last executing test programs: 1h13m6.042520312s ago: executing program 1 (id=3640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a4000000002"], 0xa8}}, 0x0) 1h13m4.191380088s ago: executing program 1 (id=3642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 1h12m58.888789088s ago: executing program 1 (id=3644): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xe, {"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", 0xffffffffffffff8b}}, 0x1006) 1h12m57.391413662s ago: executing program 1 (id=3645): r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000300)={0x0}) 1h12m54.644564855s ago: executing program 1 (id=3647): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1h12m52.46170273s ago: executing program 1 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1h12m4.961278357s ago: executing program 32 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 13.999382596s ago: executing program 2 (id=6412): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x81, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="f0", 0x1}], 0x1}}], 0x2, 0x4048884) 12.204261428s ago: executing program 2 (id=6414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a00010071756575650000001400028008000440000000100600034023fd06840900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 10.07361035s ago: executing program 2 (id=6415): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x5) 10.029028021s ago: executing program 0 (id=6419): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4}]}, 0x1c}}, 0x0) 8.802020026s ago: executing program 0 (id=6416): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240), &(0x7f0000000000)=ANY=[], 0x841, 0x1) 6.939856489s ago: executing program 0 (id=6417): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x11) 6.524765952s ago: executing program 2 (id=6418): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, r1, 0x0, '\x00', 0x2}) 5.315058837s ago: executing program 2 (id=6420): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 5.154263791s ago: executing program 0 (id=6421): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001c80)) 2.581334436s ago: executing program 2 (id=6422): syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 2.0822745s ago: executing program 0 (id=6423): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x0, 0x0, 0x0, 0x0, "f3b8236d527676691507f8a3ee9f72649195465cb31818be57d397c372b26a52fe5326feac3a4c09600ee55497d6a237b99bf0d56047a8cd315d0ea86ac8ede502442011ed140f142ae7c2ae056add2f5d743113b30c3c7229f4f029a7c7c33adba5d46f0577ff2ce1b316d8d94ee6de19f1f51a2328051808f9683c7990bfcdd1bcc663a7c52ec5"}, 0x98) read$snddsp(r0, &(0x7f0000000040)=""/151, 0x97) 0s ago: executing program 0 (id=6424): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) r1 = dup(r0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) kernel console output (not intermixed with test programs): ice number 121 using dummy_hcd [ 2677.923843][ T9124] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2677.926356][ T9124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.050754][ T9124] usb 1-1: config 0 descriptor?? [ 2679.125766][ T9312] usb 1-1: USB disconnect, device number 121 [ 2688.476008][ T829] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2688.746304][ T829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2688.747743][ T829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2688.778453][ T829] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2688.782871][ T829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2688.784941][ T829] usb 2-1: SerialNumber: syz [ 2690.323320][ T829] usb 2-1: skipping empty audio interface (v1) [ 2690.676184][ T829] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2690.805255][ T829] usb 2-1: USB disconnect, device number 121 [ 2694.216361][ T9124] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 2694.695064][ T9124] usb 1-1: config 127 has an invalid interface number: 218 but max is 0 [ 2694.697123][ T9124] usb 1-1: config 127 has no interface number 0 [ 2694.698841][ T9124] usb 1-1: config 127 interface 218 has no altsetting 0 [ 2694.863834][ T9124] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 2694.866521][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2694.868364][ T9124] usb 1-1: Product: syz [ 2694.869731][ T9124] usb 1-1: Manufacturer: syz [ 2694.870605][ T9124] usb 1-1: SerialNumber: syz [ 2695.709742][ T9124] etas_es58x 1-1:127.218: Starting syz syz (Serial Number syz) [ 2696.085597][ T9124] usb 1-1: USB disconnect, device number 122 [ 2703.444428][ T3788] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2704.222709][ T3788] usb 2-1: Using ep0 maxpacket: 16 [ 2704.534886][ T3788] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90 [ 2704.538268][ T3788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.724356][ T3788] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2704.727549][ T3788] r8152-cfgselector 2-1: config 0 descriptor?? [ 2704.886062][ T3788] r8152 2-1:0.0: Expected endpoints are not found [ 2705.724398][ T3788] r8152-cfgselector 2-1: USB disconnect, device number 122 [ 2717.901844][ T829] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 2718.239622][ T829] usb 1-1: not running at top speed; connect to a high speed hub [ 2718.276572][ T829] usb 1-1: config 3 has an invalid interface number: 213 but max is 0 [ 2718.278144][ T829] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2718.279635][ T829] usb 1-1: config 3 has no interface number 0 [ 2718.282161][ T829] usb 1-1: config 3 interface 213 has no altsetting 0 [ 2718.326937][ T829] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.18 [ 2718.328567][ T829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.330490][ T829] usb 1-1: Product: syz [ 2718.338561][ T829] usb 1-1: Manufacturer: syz [ 2718.339969][ T829] usb 1-1: SerialNumber: syz [ 2718.978702][ T829] usb 1-1: bad CDC descriptors [ 2719.066966][ T829] usb 1-1: USB disconnect, device number 123 [ 2731.113113][ T6000] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2731.332835][ T6000] usb 2-1: Using ep0 maxpacket: 8 [ 2731.406562][ T6000] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2731.407954][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2731.409202][ T6000] usb 2-1: config 0 has no interface number 0 [ 2731.423071][ T6000] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2731.424557][ T6000] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2731.425911][ T6000] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2731.427318][ T6000] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2731.760604][ T6000] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2731.781760][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.786613][ T6000] usb 2-1: Product: syz [ 2731.787663][ T6000] usb 2-1: Manufacturer: syz [ 2731.789424][ T6000] usb 2-1: SerialNumber: syz [ 2731.908196][ T6000] usb 2-1: config 0 descriptor?? [ 2732.020000][ T6000] iowarrior 2-1:0.186: no interrupt-out endpoint found [ 2733.382652][ T6000] usb 2-1: USB disconnect, device number 123 [ 2742.883642][ T3788] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 2743.174487][ T3788] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 2743.176109][ T3788] usb 1-1: config 0 has no interface number 0 [ 2743.177458][ T3788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=8b.f6 [ 2743.178689][ T3788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.267251][ T3788] usb 1-1: config 0 descriptor?? [ 2743.377950][ T3788] usbtest 1-1:0.94: Linux user mode ISO test driver [ 2743.379710][ T3788] usbtest 1-1:0.94: low-speed {control} tests [ 2744.280358][ T3788] usb 1-1: USB disconnect, device number 124 [ 2755.094921][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2755.416164][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2755.418881][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 2755.520259][ T9] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 2755.524960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.527129][ T9] usb 1-1: Product: syz [ 2755.528757][ T9] usb 1-1: Manufacturer: syz [ 2755.530534][ T9] usb 1-1: SerialNumber: syz [ 2755.687464][ T9] usb 1-1: config 0 descriptor?? [ 2755.765111][ T9] aircable 1-1:0.0: aircable converter detected [ 2755.845563][ T9] usb 1-1: aircable converter now attached to ttyUSB0 [ 2756.447113][ T9] usb 1-1: USB disconnect, device number 125 [ 2756.570217][ T9] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2756.597988][ T9] aircable 1-1:0.0: device disconnected [ 2760.246386][T10402] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2760.534731][T10402] usb 2-1: Using ep0 maxpacket: 32 [ 2760.913375][T10402] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2760.977803][T10402] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 2760.980300][T10402] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2760.986721][T10402] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2760.988039][T10402] usb 2-1: config 7 has no interface number 0 [ 2760.989709][T10402] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 2760.994619][T10402] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 2760.996029][T10402] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 2760.997404][T10402] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2760.999170][T10402] usb 2-1: config 7 interface 128 has no altsetting 0 [ 2761.123068][T10402] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2761.124503][T10402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.125603][T10402] usb 2-1: Product: syz [ 2761.126489][T10402] usb 2-1: Manufacturer: syz [ 2761.127498][T10402] usb 2-1: SerialNumber: syz [ 2761.277863][T10542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2763.054572][T10402] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2763.057303][T10402] usb 2-1: MIDIStreaming interface descriptor not found [ 2764.152976][T10402] usb 2-1: USB disconnect, device number 124 [ 2775.614351][ T3788] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 2776.979624][ T3788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 2776.982057][ T3788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2776.983464][ T3788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2779.884349][ T3788] usb 2-1: string descriptor 0 read error: -22 [ 2779.897440][ T3788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2779.899665][ T3788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.160920][T10588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2780.193023][T10588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2780.195219][T10588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2780.280441][ T3788] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2781.693421][T10593] usb 2-1: USB disconnect, device number 125 [ 2784.754308][T10593] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2784.943695][T10593] usb 1-1: Using ep0 maxpacket: 8 [ 2785.308416][T10593] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2785.310230][T10593] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 2785.312816][T10593] usb 1-1: config 0 has no interface number 0 [ 2785.314147][T10593] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2785.315649][T10593] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2785.317067][T10593] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2785.318477][T10593] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2785.319670][T10593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.405846][T10593] usb 1-1: config 0 descriptor?? [ 2786.323346][T10593] usb 1-1: USB disconnect, device number 126 [ 2789.342976][ T6000] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2789.666190][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 2789.762479][ T6000] usb 2-1: config 12 has an invalid interface number: 251 but max is 0 [ 2789.763838][ T6000] usb 2-1: config 12 has no interface number 0 [ 2789.769239][ T6000] usb 2-1: config 12 interface 251 has no altsetting 0 [ 2790.181518][ T6000] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1081, bcdDevice=3b.c8 [ 2790.183079][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.184454][ T6000] usb 2-1: Product: syz [ 2790.185364][ T6000] usb 2-1: Manufacturer: syz [ 2790.186306][ T6000] usb 2-1: SerialNumber: syz [ 2791.608693][ T6000] cdc_mbim 2-1:12.251: probe with driver cdc_mbim failed with error -71 [ 2791.803785][ T6000] usb 2-1: USB disconnect, device number 126 [ 2804.855483][ T6000] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2805.086409][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 2805.213261][ T6000] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2805.215680][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2805.217844][ T6000] usb 2-1: config 0 has no interface number 0 [ 2805.219893][ T6000] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2805.349109][ T6000] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2805.354796][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2805.357029][ T6000] usb 2-1: Product: syz [ 2805.358619][ T6000] usb 2-1: SerialNumber: syz [ 2805.489335][ T6000] usb 2-1: config 0 descriptor?? [ 2805.718597][ T6000] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2806.250338][ T6000] usb 2-1: USB disconnect, device number 127 [ 2813.474058][ T3788] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2813.898288][ T3788] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2813.910416][ T3788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2813.925292][ T3788] usb 1-1: Product: syz [ 2813.927168][ T3788] usb 1-1: Manufacturer: syz [ 2813.930084][ T3788] usb 1-1: SerialNumber: syz [ 2814.055650][ T3788] usb 1-1: config 0 descriptor?? [ 2814.809330][ T3788] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 2814.909659][ T3788] usb 1-1: USB disconnect, device number 127 [ 2815.096616][ T6000] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2815.398441][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2815.402978][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2815.405822][ T6000] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2815.409002][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.544882][ T6000] usb 2-1: config 0 descriptor?? [ 2816.003334][ T6000] usbhid 2-1:0.0: can't add hid device: -22 [ 2816.007918][ T6000] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 2816.479190][T10593] usb 2-1: USB disconnect, device number 2 [ 2824.610420][ T3788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2824.824282][ T3788] usb 2-1: Using ep0 maxpacket: 32 [ 2824.886942][ T3788] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2824.888697][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2824.890040][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2824.898625][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2824.979966][ T3788] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2824.983004][ T3788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.984445][ T3788] usb 2-1: Product: syz [ 2824.985499][ T3788] usb 2-1: Manufacturer: syz [ 2824.986471][ T3788] usb 2-1: SerialNumber: syz [ 2825.029373][ T3788] usb 2-1: config 0 descriptor?? [ 2825.789758][ T35] usb 2-1: USB disconnect, device number 3 [ 2832.689082][ T6000] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2832.924625][ T6000] usb 1-1: Using ep0 maxpacket: 32 [ 2833.108056][ T6000] usb 1-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice= 2.a4 [ 2833.110472][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.124038][ T6000] usb 1-1: Product: syz [ 2833.125881][ T6000] usb 1-1: Manufacturer: syz [ 2833.127488][ T6000] usb 1-1: SerialNumber: syz [ 2833.282997][ T6000] usb 1-1: config 0 descriptor?? [ 2833.407994][ T6000] cdc_acm 1-1:0.0: Zero length descriptor references [ 2833.410756][ T6000] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 2834.351424][ T6000] usb 1-1: USB disconnect, device number 2 [ 2847.332356][ T35] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2847.592047][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 2847.836102][ T35] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2847.838955][ T35] usb 2-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2847.842898][ T35] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2848.044319][ T35] usb 2-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 2848.046847][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2848.052623][ T35] usb 2-1: Product: syz [ 2848.054273][ T35] usb 2-1: Manufacturer: syz [ 2848.056291][ T35] usb 2-1: SerialNumber: syz [ 2848.237275][ T35] appletouch 2-1:1.0: Could not find int-in endpoint [ 2848.240112][ T35] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 2848.257443][ T35] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2849.250641][ T6000] usb 2-1: USB disconnect, device number 4 [ 2855.777274][T10774] tmpfs: Bad value for 'mpol' [ 2861.194786][T10647] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2861.424563][T10647] usb 2-1: Using ep0 maxpacket: 16 [ 2861.526982][T10647] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2861.539023][T10647] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2861.540471][T10647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2861.552565][T10647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2862.267942][T10647] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 2862.269615][T10647] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 2862.273336][T10647] usb 2-1: Product: syz [ 2862.274452][T10647] usb 2-1: Manufacturer: syz [ 2862.275441][T10647] usb 2-1: SerialNumber: syz [ 2862.389082][T10647] usb 2-1: config 0 descriptor?? [ 2862.425841][T10784] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2862.643458][T10647] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 2863.686491][T10647] imon:send_packet: packet tx failed (-71) [ 2863.704293][T10647] imon 2-1:0.0: panel buttons/knobs setup failed [ 2866.233306][T10647] rc_core: IR keymap rc-imon-pad not found [ 2866.235541][T10647] Registered IR keymap rc-empty [ 2866.238083][T10647] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2866.240663][T10647] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2866.498825][T10647] imon:send_packet: packet tx failed (-71) [ 2866.772582][T10647] imon 2-1:0.0: remote input dev register failed [ 2866.776258][T10647] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 2867.683404][T10647] imon 2-1:0.0: unable to initialize intf0, err 0 [ 2867.685623][T10647] imon:imon_probe: failed to initialize context! [ 2867.687393][T10647] imon 2-1:0.0: unable to register, err -19 [ 2867.784184][T10647] usb 2-1: USB disconnect, device number 5 [ 2870.434720][ T9124] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2870.636236][ T9124] usb 1-1: Using ep0 maxpacket: 16 [ 2870.942545][ T9124] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2870.944852][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.946681][ T9124] usb 1-1: Product: syz [ 2870.948118][ T9124] usb 1-1: Manufacturer: syz [ 2870.949564][ T9124] usb 1-1: SerialNumber: syz [ 2871.103124][ T9124] usb 1-1: config 0 descriptor?? [ 2871.313191][ T9124] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2871.659278][ T9124] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 2872.389356][T10647] usb 1-1: USB disconnect, device number 3 [ 2880.154330][T10593] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2880.400196][T10593] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 2880.407037][T10593] usb 2-1: config 0 has no interface number 0 [ 2880.408868][T10593] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 2880.410420][T10593] usb 2-1: config 0 interface 216 has no altsetting 0 [ 2880.413376][T10593] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 2880.414892][T10593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.512028][T10593] usb 2-1: config 0 descriptor?? [ 2880.540437][T10829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2880.595617][T10593] usb 2-1: NFC: intf ff6000002eda8000 id ffffffff88baca40 [ 2882.156541][ T9124] usb 2-1: USB disconnect, device number 6 [ 2888.327016][ T6033] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2888.562739][ T6033] usb 1-1: Using ep0 maxpacket: 32 [ 2888.774729][ T6033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2888.837529][ T6033] usb 1-1: config 2 has an invalid interface number: 233 but max is 0 [ 2888.839928][ T6033] usb 1-1: config 2 has no interface number 0 [ 2888.873451][ T6033] usb 1-1: config 2 interface 233 altsetting 64 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2888.877181][ T6033] usb 1-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 2888.879694][ T6033] usb 1-1: config 2 interface 233 has no altsetting 0 [ 2889.380428][ T6033] usb 1-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 2889.387526][ T6033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.389861][ T6033] usb 1-1: Product: syz [ 2889.405775][ T6033] usb 1-1: Manufacturer: syz [ 2889.409084][ T6033] usb 1-1: SerialNumber: syz [ 2892.379917][ T6033] usb 1-1: USB disconnect, device number 4 [ 2900.293636][ T9124] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2900.697593][ T9124] usb 2-1: Using ep0 maxpacket: 32 [ 2900.842426][ T9124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2900.843770][ T9124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2900.844893][ T9124] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2902.074831][ T9124] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2902.077374][ T9124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.079444][ T9124] usb 2-1: Product: syz [ 2902.132289][ T9124] usb 2-1: Manufacturer: syz [ 2902.134219][ T9124] usb 2-1: SerialNumber: syz [ 2902.504672][ T9124] usb 2-1: config 0 descriptor?? [ 2903.257604][ T9124] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 2903.293929][ T9124] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 2905.056332][ T9] usb 2-1: USB disconnect, device number 7 [ 2912.436813][T10889] futex_wake_op: syz.1.1418 tries to shift op by -1; fix this program [ 2919.193985][ T9124] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2919.198105][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 2919.473549][ T9124] usb 1-1: device descriptor read/64, error -32 [ 2919.876066][ T9124] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2920.073950][ T9124] usb 1-1: Using ep0 maxpacket: 16 [ 2920.133394][ T9124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2920.135823][ T9124] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2920.137986][ T9124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2920.139960][ T9124] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2920.238366][ T9124] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 2920.242219][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.243906][ T9124] usb 1-1: Product: syz [ 2920.245243][ T9124] usb 1-1: Manufacturer: syz [ 2920.246560][ T9124] usb 1-1: SerialNumber: syz [ 2920.346596][ T9124] usb 1-1: config 0 descriptor?? [ 2920.426934][ T9124] io_ti 1-1:0.0: required endpoints missing [ 2921.983786][T10647] usb 1-1: USB disconnect, device number 6 [ 2932.047403][ T9312] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2932.256693][ T9312] usb 1-1: Using ep0 maxpacket: 32 [ 2932.689160][ T9312] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 2932.694957][ T9312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2932.696947][ T9312] usb 1-1: Product: syz [ 2932.698443][ T9312] usb 1-1: Manufacturer: syz [ 2932.699918][ T9312] usb 1-1: SerialNumber: syz [ 2932.867788][ T9312] usb 1-1: config 0 descriptor?? [ 2933.039296][ T9312] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 2933.043689][ T9312] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 2933.632656][ T9] usb 1-1: USB disconnect, device number 7 [ 2946.385563][ T9347] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2946.621885][ T9347] usb 2-1: Using ep0 maxpacket: 32 [ 2946.675667][ T9347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2946.677561][ T9347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2946.859581][ T9347] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 2946.867916][ T9347] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2946.870091][ T9347] usb 2-1: Product: syz [ 2946.883445][ T9347] usb 2-1: SerialNumber: syz [ 2947.044442][ T9347] usb 2-1: config 0 descriptor?? [ 2948.204623][T10964] IPv6: addrconf: prefix option has invalid lifetime [ 2948.676563][ T9347] usb 2-1: USB disconnect, device number 8 [ 2958.463795][T10593] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2958.937368][T10593] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 2958.939925][T10593] usb 2-1: config 5 has no interface number 0 [ 2958.956178][T10593] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2958.962301][T10593] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2958.966017][T10593] usb 2-1: config 5 interface 123 has no altsetting 0 [ 2959.073297][T10593] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2959.076010][T10593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.104609][T10593] usb 2-1: Product: syz [ 2959.106717][T10593] usb 2-1: Manufacturer: syz [ 2959.108457][T10593] usb 2-1: SerialNumber: syz [ 2961.583997][T10593] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2961.907210][T10593] usb 2-1: USB disconnect, device number 9 [ 2963.955372][T10998] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 2963.958452][T10998] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 2994.549230][T11045] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 2994.947766][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1469'. [ 3006.886415][T11067] raw_sendmsg: syz.1.1479 forgot to set AF_INET. Fix it! [ 3022.682400][ T9124] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3023.006270][ T9124] usb 1-1: Using ep0 maxpacket: 8 [ 3023.035000][ T9124] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 3023.908297][ T9124] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 3023.910587][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3023.923373][ T9124] usb 1-1: Product: syz [ 3023.924920][ T9124] usb 1-1: Manufacturer: syz [ 3023.926435][ T9124] usb 1-1: SerialNumber: syz [ 3024.158430][ T9124] usb 1-1: config 0 descriptor?? [ 3024.327970][ T9124] usb 1-1: bad CDC descriptors [ 3026.828952][T10593] usb 1-1: USB disconnect, device number 8 [ 3069.456442][T11151] xt_CT: No such helper "syz0" [ 3078.398060][T11162] ipt_ECN: cannot use operation on non-tcp rule [ 3092.064637][ T9124] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3092.725625][ T9124] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 3092.727913][ T9124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3092.889692][ T9124] usb 1-1: config 0 descriptor?? [ 3093.398313][ T9124] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 3095.932512][ T3788] usb 1-1: USB disconnect, device number 9 [ 3104.028262][T11206] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 3122.790152][T11231] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 3131.380524][T11243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1549'. [ 3159.714579][T11281] mmap: syz.0.1568 (11281): VmData 29011968 exceed data ulimit 58. Update limits or use boot option ignore_rlimit_data. [ 3197.080513][T11333] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1592'. [ 3244.678196][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'. [ 3250.024888][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 3250.027145][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 3275.623769][T11421] tmpfs: Bad value for 'mpol' [ 3279.499639][T11425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3279.506975][T11425] IPv6: NLM_F_CREATE should be set when creating new route [ 3279.513272][T11425] IPv6: NLM_F_CREATE should be set when creating new route [ 3279.515999][T11425] IPv6: NLM_F_CREATE should be set when creating new route [ 3279.533230][T11427] sctp: [Deprecated]: syz.1.1634 (pid 11427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3279.533230][T11427] Use struct sctp_sack_info instead [ 3313.183191][T11470] netlink: 'syz.1.1654': attribute type 5 has an invalid length. [ 3318.755473][T11476] netlink: 'syz.1.1658': attribute type 22 has an invalid length. [ 3318.762264][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 3321.475229][T11480] dlm: no locking on control device [ 3339.094050][T11498] sctp: [Deprecated]: syz.1.1668 (pid 11498) Use of int in maxseg socket option. [ 3339.094050][T11498] Use struct sctp_assoc_value instead [ 3359.847630][T11524] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3424.698979][T11597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3427.438622][ T34] audit: type=1400 audit(7522.075:8): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=22090EA3680EB06A1A5FD3F7614E16D41267A0590DD509A5EFFE069BBBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07E pid=11598 comm="syz.0.1719" [ 3442.184347][T11619] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1724'. [ 3443.867375][T11621] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 3443.875529][T11621] xt_SECMARK: invalid mode: 0 [ 3459.635060][T11639] netlink: 'syz.0.1734': attribute type 21 has an invalid length. [ 3459.636712][T11639] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1734'. [ 3459.638526][T11639] netlink: 'syz.0.1734': attribute type 5 has an invalid length. [ 3459.639563][T11639] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1734'. [ 3463.059311][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3470.948272][T11659] tmpfs: Bad value for 'mpol' [ 3475.399594][T11663] usb usb1: usbfs: process 11663 (syz.0.1742) did not claim interface 0 before use [ 3519.718881][T11716] netlink: 'syz.1.1767': attribute type 15 has an invalid length. [ 3542.123429][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 3553.018994][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 3559.999577][T11795] IPv6: NLM_F_CREATE should be specified when creating new route [ 3565.486464][T11802] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1792'. [ 3593.568952][ T9347] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 3594.514039][ T9347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3594.517055][ T9347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3594.519929][ T9347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 3594.526467][ T9347] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3594.528743][ T9347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3594.818538][T11867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3594.917835][ T9347] hub 1-1:1.0: bad descriptor, ignoring hub [ 3594.920742][ T9347] hub 1-1:1.0: probe with driver hub failed with error -5 [ 3594.943906][ T9347] cdc_wdm 1-1:1.0: skipping garbage [ 3594.945856][ T9347] cdc_wdm 1-1:1.0: skipping garbage [ 3595.069628][ T9347] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3597.876874][T10402] usb 1-1: USB disconnect, device number 10 [ 3610.640031][T11904] tmpfs: Bad value for 'nr_inodes' [ 3613.599839][T11908] xt_NFQUEUE: number of queues (65535) out of range (got 129383) [ 3646.415884][T11955] binder: 11954:11955 ioctl 400c620e 0 returned -14 [ 3673.237693][T11997] tmpfs: Bad value for 'mpol' [ 3678.393170][T12004] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 3737.643644][T12072] netlink: 'syz.0.1890': attribute type 21 has an invalid length. [ 3737.650233][T12072] IPv6: NLM_F_CREATE should be specified when creating new route [ 3746.245287][ T34] audit: type=1326 audit(7840.885:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.0.1895" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 3746.752975][ T34] audit: type=1326 audit(7841.385:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.0.1895" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdb5be code=0x0 [ 3749.045860][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 3775.418898][T12108] xt_policy: neither incoming nor outgoing policy selected [ 3787.202304][T12120] trusted_key: encrypted_key: master key parameter is missing [ 3800.903396][ C1] vkms_vblank_simulate: vblank timer overrun [ 3851.707668][T12219] lo speed is unknown, defaulting to 1000 [ 3851.718140][T12219] lo speed is unknown, defaulting to 1000 [ 3851.763650][T12219] lo speed is unknown, defaulting to 1000 [ 3851.863074][T12219] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3851.965724][T12219] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 3852.433159][T12219] lo speed is unknown, defaulting to 1000 [ 3852.459856][T12219] lo speed is unknown, defaulting to 1000 [ 3905.368589][T12298] tmpfs: Bad value for 'mpol' [ 3907.560458][T12300] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 3957.389620][T12380] tmpfs: Bad value for 'mpol' [ 3963.136992][T12390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3967.218347][T12396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2035'. [ 3970.836280][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 3984.553531][T12422] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2047' sets config #1 [ 3987.864142][T12430] netlink: 'syz.0.2050': attribute type 11 has an invalid length. [ 3987.865761][T12430] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2050'. [ 4002.418484][T12450] tmpfs: Bad value for 'mpol' [ 4004.399753][T12452] netlink: 'syz.0.2062': attribute type 3 has an invalid length. [ 4020.099323][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 4034.386163][T12493] netlink: 'syz.1.2081': attribute type 5 has an invalid length. [ 4034.388463][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 4037.536441][T12497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2083'. [ 4083.546093][T12562] xt_limit: Overflow, try lower: 65536/2147483648 [ 4085.759249][T12564] kernel profiling enabled (shift: 63) [ 4085.768259][T12564] profiling shift: 63 too large [ 4105.722542][T12602] netlink: 2756 bytes leftover after parsing attributes in process `syz.0.2133'. [ 4105.724198][T12602] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.2133'. [ 4105.728332][T12602] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.2133'. [ 4110.438725][T12610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2137'. [ 4119.807590][ T9312] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 4120.054204][ T9312] usb 1-1: Using ep0 maxpacket: 8 [ 4120.762810][ T9312] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 4120.764597][ T9312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4120.766105][ T9312] usb 1-1: config 0 has no interface number 0 [ 4120.767440][ T9312] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 4120.768814][ T9312] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 4120.770065][ T9312] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4120.780414][ T9312] usb 1-1: config 0 interface 52 has no altsetting 0 [ 4120.930114][ T9312] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 4120.932885][ T9312] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 4120.934240][ T9312] usb 1-1: Product: syz [ 4120.935174][ T9312] usb 1-1: Manufacturer: syz [ 4120.936535][ T9312] usb 1-1: SerialNumber: syz [ 4121.047048][ T9312] usb 1-1: config 0 descriptor?? [ 4122.296521][ T9312] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 4122.314029][ T9312] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 4123.128004][ T35] usb 1-1: USB disconnect, device number 11 [ 4138.296539][T12651] netlink: 'syz.0.2150': attribute type 2 has an invalid length. [ 4138.298617][T12651] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 4161.092838][T12682] xt_CT: No such helper "pptp" [ 4161.913537][T12687] bpf: Bad value for 'gid' [ 4187.325102][T12733] xt_connbytes: Forcing CT accounting to be enabled [ 4192.962724][T12738] [U] [ 4192.965499][T12738] [U] [ 4192.966709][T12738] [U] [ 4192.967823][T12738] [U] [ 4192.986533][T12738] [U] [ 4192.988150][T12738] [U] [ 4192.989494][T12738] [U] [ 4192.990862][T12738] [U] [ 4193.077949][T12738] [U] [ 4193.079675][T12738] [U] [ 4193.081001][T12738] [U] [ 4193.168399][T12737] [U] [ 4197.704550][T12750] usb usb2: usbfs: process 12750 (syz.1.2195) did not claim interface 0 before use [ 4201.735549][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 4201.736314][T12759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2198'. [ 4215.619893][T12787] Device name cannot be null; rc = [-22] [ 4218.215669][T12791] geneve4: entered promiscuous mode [ 4258.786541][T12870] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 4266.743403][T12919] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 4275.745896][T12939] tmpfs: Bad value for 'mpol' [ 4280.717273][T12947] geneve4: entered promiscuous mode [ 4299.459330][T12990] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2287'. [ 4304.490292][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2292'. [ 4312.349417][T13014] xt_NFQUEUE: number of total queues is 0 [ 4322.660200][ T9124] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 4322.893224][ T9124] usb 1-1: Using ep0 maxpacket: 8 [ 4323.026214][ T9124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4323.030047][ T9124] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 4323.164045][ T9124] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4323.175339][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4323.177407][ T9124] usb 1-1: Product: syz [ 4323.189154][ T9124] usb 1-1: Manufacturer: syz [ 4323.208903][ T9124] usb 1-1: SerialNumber: syz [ 4324.869914][ T9124] usb 1-1: cannot find UAC_HEADER [ 4325.207313][T13049] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 4325.470634][ T9124] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 4325.638583][ T9124] usb 1-1: USB disconnect, device number 12 [ 4330.178089][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2312'. [ 4334.322452][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 4337.846111][T13075] xt_TCPMSS: Only works on TCP SYN packets [ 4345.497991][T13091] dlm: Unknown command passed to DLM device : 0 [ 4345.497991][T13091] [ 4359.413704][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 4359.417578][T13123] lo speed is unknown, defaulting to 1000 [ 4369.604937][T13149] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 4376.264492][T13192] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 4377.522426][T13194] netlink: 'syz.1.2361': attribute type 11 has an invalid length. [ 4377.523992][T13194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2361'. [ 4383.457809][T13209] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 4394.383788][T13229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2378'. [ 4403.097407][T13243] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 4420.533071][T13281] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 4421.619558][ T34] audit: type=1107 audit(8516.245:11): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 4423.076299][T13287] netlink: 'syz.1.2407': attribute type 13 has an invalid length. [ 4423.083279][T13287] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2407'. [ 4423.117659][T13287] syz_tun: refused to change device tx_queue_len [ 4423.119626][T13287] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 4431.908343][T13341] xt_NFQUEUE: number of total queues is 0 [ 4470.045988][T13400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4471.399398][T13404] netlink: 'syz.0.2447': attribute type 21 has an invalid length. [ 4471.404991][T13404] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2447'. [ 4472.863294][T13407] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2449'. [ 4484.582701][T13424] dvmrp1: entered allmulticast mode [ 4492.999706][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 4504.809138][T13452] netlink: 'syz.0.2470': attribute type 13 has an invalid length. [ 4504.810399][T13452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2470'. [ 4504.846779][T13452] syz_tun: refused to change device tx_queue_len [ 4504.848018][T13452] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 4518.764425][T13468] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 49161 - 0 [ 4518.766110][T13468] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 49161 - 0 [ 4518.767724][T13468] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 49161 - 0 [ 4518.769090][T13468] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 49161 - 0 [ 4518.877085][T13468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4518.929394][T13468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 4519.216454][T13475] xt_TCPMSS: Only works on TCP SYN packets [ 4523.236933][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2484'. [ 4538.934748][T13507] netlink: 'syz.0.2494': attribute type 21 has an invalid length. [ 4544.816342][T13515] bond0: Error: Cannot enslave bond to itself. [ 4548.150077][T12228] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 4548.555060][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 4548.557448][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 4548.559626][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 4548.583131][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 4549.123957][T12228] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 4549.126387][T12228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4549.128504][T12228] usb 2-1: Product: syz [ 4549.137360][T12228] usb 2-1: Manufacturer: syz [ 4549.138997][T12228] usb 2-1: SerialNumber: syz [ 4549.257069][T12228] usb 2-1: config 0 descriptor?? [ 4551.234227][T12228] adutux 2-1:0.0: Could not retrieve serial number [ 4551.237850][T12228] adutux 2-1:0.0: probe with driver adutux failed with error -5 [ 4551.520143][T12228] usb 2-1: USB disconnect, device number 10 [ 4581.248944][T13605] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 4581.250317][T13605] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2520'. [ 4586.126597][T13611] xt_policy: too many policy elements [ 4592.613045][ T9347] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 4592.874412][ T9347] usb 2-1: Using ep0 maxpacket: 16 [ 4593.147048][ T9347] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 4593.149638][ T9347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4593.156566][ T9347] usb 2-1: Product: syz [ 4593.158803][ T9347] usb 2-1: Manufacturer: syz [ 4593.160515][ T9347] usb 2-1: SerialNumber: syz [ 4593.356225][ T9347] usb 2-1: config 0 descriptor?? [ 4593.477018][ T9347] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 4594.147138][ T9347] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 4594.149879][ T9347] visor 2-1:0.0: probe with driver visor failed with error -5 [ 4595.259533][ T9347] usb 2-1: USB disconnect, device number 11 [ 4599.526974][T13641] binder: 13640:13641 ioctl c0306201 20000180 returned -22 [ 4606.754388][T13650] netlink: 'syz.1.2535': attribute type 2 has an invalid length. [ 4625.302045][T13682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2550'. [ 4654.979983][T13730] autofs4:pid:13730:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 4654.983438][T13730] autofs4:pid:13730:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 4660.287183][T13738] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2576'. [ 4670.557605][T13754] netlink: 'syz.0.2582': attribute type 12 has an invalid length. [ 4672.286469][T13587] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 4672.508516][T13587] usb 2-1: Using ep0 maxpacket: 32 [ 4672.627141][T13587] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 4672.629646][T13587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4672.652765][T13587] usb 2-1: Product: syz [ 4672.653914][T13587] usb 2-1: Manufacturer: syz [ 4672.654882][T13587] usb 2-1: SerialNumber: syz [ 4672.715235][T13587] usb 2-1: config 0 descriptor?? [ 4674.292045][T13587] rtl8150 2-1:0.0: couldn't reset the device [ 4674.296354][T13587] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 4674.364301][T13587] usb 2-1: USB disconnect, device number 12 [ 4675.047449][ T34] audit: type=1400 audit(8769.685:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13772 comm="syz.0.2586" [ 4689.447770][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 4711.574948][T13825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4749.095220][T13892] tmpfs: Bad value for 'mpol' [ 4762.388086][T13913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'. [ 4768.753044][T13927] nftables ruleset with unbound chain [ 4773.592554][ T34] audit: type=1326 audit(8868.225:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.1.2668" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 4775.963531][T11886] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 4776.239609][T11886] usb 1-1: Using ep0 maxpacket: 16 [ 4776.444226][T11886] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 4776.449287][T11886] usb 1-1: config 0 has no interface number 0 [ 4776.460003][T11886] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 4776.584101][T11886] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 4776.585585][T11886] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 4776.586880][T11886] usb 1-1: Product: syz [ 4776.588007][T11886] usb 1-1: SerialNumber: syz [ 4776.664347][T11886] usb 1-1: config 0 descriptor?? [ 4776.838333][T11886] cm109 1-1:0.8: invalid payload size 239, expected 4 [ 4776.861533][T11886] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input29 [ 4779.896199][T13953] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 4781.021780][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 4781.026579][ C1] cm109_urb_ctl_callback: 3 callbacks suppressed [ 4781.027052][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.032189][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.035053][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.038306][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.042102][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.046742][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.049806][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 4781.052417][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 4781.063367][ T9312] usb 1-1: USB disconnect, device number 13 [ 4781.100118][ T9312] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 4785.958290][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 4785.959719][T13969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2673'. [ 4785.977610][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 4785.989992][T13969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2673'. [ 4786.004064][T13969] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2673'. [ 4828.490371][T14049] xt_SECMARK: invalid mode: 0 [ 4834.613000][T14061] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 4834.615207][T14061] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 4864.534864][T14113] lo speed is unknown, defaulting to 1000 [ 4864.722603][T14113] lo speed is unknown, defaulting to 1000 [ 4864.748813][T14113] lo speed is unknown, defaulting to 1000 [ 4870.870064][T10402] lo speed is unknown, defaulting to 1000 [ 4870.879814][T14113] infiniband syz2: set active [ 4870.898078][T14113] infiniband syz2: added lo [ 4870.978321][T14113] syz2: rxe_create_cq: returned err = -12 [ 4870.984994][T14113] infiniband syz2: Couldn't create ib_mad CQ [ 4871.010317][T14113] infiniband syz2: Couldn't open port 1 [ 4871.907844][T14113] RDS/IB: syz2: added [ 4871.963269][T14113] smc: adding ib device syz2 with port count 1 [ 4871.966434][T14113] smc: ib device syz2 port 1 has pnetid [ 4871.970447][T13587] lo speed is unknown, defaulting to 1000 [ 4872.017685][T14113] lo speed is unknown, defaulting to 1000 [ 4875.625363][T14113] lo speed is unknown, defaulting to 1000 [ 4880.684069][T12228] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 4880.889886][T12228] usb 1-1: Using ep0 maxpacket: 32 [ 4880.999680][T12228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 4881.015420][T12228] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 4881.175292][T12228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 4881.178213][T12228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4881.180385][T12228] usb 1-1: Product: syz [ 4881.206683][T12228] usb 1-1: Manufacturer: syz [ 4881.208652][T12228] usb 1-1: SerialNumber: syz [ 4882.983254][T12228] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 4883.664287][T12228] usb 1-1: USB disconnect, device number 14 [ 4884.042616][T12228] usblp0: removed [ 4904.699945][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2750'. [ 4905.716648][T14182] netlink: 'syz.0.2751': attribute type 5 has an invalid length. [ 4951.353008][T14266] sit0: entered promiscuous mode [ 4951.493132][T14266] netlink: 'syz.0.2789': attribute type 1 has an invalid length. [ 4951.499750][T14266] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2789'. [ 4955.016623][T14272] netlink: 'syz.1.2792': attribute type 21 has an invalid length. [ 4955.019696][T14272] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2792'. [ 4958.829054][T14280] netlink: 'syz.0.2796': attribute type 3 has an invalid length. [ 4958.830615][T14280] tc_dump_action: action bad kind [ 4980.194843][T14316] syz.1.2813 (14316): drop_caches: 0 [ 4995.267005][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 4999.168162][T14342] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 5008.158706][T14359] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 5022.431541][T14393] tmpfs: Bad value for 'mpol' [ 5031.454388][T14409] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 5031.458070][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 5033.530222][T14413] netlink: 'syz.0.2859': attribute type 32 has an invalid length. [ 5052.456046][T14448] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 5054.226024][T14454] xt_HMARK: proto mask must be zero with L3 mode [ 5055.785659][T14458] Driver unsupported XDP return value 0 on prog (id 256) dev N/A, expect packet loss! [ 5056.917816][T14460] tmpfs: Bad value for 'huge' [ 5064.469753][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 5064.484077][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 5066.724363][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 5069.085572][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 5080.762853][ T34] audit: type=1400 audit(9175.395:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=14512 comm="syz.0.2903" [ 5089.897926][T14530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2911'. [ 5097.568539][T14544] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2919'. [ 5105.886627][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'. [ 5117.474153][T14571] tmpfs: Bad value for 'mpol' [ 5128.626716][T14594] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2944'. [ 5146.922776][T14626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5155.975935][T14645] capability: warning: `syz.0.2965' uses 32-bit capabilities (legacy support in use) [ 5159.006549][ T34] audit: type=1326 audit(9253.625:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2968" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 5159.008825][ T34] audit: type=1326 audit(9253.625:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2968" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 5159.109427][ T34] audit: type=1326 audit(9253.745:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2968" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb5be code=0x7ffc0000 [ 5159.279127][ T34] audit: type=1326 audit(9253.885:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2968" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 5159.298232][ T34] audit: type=1326 audit(9253.935:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2968" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 5192.383259][T13587] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 5192.734474][T13587] usb 2-1: Using ep0 maxpacket: 32 [ 5192.907014][T13587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5192.909673][T13587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5192.937970][T13587] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 5192.940589][T13587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5193.140634][T13587] usb 2-1: config 0 descriptor?? [ 5193.315963][T13587] hub 2-1:0.0: USB hub found [ 5193.823068][T13587] hub 2-1:0.0: 1 port detected [ 5194.203406][T13587] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 5194.207280][T13587] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 5194.596626][T13587] usbhid 2-1:0.0: can't add hid device: -71 [ 5194.624955][T13587] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 5194.862608][T13587] usb 2-1: USB disconnect, device number 13 [ 5203.083185][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 5212.704744][T14758] xt_cgroup: invalid path, errno=-2 [ 5219.932702][T14767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5232.730246][T14786] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3023'. [ 5232.763432][T14786] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3023'. [ 5240.164240][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 5243.005496][ T9312] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 5243.363235][ T9312] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 5243.364690][ T9312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5243.365784][ T9312] usb 2-1: Product: syz [ 5243.366660][ T9312] usb 2-1: Manufacturer: syz [ 5243.367550][ T9312] usb 2-1: SerialNumber: syz [ 5243.446312][ T9312] usb 2-1: config 0 descriptor?? [ 5244.185624][ T9312] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 5244.562154][T10402] usb 2-1: USB disconnect, device number 14 [ 5252.157195][T14829] netlink: 'syz.1.3039': attribute type 8 has an invalid length. [ 5258.177336][T14837] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3044'. [ 5274.147229][T14863] netlink: 'syz.0.3055': attribute type 13 has an invalid length. [ 5279.704714][ T9312] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 5279.935430][ T9312] usb 2-1: Using ep0 maxpacket: 16 [ 5280.125439][ T9312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5280.137653][ T9312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5280.139963][ T9312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 5280.151905][ T9312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 5280.154236][ T9312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 5280.156100][ T9312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 5280.158114][ T9312] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 5280.203567][ T9312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 5280.205830][ T9312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 5280.207594][ T9312] usb 2-1: SerialNumber: syz [ 5280.526370][ T9312] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 5280.545664][ T9312] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 5281.652914][ T9312] usb 2-1: USB disconnect, device number 15 [ 5302.507083][ T9312] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 5302.859286][ T9312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5302.869392][ T9312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 5302.974964][ T9312] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 5302.977243][ T9312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5302.979021][ T9312] usb 2-1: SerialNumber: syz [ 5304.314524][ T9312] usb 2-1: 0:2 : does not exist [ 5304.700573][ T9312] usb 2-1: USB disconnect, device number 16 [ 5315.558084][T14940] lo: entered promiscuous mode [ 5315.559563][T14940] lo: entered allmulticast mode [ 5315.663016][T14940] tunl0: entered promiscuous mode [ 5315.666335][T14940] tunl0: entered allmulticast mode [ 5315.799689][T14940] gre0: entered promiscuous mode [ 5315.806622][T14940] gre0: entered allmulticast mode [ 5317.154787][T14940] gretap0: entered promiscuous mode [ 5317.156240][T14940] gretap0: entered allmulticast mode [ 5317.898827][T14940] erspan0: entered promiscuous mode [ 5317.913101][T14940] erspan0: entered allmulticast mode [ 5318.857414][T14940] ip_vti0: entered promiscuous mode [ 5318.859430][T14940] ip_vti0: entered allmulticast mode [ 5319.125776][T14940] ip6_vti0: entered promiscuous mode [ 5319.127784][T14940] ip6_vti0: entered allmulticast mode [ 5319.366807][T14940] sit0: entered promiscuous mode [ 5319.368841][T14940] sit0: entered allmulticast mode [ 5319.945041][T14940] ip6tnl0: entered promiscuous mode [ 5319.947034][T14940] ip6tnl0: entered allmulticast mode [ 5320.099861][T14942] netlink: 'syz.0.3077': attribute type 16 has an invalid length. [ 5320.114563][T14942] netlink: 'syz.0.3077': attribute type 3 has an invalid length. [ 5320.116662][T14942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3077'. [ 5320.636568][T14940] ip6gre0: entered promiscuous mode [ 5320.638632][T14940] ip6gre0: entered allmulticast mode [ 5321.585296][T14940] syz_tun: entered promiscuous mode [ 5321.587318][T14940] syz_tun: entered allmulticast mode [ 5322.294733][T14940] ip6gretap0: entered promiscuous mode [ 5322.295929][T14940] ip6gretap0: entered allmulticast mode [ 5322.745714][T14940] vcan0: entered promiscuous mode [ 5322.747062][T14940] vcan0: entered allmulticast mode [ 5323.119699][T14940] bond0: entered promiscuous mode [ 5323.124294][T14940] bond_slave_0: entered promiscuous mode [ 5323.127294][T14940] bond_slave_1: entered promiscuous mode [ 5323.129445][T14940] bond0: entered allmulticast mode [ 5323.130468][T14940] bond_slave_0: entered allmulticast mode [ 5323.148558][T14940] bond_slave_1: entered allmulticast mode [ 5323.312303][T14940] dummy0: entered promiscuous mode [ 5323.313533][T14940] dummy0: entered allmulticast mode [ 5323.595564][T14940] nlmon0: entered promiscuous mode [ 5323.597717][T14940] nlmon0: entered allmulticast mode [ 5323.785170][T14940] vxcan0: entered promiscuous mode [ 5323.787618][T14940] vxcan0: entered allmulticast mode [ 5323.871709][T14940] vxcan1: entered promiscuous mode [ 5323.873797][T14940] vxcan1: entered allmulticast mode [ 5324.075701][T14940] veth0: entered promiscuous mode [ 5324.077829][T14940] veth0: entered allmulticast mode [ 5324.767770][T14940] veth1: entered promiscuous mode [ 5324.778873][T14940] veth1: entered allmulticast mode [ 5325.545144][T14940] wg0: entered promiscuous mode [ 5325.548081][T14940] wg0: entered allmulticast mode [ 5325.716583][T14940] wg1: entered promiscuous mode [ 5325.717814][T14940] wg1: entered allmulticast mode [ 5326.297809][T14940] wg2: entered promiscuous mode [ 5326.300026][T14940] wg2: entered allmulticast mode [ 5326.543554][T14940] veth0_to_bridge: entered promiscuous mode [ 5326.551791][T14940] veth0_to_bridge: entered allmulticast mode [ 5326.724713][T14940] bridge_slave_0: entered promiscuous mode [ 5326.726142][T14940] bridge_slave_0: entered allmulticast mode [ 5326.988059][T14940] veth1_to_bridge: entered promiscuous mode [ 5326.989376][T14940] veth1_to_bridge: entered allmulticast mode [ 5327.329190][T14940] bridge_slave_1: entered promiscuous mode [ 5327.330592][T14940] bridge_slave_1: entered allmulticast mode [ 5327.432589][T14940] veth0_to_bond: entered promiscuous mode [ 5327.433857][T14940] veth0_to_bond: entered allmulticast mode [ 5327.678407][T14940] veth1_to_bond: entered promiscuous mode [ 5327.679768][T14940] veth1_to_bond: entered allmulticast mode [ 5327.955855][T14940] veth0_to_team: entered promiscuous mode [ 5327.957565][T14940] veth0_to_team: entered allmulticast mode [ 5328.107485][T14940] team_slave_0: entered promiscuous mode [ 5328.108985][T14940] team_slave_0: entered allmulticast mode [ 5328.259369][T14940] veth1_to_team: entered promiscuous mode [ 5328.260666][T14940] veth1_to_team: entered allmulticast mode [ 5328.589268][T14940] team_slave_1: entered promiscuous mode [ 5328.602267][T14940] team_slave_1: entered allmulticast mode [ 5328.743721][T14940] veth0_to_batadv: entered promiscuous mode [ 5328.745950][T14940] veth0_to_batadv: entered allmulticast mode [ 5329.030335][T14940] batadv_slave_0: entered promiscuous mode [ 5329.036497][T14940] batadv_slave_0: entered allmulticast mode [ 5329.779207][T14940] veth1_to_batadv: entered promiscuous mode [ 5329.786294][T14940] veth1_to_batadv: entered allmulticast mode [ 5329.997814][T14940] batadv_slave_1: entered promiscuous mode [ 5330.015737][T14940] batadv_slave_1: entered allmulticast mode [ 5330.198520][T14940] xfrm0: entered promiscuous mode [ 5330.199755][T14940] xfrm0: entered allmulticast mode [ 5330.469130][T14940] veth0_to_hsr: entered promiscuous mode [ 5330.474050][T14940] veth0_to_hsr: entered allmulticast mode [ 5330.786381][T14940] hsr_slave_0: entered allmulticast mode [ 5331.128861][T14940] veth1_to_hsr: entered promiscuous mode [ 5331.152398][T14940] veth1_to_hsr: entered allmulticast mode [ 5331.639713][T14940] hsr_slave_1: entered allmulticast mode [ 5331.915086][T14940] hsr0: entered promiscuous mode [ 5331.917542][T14940] hsr0: entered allmulticast mode [ 5332.327644][T14940] veth1_virt_wifi: entered promiscuous mode [ 5332.330365][T14940] veth1_virt_wifi: entered allmulticast mode [ 5332.867380][T14940] veth0_virt_wifi: entered promiscuous mode [ 5332.869696][T14940] veth0_virt_wifi: entered allmulticast mode [ 5333.227768][T14940] veth1_vlan: entered allmulticast mode [ 5333.580180][T14940] veth0_vlan: entered allmulticast mode [ 5334.370715][T14940] vlan0: entered promiscuous mode [ 5334.385254][T14940] vlan0: entered allmulticast mode [ 5334.390416][T14940] vlan1: entered promiscuous mode [ 5334.399368][T14940] vlan1: entered allmulticast mode [ 5334.500247][T14940] macvlan0: entered promiscuous mode [ 5334.520104][T14940] macvlan0: entered allmulticast mode [ 5334.783073][T14940] macvlan1: entered promiscuous mode [ 5334.785275][T14940] macvlan1: entered allmulticast mode [ 5335.094044][T14940] ipvlan0: entered promiscuous mode [ 5335.096327][T14940] ipvlan0: entered allmulticast mode [ 5335.313389][T14940] ipvlan1: entered promiscuous mode [ 5335.315230][T14940] ipvlan1: entered allmulticast mode [ 5335.567566][T14940] veth1_macvtap: entered allmulticast mode [ 5335.836502][T14940] veth0_macvtap: entered allmulticast mode [ 5335.983033][T14940] macvtap0: entered promiscuous mode [ 5335.984244][T14940] macvtap0: entered allmulticast mode [ 5336.135340][T14940] macsec0: entered promiscuous mode [ 5336.136595][T14940] macsec0: entered allmulticast mode [ 5336.504380][T14940] geneve1: entered promiscuous mode [ 5336.505539][T14940] geneve1: entered allmulticast mode [ 5336.699638][T14940] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 5336.705032][T14940] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 5336.847110][T14940] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 5336.848405][T14940] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 5337.078690][T14940] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 5337.102367][T14940] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 5337.243022][T14940] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 5337.245246][T14940] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 5337.456289][T14940] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5337.458881][T14940] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5337.483567][T14940] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5337.486607][T14940] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5337.575215][T14940] geneve2: entered promiscuous mode [ 5337.577272][T14940] geneve2: entered allmulticast mode [ 5337.758900][T14940] erspan1: entered promiscuous mode [ 5337.760182][T14940] erspan1: entered allmulticast mode [ 5337.887428][T14940] veth2: entered promiscuous mode [ 5337.888613][T14940] veth2: entered allmulticast mode [ 5338.007676][T14940] veth3: entered promiscuous mode [ 5338.008995][T14940] veth3: entered allmulticast mode [ 5338.127808][T14940] gretap1: entered promiscuous mode [ 5338.131508][T14940] gretap1: entered allmulticast mode [ 5338.235819][T14940] erspan2: entered promiscuous mode [ 5338.238051][T14940] erspan2: entered allmulticast mode [ 5338.387245][T14940] vti0: entered promiscuous mode [ 5338.388448][T14940] vti0: entered allmulticast mode [ 5338.750069][T14940] wireguard0: entered promiscuous mode [ 5338.754084][T14940] wireguard0: entered allmulticast mode [ 5338.890578][T14940] gre1: entered promiscuous mode [ 5338.903120][T14940] gre1: entered allmulticast mode [ 5339.137863][T14940] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 49161 - 0 [ 5339.140499][T14940] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 49161 - 0 [ 5339.186794][T14940] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 49161 - 0 [ 5339.189179][T14940] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 49161 - 0 [ 5339.215040][T14940] geneve3: entered promiscuous mode [ 5339.217134][T14940] geneve3: entered allmulticast mode [ 5339.527249][T14940] bond1: entered promiscuous mode [ 5339.529442][T14940] bond1: entered allmulticast mode [ 5339.638761][T14940] bond2: entered promiscuous mode [ 5339.640003][T14940] bond2: entered allmulticast mode [ 5339.696523][T14940] bond3: entered promiscuous mode [ 5339.697836][T14940] bond3: entered allmulticast mode [ 5339.700172][T14940] bond4: entered promiscuous mode [ 5339.704435][T14940] bond4: entered allmulticast mode [ 5339.708677][T14940] vxcan2: entered promiscuous mode [ 5339.710261][T14940] vxcan2: entered allmulticast mode [ 5339.720198][T14940] vxcan3: entered promiscuous mode [ 5339.724563][T14940] vxcan3: entered allmulticast mode [ 5351.476113][T14970] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 5381.842909][T15087] netlink: 'syz.0.3114': attribute type 4 has an invalid length. [ 5397.764377][T15115] IPv6: sit1: Disabled Multicast RS [ 5415.873420][T15140] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3138'. [ 5417.939827][T15143] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3140'. [ 5451.434242][T15197] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 5454.826904][T15201] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 5454.829247][T15201] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3163'. [ 5496.564431][T15248] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 5509.994854][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 5510.827701][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3194'. [ 5535.058320][T15296] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 5535.060567][T15296] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3207'. [ 5545.105622][T15311] binder: 15310:15311 ioctl c0046209 0 returned -22 [ 5567.604594][T15341] autofs4:pid:15341:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 5575.582018][T15357] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5580.753939][T14810] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 5580.942836][T14810] usb 2-1: Using ep0 maxpacket: 8 [ 5580.992149][T14810] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 5580.993676][T14810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5581.055098][T14810] usb 2-1: config 0 descriptor?? [ 5582.580188][T14810] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 5582.913391][T14810] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 5582.915771][T14810] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 5582.924087][T14810] asix 2-1:0.0: probe with driver asix failed with error -71 [ 5583.036642][T14810] usb 2-1: USB disconnect, device number 17 [ 5602.705300][T15397] netlink: 'syz.0.3250': attribute type 21 has an invalid length. [ 5602.707039][T15397] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3250'. [ 5602.709099][T15397] netlink: 'syz.0.3250': attribute type 5 has an invalid length. [ 5602.710642][T15397] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3250'. [ 5609.922337][T15405] infiniband syz!: set down [ 5609.923511][T15405] infiniband syz!: added team_slave_0 [ 5609.958180][T15405] syz!: rxe_create_cq: returned err = -12 [ 5609.960174][T15405] infiniband syz!: Couldn't create ib_mad CQ [ 5609.979551][T15405] infiniband syz!: Couldn't open port 1 [ 5610.259245][T15405] RDS/IB: syz!: added [ 5610.268881][T15405] smc: adding ib device syz! with port count 1 [ 5610.270188][T15405] smc: ib device syz! port 1 has pnetid [ 5611.309990][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 5616.287128][T15422] netlink: 'syz.1.3260': attribute type 3 has an invalid length. [ 5617.752797][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3262'. [ 5622.089294][T15433] netlink: 'syz.0.3266': attribute type 11 has an invalid length. [ 5625.294050][T15439] devtmpfs: Unknown parameter 'rt' [ 5635.104381][T15463] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3279'. [ 5635.106293][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'. [ 5635.108245][T15463] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3279'. [ 5635.109463][T15463] netlink: 'syz.1.3279': attribute type 3 has an invalid length. [ 5635.113011][T15463] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 5635.114215][T15463] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3279'. [ 5644.218752][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 5700.454601][T15570] xt_bpf: check failed: parse error [ 5707.506444][T15584] netlink: 'syz.0.3332': attribute type 5 has an invalid length. [ 5724.053713][T15609] netlink: 'syz.0.3344': attribute type 6 has an invalid length. [ 5725.992735][T15612] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 5729.244832][T15618] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 5755.083474][T15670] cgroup: No subsys list or none specified [ 5768.085010][T15689] netlink: 'syz.0.3380': attribute type 29 has an invalid length. [ 5790.860404][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 5793.510298][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 5795.476038][T15731] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3400'. [ 5797.379607][T15735] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 5809.808424][T12228] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 5810.033404][T12228] usb 2-1: Using ep0 maxpacket: 32 [ 5810.499773][T12228] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 5810.503632][T12228] usb 2-1: config 0 has no interface number 0 [ 5810.619072][T12228] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 5810.632321][T12228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5810.634692][T12228] usb 2-1: Product: syz [ 5810.636408][T12228] usb 2-1: Manufacturer: syz [ 5810.638173][T12228] usb 2-1: SerialNumber: syz [ 5810.769002][T12228] usb 2-1: config 0 descriptor?? [ 5810.916535][T12228] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 5811.595597][T12228] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 5811.616528][T12228] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 5812.779304][T15561] usb 2-1: USB disconnect, device number 18 [ 5817.276436][T15775] netlink: 'syz.0.3417': attribute type 21 has an invalid length. [ 5817.279543][T15775] netlink: 'syz.0.3417': attribute type 6 has an invalid length. [ 5817.284245][T15775] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3417'. [ 5854.278659][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3443'. [ 5865.417147][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 5865.554897][T15854] vlan0: entered allmulticast mode [ 5866.036553][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 5866.038992][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 5914.870598][T15934] binder: 15932:15934 ioctl c0046209 9999999999999999 returned -22 [ 5951.933371][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'. [ 5952.083811][T16015] vlan2: entered allmulticast mode [ 5956.169961][T16023] xt_l2tp: invalid flags combination: 8 [ 5985.141691][T16061] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 5999.077543][T16085] gretap2: entered promiscuous mode [ 6003.938381][T16094] smc: removing ib device syz2 [ 6030.987029][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'. [ 6031.010437][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'. [ 6048.480637][T16154] xt_limit: Overflow, try lower: 0/0 [ 6069.274637][T16193] netlink: 'syz.1.3608': attribute type 21 has an invalid length. [ 6069.277470][T16193] IPv6: NLM_F_CREATE should be specified when creating new route [ 6085.185528][T16223] binder: 16222:16223 ioctl 541b 0 returned -22 [ 6101.426856][T16249] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 6105.676167][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 6107.192054][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3640'. [ 6137.925958][T16290] dlm: no locking on control device [ 6179.358854][T16316] [U] [ 6189.764532][T14653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6189.870991][T14653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6189.968030][T14653] bond0 (unregistering): Released all slaves [ 6190.926619][T14653] bond1 (unregistering): Released all slaves [ 6192.295821][T14653] bond2 (unregistering): Released all slaves [ 6192.879635][T14653] bond3 (unregistering): Released all slaves [ 6193.494045][T14653] bond4 (unregistering): Released all slaves [ 6193.970298][T14653] bond5 (unregistering): Released all slaves [ 6194.271040][T14653] bond6 (unregistering): Released all slaves [ 6195.492369][T16307] lo speed is unknown, defaulting to 1000 [ 6205.823217][T16415] tmpfs: Group quota inode hardlimit too large. [ 6212.190672][T16422] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.3673'. [ 6216.412848][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3674'. [ 6234.621801][T16307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6234.721239][T16307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6248.039290][T16307] hsr_slave_0: entered promiscuous mode [ 6248.137048][T16307] hsr_slave_1: entered promiscuous mode [ 6248.207854][T16307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6248.210315][T16307] Cannot create hsr debugfs directory [ 6252.478486][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3683'. [ 6258.770121][T16307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6258.977635][T16307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6259.241910][T16307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6259.531418][T16307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6269.667017][T16307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6318.048671][T16789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 6318.959371][T16307] veth0_vlan: entered promiscuous mode [ 6319.046531][T16307] veth1_vlan: entered promiscuous mode [ 6320.997950][T16307] veth0_macvtap: entered promiscuous mode [ 6321.560942][T16307] veth1_macvtap: entered promiscuous mode [ 6324.668032][T16307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6324.670561][T16307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6324.691865][T16307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6324.707620][T16307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6362.105925][T16848] IPv6: NLM_F_CREATE should be specified when creating new route [ 6385.737261][T16881] ipt_REJECT: ECHOREPLY no longer supported. [ 6389.974000][T16886] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 6392.814216][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 6418.100534][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 6418.118513][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 6438.126080][T16952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6438.200030][T16952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6451.036479][T16968] netlink: 'syz.2.3775': attribute type 6 has an invalid length. [ 6459.195810][T16982] netlink: 'syz.0.3782': attribute type 32 has an invalid length. [ 6459.209363][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'. [ 6459.215092][T16982] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 6459.260595][T16981] sctp: [Deprecated]: syz.2.3781 (pid 16981) Use of int in max_burst socket option. [ 6459.260595][T16981] Use struct sctp_assoc_value instead [ 6464.725841][T17017] new mount options do not match the existing superblock, will be ignored [ 6492.211448][ T34] audit: type=1326 audit(10600.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.2.3803" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 6492.246287][ T34] audit: type=1326 audit(10600.920:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.2.3803" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 6492.382862][ T34] audit: type=1326 audit(10601.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.2.3803" exe="/syz-executor" sig=0 arch=c00000f3 syscall=167 compat=0 ip=0xdb5be code=0x7ffc0000 [ 6492.399678][ T34] audit: type=1326 audit(10601.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.2.3803" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 6492.409609][ T34] audit: type=1326 audit(10601.100:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.2.3803" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 6518.408511][T17099] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 6551.189528][T17174] netlink: 'syz.0.3840': attribute type 21 has an invalid length. [ 6551.190864][T17174] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3840'. [ 6551.192448][T17174] netlink: 'syz.0.3840': attribute type 6 has an invalid length. [ 6551.196375][T17174] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3840'. [ 6555.353197][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 6555.359480][T17181] gre0: Master is either lo or non-ether device [ 6559.240842][T17188] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 6583.338939][T17228] netlink: 'syz.0.3866': attribute type 58 has an invalid length. [ 6583.340873][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3866'. [ 6586.630993][T17234] xt_HMARK: spi-set and port-set can't be combined [ 6588.847504][T17240] netlink: 'syz.0.3870': attribute type 2 has an invalid length. [ 6588.849767][T17240] netlink: 'syz.0.3870': attribute type 1 has an invalid length. [ 6588.899443][T17240] netlink: 'syz.0.3870': attribute type 1 has an invalid length. [ 6606.594252][T17271] netlink: 'syz.2.3885': attribute type 12 has an invalid length. [ 6614.784369][T17287] deleting an unspecified loop device is not supported. [ 6617.993149][T17295] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.3897'. [ 6623.777897][T17308] trusted_key: encrypted_key: hex blob is missing [ 6652.871230][T17365] netlink: 'syz.0.3929': attribute type 21 has an invalid length. [ 6652.873293][T17365] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3929'. [ 6702.861031][T17454] Non-string source [ 6722.867357][T17490] netlink: 'syz.0.3984': attribute type 9 has an invalid length. [ 6735.066056][T17511] xt_hashlimit: invalid interval [ 6764.861745][T17566] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 6764.863391][T17566] Error validating options; rc = [-22] [ 6772.119471][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 6800.466657][T17613] cgroup: Unknown subsys name 'hash' [ 6811.229739][T17635] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4057'. [ 6811.247938][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4057'. [ 6811.249359][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 6862.091881][T17722] netlink: 'syz.2.4101': attribute type 21 has an invalid length. [ 6862.094028][T17722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4101'. [ 6862.095646][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 6872.266831][T17740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4109'. [ 6879.297460][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 6881.352813][T17757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4117'. [ 6917.466918][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 6964.564145][T17935] cgroup: Name too long [ 6975.961500][T17951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4180'. [ 6980.724198][T17962] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4183'. [ 6980.734085][T17962] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4183'. [ 6988.915256][T17976] netlink: 'syz.0.4191': attribute type 21 has an invalid length. [ 6988.916625][T17976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4191'. [ 6988.918154][T17976] netlink: 'syz.0.4191': attribute type 4 has an invalid length. [ 6988.919183][T17976] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4191'. [ 7000.290690][T18004] tmpfs: Bad value for 'mpol' [ 7020.463078][T18029] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 7032.534590][T18046] netlink: 'syz.2.4221': attribute type 3 has an invalid length. [ 7037.852396][T18054] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4225'. [ 7043.138242][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4228'. [ 7055.994300][T18074] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 7073.202533][T18102] ip6t_REJECT: ECHOREPLY is not supported [ 7078.827992][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4253'. [ 7081.947788][T18112] tmpfs: Bad value for 'mpol' [ 7093.483058][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4264'. [ 7103.655488][T18150] netlink: 700 bytes leftover after parsing attributes in process `syz.0.4273'. [ 7122.302966][T18181] xt_l2tp: v2 doesn't support IP mode [ 7145.217601][T18209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4302'. [ 7155.556438][T18225] netlink: 'syz.0.4311': attribute type 3 has an invalid length. [ 7157.531710][T18229] tmpfs: Bad value for 'nr_blocks' [ 7179.065508][T18267] ubi0: attaching mtd0 [ 7179.094816][T18267] ubi0: scanning is finished [ 7179.099031][T18267] ubi0: empty MTD device detected [ 7179.514258][T18267] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 7179.516767][T18267] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 7179.518063][T18267] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 7179.519269][T18267] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 7179.520430][T18267] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 7179.521476][T18267] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 7179.522699][T18267] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1556785300 [ 7179.537934][T18267] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 7179.542430][T18269] ubi0: background thread "ubi_bgt0d" started, PID 18269 [ 7180.514342][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4332'. [ 7186.931421][T18284] netlink: 'syz.0.4338': attribute type 4 has an invalid length. [ 7197.683435][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4345'. [ 7213.509774][T18324] veth4: entered promiscuous mode [ 7213.556385][T18324] veth4: entered allmulticast mode [ 7241.335647][T18385] netlink: 'syz.2.4384': attribute type 4 has an invalid length. [ 7249.925214][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 7265.527858][T18417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4397'. [ 7265.531893][T18417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4397'. [ 7278.330634][T18436] netlink: 'syz.0.4402': attribute type 3 has an invalid length. [ 7278.332013][T18436] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4402'. [ 7304.875144][T18473] xt_l2tp: v2 sid > 0xffff: 100663296 [ 7312.046277][T18486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7312.096524][T18486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7331.354070][T18511] autofs4:pid:18511:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 7331.356019][T18511] autofs4:pid:18511:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 7334.878294][T18516] IPv6: NLM_F_CREATE should be specified when creating new route [ 7352.382488][T18555] netlink: 'syz.0.4459': attribute type 1 has an invalid length. [ 7352.383819][T18555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4459'. [ 7354.117010][T18559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4461'. [ 7362.373310][T18577] tmpfs: User quota block hardlimit too large. [ 7370.451971][T18594] __vm_enough_memory: pid: 18594, comm: syz.2.4477, bytes: 4115879641088 not enough memory for the allocation [ 7377.553787][T18607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4485'. [ 7380.344746][T18612] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 7395.608628][T18630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7395.620975][T18630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7396.361614][T18634] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 7404.395659][T18642] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 7422.191013][T18702] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4514'. [ 7486.960199][T18823] netlink: 'syz.2.4553': attribute type 8 has an invalid length. [ 7486.961601][T18823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4553'. [ 7498.346364][T18840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4562'. [ 7500.322147][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 7510.761586][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'. [ 7549.845284][T18944] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 7571.473897][T18970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 7579.229673][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'. [ 7579.245862][T18983] netlink: 'syz.2.4607': attribute type 3 has an invalid length. [ 7587.393839][T18998] netlink: 'syz.0.4615': attribute type 2 has an invalid length. [ 7587.395235][T18998] netlink: 'syz.0.4615': attribute type 1 has an invalid length. [ 7587.396564][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4615'. [ 7595.854078][T19013] netlink: 'syz.0.4622': attribute type 10 has an invalid length. [ 7608.406911][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 7648.203770][T19095] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4662'. [ 7648.206945][T19095] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4662'. [ 7650.337728][T19132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7650.401499][T19132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7669.698106][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4676'. [ 7669.711870][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4676'. [ 7678.673055][T19173] binder: 19172:19173 ioctl c00c6211 0 returned -14 [ 7685.367618][T19182] netlink: 'syz.0.4683': attribute type 2 has an invalid length. [ 7733.267613][T19253] netlink: 'syz.0.4715': attribute type 4 has an invalid length. [ 7738.455529][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7738.471989][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7809.311967][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4760'. [ 7811.175945][T19359] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 7836.006656][T19390] netlink: 'syz.2.4778': attribute type 21 has an invalid length. [ 7836.009219][T19390] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4778'. [ 7836.019160][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'. [ 7852.505797][T19408] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 7880.343934][T19448] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 7894.160495][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 7932.217043][T19530] usb usb1: check_ctrlrecip: process 19530 (syz.2.4844) requesting ep 01 but needs 81 [ 7932.219897][T19530] usb usb1: usbfs: process 19530 (syz.2.4844) did not claim interface 0 before use [ 7941.727162][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4849'. [ 7986.641420][T19609] ubi0: detaching mtd0 [ 7986.768260][T19609] ubi0: mtd0 is detached [ 7988.425192][T19612] tmpfs: Bad value for 'mpol' [ 7993.973847][ T34] audit: type=1326 audit(12102.776:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.0.4885" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 7994.004527][ T34] audit: type=1326 audit(12102.826:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.0.4885" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 7994.450507][ T34] audit: type=1326 audit(12103.256:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.0.4885" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 7994.497070][ T34] audit: type=1326 audit(12103.306:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.0.4885" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 7994.525070][ T34] audit: type=1326 audit(12103.306:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.0.4885" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8018.974780][T19650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8019.051520][T19650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8026.848572][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4903'. [ 8029.682621][T19663] kernel profiling enabled (shift: 6) [ 8040.208643][T19675] nvme_fabrics: missing parameter 'transport=%s' [ 8040.213827][T19675] nvme_fabrics: missing parameter 'nqn=%s' [ 8049.063767][T19690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4918'. [ 8063.367150][T19704] netlink: 'syz.0.4924': attribute type 2 has an invalid length. [ 8063.370416][T19704] netlink: 'syz.0.4924': attribute type 8 has an invalid length. [ 8063.372494][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4924'. [ 8098.585043][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4947'. [ 8098.587646][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4947'. [ 8108.057277][T19757] tmpfs: Bad value for 'mpol' [ 8130.375007][T19773] xt_ecn: cannot match TCP bits for non-tcp packets [ 8144.961319][T19795] xt_ipcomp: unknown flags 12 [ 8219.710250][T19171] hid-generic D158:334EB097:0E39.0001: item fetching failed at offset 0/1 [ 8219.748421][T19171] hid-generic D158:334EB097:0E39.0001: probe with driver hid-generic failed with error -22 [ 8254.415745][T19901] xt_cgroup: xt_cgroup: no path or classid specified [ 8263.567372][T19912] netlink: 'syz.2.5022': attribute type 30 has an invalid length. [ 8279.203763][T19930] netlink: 'syz.0.5031': attribute type 1 has an invalid length. [ 8279.207044][T19930] nbd: must specify at least one socket [ 8307.863082][T19968] devtmpfs: Cannot enable quota on remount [ 8342.727411][T20004] netlink: 'syz.2.5067': attribute type 6 has an invalid length. [ 8346.174785][T20008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5068'. [ 8355.605049][T20019] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 8383.882000][T20044] xt_CT: No such helper "syz1" [ 8394.758352][T20060] dlm: no local IP address has been set [ 8394.761910][T20060] dlm: cannot start dlm midcomms -107 [ 8424.299692][T20100] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5110'. [ 8427.386930][T20103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8427.471263][T20103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8466.926417][T20143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5131'. [ 8510.617117][T20193] process 'syz.0.5155' launched '/dev/fd/3' with NULL argv: empty string added [ 8511.158540][T20196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5156'. [ 8513.780928][T20200] netlink: 'syz.0.5158': attribute type 29 has an invalid length. [ 8542.999223][T20240] netlink: 'syz.2.5179': attribute type 12 has an invalid length. [ 8549.701126][T20246] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.5181'. [ 8551.878441][T20248] syz.2.5182 (20248): /proc/20247/oom_adj is deprecated, please use /proc/20247/oom_score_adj instead. [ 8565.934941][T20265] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 8598.075570][T20304] lo speed is unknown, defaulting to 1000 [ 8621.639175][T20344] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 8652.110810][T20378] tmpfs: Bad value for 'mpol' [ 8654.580159][T20380] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.327680) [ 8658.257913][T20384] netlink: 'syz.2.5236': attribute type 7 has an invalid length. [ 8690.261283][T20425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8703.277344][T20450] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 8715.982568][T20466] binder: 20465:20466 ioctl c0306201 20000180 returned -22 [ 8776.085929][T20546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8776.108848][T20546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8792.609762][T20570] netlink: 'syz.2.5325': attribute type 13 has an invalid length. [ 8792.799474][T20570] gretap0: refused to change device tx_queue_len [ 8816.445116][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5340'. [ 8823.856369][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'. [ 8823.857937][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'. [ 8823.859350][T20618] netlink: 'syz.0.5348': attribute type 3 has an invalid length. [ 8890.765919][T20707] @ÿ: renamed from bond_slave_0 (while UP) [ 8906.168687][T20729] xt_socket: unknown flags 0x8 [ 8926.009737][T20756] usb usb1: usbfs: process 20756 (syz.2.5415) did not claim interface 0 before use [ 8937.931653][T20808] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 8947.520039][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 8994.622547][T20885] netlink: 'syz.0.5462': attribute type 21 has an invalid length. [ 8994.624483][T20885] netlink: 'syz.0.5462': attribute type 1 has an invalid length. [ 9018.529863][T20915] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 9024.466463][T20925] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 9026.543335][T20927] netlink: 'syz.0.5482': attribute type 21 has an invalid length. [ 9026.545687][T20927] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5482'. [ 9045.157564][T20983] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 9073.235717][T21023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 9131.117541][T21191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9131.122257][T21191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9131.718672][T21194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5535'. [ 9158.833757][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9158.835628][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9159.664783][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9159.666705][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9161.130772][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9161.154697][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 9171.828782][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 9177.810619][T21248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5560'. [ 9185.285768][T21256] netlink: 'syz.2.5564': attribute type 14 has an invalid length. [ 9227.361461][T21321] netlink: 600 bytes leftover after parsing attributes in process `syz.0.5596'. [ 9238.969919][T21331] [U]  [ 9291.296652][T21412] netlink: 'syz.2.5629': attribute type 3 has an invalid length. [ 9300.939783][T21426] atomic_op ff60000020b20198 conn xmit_atomic 0000000000000000 [ 9304.329182][T21429] gtp1: entered promiscuous mode [ 9304.330751][T21429] gtp1: entered allmulticast mode [ 9333.589745][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 9333.591283][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 9339.919560][T21475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9339.938035][T21475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9355.919639][T21484] lo: entered promiscuous mode [ 9355.921006][T21484] lo: entered allmulticast mode [ 9355.945213][T21484] tunl0: entered promiscuous mode [ 9355.947369][T21484] tunl0: entered allmulticast mode [ 9356.149784][T21484] gre0: entered promiscuous mode [ 9356.170605][T21484] gre0: entered allmulticast mode [ 9356.546951][T21484] gretap0: entered promiscuous mode [ 9356.553777][T21484] gretap0: entered allmulticast mode [ 9356.975573][T21484] erspan0: entered promiscuous mode [ 9356.994537][T21484] erspan0: entered allmulticast mode [ 9357.306583][T21484] ip_vti0: entered promiscuous mode [ 9357.308811][T21484] ip_vti0: entered allmulticast mode [ 9357.509422][T21484] ip6_vti0: entered promiscuous mode [ 9357.517889][T21484] ip6_vti0: entered allmulticast mode [ 9358.216455][T21484] sit0: entered promiscuous mode [ 9358.218570][T21484] sit0: entered allmulticast mode [ 9359.434691][T21484] ip6tnl0: entered promiscuous mode [ 9359.436808][T21484] ip6tnl0: entered allmulticast mode [ 9359.660643][T21484] ip6gre0: entered promiscuous mode [ 9359.665589][T21484] ip6gre0: entered allmulticast mode [ 9360.180745][T21484] syz_tun: entered promiscuous mode [ 9360.193650][T21484] syz_tun: entered allmulticast mode [ 9360.426657][T21484] ip6gretap0: entered promiscuous mode [ 9360.427885][T21484] ip6gretap0: entered allmulticast mode [ 9360.553160][T21484] vcan0: entered promiscuous mode [ 9360.554572][T21484] vcan0: entered allmulticast mode [ 9360.600118][T21484] bond0: entered promiscuous mode [ 9360.609017][T21484] @ÿ: entered promiscuous mode [ 9360.613280][T21484] bond_slave_1: entered promiscuous mode [ 9360.615770][T21484] bond0: entered allmulticast mode [ 9360.616799][T21484] @ÿ: entered allmulticast mode [ 9360.617723][T21484] bond_slave_1: entered allmulticast mode [ 9360.668139][T21484] dummy0: entered promiscuous mode [ 9360.669821][T21484] dummy0: entered allmulticast mode [ 9360.839721][T21484] nlmon0: entered promiscuous mode [ 9360.841850][T21484] nlmon0: entered allmulticast mode [ 9360.925835][T21484] vxcan0: entered promiscuous mode [ 9360.927149][T21484] vxcan0: entered allmulticast mode [ 9360.955822][T21484] vxcan1: entered promiscuous mode [ 9360.957210][T21484] vxcan1: entered allmulticast mode [ 9361.006775][T21484] veth0: entered promiscuous mode [ 9361.008028][T21484] veth0: entered allmulticast mode [ 9361.137593][T21484] veth1: entered promiscuous mode [ 9361.140581][T21484] veth1: entered allmulticast mode [ 9361.975844][T21484] wg0: entered promiscuous mode [ 9361.977709][T21484] wg0: entered allmulticast mode [ 9362.285581][T21484] wg1: entered promiscuous mode [ 9362.287688][T21484] wg1: entered allmulticast mode [ 9362.544634][T21484] wg2: entered promiscuous mode [ 9362.545888][T21484] wg2: entered allmulticast mode [ 9362.649765][T21484] veth0_to_bridge: entered promiscuous mode [ 9362.653236][T21484] veth0_to_bridge: entered allmulticast mode [ 9362.804655][T21484] bridge_slave_0: entered promiscuous mode [ 9362.805934][T21484] bridge_slave_0: entered allmulticast mode [ 9362.898944][T21484] veth1_to_bridge: entered promiscuous mode [ 9362.900300][T21484] veth1_to_bridge: entered allmulticast mode [ 9363.018568][T21484] bridge_slave_1: entered promiscuous mode [ 9363.019854][T21484] bridge_slave_1: entered allmulticast mode [ 9363.256305][T21484] veth0_to_bond: entered promiscuous mode [ 9363.259206][T21484] veth0_to_bond: entered allmulticast mode [ 9363.776144][T21484] veth1_to_bond: entered promiscuous mode [ 9363.778393][T21484] veth1_to_bond: entered allmulticast mode [ 9365.382867][T21484] veth0_to_team: entered promiscuous mode [ 9365.386200][T21484] veth0_to_team: entered allmulticast mode [ 9365.596839][T21484] team_slave_0: entered promiscuous mode [ 9365.630539][T21484] team_slave_0: entered allmulticast mode [ 9365.669452][T21484] veth1_to_team: entered promiscuous mode [ 9365.673456][T21484] veth1_to_team: entered allmulticast mode [ 9365.824828][T21484] team_slave_1: entered promiscuous mode [ 9365.829981][T21484] team_slave_1: entered allmulticast mode [ 9365.926858][T21484] veth0_to_batadv: entered promiscuous mode [ 9365.942714][T21484] veth0_to_batadv: entered allmulticast mode [ 9366.399061][T21484] batadv_slave_0: entered promiscuous mode [ 9366.457654][T21484] batadv_slave_0: entered allmulticast mode [ 9366.828649][T21484] veth1_to_batadv: entered promiscuous mode [ 9366.830187][T21484] veth1_to_batadv: entered allmulticast mode [ 9367.007799][T21484] batadv_slave_1: entered promiscuous mode [ 9367.019243][T21484] batadv_slave_1: entered allmulticast mode [ 9367.186412][T21484] xfrm0: entered promiscuous mode [ 9367.188530][T21484] xfrm0: entered allmulticast mode [ 9367.376934][T21484] veth0_to_hsr: entered promiscuous mode [ 9367.379106][T21484] veth0_to_hsr: entered allmulticast mode [ 9367.524590][T21484] hsr_slave_0: entered allmulticast mode [ 9367.845712][T21484] veth1_to_hsr: entered promiscuous mode [ 9367.847393][T21484] veth1_to_hsr: entered allmulticast mode [ 9368.098999][T21484] hsr_slave_1: entered allmulticast mode [ 9368.336434][T21484] hsr0: entered promiscuous mode [ 9368.337845][T21484] hsr0: entered allmulticast mode [ 9368.607536][T21484] veth1_virt_wifi: entered promiscuous mode [ 9368.609006][T21484] veth1_virt_wifi: entered allmulticast mode [ 9368.740136][T21484] veth0_virt_wifi: entered promiscuous mode [ 9368.747344][T21484] veth0_virt_wifi: entered allmulticast mode [ 9368.849333][T21484] veth1_vlan: entered allmulticast mode [ 9368.973366][T21484] veth0_vlan: entered allmulticast mode [ 9369.469776][T21484] vlan0: entered promiscuous mode [ 9369.478322][T21484] vlan0: entered allmulticast mode [ 9369.496067][T21484] vlan1: entered promiscuous mode [ 9369.498074][T21484] vlan1: entered allmulticast mode [ 9369.580140][T21484] macvlan0: entered promiscuous mode [ 9369.584970][T21484] macvlan0: entered allmulticast mode [ 9370.292834][T21484] macvlan1: entered promiscuous mode [ 9370.295849][T21484] macvlan1: entered allmulticast mode [ 9370.645713][T21484] ipvlan1: entered promiscuous mode [ 9370.648108][T21484] ipvlan1: entered allmulticast mode [ 9370.682153][T21484] veth1_macvtap: entered allmulticast mode [ 9370.987299][T21484] veth0_macvtap: entered allmulticast mode [ 9371.269856][T21484] macvtap0: entered promiscuous mode [ 9371.276040][T21484] macvtap0: entered allmulticast mode [ 9371.516399][T21484] macsec0: entered promiscuous mode [ 9371.518488][T21484] macsec0: entered allmulticast mode [ 9371.772830][T21484] geneve0: entered promiscuous mode [ 9371.774924][T21484] geneve0: entered allmulticast mode [ 9372.016441][T21484] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9372.019072][T21484] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9372.040088][T21484] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9372.046640][T21484] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9372.068765][T21484] geneve1: entered promiscuous mode [ 9372.076384][T21484] geneve1: entered allmulticast mode [ 9372.327165][T21484] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 9372.329415][T21484] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 9372.387480][T21484] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 9372.390158][T21484] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 9372.554232][T21484] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 9372.555546][T21484] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 9372.744417][T21484] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 9372.746878][T21484] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 9372.844940][T21484] geneve2: entered promiscuous mode [ 9372.846569][T21484] geneve2: entered allmulticast mode [ 9372.850009][T21484] bond1: entered promiscuous mode [ 9372.855948][T21484] bond1: entered allmulticast mode [ 9372.859699][T21484] geneve3: entered promiscuous mode [ 9372.894462][T21484] geneve3: entered allmulticast mode [ 9372.899393][T21484] bond2: entered promiscuous mode [ 9372.906059][T21484] bond2: entered allmulticast mode [ 9372.909324][T21484] veth2: entered promiscuous mode [ 9372.911492][T21484] veth2: entered allmulticast mode [ 9372.914217][T21484] veth3: entered promiscuous mode [ 9372.917237][T21484] veth3: entered allmulticast mode [ 9372.922622][T21484] ip6tnl1: entered promiscuous mode [ 9372.924062][T21484] ip6tnl1: entered allmulticast mode [ 9372.931193][T21484] bond3: entered promiscuous mode [ 9372.932490][T21484] bond3: entered allmulticast mode [ 9372.934857][T21484] xfrm1: entered promiscuous mode [ 9372.935875][T21484] xfrm1: entered allmulticast mode [ 9372.977572][T21484] gtp0: entered promiscuous mode [ 9372.979617][T21484] gtp0: entered allmulticast mode [ 9373.115116][T21484] ip6erspan0: entered promiscuous mode [ 9373.117266][T21484] ip6erspan0: entered allmulticast mode [ 9373.133738][T21484] syztnl2: entered promiscuous mode [ 9373.134965][T21484] syztnl2: entered allmulticast mode [ 9379.077089][T21496] netlink: 'syz.2.5666': attribute type 75 has an invalid length. [ 9404.418042][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5681'. [ 9441.261943][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 9443.650829][T21589] xt_bpf: check failed: parse error [ 9462.427014][T21621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9462.463108][T21621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9466.877292][T21631] devtmpfs: Too few inodes for current use [ 9494.921703][T21662] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5736'. [ 9494.925575][T21662] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5736'. [ 9494.927684][T21662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5736'. [ 9553.210774][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5773'. [ 9553.215021][T21747] netlink: 'syz.2.5773': attribute type 3 has an invalid length. [ 9553.538301][T21747] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 9553.545895][T21747] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 9553.549108][T21747] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 9553.552459][T21747] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 9570.561407][T21772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5784'. [ 9578.944954][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5791'. [ 9595.645723][T21806] tmpfs: Group quota block hardlimit too large. [ 9609.911582][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5810'. [ 9621.341041][T21850] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5819'. [ 9652.861491][T21908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5844'. [ 9652.867210][T21908] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5844'. [ 9665.067540][T21924] netlink: 'syz.0.5852': attribute type 5 has an invalid length. [ 9690.348957][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5867'. [ 9690.351504][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'. [ 9693.388026][T21964] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 9693.550779][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5870'. [ 9693.552496][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5870'. [ 9706.445667][T21980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9706.477127][T21980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9739.327004][ T34] audit: type=1326 audit(13848.262:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22021 comm="syz.2.5896" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 9743.857341][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 9773.978572][T22076] Zero length message leads to an empty skb [ 9787.932901][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'. [ 9787.966145][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5924'. [ 9787.968766][T22096] netlink: 'syz.2.5924': attribute type 7 has an invalid length. [ 9792.962259][T22100] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 9793.727196][T22102] netlink: 'syz.2.5928': attribute type 1 has an invalid length. [ 9793.731060][T22102] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5928'. [ 9793.732441][T22102] NCSI netlink: No device for ifindex 0 [ 9797.393892][T22108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 9797.395440][T22108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 9797.397750][T22108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 9797.401831][T22108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 9810.930650][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5942'. [ 9810.932059][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5942'. [ 9826.891695][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 9826.893293][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5954'. [ 9826.896956][T22159] netlink: 'syz.2.5954': attribute type 12 has an invalid length. [ 9828.904555][T22162] netlink: 304 bytes leftover after parsing attributes in process `syz.0.5956'. [ 9919.780268][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6011'. [ 9924.920470][T22293] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 16 [ 9929.995614][ T34] audit: type=1326 audit(14038.942:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.6018" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 9936.916307][ T34] audit: type=1326 audit(14045.852:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9936.949123][ T34] audit: type=1326 audit(14045.892:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9936.996376][ T34] audit: type=1326 audit(14045.942:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9937.074349][ T34] audit: type=1326 audit(14046.012:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9937.157876][ T34] audit: type=1326 audit(14046.052:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9937.284147][ T34] audit: type=1326 audit(14046.222:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9937.289189][ T34] audit: type=1326 audit(14046.222:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.0.6021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9952.273834][T22346] can0: slcan on ptm0. [ 9952.815067][T22345] can0 (unregistered): slcan off ptm0. [ 9962.275591][T22379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'. [10001.592644][T22437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6066'. [10005.825590][T22445] binder: 22444:22445 ioctl c018620b 20000a00 returned -14 [10006.385918][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [10031.964368][T22489] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [10041.069548][T22502] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6098'. [10042.986663][T22504] hugetlbfs: Bad value 'A' for mount option 'nr_inodes' [10042.986663][T22504] [10054.374505][T22516] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [10078.719189][T22546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6117'. [10082.542422][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6121'. [10084.313418][T22556] tmpfs: Bad value for 'mpol' [10093.194111][T22566] pim6reg: entered allmulticast mode [10093.377157][T22566] pim6reg: left allmulticast mode [10098.029577][T22578] [U] ^@ [10108.467119][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6138'. [10108.469430][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6138'. [10108.471607][T22593] netlink: 'syz.2.6138': attribute type 18 has an invalid length. [10111.536314][T22597] pimreg4: entered allmulticast mode [10121.058512][T22615] binder_alloc: binder_alloc_mmap_handler: 22612 20ffd000-20fff000 already mapped failed -16 [10122.502104][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10122.522343][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10123.466585][T22621] netlink: 'syz.0.6149': attribute type 5 has an invalid length. [10147.175957][T22648] macvtap1: entered promiscuous mode [10152.787743][T22658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6165'. [10169.919074][T22685] virtiofs: Unknown parameter 'f' [10172.994618][T22693] x_tables: ip_tables: udp match: only valid for protocol 17 [10178.108770][T22705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6187'. [10196.678752][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'. [10240.283880][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6235'. [10251.703252][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6245'. [10286.440365][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6267'. [10286.441807][T22887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6267'. [10286.443323][T22887] netlink: 'syz.2.6267': attribute type 15 has an invalid length. [10312.846261][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6288'. [10312.849840][T22936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6288'. [10314.619521][T22938] xt_policy: input policy not valid in POSTROUTING and OUTPUT [10327.338775][T22962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6299'. [10356.712675][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10356.726821][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10391.464317][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [10391.465690][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6350'. [10391.466870][T23073] netlink: 'syz.2.6350': attribute type 11 has an invalid length. [10391.467930][T23073] netlink: 'syz.2.6350': attribute type 12 has an invalid length. [10412.460669][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6366'. [10414.319211][T23111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10414.350125][T23111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10430.138764][T23131] hugetlbfs: Bad value 'm' for mount option 'size' [10430.138764][T23131] [10434.731987][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'. [10435.465490][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6380'. [10436.737639][T23144] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [10447.796033][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6389'. [10492.213116][T23250] ubi0: attaching mtd0 [10492.445894][T23250] ubi0: scanning is finished [10492.577077][T23250] ================================================================== [10492.579732][T23250] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x528/0x61a [10492.581582][T23250] Read of size 4 at addr ff6000002ecad8e0 by task syz.2.6422/23250 [10492.584819][T23250] [10492.587430][T23250] CPU: 1 UID: 0 PID: 23250 Comm: syz.2.6422 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10492.589621][T23250] Hardware name: riscv-virtio,qemu (DT) [10492.591211][T23250] Call Trace: [10492.592449][T23250] [] dump_backtrace+0x2e/0x3c [10492.594120][T23250] [] show_stack+0x30/0x3c [10492.595735][T23250] [] dump_stack_lvl+0x12e/0x1a6 [10492.597520][T23250] [] print_report+0x28e/0x5aa [10492.599201][T23250] [] kasan_report+0xec/0x118 [10492.600660][T23250] [] __asan_report_load4_noabort+0x12/0x1a [10492.602241][T23250] [] notifier_chain_register+0x528/0x61a [10492.603654][T23250] [] blocking_notifier_chain_register+0x80/0xc6 [10492.605191][T23250] [] register_reboot_notifier+0x22/0x2c [10492.606612][T23250] [] ubi_wl_init+0xd0a/0x15c2 [10492.608733][T23250] [] ubi_attach+0x15da/0x4f90 [10492.610466][T23250] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10492.612168][T23250] [] ctrl_cdev_ioctl+0x496/0x764 [10492.613754][T23250] [] __riscv_sys_ioctl+0x18e/0x1e2 [10492.615509][T23250] [] syscall_handler+0x94/0x118 [10492.617114][T23250] [] do_trap_ecall_u+0x1aa/0x216 [10492.619114][T23250] [] handle_exception+0x146/0x152 [10492.621172][T23250] [10492.622055][T23250] Allocated by task 23245: [10492.623355][T23250] stack_trace_save+0xa0/0xd2 [10492.624772][T23250] kasan_save_stack+0x3e/0x6a [10492.626184][T23250] kasan_save_track+0x16/0x28 [10492.627581][T23250] kasan_save_alloc_info+0x30/0x3e [10492.629046][T23250] __kasan_kmalloc+0xa0/0xa6 [10492.630758][T23250] __kmalloc_noprof+0x258/0x5ba [10492.631907][T23250] n_hdlc_alloc_buf+0x44/0xec [10492.633175][T23250] n_hdlc_tty_open+0x216/0x4b4 [10492.634475][T23250] tty_ldisc_open+0x96/0x10c [10492.635570][T23250] tty_set_ldisc+0x2c8/0x68e [10492.636702][T23250] tty_ioctl+0x90c/0x2004 [10492.638030][T23250] __riscv_sys_ioctl+0x18e/0x1e2 [10492.639495][T23250] syscall_handler+0x94/0x118 [10492.640900][T23250] do_trap_ecall_u+0x1aa/0x216 [10492.642459][T23250] handle_exception+0x146/0x152 [10492.644059][T23250] [10492.644955][T23250] Freed by task 23243: [10492.646141][T23250] stack_trace_save+0xa0/0xd2 [10492.647454][T23250] kasan_save_stack+0x3e/0x6a [10492.648923][T23250] kasan_save_track+0x16/0x28 [10492.650298][T23250] kasan_save_free_info+0x40/0x5c [10492.652158][T23250] __kasan_slab_free+0x4e/0x68 [10492.653681][T23250] kfree+0x13e/0x508 [10492.655366][T23250] n_hdlc_tty_close+0xb4/0x162 [10492.656896][T23250] tty_ldisc_close+0x104/0x18c [10492.658807][T23250] tty_ldisc_kill+0x96/0x13e [10492.660098][T23250] tty_ldisc_release+0x200/0x2b8 [10492.661416][T23250] tty_release_struct+0x24/0xec [10492.662888][T23250] tty_release+0xb30/0x13cc [10492.664351][T23250] __fput+0x378/0x9ee [10492.665662][T23250] ____fput+0x1c/0x26 [10492.666922][T23250] task_work_run+0x16a/0x25e [10492.668843][T23250] syscall_exit_to_user_mode+0x302/0x316 [10492.670275][T23250] do_trap_ecall_u+0x86/0x216 [10492.671695][T23250] handle_exception+0x146/0x152 [10492.673053][T23250] [10492.673840][T23250] The buggy address belongs to the object at ff6000002ecac000 [10492.673840][T23250] which belongs to the cache kmalloc-8k of size 8192 [10492.675581][T23250] The buggy address is located 6368 bytes inside of [10492.675581][T23250] freed 8192-byte region [ff6000002ecac000, ff6000002ecae000) [10492.677305][T23250] [10492.678543][T23250] The buggy address belongs to the physical page: [10492.680504][T23250] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xaeca8 [10492.682658][T23250] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [10492.684485][T23250] flags: 0xffe000000000040(head|node=0|zone=0|lastcpupid=0x7ff) [10492.686929][T23250] page_type: f5(slab) [10492.689276][T23250] raw: 0ffe000000000040 ff60000011402280 dead000000000100 dead000000000122 [10492.691123][T23250] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [10492.694069][T23250] head: 0ffe000000000040 ff60000011402280 dead000000000100 dead000000000122 [10492.695735][T23250] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [10492.697461][T23250] head: 0ffe000000000003 ff1c000000bb2a01 ffffffffffffffff 0000000000000000 [10492.699375][T23250] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [10492.701112][T23250] page dumped because: kasan: bad access detected [10492.702833][T23250] page_owner tracks the page as allocated [10492.704139][T23250] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13505, tgid 13504 (syz.1.2493), ts 4537369949400, free_ts 4537305059300 [10492.709476][T23250] __set_page_owner+0xa2/0x70c [10492.710881][T23250] post_alloc_hook+0xf0/0x1e8 [10492.712043][T23250] get_page_from_freelist+0xdb0/0x2c0e [10492.713249][T23250] __alloc_pages_noprof+0x1e8/0x1fc2 [10492.714469][T23250] alloc_pages_mpol_noprof+0xf8/0x488 [10492.715783][T23250] alloc_pages_noprof+0x174/0x2f0 [10492.717090][T23250] new_slab+0x2b6/0x40e [10492.718519][T23250] ___slab_alloc+0x9c8/0x10e6 [10492.720024][T23250] __slab_alloc.constprop.0+0x60/0xb0 [10492.721444][T23250] __kmalloc_node_track_caller_noprof+0x1dc/0x5e8 [10492.723428][T23250] krealloc_noprof+0x13e/0x350 [10492.724553][T23250] copy_array.constprop.0+0x78/0xca [10492.725948][T23250] copy_verifier_state+0x7d2/0xc06 [10492.727085][T23250] do_check_common+0x512e/0xe516 [10492.729301][T23250] bpf_check+0x7f56/0xc074 [10492.730508][T23250] bpf_prog_load+0x119e/0x2112 [10492.731951][T23250] page last free pid 13505 tgid 13504 stack trace: [10492.733108][T23250] __reset_page_owner+0x8c/0x400 [10492.734344][T23250] free_unref_page+0x618/0x11d2 [10492.735568][T23250] __free_pages+0x13a/0x1ba [10492.736696][T23250] __free_slab+0xd0/0x176 [10492.738185][T23250] free_slab+0x38/0x1ae [10492.739616][T23250] discard_slab+0x42/0x5a [10492.740913][T23250] __slab_free+0x346/0x3f6 [10492.741969][T23250] ___cache_free+0x1a4/0x1de [10492.743048][T23250] qlist_free_all+0x76/0x168 [10492.744335][T23250] kasan_quarantine_reduce+0x158/0x1ba [10492.745651][T23250] __kasan_slab_alloc+0x5c/0x82 [10492.746866][T23250] __kmalloc_node_noprof+0x216/0x5e8 [10492.748833][T23250] __vmalloc_node_range_noprof+0x374/0x120e [10492.750182][T23250] vzalloc_noprof+0xf8/0x126 [10492.751464][T23250] bpf_check+0x220/0xc074 [10492.752609][T23250] bpf_prog_load+0x119e/0x2112 [10492.754060][T23250] [10492.754809][T23250] Memory state around the buggy address: [10492.756403][T23250] ff6000002ecad780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10492.757732][T23250] ff6000002ecad800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10492.759291][T23250] >ff6000002ecad880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10492.760773][T23250] ^ [10492.762592][T23250] ff6000002ecad900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10492.764141][T23250] ff6000002ecad980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [10492.765798][T23250] ================================================================== [10492.838022][T23250] Kernel panic - not syncing: KASAN: panic_on_warn set ... [10492.839595][T23250] CPU: 0 UID: 0 PID: 23250 Comm: syz.2.6422 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10492.840574][T23250] Hardware name: riscv-virtio,qemu (DT) [10492.841199][T23250] Call Trace: [10492.841705][T23250] [] dump_backtrace+0x2e/0x3c [10492.842557][T23250] [] show_stack+0x30/0x3c [10492.843322][T23250] [] dump_stack_lvl+0x110/0x1a6 [10492.844242][T23250] [] dump_stack+0x1c/0x24 [10492.845109][T23250] [] panic+0x38c/0x870 [10492.845886][T23250] [] check_panic_on_warn+0xc0/0xe4 [10492.846767][T23250] [] end_report.part.0+0x4e/0xae [10492.847801][T23250] [] kasan_report+0x102/0x118 [10492.848793][T23250] [] __asan_report_load4_noabort+0x12/0x1a [10492.849753][T23250] [] notifier_chain_register+0x528/0x61a [10492.850602][T23250] [] blocking_notifier_chain_register+0x80/0xc6 [10492.851482][T23250] [] register_reboot_notifier+0x22/0x2c [10492.852394][T23250] [] ubi_wl_init+0xd0a/0x15c2 [10492.853273][T23250] [] ubi_attach+0x15da/0x4f90 [10492.854142][T23250] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10492.854999][T23250] [] ctrl_cdev_ioctl+0x496/0x764 [10492.855827][T23250] [] __riscv_sys_ioctl+0x18e/0x1e2 [10492.856739][T23250] [] syscall_handler+0x94/0x118 [10492.857616][T23250] [] do_trap_ecall_u+0x1aa/0x216 [10492.858629][T23250] [] handle_exception+0x146/0x152 [10492.859791][T23250] SMP: stopping secondary CPUs [10492.861994][T23250] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:15:22 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff84f2c730 mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e5138 vstvec 0000000000000000 mepc ffffffff802b3b9e sepc ffffffff8097f6ee vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a012a000000ad45c x0/zero 0000000000000000 x1/ra ffffffff84fbeb16 x2/sp ff20000000006fb0 x3/gp ffffffff899f64c0 x4/tp ff6000001a481a40 x5/t0 f38912d922349e9c x6/t1 0000000000000806 x7/t2 0000000000000005 x8/s0 ff20000000007100 x9/s1 0000000000000001 x10/a0 0000000000000001 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 ffffffff84eb86e4 x14/a4 0000000000000000 x15/a5 ff6000001a481a40 x16/a6 0000000000f00000 x17/a7 ff6000002b074227 x18/s2 0000000000000008 x19/s3 0000000000000008 x20/s4 ffffffff85b9632e x21/s5 ff6000001ba98000 x22/s6 1fe4000000000e5c x23/s7 ff6000001b4dd110 x24/s8 ffffffff89723a20 x25/s9 0000000000000000 x26/s10 ff6000001b4dd110 x27/s11 0000000000000000 x28/t3 ff6000001a482560 x29/t4 ffebffff0560e844 x30/t5 ffebffff0560e845 x31/t6 000000000000000a f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff861aac6a mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e5138 vstvec 0000000000000000 mepc ffffffff80083676 sepc ffffffff81d6368e vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a1cfb000000a8845 x0/zero 0000000000000000 x1/ra ffffffff861ab4ce x2/sp ff20000001d06920 x3/gp ffffffff899f64c0 x4/tp ff60000015e7cec0 x5/t0 ff20000001d071b4 x6/t1 ff20000001d06c00 x7/t2 7320666f20646165 x8/s0 ff20000001d06ad0 x9/s1 ff20000001d06e37 x10/a0 0000000000000001 x11/a1 000000000008ec73 x12/a2 0000000000080000 x13/a3 ffffffff86198d9e x14/a4 1fe40000003a0d40 x15/a5 ff60000015e7dec0 x16/a6 0000000000000003 x17/a7 ff20000001d06d87 x18/s2 000000000008ec73 x19/s3 ff20000001d06a00 x20/s4 ff20000081d06e2f x21/s5 0000000000000005 x22/s6 0000000000000006 x23/s7 ffffffffffffffff x24/s8 dfffffff00000000 x25/s9 ffffffffffffffff x26/s10 0000000000000017 x27/s11 0000000000000034 x28/t3 1fe40000003a0d80 x29/t4 ffe3ffff003a0db0 x30/t5 ffe3ffff003a0db1 x31/t6 ff20000001d06e37 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000