last executing test programs: 20m49.922395557s ago: executing program 0 (id=6010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 20m48.268969386s ago: executing program 0 (id=6011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 20m46.781335711s ago: executing program 0 (id=6014): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r0, &(0x7f00000002c0)="240000001e005f0214ba844d4005a3f114c000000066438ed9fae9444154904e6452ba84", 0x24) 20m45.598852176s ago: executing program 0 (id=6015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 20m43.365121732s ago: executing program 0 (id=6017): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 20m41.387533071s ago: executing program 0 (id=6019): mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x1d) 19m53.478408948s ago: executing program 32 (id=6019): mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x1d) 14m1.223272795s ago: executing program 1 (id=6255): bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() sync() 13m59.01922777s ago: executing program 1 (id=6257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}]}], {0x14}}, 0x74}}, 0x0) 13m57.463523936s ago: executing program 1 (id=6258): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 13m55.176643264s ago: executing program 1 (id=6260): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 13m52.585932392s ago: executing program 1 (id=6262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x400) 13m50.28398667s ago: executing program 1 (id=6263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m3.217105331s ago: executing program 33 (id=6263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.765389185s ago: executing program 3 (id=6760): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 11.606409856s ago: executing program 3 (id=6765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 11.168247729s ago: executing program 2 (id=6766): ioctl(0xffffffffffffffff, 0x227, &(0x7f00000004c0)="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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 9.141432249s ago: executing program 2 (id=6767): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x33]}}]}) 7.807386649s ago: executing program 3 (id=6768): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 7.371172962s ago: executing program 2 (id=6769): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0x121901, 0x0) write$proc_mixer(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.816186648s ago: executing program 2 (id=6770): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) 4.253903954s ago: executing program 3 (id=6771): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002040), 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 2.466344607s ago: executing program 2 (id=6772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) 2.232973784s ago: executing program 3 (id=6773): pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) r0 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 998.917721ms ago: executing program 3 (id=6774): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004c00)={0x14, r1, 0xe701ac47a3d23ecd, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 0s ago: executing program 2 (id=6775): syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) kernel console output (not intermixed with test programs): rface 255 altsetting 255: 255, using maximum allowed: 30 [ 4138.741646][T10963] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 4138.743106][T10963] usb 1-1: config 0 interface 255 has no altsetting 0 [ 4138.861533][T10963] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 4138.863730][T10963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4138.864970][T10963] usb 1-1: Product: syz [ 4138.865928][T10963] usb 1-1: Manufacturer: syz [ 4138.866890][T10963] usb 1-1: SerialNumber: syz [ 4138.942477][T10963] usb 1-1: config 0 descriptor?? [ 4140.002121][T10963] imon 1-1:0.255: unable to register, err -19 [ 4140.235882][T10963] usb 1-1: USB disconnect, device number 19 [ 4190.560720][T12506] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 4193.580500][T12510] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 4196.846905][T12547] cgroup: Need name or subsystem set [ 4208.108995][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 4216.907380][T12579] netlink: 'syz.0.1841': attribute type 6 has an invalid length. [ 4251.161939][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1860'. [ 4251.180050][T12617] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1860'. [ 4253.814178][T12620] ipt_REJECT: TCP_RESET invalid for non-tcp [ 4277.806635][T12653] netlink: 'syz.0.1878': attribute type 29 has an invalid length. [ 4279.761323][T12656] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1880'. [ 4311.767347][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'. [ 4328.311323][T12717] xt_ecn: cannot match TCP bits for non-tcp packets [ 4392.056498][T12820] veth0_vlan: entered allmulticast mode [ 4397.699502][T12701] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 4398.011755][T12701] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 4398.017814][T12701] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 57983, setting to 64 [ 4398.020585][T12701] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 4398.023007][T12701] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 4398.026569][T12701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4398.179509][T12832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4398.860738][T12701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 4398.894937][T12701] usb 2-1: invalid MIDI in EP 0 [ 4400.488083][T12701] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 4402.268590][ T9849] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 4402.336104][T12106] usb 2-1: USB disconnect, device number 19 [ 4402.572074][ T9849] usb 1-1: Using ep0 maxpacket: 16 [ 4402.969459][ T9849] usb 1-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 4402.971912][ T9849] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 4402.975831][ T9849] usb 1-1: Product: syz [ 4402.979399][ T9849] usb 1-1: SerialNumber: syz [ 4403.093070][ T9849] usb 1-1: config 0 descriptor?? [ 4403.214953][ T9849] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 4403.239656][ T9849] usb 1-1: Detected FT2232C/D [ 4404.489580][ T9849] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 4404.737646][ T9849] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 4404.836607][ T9849] usb 1-1: USB disconnect, device number 20 [ 4404.967199][ T9849] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 4404.978834][ T9849] ftdi_sio 1-1:0.0: device disconnected [ 4419.175976][T12892] IPv6: Can't replace route, no match found [ 4428.921418][T12904] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 4428.924913][T12904] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 4428.927794][T12904] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 4428.929200][T12904] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 4428.949728][T12904] geneve2: entered promiscuous mode [ 4428.954648][T12904] geneve2: entered allmulticast mode [ 4436.258788][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 4466.946816][T12965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 4508.850397][T13021] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 4510.045699][T13023] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 4519.058163][T13076] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 4519.059570][T13076] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2043'. [ 4529.577457][ T33] audit: type=1326 audit(4529.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2049" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 4530.207052][ T33] audit: type=1326 audit(4529.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2049" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdb636 code=0x0 [ 4549.228206][T13105] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2055'. [ 4552.542481][T13109] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 4552.549082][T13109] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 4556.540308][T13117] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2060'. [ 4556.542712][T13117] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2060'. [ 4556.548438][T13117] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2060'. [ 4560.286036][T13122] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 4560.287728][T13122] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 4560.290729][T13122] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 4560.292081][T13122] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 4560.299319][T13122] geneve3: entered promiscuous mode [ 4560.303135][T13122] geneve3: entered allmulticast mode [ 4562.792083][ T33] audit: type=1400 audit(4562.728:10): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A9625292F2F2E212D pid=13126 comm="syz.0.2064" [ 4564.730553][T13133] tmpfs: Bad value for 'mpol' [ 4583.186838][T13169] dvmrp1: entered allmulticast mode [ 4586.528686][T13175] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 4586.531994][T13175] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 4590.625866][T13181] netlink: 'syz.0.2088': attribute type 13 has an invalid length. [ 4601.839407][T13192] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2093'. [ 4615.205906][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 4640.447520][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2122'. [ 4640.489446][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2122'. [ 4642.897898][T13258] infiniband syz!: set down [ 4642.899945][T13258] infiniband syz!: added team_slave_0 [ 4642.938580][T13258] syz!: rxe_create_cq: returned err = -12 [ 4642.959667][T13258] infiniband syz!: Couldn't create ib_mad CQ [ 4642.975768][T13258] infiniband syz!: Couldn't open port 1 [ 4644.408826][T13258] RDS/IB: syz!: added [ 4644.459204][T13258] smc: adding ib device syz! with port count 1 [ 4644.477068][T13258] smc: ib device syz! port 1 has pnetid [ 4671.323272][T13291] autofs4:pid:13291:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 4676.458795][T13297] netlink: 'syz.0.2136': attribute type 21 has an invalid length. [ 4676.462470][T13297] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 4681.775404][T10985] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 4682.046380][T10985] usb 2-1: Using ep0 maxpacket: 32 [ 4682.189551][T10985] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 4682.191985][T10985] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 4682.202222][T10985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4682.214560][T10985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 4682.216877][T10985] usb 2-1: config 1 has no interface number 0 [ 4682.218954][T10985] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 4682.220769][T10985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4682.427488][T10985] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 4684.946863][T10985] snd_usb_pod 2-1:1.1: set_interface failed [ 4684.949443][T10985] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 4684.958960][T10985] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 4685.035033][T10985] usb 2-1: USB disconnect, device number 20 [ 4702.999545][T13337] netlink: 'syz.0.2150': attribute type 13 has an invalid length. [ 4703.001338][T13337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2150'. [ 4703.031342][T13337] syz_tun: refused to change device tx_queue_len [ 4703.032794][T13337] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 4703.467340][T13336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4729.258837][T13368] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 4763.532017][T13423] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 4763.548514][T13423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2191'. [ 4763.845543][T13424] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2192'. [ 4772.779338][T13434] kernel read not supported for file /'- (pid: 13434 comm: syz.1.2197) [ 4772.807357][ T33] audit: type=1800 audit(4772.738:11): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2197" name="'-" dev="mqueue" ino=16775 res=0 errno=0 [ 4780.317294][T13442] gtp0: entered promiscuous mode [ 4780.318668][T13442] gtp0: entered allmulticast mode [ 4787.562321][T13450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4788.910846][T13455] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 4797.829116][T13476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4801.638790][T13484] kernel read not supported for file /'- (pid: 13484 comm: syz.0.2221) [ 4801.655134][ T33] audit: type=1800 audit(4801.578:12): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2221" name="'-" dev="mqueue" ino=17653 res=0 errno=0 [ 4805.952608][T13496] kernel read not supported for file /'- (pid: 13496 comm: syz.1.2227) [ 4805.960270][ T33] audit: type=1800 audit(4805.898:13): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2227" name="'-" dev="mqueue" ino=16775 res=0 errno=0 [ 4810.808564][T13507] ubi0: attaching mtd0 [ 4810.831348][T13507] ubi0: scanning is finished [ 4810.832800][T13507] ubi0: empty MTD device detected [ 4811.130399][T13507] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 4811.131824][T13507] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 4811.133021][T13507] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 4811.150510][T13507] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 4811.151649][T13507] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 4811.152759][T13507] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 4811.155381][T13507] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 871364452 [ 4811.156656][T13507] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 4811.186865][T13509] ubi0: background thread "ubi_bgt0d" started, PID 13509 [ 4817.613036][T13523] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 4822.056721][T10985] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 4822.425319][T10985] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 4822.427943][T10985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4822.521870][T10985] usb 2-1: config 0 descriptor?? [ 4822.659258][T10985] cp210x 2-1:0.0: cp210x converter detected [ 4823.610509][T10985] usb 2-1: cp210x converter now attached to ttyUSB0 [ 4823.698871][T10985] usb 2-1: USB disconnect, device number 21 [ 4823.896685][T10985] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 4823.902394][T10985] cp210x 2-1:0.0: device disconnected [ 4826.136558][T13554] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2244'. [ 4828.377243][T13556] sctp: [Deprecated]: syz.0.2245 (pid 13556) Use of int in max_burst socket option deprecated. [ 4828.377243][T13556] Use struct sctp_assoc_value instead [ 4838.000560][T13570] x_tables: duplicate underflow at hook 1 [ 4862.986111][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 4862.987688][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 4878.892308][T13627] gtp0: entered promiscuous mode [ 4878.895174][T13627] gtp0: entered allmulticast mode [ 4883.805555][T13639] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 4884.887856][T13641] netlink: 'syz.0.2286': attribute type 21 has an invalid length. [ 4884.890917][T13641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2286'. [ 4888.730197][T13646] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 4904.162821][T13674] syz.1.2302 (13674): drop_caches: 0 [ 4937.082485][T13740] xt_ecn: cannot match TCP bits for non-tcp packets [ 4945.296764][T13756] netlink: 'syz.1.2341': attribute type 12 has an invalid length. [ 4956.746849][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 4957.017034][ T8] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 4957.027181][ T8] usb 1-1: config 0 has no interface number 0 [ 4957.030732][ T8] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 4957.035720][ T8] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 4957.038213][ T8] usb 1-1: config 0 interface 255 has no altsetting 0 [ 4957.046461][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 4957.048777][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4957.202481][ T8] usb 1-1: config 0 descriptor?? [ 4957.372120][ T8] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 4958.069857][ T8] usb 1-1: USB disconnect, device number 21 [ 4979.519984][T13830] netlink: 'syz.1.2369': attribute type 1 has an invalid length. [ 4979.525546][T13830] netlink: 'syz.1.2369': attribute type 2 has an invalid length. [ 5008.843100][T13889] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2397'. [ 5009.507487][T13891] xt_addrtype: ipv6 does not support BROADCAST matching [ 5034.829100][T13936] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 5037.287593][T13904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 5038.314267][T13904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5038.316984][T13904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 5038.340275][T13904] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 5038.517222][T13904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 5038.519796][T13904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5038.521722][T13904] usb 1-1: Product: syz [ 5038.523234][T13904] usb 1-1: Manufacturer: syz [ 5038.526852][T13904] usb 1-1: SerialNumber: syz [ 5038.767313][T13904] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 5038.768800][T13904] cdc_ncm 1-1:1.0: bind() failure [ 5040.370902][T11656] usb 1-1: USB disconnect, device number 22 [ 5044.682931][T13957] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 5063.582415][T13987] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 5063.585037][T13987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2436'. [ 5071.856188][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 5074.588234][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 5082.727537][T14026] ipt_rpfilter: unknown options [ 5095.442875][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 5095.507340][T10963] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 5095.795439][T10963] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 5095.797835][T10963] usb 2-1: config 179 has no interface number 0 [ 5095.799977][T10963] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 5095.802703][T10963] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 5095.806789][T10963] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 5095.808235][T10963] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 5095.810018][T10963] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 5095.811575][T10963] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 5095.812928][T10963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5095.898717][T14048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5095.947238][T10963] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 5095.983149][T10963] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 5096.342710][T10963] usb 2-1: USB disconnect, device number 22 [ 5098.482122][T14064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 5116.507366][T14098] netlink: 'syz.0.2482': attribute type 21 has an invalid length. [ 5116.511116][T14098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2482'. [ 5121.063173][T14108] tmpfs: Bad value for 'mpol' [ 5124.130343][T14112] netlink: 'syz.1.2489': attribute type 21 has an invalid length. [ 5124.132402][T14112] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2489'. [ 5130.448336][T14128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5132.022994][T14132] tmpfs: Bad value for 'mpol' [ 5133.080228][T14135] lo speed is unknown, defaulting to 1000 [ 5133.087006][T14135] lo speed is unknown, defaulting to 1000 [ 5133.097357][T14135] lo speed is unknown, defaulting to 1000 [ 5133.168316][T14135] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 5133.279730][T14135] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 5133.698000][T14135] lo speed is unknown, defaulting to 1000 [ 5133.722146][T14135] lo speed is unknown, defaulting to 1000 [ 5149.670102][T14167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2515'. [ 5157.812574][T14183] netlink: 'syz.1.2523': attribute type 5 has an invalid length. [ 5161.407428][T14193] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 5163.174863][T14197] nbd: must specify at least one socket [ 5169.232225][T14209] netlink: 'syz.0.2536': attribute type 2 has an invalid length. [ 5169.270885][T14209] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 5169.278318][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 5181.590424][T14233] netlink: 'syz.0.2548': attribute type 7 has an invalid length. [ 5182.912303][T14237] netlink: 'syz.0.2550': attribute type 11 has an invalid length. [ 5182.917939][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2550'. [ 5185.942796][T14243] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 5185.950522][T14243] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 5185.951845][T14243] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 5188.798132][T14250] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 5198.019194][T14273] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 5205.321542][T14289] netlink: 8388 bytes leftover after parsing attributes in process `syz.1.2574'. [ 5215.736099][T14309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2584'. [ 5220.025386][T14316] siw: device registration error -23 [ 5224.403062][T14326] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5231.356346][T14341] siw: device registration error -23 [ 5234.880241][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 5234.882688][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 5236.817863][T14353] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 5236.819283][T14353] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2606'. [ 5252.712093][T14382] netlink: 'syz.1.2620': attribute type 5 has an invalid length. [ 5262.945438][T14404] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 5262.947652][T14404] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2631'. [ 5286.914107][T14451] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 5294.570539][T14463] erspan0: default FDB implementation only supports local addresses [ 5300.557714][T14481] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 5306.986820][ T33] audit: type=1400 audit(5306.918:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=22090EA3680EB06A1A5FD3F7614E16D41267A0590DD509A5EFFE069BBBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07E pid=14489 comm="syz.1.2674" [ 5309.146549][T13244] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 5310.078452][T13244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32181, setting to 1023 [ 5310.257318][T13244] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 5310.259852][T13244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5310.262014][T13244] usb 1-1: Product: syz [ 5310.290470][T13244] usb 1-1: Manufacturer: syz [ 5310.292483][T13244] usb 1-1: SerialNumber: syz [ 5310.398125][T13244] usb 1-1: config 0 descriptor?? [ 5311.491829][T13244] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 5311.756754][T13244] usb 1-1: USB disconnect, device number 23 [ 5341.257939][T14556] xt_hashlimit: invalid rate [ 5349.317694][T14567] xt_TCPMSS: Only works on TCP SYN packets [ 5349.460196][T14568] ./file0: Can't open blockdev [ 5375.626363][T14624] netlink: 'syz.0.2733': attribute type 16 has an invalid length. [ 5375.627712][T14624] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2733'. [ 5382.715047][T13244] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 5382.995416][T13244] usb 2-1: Using ep0 maxpacket: 8 [ 5383.078473][T13244] usb 2-1: config 0 has an invalid interface number: 90 but max is 0 [ 5383.079835][T13244] usb 2-1: config 0 has no interface number 0 [ 5383.378097][T13244] usb 2-1: New USB device found, idVendor=10c4, idProduct=82f9, bcdDevice=1d.fb [ 5383.379616][T13244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5383.380896][T13244] usb 2-1: Product: syz [ 5383.381863][T13244] usb 2-1: Manufacturer: syz [ 5383.382956][T13244] usb 2-1: SerialNumber: syz [ 5383.499009][T13244] usb 2-1: config 0 descriptor?? [ 5383.568737][T13244] cp210x 2-1:0.90: cp210x converter detected [ 5384.341245][T13244] cp210x 2-1:0.90: failed to get vendor val 0x370b size 1: -71 [ 5384.362195][T13244] cp210x 2-1:0.90: querying part number failed [ 5384.513066][T13244] usb 2-1: cp210x converter now attached to ttyUSB0 [ 5384.672634][T13244] usb 2-1: USB disconnect, device number 23 [ 5385.036453][T13244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 5385.081209][T13244] cp210x 2-1:0.90: device disconnected [ 5394.676467][T13244] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 5394.904679][T13244] usb 2-1: Using ep0 maxpacket: 32 [ 5394.948829][T13244] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 5394.950206][T13244] usb 2-1: config 0 has no interface number 0 [ 5395.001658][T13244] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 5395.004025][T13244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5395.005328][T13244] usb 2-1: Product: syz [ 5395.006309][T13244] usb 2-1: Manufacturer: syz [ 5395.007260][T13244] usb 2-1: SerialNumber: syz [ 5395.079392][T13244] usb 2-1: config 0 descriptor?? [ 5395.233067][T13244] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 5395.930045][T13244] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 5395.942736][T13244] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 5397.096020][T13914] usb 2-1: USB disconnect, device number 24 [ 5414.987742][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 5414.989274][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 5425.662228][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 5428.531262][T14735] binfmt_misc: register: failed to install interpreter file ./file0 [ 5474.486570][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 5475.041648][T14815] xt_hashlimit: invalid interval [ 5483.979116][T14837] netlink: 'syz.1.2816': attribute type 21 has an invalid length. [ 5483.982494][T14837] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2816'. [ 5483.985290][T14837] netlink: 'syz.1.2816': attribute type 5 has an invalid length. [ 5483.986641][T14837] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2816'. [ 5510.675175][T13914] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 5511.048978][T13914] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5511.052673][T13914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 5511.068640][T13914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 5511.418614][T13914] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 5511.421262][T13914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5511.440518][T13914] usb 1-1: Product: syz [ 5511.442593][T13914] usb 1-1: Manufacturer: syz [ 5511.446449][T13914] usb 1-1: SerialNumber: syz [ 5511.582122][T13914] usb 1-1: config 0 descriptor?? [ 5511.661219][T14887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5511.849531][T13914] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 5512.924821][T13244] usb 1-1: USB disconnect, device number 24 [ 5551.147827][T14961] ======================================================= [ 5551.147827][T14961] WARNING: The mand mount option has been deprecated and [ 5551.147827][T14961] and is ignored by this kernel. Remove the mand [ 5551.147827][T14961] option from the mount to silence this warning. [ 5551.147827][T14961] ======================================================= [ 5565.492102][T14990] cgroup: Invalid name [ 5577.671713][T15010] Device name cannot be null; rc = [-22] [ 5592.190309][T15029] cgroup: Bad value for 'name' [ 5616.547729][T15073] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 5616.549300][T15073] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2918'. [ 5620.615101][T15081] tc_dump_action: action bad kind [ 5631.523047][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 5639.425259][T15111] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2936'. [ 5648.350567][T15120] ipt_ECN: cannot use operation on non-tcp rule [ 5666.130439][T15148] xt_bpf: check failed: parse error [ 5679.799832][T15171] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 5708.605887][T15219] netlink: 'syz.0.2988': attribute type 4 has an invalid length. [ 5708.614639][T15219] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2988'. [ 5719.485429][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 5719.487217][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 5727.332786][T15247] netlink: 'syz.1.3004': attribute type 2 has an invalid length. [ 5727.335509][T15247] netlink: 'syz.1.3004': attribute type 1 has an invalid length. [ 5729.729980][T15251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3006'. [ 5736.740108][T15263] xt_policy: too many policy elements [ 5739.502856][T15267] misc userio: The device must be registered before sending interrupts [ 5756.971280][T15326] xt_hashlimit: overflow, try lower: 3/0 [ 5759.688777][T15330] xt_limit: Overflow, try lower: 0/0 [ 5770.002939][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3036'. [ 5776.430097][T15357] dlm: no locking on control device [ 5808.262832][T15412] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 5808.267818][T15412] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 5808.269935][T15412] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 5824.002365][T15438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3081'. [ 5837.057702][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3089'. [ 5837.059134][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 5839.067624][T15456] xt_SECMARK: invalid mode: 0 [ 5843.352343][T15464] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 5843.358339][T15464] Error validating options; rc = [-22] [ 5849.536520][T15507] netlink: 'syz.0.3099': attribute type 9 has an invalid length. [ 5857.523704][ C0] hrtimer: interrupt took 878200 ns [ 5891.241939][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 5901.690196][T15592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3140'. [ 5919.476156][T15624] tmpfs: Bad value for 'mpol' [ 5934.421440][T15659] sctp: [Deprecated]: syz.0.3173 (pid 15659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 5934.421440][T15659] Use struct sctp_sack_info instead [ 5961.639865][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3191'. [ 5973.081003][T15714] usb usb1: usbfs: process 15714 (syz.1.3199) did not claim interface 8 before use [ 5988.215901][T15741] netlink: 'syz.1.3212': attribute type 4 has an invalid length. [ 5996.771754][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 6007.378175][T15775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3227'. [ 6011.346533][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3231'. [ 6012.940607][T15788] netlink: 'syz.1.3232': attribute type 21 has an invalid length. [ 6012.942415][T15788] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3232'. [ 6012.945931][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'. [ 6022.779069][T15807] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3242'. [ 6024.136231][T15809] tmpfs: Bad value for 'mpol' [ 6025.396824][T15813] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 6053.189279][T15964] netlink: 'syz.0.3260': attribute type 3 has an invalid length. [ 6092.273042][T16040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6096.727339][T16056] netlink: 'syz.1.3301': attribute type 21 has an invalid length. [ 6096.730225][T16056] netlink: 'syz.1.3301': attribute type 2 has an invalid length. [ 6096.732004][T16056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3301'. [ 6099.105473][T16062] dlm: non-version read from control device 184 [ 6106.451581][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'. [ 6110.011499][T16085] dlm: no locking on control device [ 6114.428765][T16096] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3321'. [ 6117.178556][T16100] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 6117.179860][T16100] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3323'. [ 6118.965060][ T33] audit: type=1400 audit(6118.898:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=16103 comm="syz.1.3325" [ 6125.625479][T16122] tmpfs: Bad value for 'mpol' [ 6139.921040][T16156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6139.927502][T16156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6139.929922][T16156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6139.932041][T16156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6139.959473][T16156] geneve1: entered allmulticast mode [ 6150.591912][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 6171.451085][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3381'. [ 6171.456914][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3381'. [ 6173.394786][T16232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3384'. [ 6196.155137][T16271] netlink: 'syz.0.3403': attribute type 2 has an invalid length. [ 6196.156590][T16271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 6200.701104][T16279] devtmpfs: Cannot enable quota on remount [ 6205.951718][T16289] ip6t_REJECT: ECHOREPLY is not supported [ 6212.546158][T16303] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3419'. [ 6229.938750][T16335] sit0: entered promiscuous mode [ 6230.136098][T16335] netlink: 'syz.1.3435': attribute type 1 has an invalid length. [ 6230.137583][T16335] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3435'. [ 6238.280027][T16354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6238.281806][T16354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6238.294264][T16354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6238.295780][T16354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6238.325966][T16354] geneve1: entered allmulticast mode [ 6240.421491][T16359] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 6243.517976][T16363] netlink: 'syz.1.3448': attribute type 58 has an invalid length. [ 6243.519463][T16363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'. [ 6273.321399][T16409] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 6279.776751][ T33] audit: type=1400 audit(6279.718:16): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16420 comm="syz.0.3476" [ 6291.248832][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3487'. [ 6313.959995][T16495] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3510'. [ 6330.267463][T16521] netlink: 700 bytes leftover after parsing attributes in process `syz.0.3523'. [ 6349.743991][T16554] gretap1: entered promiscuous mode [ 6357.560040][T16579] tmpfs: Bad value for 'mpol' [ 6369.745495][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'. [ 6371.202424][T16608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6371.225949][T16608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6371.228368][T16608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6371.231172][T16608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6371.257493][T16608] geneve5: entered promiscuous mode [ 6371.259895][T16608] geneve5: entered allmulticast mode [ 6374.541130][T16616] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3567'. [ 6380.610682][T16626] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 6395.659110][T16656] lo speed is unknown, defaulting to 1000 [ 6395.678107][T16656] lo speed is unknown, defaulting to 1000 [ 6395.685641][T16656] lo speed is unknown, defaulting to 1000 [ 6396.917271][T13244] lo speed is unknown, defaulting to 1000 [ 6396.921854][T16656] infiniband syz2: set active [ 6396.922922][T16656] infiniband syz2: added lo [ 6397.828445][T16656] RDS/IB: syz2: added [ 6397.829997][T16656] smc: adding ib device syz2 with port count 1 [ 6397.831015][T16656] smc: ib device syz2 port 1 has pnetid [ 6397.832484][T16652] lo speed is unknown, defaulting to 1000 [ 6397.875980][T16656] lo speed is unknown, defaulting to 1000 [ 6399.669014][T16656] lo speed is unknown, defaulting to 1000 [ 6404.567765][T16678] netlink: 'syz.1.3594': attribute type 21 has an invalid length. [ 6404.570070][T16678] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3594'. [ 6404.604519][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 6429.530446][T16729] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 6429.726548][T16730] wireguard1: entered promiscuous mode [ 6429.728187][T16730] wireguard1: entered allmulticast mode [ 6448.266438][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 6466.159993][T16804] netlink: 'syz.1.3652': attribute type 21 has an invalid length. [ 6466.161446][T16804] netlink: 'syz.1.3652': attribute type 20 has an invalid length. [ 6466.162647][T16804] IPv6: NLM_F_CREATE should be specified when creating new route [ 6472.828800][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 6494.372730][T16864] xt_hashlimit: max too large, truncated to 1048576 [ 6498.387637][T16874] usb usb1: usbfs: process 16874 (syz.0.3683) did not claim interface 0 before use [ 6505.666745][T16888] dvmrp1: left allmulticast mode [ 6511.309868][T16908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 6517.394566][T16926] syz.1.3703 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 6532.430425][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3717'. [ 6547.603133][T16990] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 6550.891165][T16999] netlink: 'syz.1.3738': attribute type 6 has an invalid length. [ 6573.798632][T17046] netlink: 'syz.1.3760': attribute type 30 has an invalid length. [ 6575.665827][T17051] netlink: 'syz.1.3762': attribute type 21 has an invalid length. [ 6575.667299][T17051] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3762'. [ 6575.698899][T17051] netlink: 'syz.1.3762': attribute type 4 has an invalid length. [ 6575.700631][T17051] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3762'. [ 6590.216592][T13914] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 6590.769033][T13914] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 6590.771461][T13914] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 6590.791953][T13914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 6590.818356][T13914] usb 2-1: config 1 has no interface number 0 [ 6590.820800][T13914] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 6590.823065][T13914] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 6590.847301][T13914] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 6590.850509][T13914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6591.177596][T13914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 6592.148795][T13914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 6593.216080][T13244] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 6593.815033][T16652] usb 2-1: USB disconnect, device number 25 [ 6593.897116][T16652] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 6610.056472][T17128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 6612.577443][T17134] ./file0: Can't lookup blockdev [ 6614.154593][T17136] IPv6: NLM_F_CREATE should be specified when creating new route [ 6618.687754][T17143] netlink: 'syz.0.3801': attribute type 12 has an invalid length. [ 6618.689353][T17143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3801'. [ 6619.058251][T17096] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 6619.529821][T17096] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 6619.532362][T17096] usb 2-1: config 0 has no interface number 0 [ 6619.548322][T17096] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 6619.550665][T17096] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 6619.667726][T17096] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 6619.690280][T17096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6619.696172][T17096] usb 2-1: Product: syz [ 6619.697811][T17096] usb 2-1: Manufacturer: syz [ 6619.699298][T17096] usb 2-1: SerialNumber: syz [ 6619.816887][T17096] usb 2-1: config 0 descriptor?? [ 6619.847063][T17144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 6619.920279][T17096] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 6620.125116][T17096] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 6620.535665][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 6620.751092][T11656] usb 2-1: USB disconnect, device number 26 [ 6620.922978][T11656] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 6620.951078][T11656] cyberjack 2-1:0.69: device disconnected [ 6655.726939][T17225] netlink: 'syz.1.3830': attribute type 5 has an invalid length. [ 6669.270941][T17248] ip6t_srh: unknown srh match flags 4000 [ 6697.442683][T17287] syz.0.3854: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 6697.452941][T17287] CPU: 0 UID: 0 PID: 17287 Comm: syz.0.3854 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 6697.454353][T17287] Hardware name: riscv-virtio,qemu (DT) [ 6697.455448][T17287] Call Trace: [ 6697.456282][T17287] [] dump_backtrace+0x2e/0x3c [ 6697.458010][T17287] [] show_stack+0x30/0x3c [ 6697.459559][T17287] [] dump_stack_lvl+0x12e/0x1a6 [ 6697.461390][T17287] [] dump_stack+0x1c/0x24 [ 6697.463113][T17287] [] warn_alloc+0x170/0x292 [ 6697.464838][T17287] [] __vmalloc_node_range_noprof+0xfb6/0x120e [ 6697.466857][T17287] [] vmalloc_user_noprof+0xf8/0x126 [ 6697.468746][T17287] [] xskq_create+0xf2/0x1ae [ 6697.470359][T17287] [] xsk_setsockopt+0x338/0x8f0 [ 6697.471897][T17287] [] do_sock_setsockopt+0x208/0x400 [ 6697.473643][T17287] [] __sys_setsockopt+0x140/0x1cc [ 6697.475279][T17287] [] __riscv_sys_setsockopt+0xa6/0x114 [ 6697.476981][T17287] [] syscall_handler+0x94/0x118 [ 6697.478629][T17287] [] do_trap_ecall_u+0x1aa/0x216 [ 6697.480424][T17287] [] handle_exception+0x146/0x152 [ 6697.499002][T17287] Mem-Info: [ 6697.501961][T17287] active_anon:1335 inactive_anon:0 isolated_anon:0 [ 6697.501961][T17287] active_file:13223 inactive_file:36641 isolated_file:0 [ 6697.501961][T17287] unevictable:768 dirty:94 writeback:0 [ 6697.501961][T17287] slab_reclaimable:2557 slab_unreclaimable:28734 [ 6697.501961][T17287] mapped:12566 shmem:842 pagetables:355 [ 6697.501961][T17287] sec_pagetables:0 bounce:0 [ 6697.501961][T17287] kernel_misc_reclaimable:0 [ 6697.501961][T17287] free:211842 free_pcp:789 free_cma:52608 [ 6697.538072][T17287] Node 0 active_anon:5340kB inactive_anon:0kB active_file:52892kB inactive_file:146564kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50264kB dirty:376kB writeback:0kB shmem:3368kB writeback_tmp:0kB kernel_stack:6072kB pagetables:1420kB sec_pagetables:0kB all_unreclaimable? no [ 6697.543104][T17287] Node 0 DMA32 free:847368kB boost:0kB min:4784kB low:6212kB high:7640kB reserved_highatomic:0KB active_anon:5340kB inactive_anon:0kB active_file:52892kB inactive_file:146564kB unevictable:3072kB writepending:376kB present:2097152kB managed:1434264kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:2280kB free_cma:210432kB [ 6697.593121][T17287] lowmem_reserve[]: 0 0 0 [ 6697.656984][T17287] Node 0 DMA32: 2*4kB (ME) 4*8kB (ME) 552*16kB (ME) 475*32kB (ME) 366*64kB (UME) 113*128kB (UME) 70*256kB (UME) 43*512kB (UMC) 22*1024kB (UMEC) 11*2048kB (UM) 171*4096kB (UMC) = 847368kB [ 6697.713665][T17287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 6697.715634][T17287] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 6697.756075][T17287] 50706 total pagecache pages [ 6697.758110][T17287] 0 pages in swap cache [ 6697.759770][T17287] Free swap = 124732kB [ 6697.761312][T17287] Total swap = 124996kB [ 6697.763078][T17287] 524288 pages RAM [ 6697.779181][T17287] 0 pages HighMem/MovableOnly [ 6697.780781][T17287] 165722 pages reserved [ 6697.782244][T17287] 52736 pages cma reserved [ 6702.101391][T17297] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 6731.159936][T17359] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 6741.598567][T17373] dlm: non-version read from control device 0 [ 6745.427404][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3900'. [ 6746.847655][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 6747.668771][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 6747.982231][T17385] tmpfs: Group quota inode hardlimit too large. [ 6749.738675][T17387] sit0: entered allmulticast mode [ 6756.470925][T17397] sock: sock_timestamping_bind_phc: sock not bind to device [ 6780.122498][T17437] netlink: 'syz.0.3926': attribute type 4 has an invalid length. [ 6785.821055][T17446] xt_l2tp: missing protocol rule (udp|l2tpip) [ 6797.878755][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3941'. [ 6824.542151][T17515] netlink: 'syz.0.3964': attribute type 75 has an invalid length. [ 6830.848084][T17529] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3969'. [ 6830.889327][T17529] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3969'. [ 6830.890789][T17529] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3969'. [ 6841.287558][T17551] netlink: 'syz.1.3981': attribute type 4 has an invalid length. [ 6847.696249][T17562] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 6851.922361][T17570] tmpfs: Bad value for 'mpol' [ 6867.245297][T15780] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 6867.581939][T15780] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 6867.586325][T15780] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 6867.588989][T15780] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 6867.595324][T15780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6867.756888][T17601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 6867.910137][T15780] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 6879.258288][T11656] usb 2-1: USB disconnect, device number 27 [ 6886.960274][T17650] netlink: 'syz.0.4014': attribute type 11 has an invalid length. [ 6893.155865][T17668] netlink: 'syz.1.4023': attribute type 5 has an invalid length. [ 6899.235461][T17678] tmpfs: Bad value for 'mpol' [ 6902.758703][T17684] netlink: 'syz.1.4031': attribute type 2 has an invalid length. [ 6902.760357][T17684] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4031'. [ 6905.162405][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4034'. [ 6909.179411][T17700] raw_sendmsg: syz.1.4038 forgot to set AF_INET. Fix it! [ 6919.900059][T17720] misc userio: No port type given on /dev/userio [ 6928.202855][T17738] xt_TCPMSS: Only works on TCP SYN packets [ 6932.207383][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 6966.357345][T17840] netlink: 'syz.0.4087': attribute type 2 has an invalid length. [ 6966.358736][T17840] netlink: 'syz.0.4087': attribute type 1 has an invalid length. [ 6972.964335][T17858] netlink: 'syz.1.4096': attribute type 3 has an invalid length. [ 6979.077667][T17870] lo: entered promiscuous mode [ 6979.079974][T17870] lo: entered allmulticast mode [ 6979.108044][T17870] tunl0: entered promiscuous mode [ 6979.110357][T17870] tunl0: entered allmulticast mode [ 6979.371629][T17870] gre0: entered promiscuous mode [ 6979.385066][T17870] gre0: entered allmulticast mode [ 6979.446592][T17870] gretap0: entered promiscuous mode [ 6979.448821][T17870] gretap0: entered allmulticast mode [ 6979.762650][T17870] erspan0: entered promiscuous mode [ 6979.775150][T17870] erspan0: entered allmulticast mode [ 6980.050924][T17870] ip_vti0: entered promiscuous mode [ 6980.053131][T17870] ip_vti0: entered allmulticast mode [ 6980.348968][T17870] ip6_vti0: entered promiscuous mode [ 6980.365318][T17870] ip6_vti0: entered allmulticast mode [ 6982.270532][T17870] ip6tnl0: entered promiscuous mode [ 6982.271964][T17870] ip6tnl0: entered allmulticast mode [ 6982.873151][T17870] ip6gre0: entered promiscuous mode [ 6982.938727][T17870] ip6gre0: entered allmulticast mode [ 6983.842146][T17870] syz_tun: entered promiscuous mode [ 6983.845924][T17870] syz_tun: entered allmulticast mode [ 6984.481448][T17870] ip6gretap0: entered promiscuous mode [ 6984.495439][T17870] ip6gretap0: entered allmulticast mode [ 6984.677351][T17877] netlink: 'syz.0.4105': attribute type 1 has an invalid length. [ 6984.771636][T17870] vcan0: entered promiscuous mode [ 6984.772917][T17870] vcan0: entered allmulticast mode [ 6984.851467][T17870] bond0: entered promiscuous mode [ 6984.854054][T17870] bond_slave_0: entered promiscuous mode [ 6984.857511][T17870] bond_slave_1: entered promiscuous mode [ 6984.860223][T17870] bond0: entered allmulticast mode [ 6984.861348][T17870] bond_slave_0: entered allmulticast mode [ 6984.862428][T17870] bond_slave_1: entered allmulticast mode [ 6985.028766][T17870] dummy0: entered promiscuous mode [ 6985.030016][T17870] dummy0: entered allmulticast mode [ 6985.257869][T17870] nlmon0: entered promiscuous mode [ 6985.259248][T17870] nlmon0: entered allmulticast mode [ 6985.357367][T17870] vxcan0: entered promiscuous mode [ 6985.358668][T17870] vxcan0: entered allmulticast mode [ 6985.407849][T17870] vxcan1: entered promiscuous mode [ 6985.409216][T17870] vxcan1: entered allmulticast mode [ 6985.452324][T17870] veth0: entered promiscuous mode [ 6985.465505][T17870] veth0: entered allmulticast mode [ 6985.696884][T17870] veth1: entered promiscuous mode [ 6985.698119][T17870] veth1: entered allmulticast mode [ 6985.955688][T17870] wg0: entered promiscuous mode [ 6985.957015][T17870] wg0: entered allmulticast mode [ 6986.074708][T17870] wg1: entered promiscuous mode [ 6986.075919][T17870] wg1: entered allmulticast mode [ 6986.208202][T17870] wg2: entered promiscuous mode [ 6986.209836][T17870] wg2: entered allmulticast mode [ 6986.327895][T17870] veth0_to_bridge: entered promiscuous mode [ 6986.329259][T17870] veth0_to_bridge: entered allmulticast mode [ 6986.466900][T17870] bridge_slave_0: entered promiscuous mode [ 6986.468423][T17870] bridge_slave_0: entered allmulticast mode [ 6986.615093][T17870] veth1_to_bridge: entered promiscuous mode [ 6986.616387][T17870] veth1_to_bridge: entered allmulticast mode [ 6986.794088][T17870] bridge_slave_1: entered promiscuous mode [ 6986.795493][T17870] bridge_slave_1: entered allmulticast mode [ 6987.184810][T17870] veth0_to_bond: entered promiscuous mode [ 6987.186117][T17870] veth0_to_bond: entered allmulticast mode [ 6987.402195][T17870] veth1_to_bond: entered promiscuous mode [ 6987.404763][T17870] veth1_to_bond: entered allmulticast mode [ 6987.601814][T17870] veth0_to_team: entered promiscuous mode [ 6987.605672][T17870] veth0_to_team: entered allmulticast mode [ 6987.716325][T17870] team_slave_0: entered promiscuous mode [ 6987.717673][T17870] team_slave_0: entered allmulticast mode [ 6987.746648][T17870] veth1_to_team: entered promiscuous mode [ 6987.747921][T17870] veth1_to_team: entered allmulticast mode [ 6987.845854][T17870] team_slave_1: entered promiscuous mode [ 6987.847150][T17870] team_slave_1: entered allmulticast mode [ 6987.877654][T17870] veth0_to_batadv: entered promiscuous mode [ 6987.878912][T17870] veth0_to_batadv: entered allmulticast mode [ 6988.034355][T17870] batadv_slave_0: entered promiscuous mode [ 6988.037301][T17870] batadv_slave_0: entered allmulticast mode [ 6988.138708][T17870] veth1_to_batadv: entered promiscuous mode [ 6988.140297][T17870] veth1_to_batadv: entered allmulticast mode [ 6988.505872][T17870] batadv_slave_1: entered promiscuous mode [ 6988.507140][T17870] batadv_slave_1: entered allmulticast mode [ 6988.606479][T17870] xfrm0: entered promiscuous mode [ 6988.607644][T17870] xfrm0: entered allmulticast mode [ 6988.729747][T17870] veth0_to_hsr: entered promiscuous mode [ 6988.731375][T17870] veth0_to_hsr: entered allmulticast mode [ 6988.758610][T17870] hsr_slave_0: entered allmulticast mode [ 6988.968249][T17870] veth1_to_hsr: entered promiscuous mode [ 6988.969557][T17870] veth1_to_hsr: entered allmulticast mode [ 6989.149173][T17870] hsr_slave_1: entered allmulticast mode [ 6989.276040][T17870] hsr0: entered promiscuous mode [ 6989.277300][T17870] hsr0: entered allmulticast mode [ 6989.454433][T17870] veth1_virt_wifi: entered promiscuous mode [ 6989.456104][T17870] veth1_virt_wifi: entered allmulticast mode [ 6989.745614][T17870] veth0_virt_wifi: entered promiscuous mode [ 6989.747117][T17870] veth0_virt_wifi: entered allmulticast mode [ 6989.870249][T17870] veth1_vlan: entered allmulticast mode [ 6989.996628][T17870] veth0_vlan: entered allmulticast mode [ 6991.512589][T17870] vlan0: entered promiscuous mode [ 6991.519327][T17870] vlan0: entered allmulticast mode [ 6991.557496][T17870] vlan1: entered promiscuous mode [ 6991.559648][T17870] vlan1: entered allmulticast mode [ 6991.579008][T17870] macvlan0: entered promiscuous mode [ 6991.581512][T17870] macvlan0: entered allmulticast mode [ 6991.637847][T17870] macvlan1: entered promiscuous mode [ 6991.640626][T17870] macvlan1: entered allmulticast mode [ 6991.822244][T17870] ipvlan0: entered promiscuous mode [ 6991.847282][T17870] ipvlan0: entered allmulticast mode [ 6991.871412][T17870] ipvlan1: entered promiscuous mode [ 6991.886392][T17870] ipvlan1: entered allmulticast mode [ 6991.940853][T17870] veth1_macvtap: entered allmulticast mode [ 6992.391574][T17870] veth0_macvtap: entered allmulticast mode [ 6992.838783][T17870] macvtap0: entered promiscuous mode [ 6992.840063][T17870] macvtap0: entered allmulticast mode [ 6993.070804][T17870] macsec0: entered promiscuous mode [ 6993.072916][T17870] macsec0: entered allmulticast mode [ 6993.288615][T17870] geneve1: entered promiscuous mode [ 6993.291494][T17870] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 6993.292760][T17870] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 6993.348973][T17870] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 6993.350343][T17870] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 6993.746408][T17870] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 6993.747796][T17870] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 6994.188960][T17870] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 6994.190361][T17870] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 6994.329580][T17870] ipip0: entered promiscuous mode [ 6994.330967][T17870] ipip0: entered allmulticast mode [ 6994.379147][T17870] erspan1: entered allmulticast mode [ 6994.537235][T17870] syztnl1: entered promiscuous mode [ 6994.538486][T17870] syztnl1: entered allmulticast mode [ 6994.541564][T17870] ip6erspan0: entered promiscuous mode [ 6994.542772][T17870] ip6erspan0: entered allmulticast mode [ 6994.571818][T17870] bond1: entered promiscuous mode [ 6994.573116][T17870] bond1: entered allmulticast mode [ 6994.591008][T17870] bond2: entered promiscuous mode [ 6994.592149][T17870] bond2: entered allmulticast mode [ 6994.616160][T17870] bond3: entered promiscuous mode [ 6994.617472][T17870] bond3: entered allmulticast mode [ 6994.619934][T17870] geneve2: entered promiscuous mode [ 6994.620998][T17870] geneve2: entered allmulticast mode [ 6994.671429][T17870] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 6994.684519][T17870] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 6994.685411][T17870] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 6994.685922][T17870] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 6995.006023][T17870] xfrm1: entered promiscuous mode [ 6995.007255][T17870] xfrm1: entered allmulticast mode [ 6995.009916][T17870] gtp1: entered promiscuous mode [ 6995.010855][T17870] gtp1: entered allmulticast mode [ 6995.049449][T17870] bond4: entered promiscuous mode [ 6995.050642][T17870] bond4: entered allmulticast mode [ 6995.052996][T17870] gretap1: entered promiscuous mode [ 6995.066583][T17870] gretap1: entered allmulticast mode [ 6995.069563][T17870] sit1: entered promiscuous mode [ 6995.070527][T17870] sit1: entered allmulticast mode [ 6995.072556][T17870] sit2: entered promiscuous mode [ 6995.105127][T17870] sit2: entered allmulticast mode [ 6995.107781][T17870] bond5: entered promiscuous mode [ 6995.108799][T17870] bond5: entered allmulticast mode [ 6997.561671][T17890] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 7016.731594][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4132'. [ 7019.129732][T17947] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 7027.494904][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4141'. [ 7038.239573][T17992] tmpfs: Bad value for 'huge' [ 7059.746421][T11656] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 7060.057322][T11656] usb 2-1: Using ep0 maxpacket: 8 [ 7060.146207][T11656] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 7060.148312][T11656] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 7060.150172][T11656] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 7060.225436][T11656] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 7060.227351][T11656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7060.228379][T11656] usb 2-1: Product: syz [ 7060.229279][T11656] usb 2-1: Manufacturer: syz [ 7060.230144][T11656] usb 2-1: SerialNumber: syz [ 7062.307050][T11656] usb 2-1: 0:2 : does not exist [ 7062.957023][T11656] usb 2-1: USB disconnect, device number 28 [ 7069.761758][T18064] netlink: 'syz.0.4178': attribute type 3 has an invalid length. [ 7076.231403][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'. [ 7076.358449][T18081] vlan2: entered allmulticast mode [ 7081.602622][T18098] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 7109.731197][T18172] @ÿ: renamed from bond_slave_0 (while UP) [ 7120.713248][T18188] x_tables: ip_tables: osf match: only valid for protocol 6 [ 7126.161964][T18202] lo: entered promiscuous mode [ 7126.165096][T18202] lo: entered allmulticast mode [ 7126.310760][T18202] infiniband syz2: set down [ 7126.322495][T18202] tunl0: entered promiscuous mode [ 7126.328089][T18202] tunl0: entered allmulticast mode [ 7126.447885][T18202] gre0: entered promiscuous mode [ 7126.449202][T18202] gre0: entered allmulticast mode [ 7126.472674][T18202] gretap0: entered promiscuous mode [ 7126.484747][T18202] gretap0: entered allmulticast mode [ 7126.857807][T18202] erspan0: entered promiscuous mode [ 7126.859880][T18202] erspan0: entered allmulticast mode [ 7127.106317][T18202] ip_vti0: entered promiscuous mode [ 7127.107555][T18202] ip_vti0: entered allmulticast mode [ 7127.326032][T18202] ip6_vti0: entered promiscuous mode [ 7127.327287][T18202] ip6_vti0: entered allmulticast mode [ 7127.492187][T18202] sit0: entered promiscuous mode [ 7127.507824][T18202] sit0: entered allmulticast mode [ 7127.708942][T18202] ip6tnl0: entered promiscuous mode [ 7127.710191][T18202] ip6tnl0: entered allmulticast mode [ 7127.986174][T18202] ip6gre0: entered promiscuous mode [ 7127.989423][T18202] ip6gre0: entered allmulticast mode [ 7128.362977][T18202] syz_tun: entered promiscuous mode [ 7128.366553][T18202] syz_tun: entered allmulticast mode [ 7128.503139][T18202] ip6gretap0: entered promiscuous mode [ 7128.508098][T18202] ip6gretap0: entered allmulticast mode [ 7128.621469][T18202] vcan0: entered promiscuous mode [ 7128.622797][T18202] vcan0: entered allmulticast mode [ 7128.672429][T18202] bond0: entered promiscuous mode [ 7128.676293][T18202] @ÿ: entered promiscuous mode [ 7128.678916][T18202] bond_slave_1: entered promiscuous mode [ 7128.681324][T18202] bond0: entered allmulticast mode [ 7128.682361][T18202] @ÿ: entered allmulticast mode [ 7128.720113][T18202] bond_slave_1: entered allmulticast mode [ 7128.734461][T18202] dummy0: entered promiscuous mode [ 7128.735631][T18202] dummy0: entered allmulticast mode [ 7128.821467][T18202] nlmon0: entered promiscuous mode [ 7128.822751][T18202] nlmon0: entered allmulticast mode [ 7128.897556][T18202] vxcan0: entered promiscuous mode [ 7128.898785][T18202] vxcan0: entered allmulticast mode [ 7128.972362][T18202] vxcan1: entered promiscuous mode [ 7128.980595][T18202] vxcan1: entered allmulticast mode [ 7129.046690][T18202] veth0: entered promiscuous mode [ 7129.047925][T18202] veth0: entered allmulticast mode [ 7129.510413][T18202] veth1: entered promiscuous mode [ 7129.512636][T18202] veth1: entered allmulticast mode [ 7129.922333][T18202] wg0: entered promiscuous mode [ 7129.928380][T18202] wg0: entered allmulticast mode [ 7130.142715][T18202] wg1: entered promiscuous mode [ 7130.147224][T18202] wg1: entered allmulticast mode [ 7130.347141][T18202] wg2: entered promiscuous mode [ 7130.349333][T18202] wg2: entered allmulticast mode [ 7130.502521][T18202] veth0_to_bridge: entered promiscuous mode [ 7130.509179][T18202] veth0_to_bridge: entered allmulticast mode [ 7130.805913][T18202] bridge_slave_0: entered promiscuous mode [ 7130.808074][T18202] bridge_slave_0: entered allmulticast mode [ 7130.986505][T18202] veth1_to_bridge: entered promiscuous mode [ 7130.987775][T18202] veth1_to_bridge: entered allmulticast mode [ 7131.091822][T18202] bridge_slave_1: entered promiscuous mode [ 7131.093126][T18202] bridge_slave_1: entered allmulticast mode [ 7131.385614][T18202] veth0_to_bond: entered promiscuous mode [ 7131.387966][T18202] veth0_to_bond: entered allmulticast mode [ 7131.681008][T18202] veth1_to_bond: entered promiscuous mode [ 7131.682270][T18202] veth1_to_bond: entered allmulticast mode [ 7131.814973][T18202] veth0_to_team: entered promiscuous mode [ 7131.818595][T18202] veth0_to_team: entered allmulticast mode [ 7131.896327][T18202] team_slave_0: entered promiscuous mode [ 7131.897656][T18202] team_slave_0: entered allmulticast mode [ 7131.937924][T18202] veth1_to_team: entered promiscuous mode [ 7131.939233][T18202] veth1_to_team: entered allmulticast mode [ 7132.039889][T18202] team_slave_1: entered promiscuous mode [ 7132.041346][T18202] team_slave_1: entered allmulticast mode [ 7132.070010][T18202] veth0_to_batadv: entered promiscuous mode [ 7132.071650][T18202] veth0_to_batadv: entered allmulticast mode [ 7132.191478][T18202] batadv_slave_0: entered promiscuous mode [ 7132.192701][T18202] batadv_slave_0: entered allmulticast mode [ 7132.290364][T18202] veth1_to_batadv: entered promiscuous mode [ 7132.291675][T18202] veth1_to_batadv: entered allmulticast mode [ 7132.389918][T18202] batadv_slave_1: entered promiscuous mode [ 7132.391303][T18202] batadv_slave_1: entered allmulticast mode [ 7132.488917][T18202] xfrm0: entered promiscuous mode [ 7132.490447][T18202] xfrm0: entered allmulticast mode [ 7132.590835][T18202] veth0_to_hsr: entered promiscuous mode [ 7132.592096][T18202] veth0_to_hsr: entered allmulticast mode [ 7132.762398][T18202] hsr_slave_0: entered allmulticast mode [ 7132.845607][T18202] veth1_to_hsr: entered promiscuous mode [ 7132.846849][T18202] veth1_to_hsr: entered allmulticast mode [ 7132.919190][T18202] hsr_slave_1: entered allmulticast mode [ 7132.969119][T18202] hsr0: entered promiscuous mode [ 7132.970386][T18202] hsr0: entered allmulticast mode [ 7133.004927][T18202] veth1_virt_wifi: entered promiscuous mode [ 7133.006201][T18202] veth1_virt_wifi: entered allmulticast mode [ 7133.088740][T18202] veth0_virt_wifi: entered promiscuous mode [ 7133.090107][T18202] veth0_virt_wifi: entered allmulticast mode [ 7133.207448][T18202] veth1_vlan: entered allmulticast mode [ 7133.577329][T18202] vlan0: entered promiscuous mode [ 7133.578523][T18202] vlan0: entered allmulticast mode [ 7133.581414][T18202] vlan1: entered promiscuous mode [ 7133.582454][T18202] vlan1: entered allmulticast mode [ 7133.597918][T18202] macvlan0: entered promiscuous mode [ 7133.599236][T18202] macvlan0: entered allmulticast mode [ 7133.636418][T18202] macvlan1: entered promiscuous mode [ 7133.650943][T18202] macvlan1: entered allmulticast mode [ 7133.841929][T18202] ipvlan1: entered promiscuous mode [ 7133.843148][T18202] ipvlan1: entered allmulticast mode [ 7133.865979][T18202] veth1_macvtap: entered allmulticast mode [ 7133.930468][T18202] veth0_macvtap: entered allmulticast mode [ 7134.020783][T18202] macvtap0: entered promiscuous mode [ 7134.021967][T18202] macvtap0: entered allmulticast mode [ 7134.092973][T18202] macsec0: entered promiscuous mode [ 7134.106619][T18202] macsec0: entered allmulticast mode [ 7134.229793][T18202] geneve1: entered promiscuous mode [ 7134.233047][T18202] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 7134.236190][T18202] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 7134.254841][T18202] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 7134.256293][T18202] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 7134.320781][T18202] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 7134.322394][T18202] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 7134.382507][T18202] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 7134.387840][T18202] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 7134.447908][T18202] ip6erspan0: entered promiscuous mode [ 7134.449233][T18202] ip6erspan0: entered allmulticast mode [ 7134.466039][T18202] erspan1: entered allmulticast mode [ 7134.521395][T18202] ip6gre1: entered promiscuous mode [ 7134.526872][T18202] ip6gre1: entered allmulticast mode [ 7134.529218][T18202] bond1: entered promiscuous mode [ 7134.530170][T18202] bond1: entered allmulticast mode [ 7134.551318][T18202] dvmrp0: entered promiscuous mode [ 7134.628064][T18202] bond2: entered promiscuous mode [ 7134.629398][T18202] bond2: entered allmulticast mode [ 7134.669201][T18202] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 7134.670703][T18202] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 7134.671930][T18202] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 7134.673158][T18202] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 7134.748234][T18202] geneve3: entered promiscuous mode [ 7134.749544][T18202] geneve3: entered allmulticast mode [ 7134.839133][T18202] vti0: entered promiscuous mode [ 7134.840354][T18202] vti0: entered allmulticast mode [ 7134.851505][T18202] geneve4: entered promiscuous mode [ 7134.852751][T18202] geneve4: entered allmulticast mode [ 7134.877700][T18202] wireguard0: entered promiscuous mode [ 7134.878875][T18202] wireguard0: entered allmulticast mode [ 7134.881927][T18202] bond3: entered promiscuous mode [ 7134.882994][T18202] bond3: entered allmulticast mode [ 7134.919303][T18202] ip6gre2: entered promiscuous mode [ 7134.921092][T18202] ip6gre2: entered allmulticast mode [ 7134.924422][T18202] geneve0: entered promiscuous mode [ 7134.946819][T18202] geneve0: entered allmulticast mode [ 7135.012959][T18202] gre1: entered promiscuous mode [ 7135.015264][T18202] gre1: entered allmulticast mode [ 7135.390198][T18202] gretap1: entered allmulticast mode [ 7135.484938][T18202] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7135.486376][T18202] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7135.487596][T18202] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7135.489044][T18202] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7135.629748][T18202] ip6tnl1: entered promiscuous mode [ 7135.631089][T18202] ip6tnl1: entered allmulticast mode [ 7135.662256][T18202] wireguard2: entered promiscuous mode [ 7135.665157][T18202] wireguard2: entered allmulticast mode [ 7135.677742][T18202] veth2: entered promiscuous mode [ 7135.682233][T18202] veth2: entered allmulticast mode [ 7135.692745][T18202] veth3: entered promiscuous mode [ 7135.695712][T18202] veth3: entered allmulticast mode [ 7135.700476][T16652] lo speed is unknown, defaulting to 1000 [ 7135.729962][T16652] lo speed is unknown, defaulting to 1000 [ 7142.730110][T18232] xt_NFQUEUE: number of queues (65535) out of range (got 129383) [ 7149.416127][T18245] netlink: 'syz.0.4258': attribute type 4 has an invalid length. [ 7149.417577][T18245] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4258'. [ 7161.775957][T18282] dlm: Unknown command passed to DLM device : 0 [ 7161.775957][T18282] [ 7170.057275][T18304] netlink: 'syz.1.4288': attribute type 1 has an invalid length. [ 7170.058704][T18304] netlink: 'syz.1.4288': attribute type 2 has an invalid length. [ 7172.136405][T17096] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 7172.539531][T17096] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 7172.542125][T17096] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 7172.555235][T17096] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 7172.557865][T17096] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 7172.559639][T17096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7172.769163][T18308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7172.799655][T17096] hub 2-1:1.0: bad descriptor, ignoring hub [ 7172.802530][T17096] hub 2-1:1.0: probe with driver hub failed with error -5 [ 7172.822057][T17096] cdc_wdm 2-1:1.0: skipping garbage [ 7172.828303][T17096] cdc_wdm 2-1:1.0: skipping garbage [ 7172.852248][T17096] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 7173.229334][T17096] usb 2-1: USB disconnect, device number 29 [ 7183.762719][T18349] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 7190.619242][T18369] siw: device registration error -23 [ 7227.695776][T18452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4340'. [ 7230.352931][T18460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 7230.355214][T18460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 7240.869567][T18477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 7246.518699][T18484] tmpfs: Bad value for 'mpol' [ 7248.257052][T18488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4356'. [ 7258.057172][T16652] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 7258.276325][T16652] usb 2-1: Using ep0 maxpacket: 8 [ 7258.356342][T16652] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 7258.358624][T16652] usb 2-1: config 179 has no interface number 0 [ 7258.361270][T16652] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 7258.388856][T16652] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 7258.391301][T16652] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 7258.404073][T16652] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 7258.406163][T16652] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 7258.408512][T16652] usb 2-1: config 179 interface 65 has no altsetting 0 [ 7258.410535][T16652] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 7258.424437][T16652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7258.786057][T16652] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input47 [ 7260.756354][T17096] usb 2-1: USB disconnect, device number 30 [ 7260.842729][T17096] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 7271.054364][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'. [ 7281.285972][T18570] netlink: 'syz.0.4385': attribute type 30 has an invalid length. [ 7281.290051][T18570] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 7281.291630][T18570] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 7285.752946][T18580] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 7289.842805][T18592] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 7291.082087][T18594] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.4397'. [ 7293.335706][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4399'. [ 7299.042401][T18610] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4406'. [ 7317.108479][T18676] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4420'. [ 7337.498942][T18718] netlink: 'syz.0.4441': attribute type 11 has an invalid length. [ 7339.508498][T18721] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 7354.479301][T18758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4461'. [ 7355.889255][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4463'. [ 7371.201851][T18790] xt_hashlimit: size too large, truncated to 1048576 [ 7393.406588][T18826] netlink: 'syz.0.4492': attribute type 40 has an invalid length. [ 7403.908848][T18853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 7403.911435][T18853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 7413.480201][T18869] tmpfs: Bad value for 'mpol' [ 7413.602157][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'. [ 7416.757491][T18876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4513'. [ 7419.226522][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4516'. [ 7446.311511][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'. [ 7455.979783][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'. [ 7462.670016][T18964] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4555'. [ 7474.347381][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 7494.309785][T19020] xt_cgroup: path and classid specified [ 7497.311193][T19028] netlink: 'syz.1.4587': attribute type 3 has an invalid length. [ 7508.081780][T19047] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4596'. [ 7510.310556][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'. [ 7511.330740][T19054] xt_l2tp: v2 sid > 0xffff: 100663296 [ 7517.692729][T19067] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 7536.208620][T19106] netlink: 'syz.0.4625': attribute type 15 has an invalid length. [ 7551.019059][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4637'. [ 7584.852542][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 7585.902592][T19192] netlink: 'syz.0.4666': attribute type 2 has an invalid length. [ 7585.926898][T19192] netlink: 'syz.0.4666': attribute type 11 has an invalid length. [ 7585.929433][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4666'. [ 7592.696161][T19204] xt_cgroup: invalid path, errno=-2 [ 7601.318705][T19218] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4679'. [ 7614.747349][T19239] misc userio: Invalid payload size [ 7623.614860][T19257] netlink: 'syz.1.4697': attribute type 1 has an invalid length. [ 7623.620988][T19257] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.4697'. [ 7631.539455][T19272] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 7641.759915][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4710'. [ 7648.927599][T19302] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 7653.877244][T18854] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 7654.161314][T18854] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 7654.166389][T18854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7654.261388][T18854] usb 2-1: config 0 descriptor?? [ 7654.400187][T18854] cp210x 2-1:0.0: cp210x converter detected [ 7655.698822][T18854] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 7655.708373][T18854] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 7655.711501][T18854] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 7656.228683][T18854] usb 2-1: cp210x converter now attached to ttyUSB0 [ 7656.337361][T18854] usb 2-1: USB disconnect, device number 31 [ 7656.640088][T18854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 7656.697456][T18854] cp210x 2-1:0.0: device disconnected [ 7666.771583][T19350] ubi0: detaching mtd0 [ 7666.900992][T19350] ubi0: mtd0 is detached [ 7684.162725][T19381] AppArmor: change_hat: Invalid input 'p' [ 7695.946434][T19405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4758'. [ 7721.596395][T19464] netlink: 'syz.0.4781': attribute type 30 has an invalid length. [ 7724.767537][T19492] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 7731.267613][T19119] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 7735.234866][T19119] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 7735.291069][T19119] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 7735.292493][T19119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 7735.316510][T19119] usb 2-1: SerialNumber: syz [ 7737.271711][T19119] usb 2-1: bad CDC descriptors [ 7738.550606][T14789] usb 2-1: USB disconnect, device number 32 [ 7747.607523][T19533] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4797' sets config #1 [ 7749.301713][T19537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4800'. [ 7751.176773][ T33] audit: type=1326 audit(7751.098:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4801" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 7761.041496][T19563] xt_ipcomp: unknown flags 12 [ 7779.095047][T19625] netlink: 'syz.0.4823': attribute type 2 has an invalid length. [ 7779.096770][T19625] netlink: 'syz.0.4823': attribute type 3 has an invalid length. [ 7781.872378][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4825'. [ 7781.878566][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4825'. [ 7781.889777][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4825'. [ 7785.256593][T19635] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 7792.058389][T19676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4832'. [ 7798.093895][T19682] netlink: 'syz.0.4835': attribute type 1 has an invalid length. [ 7799.575769][T19686] IPv6: NLM_F_CREATE should be specified when creating new route [ 7806.678419][T19702] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4845'. [ 7806.690050][T19702] 0ªX¹¦À: renamed from veth0 [ 7806.830671][T19702] 0ªX¹¦À: left promiscuous mode [ 7806.870414][T19702] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 7812.157763][T19711] dlm: no local IP address has been set [ 7812.159827][T19711] dlm: cannot start dlm midcomms -107 [ 7814.675862][T19717] xt_hashlimit: max too large, truncated to 1048576 [ 7831.279295][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'. [ 7833.581511][T19747] new mount options do not match the existing superblock, will be ignored [ 7850.198725][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4878'. [ 7905.199570][T19865] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 7927.256380][T19934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 7930.078733][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4941'. [ 7931.645263][T19946] netlink: 'syz.1.4942': attribute type 2 has an invalid length. [ 7931.647612][T19946] netlink: 'syz.1.4942': attribute type 1 has an invalid length. [ 7959.145168][T19994] xt_l2tp: invalid flags combination: 8 [ 7967.552766][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4972'. [ 7979.306352][T20033] tmpfs: Bad value for 'mpol' [ 7980.587617][T20035] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4984'. [ 7986.230929][T20047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4989'. [ 7993.608957][T20061] netlink: 'syz.1.4997': attribute type 2 has an invalid length. [ 7993.612307][T20061] netlink: 'syz.1.4997': attribute type 1 has an invalid length. [ 7993.628221][T20061] netlink: 'syz.1.4997': attribute type 1 has an invalid length. [ 8003.970074][T20080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5006'. [ 8007.787628][T20089] hsr0: left allmulticast mode [ 8014.898158][T20102] sit3: entered promiscuous mode [ 8035.669248][T19119] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 8036.138775][T19119] usb 2-1: Using ep0 maxpacket: 32 [ 8036.691025][T19119] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 8036.698812][T19119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8036.700847][T19119] usb 2-1: Product: syz [ 8036.702301][T19119] usb 2-1: Manufacturer: syz [ 8036.707932][T19119] usb 2-1: SerialNumber: syz [ 8036.769048][T19119] usb 2-1: config 0 descriptor?? [ 8038.528033][T19119] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 8039.497718][T19119] usb 2-1: USB disconnect, device number 33 [ 8071.972400][T20244] netlink: 'syz.0.5064': attribute type 5 has an invalid length. [ 8075.095116][T20253] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5069'. [ 8087.097228][T20290] netlink: 'syz.0.5084': attribute type 15 has an invalid length. [ 8091.192298][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5088'. [ 8092.126726][T20300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5090'. [ 8092.129268][T20300] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5090'. [ 8092.130468][T20300] netlink: 'syz.1.5090': attribute type 6 has an invalid length. [ 8092.131575][T20300] netlink: 'syz.1.5090': attribute type 5 has an invalid length. [ 8092.132672][T20300] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5090'. [ 8109.196655][T20336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 8110.626129][T20340] tmpfs: Bad value for 'mpol' [ 8121.568814][T20396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5118'. [ 8151.741777][T20467] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 8172.593165][ T33] audit: type=1400 audit(8172.528:18): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20509 comm="syz.0.5174" [ 8204.236626][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5201'. [ 8215.193006][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5214'. [ 8224.728761][T20617] netlink: 'syz.1.5225': attribute type 46 has an invalid length. [ 8243.979531][T20665] deleting an unspecified loop device is not supported. [ 8250.040504][T20683] netlink: 'syz.1.5257': attribute type 9 has an invalid length. [ 8250.041891][T20683] netlink: 'syz.1.5257': attribute type 7 has an invalid length. [ 8250.042921][T20683] netlink: 'syz.1.5257': attribute type 8 has an invalid length. [ 8252.048843][T20689] tmpfs: User quota inode hardlimit too large. [ 8256.278914][T20697] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5263'. [ 8256.280349][T20697] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5263'. [ 8266.891370][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5279'. [ 8312.378698][T20856] IPv6: NLM_F_CREATE should be specified when creating new route [ 8315.788823][T20862] lo: left promiscuous mode [ 8315.791828][T20862] lo: left allmulticast mode [ 8316.038438][T20862] tunl0: left promiscuous mode [ 8316.040324][T20862] tunl0: left allmulticast mode [ 8316.244600][T20862] gre0: left promiscuous mode [ 8316.246615][T20862] gre0: left allmulticast mode [ 8316.340685][T20862] gretap0: left promiscuous mode [ 8316.342658][T20862] gretap0: left allmulticast mode [ 8316.442237][T20862] erspan0: left promiscuous mode [ 8316.444984][T20862] erspan0: left allmulticast mode [ 8316.497757][T20862] ip_vti0: left promiscuous mode [ 8316.510995][T20862] ip_vti0: left allmulticast mode [ 8316.516151][ T33] audit: type=1400 audit(8316.438:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20863 comm="syz.0.5344" [ 8316.569095][T20862] ip6_vti0: left promiscuous mode [ 8316.571272][T20862] ip6_vti0: left allmulticast mode [ 8316.638093][T20862] sit0: left promiscuous mode [ 8316.641549][T20862] sit0: left allmulticast mode [ 8316.952596][T20862] ip6tnl0: left promiscuous mode [ 8316.958009][T20862] ip6tnl0: left allmulticast mode [ 8317.083149][T20862] ip6gre0: left promiscuous mode [ 8317.096726][T20862] ip6gre0: left allmulticast mode [ 8317.670520][T20862] syz_tun: left promiscuous mode [ 8317.671736][T20862] syz_tun: left allmulticast mode [ 8317.705954][T20862] ip6gretap0: left promiscuous mode [ 8317.707180][T20862] ip6gretap0: left allmulticast mode [ 8317.756756][T20862] vcan0: left promiscuous mode [ 8317.757908][T20862] vcan0: left allmulticast mode [ 8317.771846][T20862] bond0: left promiscuous mode [ 8317.778638][T20862] bond0: left allmulticast mode [ 8317.807126][T20862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8317.826122][T20862] dummy0: left promiscuous mode [ 8317.827406][T20862] dummy0: left allmulticast mode [ 8317.867801][T20862] nlmon0: left promiscuous mode [ 8317.869064][T20862] nlmon0: left allmulticast mode [ 8317.891791][T20862] vxcan0: left promiscuous mode [ 8317.893068][T20862] vxcan0: left allmulticast mode [ 8317.937467][T20862] vxcan1: left promiscuous mode [ 8317.938675][T20862] vxcan1: left allmulticast mode [ 8317.962027][T20862] veth0: left promiscuous mode [ 8317.969140][T20862] veth0: left allmulticast mode [ 8318.009871][T20862] veth1: left promiscuous mode [ 8318.011038][T20862] veth1: left allmulticast mode [ 8318.141935][T20862] wg0: left promiscuous mode [ 8318.145797][T20862] wg0: left allmulticast mode [ 8318.305124][T20862] wg1: left promiscuous mode [ 8318.307253][T20862] wg1: left allmulticast mode [ 8318.569003][T20862] wg2: left promiscuous mode [ 8318.571059][T20862] wg2: left allmulticast mode [ 8318.662655][T20862] veth0_to_bridge: left promiscuous mode [ 8318.667836][T20862] veth0_to_bridge: left allmulticast mode [ 8318.801947][T20862] bridge_slave_0: left promiscuous mode [ 8318.825597][T20862] bridge_slave_0: left allmulticast mode [ 8318.877928][T20862] veth1_to_bridge: left promiscuous mode [ 8318.879135][T20862] veth1_to_bridge: left allmulticast mode [ 8318.946320][T20862] bridge_slave_1: left promiscuous mode [ 8319.038482][T20862] bridge_slave_1: left allmulticast mode [ 8319.069669][T20862] veth0_to_bond: left promiscuous mode [ 8319.071918][T20862] veth0_to_bond: left allmulticast mode [ 8319.191132][T20862] bond_slave_0: left promiscuous mode [ 8319.209564][T20862] bond_slave_0: left allmulticast mode [ 8319.319399][T20862] veth1_to_bond: left promiscuous mode [ 8319.320743][T20862] veth1_to_bond: left allmulticast mode [ 8319.389126][T20862] bond_slave_1: left promiscuous mode [ 8319.390347][T20862] bond_slave_1: left allmulticast mode [ 8319.427105][T20862] veth0_to_team: left promiscuous mode [ 8319.428331][T20862] veth0_to_team: left allmulticast mode [ 8319.501644][T20862] team_slave_0: left promiscuous mode [ 8319.507224][T20862] team_slave_0: left allmulticast mode [ 8319.544827][T20862] veth1_to_team: left promiscuous mode [ 8319.550802][T20862] veth1_to_team: left allmulticast mode [ 8319.645169][T20862] team_slave_1: left promiscuous mode [ 8319.647307][T20862] team_slave_1: left allmulticast mode [ 8319.699217][T20862] veth0_to_batadv: left promiscuous mode [ 8319.700487][T20862] veth0_to_batadv: left allmulticast mode [ 8319.735558][T20862] batadv_slave_0: left promiscuous mode [ 8319.736882][T20862] batadv_slave_0: left allmulticast mode [ 8319.780493][T20862] veth1_to_batadv: left promiscuous mode [ 8319.781863][T20862] veth1_to_batadv: left allmulticast mode [ 8319.822298][T20862] batadv_slave_1: left promiscuous mode [ 8319.836604][T20862] batadv_slave_1: left allmulticast mode [ 8319.851868][T20862] xfrm0: left promiscuous mode [ 8319.854151][T20862] xfrm0: left allmulticast mode [ 8319.888623][T20862] veth0_to_hsr: left promiscuous mode [ 8319.889822][T20862] veth0_to_hsr: left allmulticast mode [ 8319.936704][T20862] veth1_to_hsr: left promiscuous mode [ 8319.938392][T20862] veth1_to_hsr: left allmulticast mode [ 8319.983006][T20862] hsr0: left promiscuous mode [ 8319.985681][T20862] hsr0: left allmulticast mode [ 8319.989398][T20862] hsr_slave_0: left allmulticast mode [ 8319.990453][T20862] hsr_slave_1: left allmulticast mode [ 8320.018490][T20862] veth1_virt_wifi: left promiscuous mode [ 8320.019698][T20862] veth1_virt_wifi: left allmulticast mode [ 8320.052826][T20862] veth0_virt_wifi: left promiscuous mode [ 8320.055468][T20862] veth0_virt_wifi: left allmulticast mode [ 8320.084753][T20862] veth1_vlan: left promiscuous mode [ 8320.085934][T20862] veth1_vlan: left allmulticast mode [ 8320.130348][T20862] veth0_vlan: left promiscuous mode [ 8320.159214][T20862] veth0_vlan: entered promiscuous mode [ 8320.250543][T20862] vlan0: left promiscuous mode [ 8320.262144][T20862] vlan0: left allmulticast mode [ 8320.292461][T20862] vlan1: left promiscuous mode [ 8320.296464][T20862] vlan1: left allmulticast mode [ 8320.320986][T20862] veth1_vlan: entered promiscuous mode [ 8320.322570][T20862] veth1_vlan: entered allmulticast mode [ 8320.340871][T20862] macvlan0: left promiscuous mode [ 8320.357152][T20862] macvlan0: left allmulticast mode [ 8320.358691][T20862] veth1_vlan: left allmulticast mode [ 8320.397915][T20862] veth1_vlan: entered allmulticast mode [ 8320.400939][T20862] macvlan1: left promiscuous mode [ 8320.415265][T20862] macvlan1: left allmulticast mode [ 8320.418033][T20862] veth1_vlan: left allmulticast mode [ 8320.459105][T20862] ipvlan0: left promiscuous mode [ 8320.460342][T20862] ipvlan0: left allmulticast mode [ 8320.505565][T20862] ipvlan1: left promiscuous mode [ 8320.506749][T20862] ipvlan1: left allmulticast mode [ 8320.507658][T20862] veth0_vlan: left allmulticast mode [ 8320.556570][T20862] veth1_macvtap: left promiscuous mode [ 8320.558335][T20862] veth1_macvtap: left allmulticast mode [ 8320.608704][T20862] veth0_macvtap: left promiscuous mode [ 8320.609916][T20862] veth0_macvtap: left allmulticast mode [ 8320.642367][T20862] veth0_macvtap: entered promiscuous mode [ 8320.645780][T20862] veth0_macvtap: entered allmulticast mode [ 8320.652888][T20862] macvtap0: left promiscuous mode [ 8320.662758][T20862] macvtap0: left allmulticast mode [ 8320.665756][T20862] veth0_macvtap: left allmulticast mode [ 8320.701269][T20862] veth1_macvtap: entered promiscuous mode [ 8320.702563][T20862] veth1_macvtap: entered allmulticast mode [ 8320.709676][T20862] macsec0: left promiscuous mode [ 8320.712968][T20862] macsec0: left allmulticast mode [ 8320.714863][T20862] veth1_macvtap: left allmulticast mode [ 8320.796134][T20862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8320.798271][T20862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8320.799630][T20862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8320.800934][T20862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8320.802837][T20862] geneve1: left promiscuous mode [ 8320.818721][T20862] geneve1: left allmulticast mode [ 8320.898135][T20862] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 8321.022136][T20862] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 8321.027846][T20862] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 8321.058351][T20862] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 8321.059708][T20862] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 8321.109211][T20862] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 8321.116789][T20862] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 8321.139418][T20862] ipip0: left promiscuous mode [ 8321.140691][T20862] ipip0: left allmulticast mode [ 8321.159253][T20862] erspan1: left promiscuous mode [ 8321.160437][T20862] erspan1: left allmulticast mode [ 8321.191554][T20862] syztnl1: left promiscuous mode [ 8321.192820][T20862] syztnl1: left allmulticast mode [ 8321.268484][T20862] ip6erspan0: left promiscuous mode [ 8321.269778][T20862] ip6erspan0: left allmulticast mode [ 8321.308430][T20862] bond1: left promiscuous mode [ 8321.311120][T20862] bond1: left allmulticast mode [ 8321.330784][T20862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 8321.395262][T20862] bond2: left promiscuous mode [ 8321.396972][T20862] bond2: left allmulticast mode [ 8321.417299][T20862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 8321.464515][T20862] bond3: left promiscuous mode [ 8321.465792][T20862] bond3: left allmulticast mode [ 8321.475323][T20862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 8321.495919][T20862] geneve2: left promiscuous mode [ 8321.497290][T20862] geneve2: left allmulticast mode [ 8321.529130][T20862] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 8321.530691][T20862] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 8321.531924][T20862] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 8321.544149][T20862] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 8321.548384][T20862] geneve3: left promiscuous mode [ 8321.550454][T20862] geneve3: left allmulticast mode [ 8321.595122][T20862] gtp0: left promiscuous mode [ 8321.596400][T20862] gtp0: left allmulticast mode [ 8321.619717][T20862] xfrm1: left promiscuous mode [ 8321.623999][T20862] xfrm1: left allmulticast mode [ 8321.890673][T20862] gtp1: left promiscuous mode [ 8321.892793][T20862] gtp1: left allmulticast mode [ 8321.968447][T20862] bond4: left promiscuous mode [ 8321.969762][T20862] bond4: left allmulticast mode [ 8321.979745][T20862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 8322.022666][T20862] gretap1: left promiscuous mode [ 8322.030781][T20862] gretap1: left allmulticast mode [ 8322.101821][T20862] sit1: left promiscuous mode [ 8322.106322][T20862] sit1: left allmulticast mode [ 8323.538065][T20862] sit2: left promiscuous mode [ 8323.539326][T20862] sit2: left allmulticast mode [ 8324.218518][T20862] bond5: left promiscuous mode [ 8324.219917][T20862] bond5: left allmulticast mode [ 8324.251524][T20862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 8324.537570][T20862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 8324.591918][T20862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 8324.619475][T20862] sit3: left promiscuous mode [ 8325.572991][T20862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 8337.447648][T20898] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 8341.688116][T20908] sctp: [Deprecated]: syz.0.5363 (pid 20908) Use of int in max_burst socket option. [ 8341.688116][T20908] Use struct sctp_assoc_value instead [ 8342.732660][T20910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5364'. [ 8365.125332][T20961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5389'. [ 8369.978872][T20977] trusted_key: encrypted_key: master key parameter is missing [ 8373.522615][T20985] xt_CT: No such helper "snmp_trap" [ 8390.475360][T20870] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 8390.829555][T20870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 8390.831066][T20870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 8390.959016][T20870] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 8390.960618][T20870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 8390.961814][T20870] usb 2-1: SerialNumber: syz [ 8391.909770][T21058] xt_TCPMSS: Only works on TCP SYN packets [ 8392.311786][T20870] usb 2-1: 0:2 : does not exist [ 8393.138653][T20870] usb 2-1: USB disconnect, device number 34 [ 8406.311731][T21094] ip6gre2: entered promiscuous mode [ 8412.580356][T21103] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 8418.550728][T20870] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 8418.787965][T20870] usb 2-1: Using ep0 maxpacket: 8 [ 8418.882938][T20870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 8418.886958][T20870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 8418.976013][T20870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 8418.978641][T20870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8418.980965][T20870] usb 2-1: Product: syz [ 8418.982572][T20870] usb 2-1: Manufacturer: syz [ 8419.002236][T20870] usb 2-1: SerialNumber: syz [ 8419.989209][T20870] usb 2-1: cannot find UAC_HEADER [ 8420.632084][T20870] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 8420.745772][T20870] usb 2-1: USB disconnect, device number 35 [ 8433.148310][T21153] cgroup: release_agent respecified [ 8446.412812][T21178] netlink: 'syz.1.5453': attribute type 13 has an invalid length. [ 8446.418461][T21178] netlink: 'syz.1.5453': attribute type 58 has an invalid length. [ 8446.420864][T21178] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5453'. [ 8452.187613][T21189] cgroup: Unknown subsys name 'hash' [ 8457.037803][T21195] netlink: 'syz.0.5461': attribute type 32 has an invalid length. [ 8457.040022][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'. [ 8457.058592][T21195] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 8479.160255][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5481'. [ 8482.979784][T21279] netlink: 'syz.1.5486': attribute type 7 has an invalid length. [ 8482.981149][T21279] netlink: 'syz.1.5486': attribute type 6 has an invalid length. [ 8484.976202][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 8484.978089][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 8502.637625][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5504'. [ 8505.409086][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5506'. [ 8505.641987][T21353] vlan0: entered promiscuous mode [ 8509.787825][T21365] pimreg: entered allmulticast mode [ 8548.708465][T21446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5542'. [ 8548.709980][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5542'. [ 8548.711135][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5542'. [ 8554.949396][T21457] IPv6: sit3: Disabled Multicast RS [ 8573.219577][T21504] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5571'. [ 8573.310932][T21505] dns_resolver: Unsupported server list version (0) [ 8603.300773][T21559] tmpfs: Bad value for 'mpol' [ 8635.697873][T14789] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 8636.104916][T14789] usb 2-1: Using ep0 maxpacket: 16 [ 8636.476503][T14789] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 8636.477991][T14789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8636.479034][T14789] usb 2-1: Product: syz [ 8636.479885][T14789] usb 2-1: Manufacturer: syz [ 8636.480820][T14789] usb 2-1: SerialNumber: syz [ 8636.590059][T14789] r8152-cfgselector 2-1: Unknown version 0x0000 [ 8636.591336][T14789] r8152-cfgselector 2-1: config 0 descriptor?? [ 8638.702637][T14789] r8152-cfgselector 2-1: USB disconnect, device number 36 [ 8643.201039][T21650] netlink: 'syz.0.5628': attribute type 10 has an invalid length. [ 8649.457755][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5632'. [ 8670.335008][T21691] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5646'. [ 8682.338397][T21709] xt_HMARK: proto mask must be zero with L3 mode [ 8692.099422][T21733] x_tables: unsorted underflow at hook 3 [ 8730.840488][T21782] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.5690'. [ 8753.956937][ T33] audit: type=1326 audit(8753.878:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.1.5704" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 8799.322753][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 8799.632071][T21879] vlan2: entered allmulticast mode [ 8799.634361][T21879] gretap0: entered allmulticast mode [ 8799.707958][T21879] gretap0: left allmulticast mode [ 8812.328065][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5745'. [ 8812.445155][T21902] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 8812.447502][T21902] gretap3: entered promiscuous mode [ 8812.448490][T21902] gretap3: entered allmulticast mode [ 8833.426265][T21932] atomic_op ff6000002ee5d198 conn xmit_atomic 0000000000000000 [ 8878.531877][T22003] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5784'. [ 8881.846275][T22006] can0: slcan on ptm0. [ 8883.711370][T22004] can0 (unregistered): slcan off ptm0. [ 8904.350575][T22048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5800'. [ 8922.742407][T22072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5811'. [ 8922.746671][T22072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5811'. [ 8922.748039][T22072] netlink: 'syz.1.5811': attribute type 10 has an invalid length. [ 8924.541531][T22075] tmpfs: Bad value for 'mpol' [ 8974.442724][T22140] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5841'. [ 8974.449136][T22140] Zero length message leads to an empty skb [ 8983.812248][T22157] netlink: 'syz.1.5850': attribute type 2 has an invalid length. [ 8983.815179][T22157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5850'. [ 8989.791235][T22169] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 9001.415814][T18854] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 9001.734089][T18854] usb 2-1: Using ep0 maxpacket: 8 [ 9002.129095][T18854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 9002.131791][T18854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9002.140303][T18854] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 9002.151160][T18854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9002.347707][T18854] usb 2-1: config 0 descriptor?? [ 9004.166310][T18854] holtek_mouse 0003:04D9:A081.0001: unknown main item tag 0x1 [ 9004.169192][T18854] holtek_mouse 0003:04D9:A081.0001: item fetching failed at offset 2/5 [ 9004.192841][T18854] holtek_mouse 0003:04D9:A081.0001: hid parse failed: -22 [ 9004.200646][T18854] holtek_mouse 0003:04D9:A081.0001: probe with driver holtek_mouse failed with error -22 [ 9004.372361][T18854] usb 2-1: USB disconnect, device number 37 [ 9035.352051][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5878'. [ 9074.761284][T22310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9074.769035][T22310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9074.771249][T22310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9074.787594][T22310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9074.791224][T22310] geneve6: entered promiscuous mode [ 9074.838700][T22310] geneve6: entered allmulticast mode [ 9074.911825][T22310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9074.915511][T22310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9074.919157][T22310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9074.963147][T22310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 9086.318420][T20869] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 9086.526648][T20869] usb 2-1: Using ep0 maxpacket: 8 [ 9086.655323][T20869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9086.657463][T20869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9086.659008][T20869] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 9086.660746][T20869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9086.789143][T20869] usb 2-1: config 0 descriptor?? [ 9088.443001][T20869] usb 2-1: string descriptor 0 read error: -71 [ 9088.449048][T20869] uclogic 0003:5543:0047.0002: failed retrieving string descriptor #200: -71 [ 9088.450686][T20869] uclogic 0003:5543:0047.0002: failed retrieving pen parameters: -71 [ 9088.451932][T20869] uclogic 0003:5543:0047.0002: failed probing pen v2 parameters: -71 [ 9088.455150][T20869] uclogic 0003:5543:0047.0002: failed probing parameters: -71 [ 9088.457001][T20869] uclogic 0003:5543:0047.0002: probe with driver uclogic failed with error -71 [ 9088.526983][T20869] usb 2-1: USB disconnect, device number 38 [ 9099.686603][T22354] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5918'. [ 9109.639576][T22370] CUSE: unknown device info "" [ 9109.641655][T22370] CUSE: unknown device info "appraise_type" [ 9109.678535][T22370] CUSE: DEVNAME unspecified [ 9132.352566][T22404] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 9151.940684][T22427] nbd: illegal input index 67108864 [ 9154.880657][T22431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5955'. [ 9158.172330][T22436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9158.196318][T22436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 9159.061987][T22436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9159.068017][T22436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 9159.632609][T22436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9159.650686][T22436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 9160.491346][T22436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9160.493014][T22436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 9162.118930][T22436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 9162.121377][T22436] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 9162.775553][T22436] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 9162.778345][T22436] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 9163.490858][T22436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 9163.505927][T22436] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 9163.949715][T22436] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 9163.951268][T22436] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 9171.942370][T22472] netlink: 798 bytes leftover after parsing attributes in process `syz.0.5967'. [ 9189.837379][T22502] tmpfs: Bad value for 'size' [ 9210.012045][T22526] [U] ^C [ 9213.150858][T22532] macvtap1: entered promiscuous mode [ 9213.161772][T22532] vlan0: entered promiscuous mode [ 9213.675651][T22532] vlan0: left promiscuous mode [ 9263.596508][T22594] lo speed is unknown, defaulting to 1000 [ 9305.467778][T22632] lo speed is unknown, defaulting to 1000 [ 9321.555822][T22632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9321.639853][T22632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9322.519905][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6037'. [ 9322.522491][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6037'. [ 9332.531256][T22632] hsr_slave_0: entered promiscuous mode [ 9332.577310][T22632] hsr_slave_1: entered promiscuous mode [ 9332.631058][T22632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9332.632782][T22632] Cannot create hsr debugfs directory [ 9337.466462][T22632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 9337.658600][T22632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 9337.866616][T22632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 9338.009415][T22632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 9342.362861][T22974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6044'. [ 9342.364980][T22974] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6044'. [ 9342.367158][T22974] netlink: 'syz.1.6044': attribute type 6 has an invalid length. [ 9342.368262][T22974] netlink: 'syz.1.6044': attribute type 5 has an invalid length. [ 9342.369363][T22974] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6044'. [ 9347.631363][T22632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9379.580638][T22632] veth0_vlan: entered promiscuous mode [ 9379.940404][T22632] veth1_vlan: entered promiscuous mode [ 9381.198318][T22632] veth0_macvtap: entered promiscuous mode [ 9381.658850][T22632] veth1_macvtap: entered promiscuous mode [ 9383.533181][T22632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9383.538186][T22632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9383.540397][T22632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9383.542633][T22632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9388.672846][T21926] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 9389.912791][T21926] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 9389.917361][T21926] usb 2-1: config 0 has no interface number 0 [ 9389.919762][T21926] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9389.922284][T21926] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9389.927866][T21926] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 9389.930217][T21926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9390.052748][T21926] usb 2-1: config 0 descriptor?? [ 9393.044290][T21926] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 9393.047840][T21926] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 9393.049878][T21926] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 9393.051756][T21926] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 9393.087056][T21926] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 9393.157693][T21926] uclogic 0003:5543:0522.0003: No inputs registered, leaving [ 9393.289081][T21926] uclogic 0003:5543:0522.0003: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input32 [ 9394.406643][T22979] usb 2-1: USB disconnect, device number 39 [ 9415.022626][T23082] Invalid logical block size (768) [ 9443.127440][T23126] netlink: 'syz.2.6089': attribute type 29 has an invalid length. [ 9443.199637][T23126] netlink: 'syz.2.6089': attribute type 29 has an invalid length. [ 9470.409380][T23175] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6112'. [ 9471.681338][T23178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6113'. [ 9485.705569][T23202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9485.736717][T23202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9504.140264][T23231] usb usb1: usbfs: process 23231 (syz.2.6139) did not claim interface 4 before use [ 9531.709519][T23274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9532.551332][T23274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9533.241319][T23274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9534.239687][T23274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9535.131771][T23274] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9535.278034][T23274] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9535.430905][T23274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9535.618236][T23274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9551.580264][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'. [ 9551.581933][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'. [ 9553.674252][T23332] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 9589.561138][T23407] tmpfs: Bad value for 'mpol' [ 9592.002429][T23411] ptrace attach of "/syz-executor exec"[23412] was attempted by "/syz-executor exec"[23411] [ 9604.605774][T23433] block nbd1: Unsupported socket: shutdown callout must be supported. [ 9616.735717][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6238'. [ 9616.737253][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6238'. [ 9616.741655][T23451] netlink: 'syz.1.6238': attribute type 5 has an invalid length. [ 9625.980199][T23470] [U] [ 9625.982282][T23470] [U] [ 9625.983270][T23470] [U] [ 9625.984133][T23470] [U] [ 9626.026175][T23470] [U] [ 9626.027374][T23470] [U] [ 9626.028190][T23470] [U] [ 9626.029052][T23470] [U] [ 9626.031524][T23470] [U] [ 9626.032448][T23470] [U] [ 9626.033325][T23470] [U] [ 9626.034160][T23470] [U] [ 9626.065829][T23470] [U] [ 9626.067000][T23470] [U] [ 9626.067893][T23470] [U] [ 9626.068764][T23470] [U] [ 9626.071386][T23470] [U] [ 9626.072384][T23470] [U] [ 9626.073356][T23470] [U] [ 9626.074292][T23470] [U] [ 9626.097917][T23470] [U] [ 9626.099034][T23470] [U] [ 9626.099974][T23470] [U] [ 9626.100912][T23470] [U] [ 9626.131644][T23470] [U] [ 9626.132914][T23470] [U] [ 9626.133808][T23470] [U] [ 9626.134623][T23470] [U] [ 9626.157055][T23470] [U] [ 9626.158202][T23470] [U] [ 9626.158980][T23470] [U] [ 9626.159744][T23470] [U] [ 9626.162218][T23470] [U] [ 9626.163085][T23470] [U] [ 9626.163976][T23470] [U] [ 9626.164764][T23470] [U] [ 9626.190189][T23470] [U] [ 9626.191246][T23470] [U] [ 9626.192034][T23470] [U] [ 9626.192839][T23470] [U] [ 9626.197606][T23470] [U] [ 9626.198604][T23470] [U] [ 9626.199368][T23470] [U] [ 9626.200157][T23470] [U] [ 9626.221083][T23470] [U] [ 9626.222191][T23470] [U] [ 9626.223046][T23470] [U] [ 9626.223923][T23470] [U] [ 9626.230062][T23470] [U] [ 9626.230997][T23470] [U] [ 9626.231749][T23470] [U] [ 9626.232516][T23470] [U] [ 9626.235642][T23470] [U] [ 9626.236582][T23470] [U] [ 9626.237458][T23470] [U] [ 9626.238357][T23470] [U] [ 9626.242691][T23470] [U] [ 9626.243930][T23470] [U] [ 9626.244826][T23470] [U] [ 9626.245614][T23470] [U] [ 9626.254395][T23470] [U] [ 9626.255413][T23470] [U] [ 9626.256174][T23470] [U] [ 9626.256984][T23470] [U] [ 9626.259581][T23470] [U] [ 9626.260497][T23470] [U] [ 9626.261427][T23470] [U] [ 9626.262369][T23470] [U] [ 9626.288665][T23470] [U] [ 9626.289701][T23470] [U] [ 9626.290461][T23470] [U] [ 9626.291250][T23470] [U] [ 9626.298365][T23470] [U] [ 9626.299342][T23470] [U] [ 9626.300089][T23470] [U] [ 9626.300931][T23470] [U] [ 9626.303065][T23470] [U] [ 9626.303981][T23470] [U] [ 9626.304851][T23470] [U] [ 9626.305643][T23470] [U] [ 9626.317756][T23470] [U] [ 9626.318792][T23470] [U] [ 9626.319562][T23470] [U] [ 9626.320352][T23470] [U] [ 9626.322334][T23470] [U] [ 9626.323076][T23470] [U] [ 9626.323987][T23470] [U] [ 9626.324789][T23470] [U] [ 9626.348794][T23470] [U] [ 9626.349801][T23470] [U] [ 9626.350528][T23470] [U] [ 9626.351337][T23470] [U] [ 9626.370649][T23470] [U] [ 9626.371667][T23470] [U] [ 9626.372415][T23470] [U] [ 9626.373166][T23470] [U] [ 9626.386860][T23470] [U] [ 9626.387850][T23470] [U] [ 9626.388592][T23470] [U] [ 9626.389307][T23470] [U] [ 9626.391118][T23470] [U] [ 9626.391865][T23470] [U] [ 9626.392617][T23470] [U] [ 9626.393357][T23470] [U] [ 9626.417608][T23470] [U] [ 9626.418592][T23470] [U] [ 9626.419314][T23470] [U] [ 9626.420008][T23470] [U] [ 9626.421997][T23470] [U] [ 9626.422825][T23470] [U] [ 9626.423911][T23470] [U] [ 9626.424750][T23470] [U] [ 9626.438091][T23470] [U] [ 9626.439068][T23470] [U] [ 9626.439791][T23470] [U] [ 9626.440578][T23470] [U] [ 9626.442390][T23470] [U] [ 9626.443146][T23470] [U] [ 9626.443965][T23470] [U] [ 9626.444813][T23470] [U] [ 9626.457705][T23470] [U] [ 9626.458711][T23470] [U] [ 9626.459439][T23470] [U] [ 9626.460192][T23470] [U] [ 9626.461986][T23470] [U] [ 9626.462786][T23470] [U] [ 9626.463673][T23470] [U] [ 9626.810332][T23469] [U] [ 9636.947214][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6251'. [ 9664.721159][T23514] netlink: 'syz.2.6267': attribute type 10 has an invalid length. [ 9675.607833][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6270'. [ 9675.610125][T23520] netlink: 'syz.2.6270': attribute type 3 has an invalid length. [ 9675.766737][T23520] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 9675.769489][T23520] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 9675.770815][T23520] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 9675.772186][T23520] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 9715.088899][T23560] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6279'. [ 9716.776912][T23537] lo speed is unknown, defaulting to 1000 [ 9730.850102][T23537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9731.028166][T23537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9740.371707][T23537] hsr_slave_0: entered promiscuous mode [ 9740.394444][T23537] hsr_slave_1: entered promiscuous mode [ 9740.418943][T23537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9740.420327][T23537] Cannot create hsr debugfs directory [ 9743.985006][T23537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 9744.062179][T23537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 9744.185590][T23537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 9744.337389][T23537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 9747.088113][T23890] CUSE: DEVNAME unspecified [ 9749.791424][T23537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9778.602653][T23537] veth0_vlan: entered promiscuous mode [ 9779.212721][T23537] veth1_vlan: entered promiscuous mode [ 9780.511807][T23537] veth0_macvtap: entered promiscuous mode [ 9781.201775][T23537] veth1_macvtap: entered promiscuous mode [ 9783.423253][T23537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9783.427624][T23537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9783.429950][T23537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9783.432214][T23537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9795.322438][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6311'. [ 9817.027369][T24014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6330'. [ 9840.945780][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 9840.947233][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 9840.949677][T24057] netlink: 'syz.3.6346': attribute type 11 has an invalid length. [ 9867.329845][T24108] sctp: [Deprecated]: syz.3.6369 (pid 24108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 9867.329845][T24108] Use struct sctp_sack_info instead [ 9876.117349][T24125] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 9876.121689][T24125] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 9879.041929][T24127] loop0: detected capacity change from 0 to 524288000 [ 9898.075168][T24151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6390'. [ 9922.088392][T24203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9922.122107][T24203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9922.246983][ T33] audit: type=1326 audit(9922.178:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.3.6414" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 9947.621586][T24233] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 9965.369473][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 9970.668225][T24265] lo speed is unknown, defaulting to 1000 [ 9980.662598][T24303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6446'. [ 9986.350079][T24313] Invalid ELF header magic: != ELF [10003.981016][T24338] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [10017.825373][T24359] pim6reg: entered allmulticast mode [10018.441384][T24359] pim6reg: left allmulticast mode [10025.121843][T24372] xt_CT: No such helper "snmp" [10037.531767][T24393] process 'syz.2.6484' launched '/dev/fd/3' with NULL argv: empty string added [10078.268424][T24455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6511'. [10078.296012][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6511'. [10078.297634][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6511'. [10101.149013][T24497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10101.170946][T24497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10128.770241][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6547'. [10133.312467][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6548'. [10158.733291][T24585] netlink: 'syz.3.6565': attribute type 5 has an invalid length. [10173.529505][T24607] Process accounting resumed [10174.349751][T24607] Process accounting resumed [10286.812380][T24754] [U] ^@ [10345.529765][T24830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6673'. [10349.235119][T24832] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [10409.799138][T24939] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6718'. [10409.800689][T24939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6718'. [10425.704673][T24974] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [10436.601166][T24990] x_tables: ip_tables: udp match: only valid for protocol 17 [10440.426980][T25000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6744'. [10447.981259][T25014] autofs: Bad value for 'fd' [10468.757583][T25045] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [10482.552238][T25075] ubi0: attaching mtd0 [10482.648440][T25075] ubi0: scanning is finished [10482.675547][T25075] ================================================================== [10482.677986][T25075] BUG: KASAN: slab-out-of-bounds in notifier_chain_register+0x528/0x61a [10482.680210][T25075] Read of size 4 at addr ff600000305618e0 by task syz.2.6775/25075 [10482.681735][T25075] [10482.684100][T25075] CPU: 1 UID: 0 PID: 25075 Comm: syz.2.6775 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10482.685933][T25075] Hardware name: riscv-virtio,qemu (DT) [10482.687019][T25075] Call Trace: [10482.688025][T25075] [] dump_backtrace+0x2e/0x3c [10482.689607][T25075] [] show_stack+0x30/0x3c [10482.691022][T25075] [] dump_stack_lvl+0x12e/0x1a6 [10482.692693][T25075] [] print_report+0x28e/0x5aa [10482.694297][T25075] [] kasan_report+0xec/0x118 [10482.695817][T25075] [] __asan_report_load4_noabort+0x12/0x1a [10482.697574][T25075] [] notifier_chain_register+0x528/0x61a [10482.699121][T25075] [] blocking_notifier_chain_register+0x80/0xc6 [10482.700774][T25075] [] register_reboot_notifier+0x22/0x2c [10482.702370][T25075] [] ubi_wl_init+0xd0a/0x15c2 [10482.704518][T25075] [] ubi_attach+0x15da/0x4f90 [10482.706201][T25075] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10482.707816][T25075] [] ctrl_cdev_ioctl+0x496/0x764 [10482.709305][T25075] [] __riscv_sys_ioctl+0x18e/0x1e2 [10482.710813][T25075] [] syscall_handler+0x94/0x118 [10482.712189][T25075] [] do_trap_ecall_u+0x1aa/0x216 [10482.713905][T25075] [] handle_exception+0x146/0x152 [10482.715674][T25075] [10482.716589][T25075] Allocated by task 20862: [10482.718050][T25075] stack_trace_save+0xa0/0xd2 [10482.719598][T25075] kasan_save_stack+0x3e/0x6a [10482.720951][T25075] kasan_save_track+0x16/0x28 [10482.722273][T25075] kasan_save_alloc_info+0x30/0x3e [10482.723883][T25075] __kasan_kmalloc+0xa0/0xa6 [10482.725277][T25075] __kmalloc_cache_noprof+0x15e/0x3f4 [10482.726797][T25075] bond_alb_initialize+0x62/0x4a2 [10482.728180][T25075] bond_open+0xb36/0xea2 [10482.729458][T25075] __dev_open+0x2be/0x4aa [10482.730692][T25075] __dev_change_flags+0x4f8/0x6a4 [10482.731996][T25075] dev_change_flags+0x74/0x136 [10482.733419][T25075] do_setlink.constprop.0+0x16f2/0x3f9a [10482.734799][T25075] rtnl_newlink+0x156a/0x1aca [10482.736070][T25075] rtnetlink_rcv_msg+0x9e2/0xdbe [10482.737368][T25075] netlink_rcv_skb+0x216/0x3dc [10482.738744][T25075] rtnetlink_rcv+0x26/0x30 [10482.739930][T25075] netlink_unicast+0x4f0/0x82c [10482.741343][T25075] netlink_sendmsg+0x864/0xdc6 [10482.742728][T25075] __sock_sendmsg+0xcc/0x160 [10482.744372][T25075] ____sys_sendmsg+0x5ce/0x79e [10482.745680][T25075] ___sys_sendmsg+0x144/0x1e6 [10482.746975][T25075] __sys_sendmsg+0x188/0x22a [10482.748262][T25075] __riscv_sys_sendmsg+0x70/0xa2 [10482.749686][T25075] syscall_handler+0x94/0x118 [10482.750970][T25075] do_trap_ecall_u+0x1aa/0x216 [10482.752294][T25075] handle_exception+0x146/0x152 [10482.754076][T25075] [10482.754972][T25075] The buggy address belongs to the object at ff60000030560000 [10482.754972][T25075] which belongs to the cache kmalloc-8k of size 8192 [10482.756977][T25075] The buggy address is located 224 bytes to the right of [10482.756977][T25075] allocated 6144-byte region [ff60000030560000, ff60000030561800) [10482.759027][T25075] [10482.759945][T25075] The buggy address belongs to the physical page: [10482.761806][T25075] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb0560 [10482.763846][T25075] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [10482.765616][T25075] anon flags: 0xffe000000000040(head|node=0|zone=0|lastcpupid=0x7ff) [10482.767875][T25075] page_type: f5(slab) [10482.769840][T25075] raw: 0ffe000000000040 ff60000011402280 0000000000000000 dead000000000001 [10482.771529][T25075] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [10482.773320][T25075] head: 0ffe000000000040 ff60000011402280 0000000000000000 dead000000000001 [10482.774894][T25075] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [10482.776504][T25075] head: 0ffe000000000003 ff1c000000c15801 ffffffffffffffff 0000000000000000 [10482.778127][T25075] head: ff60000000000008 0000000000000000 00000000ffffffff 0000000000000000 [10482.779666][T25075] page dumped because: kasan: bad access detected [10482.781342][T25075] page_owner tracks the page as allocated [10482.782573][T25075] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3027, tgid 3027 (dhcpcd), ts 2904836349600, free_ts 2904776444500 [10482.785664][T25075] __set_page_owner+0xa2/0x70c [10482.787081][T25075] post_alloc_hook+0xf0/0x1e8 [10482.788376][T25075] get_page_from_freelist+0xdb0/0x2c0e [10482.789796][T25075] __alloc_pages_noprof+0x1e8/0x1fc2 [10482.791146][T25075] alloc_pages_mpol_noprof+0xf8/0x488 [10482.792654][T25075] alloc_pages_noprof+0x174/0x2f0 [10482.794156][T25075] new_slab+0x2b6/0x40e [10482.795499][T25075] ___slab_alloc+0x9c8/0x10e6 [10482.796940][T25075] __slab_alloc.constprop.0+0x60/0xb0 [10482.798481][T25075] __kmalloc_node_track_caller_noprof+0x1dc/0x5e8 [10482.799903][T25075] kmalloc_reserve+0xfe/0x2be [10482.801199][T25075] __alloc_skb+0x152/0x42a [10482.802472][T25075] netlink_dump+0x2de/0x1100 [10482.804213][T25075] netlink_recvmsg+0x838/0xc3c [10482.805750][T25075] sock_recvmsg+0xd6/0x144 [10482.807076][T25075] ____sys_recvmsg+0x20e/0x7c0 [10482.808610][T25075] page last free pid 3027 tgid 3027 stack trace: [10482.809845][T25075] __reset_page_owner+0x8c/0x400 [10482.811299][T25075] free_unref_page+0x618/0x11d2 [10482.812801][T25075] __free_pages+0x13a/0x1ba [10482.814178][T25075] __free_slab+0xd0/0x176 [10482.815597][T25075] free_slab+0x38/0x1ae [10482.817097][T25075] __put_partials+0x174/0x1de [10482.818662][T25075] put_cpu_partial+0x17c/0x296 [10482.820256][T25075] __slab_free+0x112/0x3f6 [10482.821831][T25075] ___cache_free+0x1a4/0x1de [10482.823198][T25075] qlist_free_all+0x76/0x168 [10482.824764][T25075] kasan_quarantine_reduce+0x158/0x1ba [10482.826411][T25075] __kasan_slab_alloc+0x5c/0x82 [10482.827854][T25075] kmem_cache_alloc_node_noprof+0x10a/0x3e8 [10482.829402][T25075] __alloc_skb+0x32c/0x42a [10482.830708][T25075] netlink_alloc_large_skb+0x7a/0x13e [10482.832201][T25075] netlink_sendmsg+0x660/0xdc6 [10482.834415][T25075] [10482.835262][T25075] Memory state around the buggy address: [10482.837054][T25075] ff60000030561780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [10482.838776][T25075] ff60000030561800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [10482.840508][T25075] >ff60000030561880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [10482.841942][T25075] ^ [10482.843274][T25075] ff60000030561900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [10482.844828][T25075] ff60000030561980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [10482.846397][T25075] ================================================================== [10482.860085][T25075] Kernel panic - not syncing: KASAN: panic_on_warn set ... [10482.862636][T25075] CPU: 1 UID: 0 PID: 25075 Comm: syz.2.6775 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [10482.864613][T25075] Hardware name: riscv-virtio,qemu (DT) [10482.865822][T25075] Call Trace: [10482.866797][T25075] [] dump_backtrace+0x2e/0x3c [10482.868392][T25075] [] show_stack+0x30/0x3c [10482.869859][T25075] [] dump_stack_lvl+0x110/0x1a6 [10482.871677][T25075] [] dump_stack+0x1c/0x24 [10482.873740][T25075] [] panic+0x38c/0x870 [10482.875225][T25075] [] check_panic_on_warn+0xc0/0xe4 [10482.876761][T25075] [] end_report.part.0+0x4e/0xae [10482.878321][T25075] [] kasan_report+0x102/0x118 [10482.879866][T25075] [] __asan_report_load4_noabort+0x12/0x1a [10482.881624][T25075] [] notifier_chain_register+0x528/0x61a [10482.883174][T25075] [] blocking_notifier_chain_register+0x80/0xc6 [10482.884882][T25075] [] register_reboot_notifier+0x22/0x2c [10482.886433][T25075] [] ubi_wl_init+0xd0a/0x15c2 [10482.887999][T25075] [] ubi_attach+0x15da/0x4f90 [10482.889728][T25075] [] ubi_attach_mtd_dev+0x14d8/0x3646 [10482.891263][T25075] [] ctrl_cdev_ioctl+0x496/0x764 [10482.892803][T25075] [] __riscv_sys_ioctl+0x18e/0x1e2 [10482.894436][T25075] [] syscall_handler+0x94/0x118 [10482.895881][T25075] [] do_trap_ecall_u+0x1aa/0x216 [10482.897472][T25075] [] handle_exception+0x146/0x152 [10482.899444][T25075] SMP: stopping secondary CPUs [10482.902991][T25075] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:15:40 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff80083672 mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff80083676 sepc ffffffff86187512 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a1e98000000aec3c x0/zero 0000000000000000 x1/ra ffffffff80083662 x2/sp ff200000000062b0 x3/gp ffffffff899f1660 x4/tp ff6000002f9c4ec0 x5/t0 ff20000000006820 x6/t1 ffebffff0b9bb0b2 x7/t2 ff6000005cdbf6c0 x8/s0 ff20000000006310 x9/s1 0000000000735049 x10/a0 0000000000000001 x11/a1 0000000000000000 x12/a2 0000000000000000 x13/a3 0000000000000000 x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000000000 x17/a7 0000000000735049 x18/s2 0000000000000000 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 0000000000000000 x24/s8 0000000000000001 x25/s9 ffffffff89afa040 x26/s10 0000000000000000 x27/s11 0000000000000000 x28/t3 ff6000002f9c59e0 x29/t4 ffebffff0b9bb0b2 x30/t5 ffebffff0b9bb0b3 x31/t6 000000000000000d f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802d23e8 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff802d0076 sepc ffffffff802bdd76 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a1e99000000adc39 x0/zero 0000000000000000 x1/ra ffffffff802d5eb4 x2/sp ff20000003aa7140 x3/gp ffffffff899f1660 x4/tp ff6000001a253480 x5/t0 ff20000003aa7344 x6/t1 fffffffef133ea68 x7/t2 7320666f20646165 x8/s0 ff20000003aa7310 x9/s1 ff20000003aa72a0 x10/a0 0000000000000000 x11/a1 ffffffffffffffff x12/a2 0000000000080000 x13/a3 ffffffff802d5eb4 x14/a4 ff20000004dd0078 x15/a5 00000000000c7078 x16/a6 fffffffff3f3f300 x17/a7 fffffffff2000000 x18/s2 0000000200000020 x19/s3 ffffffffffffffff x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ff20000003aa7220 x23/s7 ffffffff87538120 x24/s8 0000000000000000 x25/s9 ff20000003aa71e0 x26/s10 0000000000000001 x27/s11 1fe4000000754e34 x28/t3 1fe4000000754e8c x29/t4 fffffffef133ea68 x30/t5 fffffffef133ea69 x31/t6 ffffffff89b5d28c f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000