][T23604] netlink: 'syz.0.6360': attribute type 5 has an invalid length. [ 9980.285193][T23626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6370'. [10029.085173][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6401'. [10029.087308][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6401'. [10036.723713][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6407'. [10063.355888][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6436'. [10069.451061][T23781] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6443'. [10071.527384][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6445'. [10095.981106][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6467'. [10095.982532][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6467'. [10095.983827][T23834] netlink: 'syz.0.6467': attribute type 15 has an invalid length. [10103.207011][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6472'. [10108.464673][T23857] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6475'. [10114.865645][T23869] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [10119.539645][T23879] nbd: socks must be embedded in a SOCK_ITEM attr [10122.520716][T23888] ubi0: attaching mtd0 [10122.565189][T23888] ubi0: scanning is finished [10122.605400][T23888] ================================================================== [10122.606968][T23888] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x528/0x61a [10122.608052][T23888] Read of size 4 at addr ff600000305998e0 by task syz.0.6490/23888 [10122.609080][T23888] [10122.609841][T23888] CPU: 1 UID: 0 PID: 23888 Comm: syz.0.6490 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10122.612488][T23888] Hardware name: riscv-virtio,qemu (DT) [10122.613920][T23888] Call Trace: [10122.614506][T23888] [] dump_backtrace+0x2e/0x3c [10122.615485][T23888] [] show_stack+0x30/0x3c [10122.616326][T23888] [] dump_stack_lvl+0x12e/0x1a6 [10122.617286][T23888] [] print_report+0x28e/0x5aa [10122.618279][T23888] [] kasan_report+0xec/0x118 [10122.619313][T23888] [] __asan_report_load4_noabort+0x12/0x1a [10122.620380][T23888] [] notifier_chain_register+0x528/0x61a [10122.621391][T23888] [] blocking_notifier_chain_register+0x80/0xc6 [10122.622963][T23888] [] register_reboot_notifier+0x22/0x2c [10122.623989][T23888] [] ubi_wl_init+0xd0a/0x15c2 [10122.624891][T23888] [] ubi_attach+0x15da/0x4f90 [10122.625802][T23888] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10122.626732][T23888] [] ctrl_cdev_ioctl+0x496/0x764 [10122.627605][T23888] [] __riscv_sys_ioctl+0x18e/0x1e2 [10122.628509][T23888] [] syscall_handler+0x94/0x118 [10122.629351][T23888] [] do_trap_ecall_u+0x1aa/0x216 [10122.630269][T23888] [] handle_exception+0x146/0x152 [10122.631302][T23888] [10122.631813][T23888] Allocated by task 23182: [10122.632618][T23888] stack_trace_save+0xa0/0xd2 [10122.633818][T23888] kasan_save_stack+0x3e/0x6a [10122.634615][T23888] kasan_save_track+0x16/0x28 [10122.635362][T23888] kasan_save_alloc_info+0x30/0x3e [10122.636202][T23888] __kasan_kmalloc+0xa0/0xa6 [10122.636993][T23888] __kmalloc_node_track_caller_noprof+0x258/0x5e8 [10122.637888][T23888] kmalloc_reserve+0xfe/0x2be [10122.638763][T23888] __alloc_skb+0x152/0x42a [10122.639585][T23888] nf_tables_rule_notify+0xea/0x60a [10122.640490][T23888] nf_tables_commit+0x173e/0x5e16 [10122.641430][T23888] nfnetlink_rcv_batch+0xbc2/0x22d0 [10122.642363][T23888] nfnetlink_rcv+0x3d6/0x436 [10122.643352][T23888] netlink_unicast+0x4f0/0x82c [10122.644358][T23888] netlink_sendmsg+0x864/0xdc6 [10122.645220][T23888] __sock_sendmsg+0xcc/0x160 [10122.646052][T23888] ____sys_sendmsg+0x5ce/0x79e [10122.646945][T23888] ___sys_sendmsg+0x144/0x1e6 [10122.647789][T23888] __sys_sendmsg+0x188/0x22a [10122.648623][T23888] __riscv_sys_sendmsg+0x70/0xa2 [10122.649488][T23888] syscall_handler+0x94/0x118 [10122.650288][T23888] do_trap_ecall_u+0x1aa/0x216 [10122.651195][T23888] handle_exception+0x146/0x152 [10122.652131][T23888] [10122.652681][T23888] Freed by task 23182: [10122.653366][T23888] stack_trace_save+0xa0/0xd2 [10122.654362][T23888] kasan_save_stack+0x3e/0x6a [10122.655262][T23888] kasan_save_track+0x16/0x28 [10122.656049][T23888] kasan_save_free_info+0x40/0x5c [10122.656895][T23888] __kasan_slab_free+0x4e/0x68 [10122.657666][T23888] kfree+0x13e/0x508 [10122.658430][T23888] skb_free_head+0x22c/0x2e8 [10122.659259][T23888] pskb_expand_head+0x36c/0x108c [10122.660077][T23888] netlink_trim+0x1de/0x22e [10122.660862][T23888] netlink_unicast+0xec/0x82c [10122.662130][T23888] nlmsg_notify+0x1d0/0x22a [10122.663241][T23888] nfnetlink_send+0x5c/0x7a [10122.664045][T23888] nf_tables_commit+0x1f74/0x5e16 [10122.664991][T23888] nfnetlink_rcv_batch+0xbc2/0x22d0 [10122.666252][T23888] nfnetlink_rcv+0x3d6/0x436 [10122.667137][T23888] netlink_unicast+0x4f0/0x82c [10122.667975][T23888] netlink_sendmsg+0x864/0xdc6 [10122.668889][T23888] __sock_sendmsg+0xcc/0x160 [10122.669704][T23888] ____sys_sendmsg+0x5ce/0x79e [10122.670499][T23888] ___sys_sendmsg+0x144/0x1e6 [10122.671418][T23888] __sys_sendmsg+0x188/0x22a [10122.672245][T23888] __riscv_sys_sendmsg+0x70/0xa2 [10122.673118][T23888] syscall_handler+0x94/0x118 [10122.673947][T23888] do_trap_ecall_u+0x1aa/0x216 [10122.674934][T23888] handle_exception+0x146/0x152 [10122.676063][T23888] [10122.676678][T23888] The buggy address belongs to the object at ff60000030598000 [10122.676678][T23888] which belongs to the cache kmalloc-8k of size 8192 [10122.677950][T23888] The buggy address is located 6368 bytes inside of [10122.677950][T23888] freed 8192-byte region [ff60000030598000, ff6000003059a000) [10122.679137][T23888] [10122.679663][T23888] The buggy address belongs to the physical page: [10122.680747][T23888] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xff60000030598000 pfn:0xb0598 [10122.681933][T23888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [10122.682945][T23888] ksm flags: 0xffe000000000040(head|node=0|zone=0|lastcpupid=0x7ff) [10122.684258][T23888] page_type: f5(slab) [10122.685457][T23888] raw: 0ffe000000000040 ff60000011402280 ff1c000000644000 dead000000000003 [10122.686461][T23888] raw: ff60000030598000 0000000000020001 00000001f5000000 0000000000000000 [10122.687623][T23888] head: 0ffe000000000040 ff60000011402280 ff1c000000644000 dead000000000003 [10122.688586][T23888] head: ff60000030598000 0000000000020001 00000001f5000000 0000000000000000 [10122.689550][T23888] head: 0ffe000000000003 ff1c000000c16601 ffffffffffffffff 0000000000000000 [10122.690505][T23888] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [10122.691492][T23888] page dumped because: kasan: bad access detected [10122.692521][T23888] page_owner tracks the page as allocated [10122.693320][T23888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7525, tgid 7524 (syz.0.669), ts 1533617501800, free_ts 832105485500 [10122.695220][T23888] __set_page_owner+0xa2/0x70c [10122.696205][T23888] post_alloc_hook+0xf0/0x1e8 [10122.697038][T23888] get_page_from_freelist+0xdb0/0x2c0e [10122.698004][T23888] __alloc_pages_noprof+0x1e8/0x1fc2 [10122.698867][T23888] alloc_pages_mpol_noprof+0xf8/0x488 [10122.699699][T23888] alloc_pages_noprof+0x174/0x2f0 [10122.700507][T23888] new_slab+0x2b6/0x40e [10122.701291][T23888] ___slab_alloc+0x9c8/0x10e6 [10122.702105][T23888] __slab_alloc.constprop.0+0x60/0xb0 [10122.703291][T23888] __kmalloc_node_track_caller_noprof+0x1dc/0x5e8 [10122.704189][T23888] krealloc_noprof+0x13e/0x350 [10122.704920][T23888] copy_array.constprop.0+0x78/0xca [10122.705781][T23888] copy_verifier_state+0x7d2/0xc06 [10122.706580][T23888] push_stack+0x1a0/0x5b8 [10122.707330][T23888] check_cond_jmp_op+0xd3e/0x7ce4 [10122.708361][T23888] do_check_common+0x85ce/0xe516 [10122.709634][T23888] page last free pid 3829 tgid 3829 stack trace: [10122.710366][T23888] __reset_page_owner+0x8c/0x400 [10122.711257][T23888] free_unref_page+0x618/0x11d2 [10122.712067][T23888] __free_pages+0x13a/0x1ba [10122.712869][T23888] free_pages.part.0+0x268/0x4c6 [10122.713764][T23888] free_pages+0xe/0x18 [10122.714671][T23888] kasan_depopulate_vmalloc_pte+0x4a/0x70 [10122.715626][T23888] __apply_to_page_range+0x6a4/0x1230 [10122.716554][T23888] apply_to_existing_page_range+0x34/0x46 [10122.717442][T23888] kasan_release_vmalloc+0xc0/0xc6 [10122.718339][T23888] purge_vmap_node+0x21c/0x9d8 [10122.719221][T23888] process_one_work+0x968/0x1f38 [10122.720148][T23888] worker_thread+0x5be/0xdc6 [10122.721238][T23888] kthread+0x28c/0x3a4 [10122.721964][T23888] ret_from_fork+0xe/0x18 [10122.723197][T23888] [10122.723690][T23888] Memory state around the buggy address: [10122.724691][T23888] ff60000030599780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10122.725525][T23888] ff60000030599800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10122.726328][T23888] >ff60000030599880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10122.727146][T23888] ^ [10122.727970][T23888] ff60000030599900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10122.728800][T23888] ff60000030599980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10122.729721][T23888] ================================================================== [10123.051441][T23888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [10123.053040][T23888] CPU: 0 UID: 0 PID: 23888 Comm: syz.0.6490 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10123.054492][T23888] Hardware name: riscv-virtio,qemu (DT) [10123.055210][T23888] Call Trace: [10123.055929][T23888] [] dump_backtrace+0x2e/0x3c [10123.057448][T23888] [] show_stack+0x30/0x3c [10123.058500][T23888] [] dump_stack_lvl+0x110/0x1a6 [10123.059516][T23888] [] dump_stack+0x1c/0x24 [10123.060423][T23888] [] panic+0x38c/0x870 [10123.061463][T23888] [] check_panic_on_warn+0xc0/0xe4 [10123.062392][T23888] [] end_report.part.0+0x4e/0xae [10123.063325][T23888] [] kasan_report+0x102/0x118 [10123.064224][T23888] [] __asan_report_load4_noabort+0x12/0x1a [10123.065185][T23888] [] notifier_chain_register+0x528/0x61a [10123.066306][T23888] [] blocking_notifier_chain_register+0x80/0xc6 [10123.067281][T23888] [] register_reboot_notifier+0x22/0x2c [10123.068183][T23888] [] ubi_wl_init+0xd0a/0x15c2 [10123.069078][T23888] [] ubi_attach+0x15da/0x4f90 [10123.070304][T23888] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10123.071528][T23888] [] ctrl_cdev_ioctl+0x496/0x764 [10123.072395][T23888] [] __riscv_sys_ioctl+0x18e/0x1e2 [10123.073324][T23888] [] syscall_handler+0x94/0x118 [10123.074215][T23888] [] do_trap_ecall_u+0x1aa/0x216 [10123.075211][T23888] [] handle_exception+0x146/0x152 [10123.076468][T23888] SMP: stopping secondary CPUs [10123.079284][T23888] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:35:09 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff846b0c8c mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e5138 vstvec 0000000000000000 mepc ffffffff8051f4de sepc ffffffff84eadaea vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a1070000000c9b90 x0/zero 0000000000000000 x1/ra ffffffff846b0c8c x2/sp ff200000000059a0 x3/gp ffffffff899f64c0 x4/tp ff60000017ffb480 x5/t0 10b7313fa7688831 x6/t1 ff60000017ffc108 x7/t2 000000000000003e x8/s0 ff200000000059c0 x9/s1 0000001795778c86 x10/a0 00000000000170bc x11/a1 ff6000005cdd1cc0 x12/a2 00000000000f0000 x13/a3 ffffffff846b0c8c x14/a4 0000000000010000 x15/a5 ff60000017ffb480 x16/a6 00000000000f0000 x17/a7 ffffffff9715946a x18/s2 00000000000170bc x19/s3 0000000000000000 x20/s4 000000000000001e x21/s5 00000000009009cd x22/s6 ffebffff0b9b86bc x23/s7 0000000000000004 x24/s8 ff6000005cdc3580 x25/s9 ff6000005cdc35d4 x26/s10 7fffffffffffffff x27/s11 1fec00000b9b86ed x28/t3 ff60000017ffbfa0 x29/t4 1fec000002fff7f3 x30/t5 1fec000002fff825 x31/t6 0000000000000005 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802d7be6 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e5138 vstvec 0000000000000000 mepc ffffffff80083676 sepc ffffffff802a7090 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000008 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a1cdb000000bf362 x0/zero 0000000000000000 x1/ra ffffffff802d7be2 x2/sp ff200000043d7060 x3/gp ffffffff899f64c0 x4/tp ff6000002de4b480 x5/t0 2000000000000000 x6/t1 0000000000000048 x7/t2 2065726177647261 x8/s0 ff200000043d7200 x9/s1 ffffffff88863e40 x10/a0 0000000000000007 x11/a1 0000000000000000 x12/a2 0000000000080000 x13/a3 ffffffff802d7be2 x14/a4 ff20000007c43c68 x15/a5 00000000000c8c68 x16/a6 0000000000000003 x17/a7 0000000000000038 x18/s2 1ffffffff110c7d3 x19/s3 0000000200000020 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ff200000043d7120 x23/s7 ffffffff88863e98 x24/s8 1ffffffff110c7d4 x25/s9 ffffffff88863ea0 x26/s10 dfffffff00000000 x27/s11 ff200000043d7180 x28/t3 ffffffff90baecb7 x29/t4 ffffffff90baecb7 x30/t5 ffffffff90baecb8 x31/t6 ffffffff90baecb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000