last executing test programs: 9.984406157s ago: executing program 1 (id=6469): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd663dc127009c116900000000000000000000000000000000ff0200000000000000000000000000014e204e2300", @ANYRESOCT=r0], 0x0) 6.331728135s ago: executing program 1 (id=6471): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x701, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.964388555s ago: executing program 0 (id=6472): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) 5.020999923s ago: executing program 0 (id=6473): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 5.020600523s ago: executing program 1 (id=6474): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fanotify_init(0x222, 0x0) ppoll(&(0x7f00000008c0)=[{r1, 0x5220}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) 3.658656693s ago: executing program 0 (id=6475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r0, 0x4, r0}, 0x10) 3.563162356s ago: executing program 1 (id=6476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.659979302s ago: executing program 0 (id=6477): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0x32, 0x80, 0x0, 0xfd, @tick, {}, {0xe}, @control={0x1, 0x5, 0x6}}], 0x1c) 2.202022035s ago: executing program 1 (id=6478): setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x5, 0x3, 0x3, 0x1000, 0x3c8], 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 1.284802022s ago: executing program 0 (id=6479): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000), 0x4) 663.140211ms ago: executing program 1 (id=6480): syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 0s ago: executing program 0 (id=6481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r1], 0x58}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): 1296] usb 1-1: config 0 interface 255 has no altsetting 0 [ 4066.564960][T11296] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 4066.567910][T11296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4066.628666][T11296] usb 1-1: config 0 descriptor?? [ 4066.684747][T11296] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 4067.328855][T11296] usb 1-1: USB disconnect, device number 17 [ 4068.500157][ T918] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 4068.991382][ T918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4068.994278][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 4069.001915][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 4069.164529][ T918] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 4069.168003][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4069.169248][ T918] usb 2-1: Product: syz [ 4069.170188][ T918] usb 2-1: Manufacturer: syz [ 4069.171147][ T918] usb 2-1: SerialNumber: syz [ 4069.219293][ T918] usb 2-1: config 0 descriptor?? [ 4069.279911][T11705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4069.409068][ T918] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 4070.339472][ T918] usb 2-1: USB disconnect, device number 2 [ 4109.560112][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1689'. [ 4135.979755][T11836] ip6t_srh: unknown srh invflags 7D00 [ 4145.736677][T11848] infiniband syz0: set active [ 4145.830517][T11848] infiniband syz0: set active [ 4157.404215][T11870] xt_limit: Overflow, try lower: 0/0 [ 4166.734706][T11884] ipt_ECN: cannot use operation on non-tcp rule [ 4170.338180][T11892] netlink: 'syz.0.1739': attribute type 2 has an invalid length. [ 4170.339773][T11892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1739'. [ 4179.740258][T11939] wireguard0: entered promiscuous mode [ 4179.742962][T11939] wireguard0: entered allmulticast mode [ 4219.718077][T12001] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 4230.849326][T12019] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 4236.841557][T12035] block nbd1: NBD_DISCONNECT [ 4264.670171][T12080] dvmrp0: entered allmulticast mode [ 4272.629231][T12094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4272.631710][T12094] IPv6: NLM_F_CREATE should be set when creating new route [ 4272.633700][T12094] IPv6: NLM_F_CREATE should be set when creating new route [ 4272.636269][T12094] IPv6: NLM_F_CREATE should be set when creating new route [ 4277.429138][T12108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4277.430365][T12108] IPv6: NLM_F_CREATE should be set when creating new route [ 4277.432027][T12108] IPv6: NLM_F_CREATE should be set when creating new route [ 4277.433085][T12108] IPv6: NLM_F_CREATE should be set when creating new route [ 4283.759976][T12120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4311.111069][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'. [ 4311.116799][T12176] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 4311.119056][T12176] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 4311.120323][T12176] netlink: 'syz.1.1857': attribute type 2 has an invalid length. [ 4311.121599][T12176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1857'. [ 4329.508558][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 4352.049545][T12248] .: renamed from bond0 (while UP) [ 4382.417316][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 4405.803372][T12351] kernel profiling enabled (shift: 63) [ 4405.819430][T12351] profiling shift: 63 too large [ 4412.589208][T12369] xt_TCPMSS: Only works on TCP SYN packets [ 4414.981287][T12374] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 4418.550629][T12382] xt_nfacct: accounting object `syz1' does not exists [ 4467.041880][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'. [ 4473.518129][T12499] xt_l2tp: missing protocol rule (udp|l2tpip) [ 4505.064820][T12559] netlink: 'syz.1.2040': attribute type 32 has an invalid length. [ 4515.453939][T10689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 4515.882337][T10689] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 4515.884347][T10689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4516.011239][T10689] usb 2-1: config 0 descriptor?? [ 4516.079174][T10689] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 4516.784504][T10689] usb 2-1: USB disconnect, device number 3 [ 4532.194217][T12620] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 4539.530851][T12639] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 4539.532711][T12639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'. [ 4539.580479][T12639] ipvlan0: entered promiscuous mode [ 4539.581888][T12639] ipvlan0: entered allmulticast mode [ 4539.582984][T12639] veth0_vlan: entered allmulticast mode [ 4539.721542][T12639] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 4547.652471][T12657] netlink: 'syz.1.2077': attribute type 9 has an invalid length. [ 4556.284156][T12671] netlink: 'syz.0.2084': attribute type 5 has an invalid length. [ 4568.820129][T12694] nft_compat: unsupported protocol 0 [ 4572.685320][T12698] snd_dummy snd_dummy.0: control 3:0:0:syz1:0 is already present [ 4586.184868][T12726] netlink: 'syz.0.2109': attribute type 3 has an invalid length. [ 4588.703927][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2112'. [ 4595.331930][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 4605.781928][T12760] netlink: 'syz.0.2125': attribute type 11 has an invalid length. [ 4611.351291][T12768] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 4611.353067][T12768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'. [ 4611.360806][T12768] ipvlan0: entered promiscuous mode [ 4611.361974][T12768] ipvlan0: entered allmulticast mode [ 4611.362943][T12768] veth0_vlan: entered allmulticast mode [ 4611.421574][T12768] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 4655.298553][T12844] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 4658.127620][T12850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2166'. [ 4658.130244][T12850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2166'. [ 4668.197262][T11247] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 4668.638489][T11247] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 4668.640233][T11247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4668.641781][T11247] usb 1-1: Product: syz [ 4668.642783][T11247] usb 1-1: Manufacturer: syz [ 4668.643870][T11247] usb 1-1: SerialNumber: syz [ 4668.731251][T11247] usb 1-1: config 0 descriptor?? [ 4669.543148][T11247] usb-storage 1-1:0.0: USB Mass Storage device detected [ 4670.124049][T11247] usb 1-1: USB disconnect, device number 18 [ 4677.664092][ T35] audit: type=1400 audit(272005594.576:7): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=12891 comm="syz.1.2180" [ 4679.803591][T11334] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 4680.172515][T11334] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 4680.175025][T11334] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 4680.182816][T11334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 4680.191135][T11334] usb 2-1: config 1 has no interface number 0 [ 4680.193567][T11334] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 4680.198030][T11334] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 4680.201004][T11334] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 4680.203281][T11334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4680.660464][T11334] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 4681.140605][T11334] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 4681.699588][ T8375] usb 2-1: USB disconnect, device number 4 [ 4681.762187][ T8375] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 4684.098585][T12914] sit0: entered promiscuous mode [ 4684.100719][T12914] sit0: entered allmulticast mode [ 4707.017073][T12943] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 4715.152159][ T8375] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 4715.392912][ T8375] usb 2-1: Using ep0 maxpacket: 8 [ 4715.618152][ T8375] usb 2-1: config 0 has an invalid interface number: 90 but max is 0 [ 4715.620789][ T8375] usb 2-1: config 0 has no interface number 0 [ 4716.080025][ T8375] usb 2-1: New USB device found, idVendor=10c4, idProduct=82f9, bcdDevice=1d.fb [ 4716.082528][ T8375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4716.131001][ T8375] usb 2-1: Product: syz [ 4716.132132][ T8375] usb 2-1: Manufacturer: syz [ 4716.133054][ T8375] usb 2-1: SerialNumber: syz [ 4716.518881][ T8375] usb 2-1: config 0 descriptor?? [ 4716.647605][ T8375] cp210x 2-1:0.90: cp210x converter detected [ 4716.971233][ T8375] cp210x 2-1:0.90: failed to get vendor val 0x370b size 1: -71 [ 4716.973682][ T8375] cp210x 2-1:0.90: querying part number failed [ 4717.189531][ T8375] usb 2-1: cp210x converter now attached to ttyUSB0 [ 4717.290079][ T8375] usb 2-1: USB disconnect, device number 5 [ 4717.380130][ T8375] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 4717.424682][ T8375] cp210x 2-1:0.90: device disconnected [ 4741.860071][T11334] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 4742.290192][T11334] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 4742.293415][T11334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 4742.307808][T11334] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 4742.310440][T11334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4742.542677][T11334] usb 2-1: config 0 descriptor?? [ 4743.719040][T11334] appletouch 2-1:0.0: Failed to read mode from device. [ 4743.728904][T11334] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 4743.834297][T11334] usb 2-1: USB disconnect, device number 6 [ 4766.389144][ T9862] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 4766.663957][ T9862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4766.666616][ T9862] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4766.667929][ T9862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 4766.669406][ T9862] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 4766.734851][ T9862] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 4766.737767][ T9862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4766.739098][ T9862] usb 1-1: Product: syz [ 4766.740187][ T9862] usb 1-1: Manufacturer: syz [ 4766.741152][ T9862] usb 1-1: SerialNumber: syz [ 4766.792031][ T9862] usb 1-1: config 0 descriptor?? [ 4766.865256][ T9862] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 4767.058035][ T9862] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 4767.064564][ T9862] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 4768.011091][ T6419] usb 1-1: USB disconnect, device number 19 [ 4768.101084][ T6419] garmin_gps 1-1:0.0: device disconnected [ 4779.032619][T13084] netlink: 'syz.1.2238': attribute type 11 has an invalid length. [ 4810.279044][T13132] netlink: 'syz.1.2261': attribute type 2 has an invalid length. [ 4810.280825][T13132] netlink: 'syz.1.2261': attribute type 3 has an invalid length. [ 4827.742814][T13154] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 4828.345294][T13155] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 4828.363086][T13155] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 4828.409976][T13155] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 4831.001355][T13159] No such timeout policy "syz1" [ 4833.309445][ T6419] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 4833.808441][ T6419] usb 2-1: Using ep0 maxpacket: 8 [ 4833.852691][ T6419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4833.854279][ T6419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 4833.940859][ T6419] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4833.943228][ T6419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4833.945164][ T6419] usb 2-1: Product: syz [ 4833.955123][ T6419] usb 2-1: Manufacturer: syz [ 4833.969458][ T6419] usb 2-1: SerialNumber: syz [ 4835.512971][ T6419] usb 2-1: cannot find UAC_HEADER [ 4835.879705][ T6419] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 4836.059379][ T6419] usb 2-1: USB disconnect, device number 7 [ 4844.268456][T13189] netlink: 'syz.1.2279': attribute type 3 has an invalid length. [ 4898.247076][T13269] Illegal XDP return value 357149044 on prog (id 208) dev N/A, expect packet loss! [ 4906.308896][ T9862] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 4906.697943][ T9862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 4906.699374][ T9862] usb 2-1: config 0 has no interface number 0 [ 4906.700504][ T9862] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 4906.701915][ T9862] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 4906.703068][ T9862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4906.808391][ T9862] usb 2-1: config 0 descriptor?? [ 4906.979845][ T9862] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 4907.510920][T12972] usb 2-1: USB disconnect, device number 8 [ 4936.057694][ T9862] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 4936.391361][ T9862] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4936.393256][ T9862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 4936.395056][ T9862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 4936.412521][ T9862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 4936.414808][ T9862] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 4936.570218][ T9862] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 4936.571878][ T9862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4936.586465][ T9862] usb 1-1: Product: syz [ 4936.587708][ T9862] usb 1-1: Manufacturer: syz [ 4936.588617][ T9862] usb 1-1: SerialNumber: syz [ 4936.660661][ T9862] usb 1-1: config 0 descriptor?? [ 4936.702100][T13364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4936.860518][ T9862] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 4939.314638][T10689] usb 1-1: USB disconnect, device number 20 [ 4950.809795][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 4954.208717][T13407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2348'. [ 4964.264075][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 4966.753539][T13425] xt_connbytes: Forcing CT accounting to be enabled [ 4966.758958][T13425] xt_bpf: check failed: parse error [ 4983.383959][T13480] x_tables: unsorted underflow at hook 3 [ 4992.938342][T12687] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 4993.198495][T12687] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 4993.203091][T12687] usb 1-1: config 0 has no interface number 0 [ 4993.209378][T12687] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 4993.264068][T12687] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 4993.289192][T12687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4993.292281][T12687] usb 1-1: Product: syz [ 4993.293955][T12687] usb 1-1: Manufacturer: syz [ 4993.312873][T12687] usb 1-1: SerialNumber: syz [ 4993.440580][T12687] usb 1-1: config 0 descriptor?? [ 4993.675078][T12687] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 4996.937713][T10689] usb 1-1: USB disconnect, device number 21 [ 4997.223742][T10689] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 5019.004397][T13537] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 5028.291753][T13553] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 5030.761225][T13557] tmpfs: Bad value for 'mpol' [ 5046.795436][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2408'. [ 5046.814239][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2408'. [ 5056.171645][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 5063.409849][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 5096.808919][T13722] xt_NFQUEUE: number of total queues is 0 [ 5101.643782][T13734] virtio-fs: tag <(null)> not found [ 5103.941839][T13738] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 5110.018191][T13751] tmpfs: Bad value for 'mpol' [ 5136.583715][T13807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5138.700619][T10689] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 5139.200900][T10689] usb 1-1: Using ep0 maxpacket: 8 [ 5139.251060][T10689] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 5139.263797][T10689] usb 1-1: config 0 has no interface number 0 [ 5139.268993][T10689] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 5139.280632][T10689] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 5139.283329][T10689] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 5139.310108][T10689] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 5139.312613][T10689] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 5139.396642][T10689] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 5139.399440][T10689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5139.402507][T10689] usb 1-1: Product: syz [ 5139.403593][T10689] usb 1-1: Manufacturer: syz [ 5139.404481][T10689] usb 1-1: SerialNumber: syz [ 5139.453913][T10689] usb 1-1: config 0 descriptor?? [ 5141.183387][T10689] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 5141.753265][T11296] usb 1-1: USB disconnect, device number 22 [ 5153.467679][ T35] audit: type=1400 audit(272006070.376:8): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A9625292F2F2E212D pid=13846 comm="syz.0.2493" [ 5160.338488][T13866] netlink: 'syz.1.2502': attribute type 29 has an invalid length. [ 5166.840197][T13879] xt_NFQUEUE: number of queues (65535) out of range (got 129383) [ 5169.119060][ T35] audit: type=1326 audit(272006086.026:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.1.2510" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 5169.130711][ T35] audit: type=1326 audit(272006086.046:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.1.2510" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 5169.211261][ T35] audit: type=1326 audit(272006086.126:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.1.2510" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb636 code=0x7ffc0000 [ 5169.213358][ T35] audit: type=1326 audit(272006086.126:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.1.2510" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 5169.215200][ T35] audit: type=1326 audit(272006086.126:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.1.2510" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7ffc0000 [ 5171.599735][T13892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2514'. [ 5171.602677][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 5171.604605][T13892] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2514'. [ 5171.609282][T13892] netlink: 'syz.1.2514': attribute type 3 has an invalid length. [ 5171.614315][T13892] netlink: 'syz.1.2514': attribute type 2 has an invalid length. [ 5171.620271][T13892] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2514'. [ 5179.329935][T13918] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2523'. [ 5181.294556][T13921] binfmt_misc: register: failed to install interpreter file ./file0 [ 5195.190557][T13943] netlink: 'syz.0.2533': attribute type 21 has an invalid length. [ 5195.194558][T13943] netlink: 'syz.0.2533': attribute type 6 has an invalid length. [ 5195.218333][T13943] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2533'. [ 5214.942435][T13978] misc userio: Invalid payload size [ 5219.660944][ T6419] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 5219.898872][ T6419] usb 2-1: Using ep0 maxpacket: 8 [ 5219.979343][ T6419] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 5219.981718][ T6419] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 5219.984197][ T6419] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 54446, setting to 1024 [ 5219.997044][ T6419] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 5220.125414][ T6419] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 5220.128758][ T6419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5220.130678][ T6419] usb 2-1: Product: syz [ 5220.132165][ T6419] usb 2-1: Manufacturer: syz [ 5220.133761][ T6419] usb 2-1: SerialNumber: syz [ 5220.385235][T13987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5220.485059][ T6419] hso 2-1:6.0: Can't find BULK OUT endpoint [ 5222.488106][T11296] usb 2-1: USB disconnect, device number 9 [ 5227.950491][T14008] dlm: no local IP address has been set [ 5227.953691][T14008] dlm: cannot start dlm midcomms -107 [ 5232.742964][T14016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2563'. [ 5237.028728][T11247] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 5237.289125][T11247] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 5237.291528][T11247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5237.293574][T11247] usb 1-1: config 0 has no interface number 0 [ 5237.297970][T11247] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 5237.300161][T11247] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5237.790866][T11247] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 5237.793399][T11247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5237.796388][T11247] usb 1-1: Product: syz [ 5237.797936][T11247] usb 1-1: Manufacturer: syz [ 5237.800147][T11247] usb 1-1: SerialNumber: syz [ 5237.870887][T11247] usb 1-1: config 0 descriptor?? [ 5240.028029][ T6419] usb 1-1: USB disconnect, device number 23 [ 5258.021168][T14067] sctp: [Deprecated]: syz.1.2580 (pid 14067) Use of int in maxseg socket option. [ 5258.021168][T14067] Use struct sctp_assoc_value instead [ 5278.974894][T14113] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5281.238402][T14117] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 5281.240030][T14117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2605'. [ 5297.042186][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 5297.043877][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 5311.407919][T14178] netlink: 'syz.1.2634': attribute type 21 has an invalid length. [ 5311.410360][T14178] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2634'. [ 5311.412193][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 5325.858136][T10689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 5326.238685][T10689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 5326.240940][T10689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 5326.242396][T10689] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5326.243893][T10689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 5326.245362][T10689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 5326.384944][T10689] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 5326.394146][T10689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5326.401500][T10689] usb 2-1: SerialNumber: syz [ 5326.481445][T10689] usb 2-1: config 0 descriptor?? [ 5326.512001][T14211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5326.514417][T14211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5326.643065][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 5326.668741][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 5326.701166][T10689] port100 2-1:0.0: NFC: Could not get supported command types [ 5327.187496][ T6419] usb 2-1: USB disconnect, device number 10 [ 5350.566835][T14273] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 5351.442831][T14275] xt_hashlimit: max too large, truncated to 1048576 [ 5352.297257][T14277] usb usb1: usbfs: process 14277 (syz.1.2677) did not claim interface 0 before use [ 5354.343608][T14283] netlink: 'syz.0.2680': attribute type 21 has an invalid length. [ 5354.348599][T14283] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2680'. [ 5354.351620][T14283] netlink: 'syz.0.2680': attribute type 5 has an invalid length. [ 5354.353459][T14283] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2680'. [ 5362.779111][T14299] xt_hashlimit: invalid interval [ 5369.668185][T14311] netlink: 'syz.1.2694': attribute type 2 has an invalid length. [ 5377.753836][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2702'. [ 5383.283042][T14342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2709'. [ 5393.678517][T14316] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 5393.927937][T14316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 5393.929607][T14316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 5393.932155][T14316] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 5393.933683][T14316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 5393.935370][T14316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 5393.976208][T14316] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 5393.977934][T14316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 5393.979369][T14316] usb 1-1: SerialNumber: syz [ 5394.033556][T14316] usb 1-1: config 0 descriptor?? [ 5394.054194][T14363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5394.084272][T14363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5394.126536][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 5394.129478][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 5394.132459][T14316] port100 1-1:0.0: NFC: Could not get supported command types [ 5394.764276][T14316] usb 1-1: USB disconnect, device number 24 [ 5396.422484][T14380] netlink: 'syz.1.2722': attribute type 21 has an invalid length. [ 5396.424816][T14380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2722'. [ 5396.434411][T14380] netlink: 'syz.1.2722': attribute type 4 has an invalid length. [ 5396.451124][T14380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2722'. [ 5408.515174][T14400] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2731'. [ 5418.205247][T14424] misc userio: No port type given on /dev/userio [ 5440.054808][T14466] PKCS8: Unsupported PKCS#8 version [ 5443.801397][T14476] tmpfs: Bad value for 'mpol' [ 5448.530084][T14486] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 5448.531428][T14486] netlink: 'syz.0.2775': attribute type 2 has an invalid length. [ 5461.726850][T14513] usb usb1: usbfs: process 14513 (syz.1.2787) did not claim interface 0 before use [ 5478.138444][T14555] veth2: entered promiscuous mode [ 5478.140242][T14555] veth2: entered allmulticast mode [ 5487.203274][T14582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5496.471682][T14592] cgroup: No subsys list or none specified [ 5503.267887][T14606] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 5503.269180][T14606] netlink: 'syz.0.2829': attribute type 3 has an invalid length. [ 5503.270223][T14606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2829'. [ 5503.271620][T14606] NCSI netlink: No device for ifindex 0 [ 5509.173014][T14620] netlink: 'syz.1.2836': attribute type 6 has an invalid length. [ 5517.888647][T14640] [U] [ 5517.890441][T14640] [U] [ 5517.891235][T14640] [U] [ 5517.891983][T14640] [U] [ 5517.894719][T14640] [U] [ 5517.895658][T14640] [U] [ 5517.896460][T14640] [U] [ 5517.897186][T14640] [U] [ 5517.900194][T14640] [U] [ 5517.900981][T14640] [U] [ 5517.901726][T14640] [U] [ 5517.951662][T14638] [U] [ 5523.871305][T11334] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 5524.078628][T11334] usb 1-1: Using ep0 maxpacket: 8 [ 5524.159402][T11334] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 5524.162211][T11334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5524.226801][T11334] usb 1-1: config 0 descriptor?? [ 5525.477467][T11334] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 5525.813445][T11334] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 5525.817214][T11334] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 5525.822907][T11334] asix 1-1:0.0: probe with driver asix failed with error -71 [ 5525.927861][T11334] usb 1-1: USB disconnect, device number 25 [ 5533.058586][T14675] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 5533.060954][T14675] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2857'. [ 5533.640898][T14677] Non-string source [ 5536.310253][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 5536.311866][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 5546.513951][T14711] syz.1.2875 (14711): /proc/14710/oom_adj is deprecated, please use /proc/14710/oom_score_adj instead. [ 5560.451618][T14737] xt_HMARK: spi-set and port-set can't be combined [ 5575.351202][T14775] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 5584.119677][T14794] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 5589.720869][T14803] Device name cannot be null; rc = [-22] [ 5594.264288][T14815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5613.592983][T14856] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2944'. [ 5635.795196][T14904] process 'syz.0.2968' launched '/dev/fd/3' with NULL argv: empty string added [ 5637.030473][T14907] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2969'. [ 5662.949398][T14960] netlink: 'syz.0.2995': attribute type 1 has an invalid length. [ 5662.954325][T14960] netlink: 'syz.0.2995': attribute type 2 has an invalid length. [ 5666.534776][T14966] tmpfs: Bad value for 'mpol' [ 5683.751626][T14996] dvmrp1: entered allmulticast mode [ 5687.672544][T15002] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 5687.673961][T15002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3015'. [ 5692.422512][ T8375] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 5692.618481][ T8375] usb 1-1: Using ep0 maxpacket: 16 [ 5692.973997][ T8375] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 5692.986646][ T8375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5692.988994][ T8375] usb 1-1: Product: syz [ 5692.990957][ T8375] usb 1-1: Manufacturer: syz [ 5692.992708][ T8375] usb 1-1: SerialNumber: syz [ 5693.199953][ T8375] usb 1-1: config 0 descriptor?? [ 5697.765124][ T8375] usb_8dev 1-1:0.0 can0: sending command message failed [ 5697.770118][ T8375] usb_8dev 1-1:0.0 can0: can't get firmware version [ 5698.161053][ T8375] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 5698.358649][ T8375] usb 1-1: USB disconnect, device number 26 [ 5700.920050][T15037] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 5700.922284][T15037] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3023'. [ 5706.207003][T15042] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3025'. [ 5717.969617][T15065] netlink: 'syz.0.3037': attribute type 15 has an invalid length. [ 5732.300714][T15091] xt_hashlimit: size too large, truncated to 1048576 [ 5732.349309][T15091] xt_hashlimit: overflow, rate too high: 0 [ 5751.984168][T15151] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 5764.623628][T15172] tmpfs: Bad value for 'mpol' [ 5767.008669][ T8375] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 5767.361243][ T8375] usb 1-1: Using ep0 maxpacket: 32 [ 5767.449568][ T8375] usb 1-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 5767.558509][ T8375] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 5767.561074][ T8375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5767.563106][ T8375] usb 1-1: Product: syz [ 5767.564669][ T8375] usb 1-1: Manufacturer: syz [ 5767.578276][ T8375] usb 1-1: SerialNumber: syz [ 5767.721340][ T8375] usb 1-1: config 0 descriptor?? [ 5767.881069][ T8375] usb 1-1: bad CDC descriptors [ 5767.944597][ T8375] usb 1-1: unsupported MDLM descriptors [ 5769.087509][T11334] usb 1-1: USB disconnect, device number 27 [ 5777.290464][T15199] ipt_REJECT: ECHOREPLY no longer supported. [ 5780.794766][T15207] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 5780.811692][T15207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 5785.281360][T15217] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3090'. [ 5785.288404][T15217] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3090'. [ 5807.842455][T15260] netlink: 'syz.1.3110': attribute type 2 has an invalid length. [ 5886.759462][ T35] audit: type=1400 audit(272006803.666:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=22090EA3680EB06A1A5FD3F7614E16D41267A0590DD509A5EFFE069BBBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07E pid=15417 comm="syz.0.3168" [ 5894.553470][T15430] netlink: 'syz.0.3174': attribute type 5 has an invalid length. [ 5904.454525][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 5906.749842][T15448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 5948.110850][T15498] sctp: [Deprecated]: syz.1.3205 (pid 15498) Use of int in max_burst socket option deprecated. [ 5948.110850][T15498] Use struct sctp_assoc_value instead [ 5951.473552][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'. [ 5964.089474][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3218'. [ 5977.879179][T15545] ALSA: mixer_oss: invalid OSS volume '‰Pã¼' [ 5995.425025][T15570] usb usb1: usbfs: process 15570 (syz.0.3241) did not claim interface 0 before use [ 6017.379413][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 6059.564370][T15720] syz.1.3286 (15720): drop_caches: 0 [ 6064.852973][T15729] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 6064.854625][T15729] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 6064.858029][T15729] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 6068.498071][T15737] netlink: 'syz.1.3293': attribute type 28 has an invalid length. [ 6068.500304][T15737] netlink: 'syz.1.3293': attribute type 3 has an invalid length. [ 6068.501479][T15737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3293'. [ 6073.274422][T15743] xt_policy: too many policy elements [ 6101.941833][T15795] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 6121.000564][T15815] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3332'. [ 6123.352542][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 6133.511593][T15837] xt_CONNSECMARK: invalid mode: 0 [ 6139.593066][T15851] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 6146.932557][T15862] gretap1: entered promiscuous mode [ 6152.481433][T15875] ip6t_srh: unknown srh match flags 4000 [ 6157.409179][T12972] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 6158.175045][T12972] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 6158.180433][T12972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6158.182330][T12972] usb 2-1: Product: syz [ 6158.185191][T12972] usb 2-1: Manufacturer: syz [ 6158.189302][T12972] usb 2-1: SerialNumber: syz [ 6158.323158][T12972] usb 2-1: config 0 descriptor?? [ 6160.091084][T12972] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 6160.405281][T12972] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 6160.448960][T12972] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 6161.232191][T12972] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 6161.671393][T12972] usb 2-1: USB disconnect, device number 11 [ 6163.958865][T11334] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 6164.407892][T11334] usb 1-1: Using ep0 maxpacket: 16 [ 6165.943037][T11334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6165.989047][T11334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 6167.143105][T11334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 6167.162766][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6167.165002][T11334] usb 1-1: Product: syz [ 6167.183727][T11334] usb 1-1: Manufacturer: syz [ 6167.210622][T11334] usb 1-1: SerialNumber: syz [ 6171.683412][T11334] usb 1-1: cannot find UAC_HEADER [ 6172.240479][T11334] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 6172.406558][T11334] usb 1-1: USB disconnect, device number 28 [ 6188.353885][T15952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6191.452576][T12972] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 6191.728108][T12972] usb 2-1: Using ep0 maxpacket: 32 [ 6191.968348][T12972] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 6191.970820][T12972] usb 2-1: config 0 has no interface number 0 [ 6192.087106][T12972] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 6192.088661][T12972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6192.089811][T12972] usb 2-1: Product: syz [ 6192.091381][T12972] usb 2-1: Manufacturer: syz [ 6192.092956][T12972] usb 2-1: SerialNumber: syz [ 6192.245150][T12972] usb 2-1: config 0 descriptor?? [ 6192.473498][T12972] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 6193.539161][T12972] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 6193.543001][T12972] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 6194.135017][T12972] usb 2-1: USB disconnect, device number 12 [ 6203.490972][T12972] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 6204.210517][T12972] usb 1-1: Using ep0 maxpacket: 32 [ 6204.397176][T12972] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 6204.401913][T12972] usb 1-1: config 0 has no interface number 0 [ 6204.403975][T12972] usb 1-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 6204.648971][T12972] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 6204.652084][T12972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6204.654994][T12972] usb 1-1: Product: syz [ 6204.707112][T12972] usb 1-1: Manufacturer: syz [ 6204.710172][T12972] usb 1-1: SerialNumber: syz [ 6205.187559][T12972] usb 1-1: config 0 descriptor?? [ 6205.480723][T15999] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6208.100771][T15999] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6208.274328][T12972] net1080 1-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, a6:0c:74:12:19:40 [ 6209.388495][T12972] usb 1-1: USB disconnect, device number 29 [ 6209.502368][T12972] net1080 1-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 6213.270001][T11334] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 6213.548931][T11334] usb 2-1: Using ep0 maxpacket: 16 [ 6213.609860][T11334] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 6213.612411][T11334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6213.614647][T11334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 6213.728324][T11334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 6213.730958][T11334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6213.732970][T11334] usb 2-1: Product: syz [ 6213.734856][T11334] usb 2-1: Manufacturer: syz [ 6213.752962][T11334] usb 2-1: SerialNumber: syz [ 6215.156308][T11334] usb 2-1: 0:2 : does not exist [ 6215.198571][T11334] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 6215.729007][T11334] usb 2-1: USB disconnect, device number 13 [ 6226.341058][T16064] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 6281.337252][T16149] netlink: 'syz.0.3425': attribute type 1 has an invalid length. [ 6281.340823][T16149] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3425'. [ 6296.029421][T16169] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 6296.031114][T16169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3431'. [ 6300.860747][T16177] misc userio: The device must be registered before sending interrupts [ 6324.700913][T16219] netlink: 'syz.0.3455': attribute type 40 has an invalid length. [ 6325.724375][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 6325.727178][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 6330.329082][T16235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3464'. [ 6343.968970][T11334] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 6344.227535][T11334] usb 2-1: Using ep0 maxpacket: 32 [ 6344.365030][T11334] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 6344.367299][T11334] usb 2-1: config 0 has no interface number 0 [ 6344.455225][T11334] usb 2-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 6344.741591][T11334] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 6344.744026][T11334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6344.757526][T11334] usb 2-1: Product: syz [ 6344.763680][T11334] usb 2-1: Manufacturer: syz [ 6344.765551][T11334] usb 2-1: SerialNumber: syz [ 6344.889643][T11334] usb 2-1: config 0 descriptor?? [ 6344.929471][T16257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 6346.312594][T16257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 6346.613227][T11334] net1080 2-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 02:1c:76:1a:17:d5 [ 6348.171894][T11334] usb 2-1: USB disconnect, device number 14 [ 6348.253556][T11334] net1080 2-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 6385.090513][T11334] hid-generic D158:334EB097:0E39.0001: item fetching failed at offset 0/1 [ 6385.100790][T11334] hid-generic D158:334EB097:0E39.0001: probe with driver hid-generic failed with error -22 [ 6403.403422][T16372] nvme_fabrics: missing parameter 'transport=%s' [ 6403.424310][T16372] nvme_fabrics: missing parameter 'nqn=%s' [ 6418.520054][T16391] netlink: 'syz.1.3523': attribute type 21 has an invalid length. [ 6418.521936][T16391] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3523'. [ 6418.548277][T16391] netlink: 'syz.1.3523': attribute type 6 has an invalid length. [ 6418.549666][T16391] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3523'. [ 6420.539190][T16393] usb usb1: usbfs: process 16393 (syz.0.3524) did not claim interface 0 before use [ 6454.534774][T16454] tmpfs: Bad value for 'mpol' [ 6462.834178][T16467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6483.842866][T16492] netlink: 131264 bytes leftover after parsing attributes in process `syz.1.3573'. [ 6529.768192][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3609'. [ 6551.050366][T16594] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3621'. [ 6573.218511][T16632] geneve3: entered promiscuous mode [ 6580.003013][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'. [ 6580.004580][T16649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 6596.795066][T16680] bond0: Error: Cannot enslave bond to itself. [ 6611.393995][T16702] tmpfs: Bad value for 'mpol' [ 6613.072193][T16704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 6628.355437][T16757] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3684'. [ 6649.537551][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 6649.543066][T16790] netlink: 'syz.0.3700': attribute type 3 has an invalid length. [ 6693.098670][ T8375] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 6693.314640][ T8375] usb 1-1: Using ep0 maxpacket: 8 [ 6693.445315][ T8375] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 6693.553804][ T8375] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 6693.561246][ T8375] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 6693.563166][ T8375] usb 1-1: Product: syz [ 6693.564385][ T8375] usb 1-1: Manufacturer: syz [ 6693.566528][ T8375] usb 1-1: SerialNumber: syz [ 6694.638260][ T8375] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 6694.643115][ T8375] visor 1-1:1.0: probe with driver visor failed with error -110 [ 6706.377065][T15912] usb 1-1: USB disconnect, device number 30 [ 6710.503681][T16869] geneve4: entered promiscuous mode [ 6715.873722][T16880] netlink: 'syz.0.3733': attribute type 32 has an invalid length. [ 6715.875248][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 6715.881212][T16880] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 6730.918529][T16927] netlink: 'syz.0.3737': attribute type 2 has an invalid length. [ 6731.197921][T16927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6733.730889][T16929] geneve4: entered promiscuous mode [ 6737.440718][T16937] netlink: 'syz.1.3740': attribute type 21 has an invalid length. [ 6737.443116][T16937] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3740'. [ 6737.470691][T16937] netlink: 'syz.1.3740': attribute type 5 has an invalid length. [ 6737.472649][T16937] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3740'. [ 6761.090086][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3763'. [ 6762.517396][T15912] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 6762.884766][T15912] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 6762.889866][T15912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6762.892083][T15912] usb 1-1: Product: syz [ 6762.893732][T15912] usb 1-1: Manufacturer: syz [ 6762.902457][T15912] usb 1-1: SerialNumber: syz [ 6763.093852][T15912] usb 1-1: config 0 descriptor?? [ 6763.589350][T15912] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 031 [ 6764.190121][T15912] (null): failure reading functionality [ 6764.221685][T15912] i2c i2c-0: failure reading functionality [ 6764.348800][T15912] i2c i2c-0: connected i2c-tiny-usb device [ 6764.468401][T15912] usb 1-1: USB disconnect, device number 31 [ 6771.963109][T17018] geneve3: entered promiscuous mode [ 6782.751861][T17035] geneve4: entered promiscuous mode [ 6793.149893][T17062] xt_cgroup: xt_cgroup: no path or classid specified [ 6794.813342][T17066] xt_SECMARK: invalid mode: 0 [ 6820.538812][T17112] ip6t_srh: unknown srh invflags 7863 [ 6837.031111][T17135] netlink: 'syz.1.3822': attribute type 3 has an invalid length. [ 6850.983269][T17159] netlink: 'syz.0.3834': attribute type 17 has an invalid length. [ 6850.984993][T17159] netlink: 'syz.0.3834': attribute type 27 has an invalid length. [ 6857.427124][T17174] tmpfs: Bad value for 'nr_inodes' [ 6871.939330][T17201] xt_hashlimit: overflow, try lower: 512/9223372036854775808 [ 6875.490531][T17211] sctp: [Deprecated]: syz.1.3859 (pid 17211) Use of int in max_burst socket option. [ 6875.490531][T17211] Use struct sctp_assoc_value instead [ 6899.182719][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3882'. [ 6917.440079][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 6919.231365][T17296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 6931.033388][T17315] lo: entered promiscuous mode [ 6931.062143][T17315] lo: entered allmulticast mode [ 6931.124730][T17315] tunl0: entered promiscuous mode [ 6931.128382][T17315] tunl0: entered allmulticast mode [ 6931.409924][T17315] gre0: entered promiscuous mode [ 6931.412289][T17315] gre0: entered allmulticast mode [ 6931.460544][T17315] gretap0: entered promiscuous mode [ 6931.462913][T17315] gretap0: entered allmulticast mode [ 6932.561672][T17315] erspan0: entered promiscuous mode [ 6932.563988][T17315] erspan0: entered allmulticast mode [ 6933.217840][T17315] ip_vti0: entered promiscuous mode [ 6933.220066][T17315] ip_vti0: entered allmulticast mode [ 6934.172089][T17315] ip6_vti0: entered promiscuous mode [ 6934.179883][T17315] ip6_vti0: entered allmulticast mode [ 6934.671235][T17315] sit0: entered promiscuous mode [ 6934.673225][T17315] sit0: entered allmulticast mode [ 6935.142450][T17315] ip6tnl0: entered promiscuous mode [ 6935.144822][T17315] ip6tnl0: entered allmulticast mode [ 6936.201883][T17315] ip6gre0: entered promiscuous mode [ 6936.204330][T17315] ip6gre0: entered allmulticast mode [ 6937.805201][T17315] syz_tun: entered promiscuous mode [ 6937.841179][T17315] syz_tun: entered allmulticast mode [ 6938.541110][T17315] ip6gretap0: entered promiscuous mode [ 6938.542527][T17315] ip6gretap0: entered allmulticast mode [ 6938.961628][T17315] vcan0: entered promiscuous mode [ 6938.963766][T17315] vcan0: entered allmulticast mode [ 6939.194220][T17315] bond0: entered promiscuous mode [ 6939.214331][T17315] bond_slave_0: entered promiscuous mode [ 6939.270905][T17315] bond_slave_1: entered promiscuous mode [ 6939.274442][T17315] bond0: entered allmulticast mode [ 6939.292872][T17315] bond_slave_0: entered allmulticast mode [ 6939.294409][T17315] bond_slave_1: entered allmulticast mode [ 6939.542125][T17315] infiniband syz0: set down [ 6939.570410][T17315] dummy0: entered promiscuous mode [ 6939.571813][T17315] dummy0: entered allmulticast mode [ 6939.691267][T17315] nlmon0: entered promiscuous mode [ 6939.693504][T17315] nlmon0: entered allmulticast mode [ 6940.080710][T17315] vxcan0: entered promiscuous mode [ 6940.083024][T17315] vxcan0: entered allmulticast mode [ 6940.208070][T17315] vxcan1: entered promiscuous mode [ 6940.210290][T17315] vxcan1: entered allmulticast mode [ 6940.328476][T17315] veth0: entered promiscuous mode [ 6940.330692][T17315] veth0: entered allmulticast mode [ 6940.901753][T17315] veth1: entered promiscuous mode [ 6940.903925][T17315] veth1: entered allmulticast mode [ 6941.494294][T17315] wg0: entered promiscuous mode [ 6941.500933][T17315] wg0: entered allmulticast mode [ 6941.724599][T17315] wg1: entered promiscuous mode [ 6941.727047][T17315] wg1: entered allmulticast mode [ 6941.802645][T17315] wg2: entered promiscuous mode [ 6941.803897][T17315] wg2: entered allmulticast mode [ 6941.937023][T17315] veth0_to_bridge: entered promiscuous mode [ 6941.938409][T17315] veth0_to_bridge: entered allmulticast mode [ 6942.071170][T17315] bridge_slave_0: entered promiscuous mode [ 6942.074453][T17315] bridge_slave_0: entered allmulticast mode [ 6942.206395][T17315] veth1_to_bridge: entered promiscuous mode [ 6942.207843][T17315] veth1_to_bridge: entered allmulticast mode [ 6942.512054][T17315] bridge_slave_1: entered promiscuous mode [ 6942.513519][T17315] bridge_slave_1: entered allmulticast mode [ 6942.589983][T17315] veth0_to_bond: entered promiscuous mode [ 6942.591375][T17315] veth0_to_bond: entered allmulticast mode [ 6942.822744][T17315] veth1_to_bond: entered promiscuous mode [ 6942.824050][T17315] veth1_to_bond: entered allmulticast mode [ 6942.979935][T17315] veth0_to_team: entered promiscuous mode [ 6942.981406][T17315] veth0_to_team: entered allmulticast mode [ 6943.053603][T17315] team_slave_0: entered promiscuous mode [ 6943.054915][T17315] team_slave_0: entered allmulticast mode [ 6943.070441][T17315] veth1_to_team: entered promiscuous mode [ 6943.071647][T17315] veth1_to_team: entered allmulticast mode [ 6943.128842][T17315] team_slave_1: entered promiscuous mode [ 6943.130321][T17315] team_slave_1: entered allmulticast mode [ 6943.165060][T17315] veth0_to_batadv: entered promiscuous mode [ 6943.168391][T17315] veth0_to_batadv: entered allmulticast mode [ 6943.233350][T17315] batadv_slave_0: entered promiscuous mode [ 6943.234688][T17315] batadv_slave_0: entered allmulticast mode [ 6943.389964][T17315] veth1_to_batadv: entered promiscuous mode [ 6943.391754][T17315] veth1_to_batadv: entered allmulticast mode [ 6943.610487][T17315] batadv_slave_1: entered promiscuous mode [ 6943.612000][T17315] batadv_slave_1: entered allmulticast mode [ 6943.884126][T17315] xfrm0: entered promiscuous mode [ 6943.886822][T17315] xfrm0: entered allmulticast mode [ 6943.970177][T17315] veth0_to_hsr: entered promiscuous mode [ 6943.971938][T17315] veth0_to_hsr: entered allmulticast mode [ 6944.066956][T17315] hsr_slave_0: entered allmulticast mode [ 6944.177752][T17315] veth1_to_hsr: entered promiscuous mode [ 6944.179809][T17315] veth1_to_hsr: entered allmulticast mode [ 6944.499902][T17315] hsr_slave_1: entered allmulticast mode [ 6944.611757][T17315] hsr0: entered promiscuous mode [ 6944.613314][T17315] hsr0: entered allmulticast mode [ 6944.813993][T17315] veth1_virt_wifi: entered promiscuous mode [ 6944.831337][T17315] veth1_virt_wifi: entered allmulticast mode [ 6945.201232][T17315] veth0_virt_wifi: entered promiscuous mode [ 6945.202672][T17315] veth0_virt_wifi: entered allmulticast mode [ 6945.303628][T17315] veth1_vlan: entered allmulticast mode [ 6945.829631][T17315] vlan0: entered promiscuous mode [ 6945.831633][T17315] vlan0: entered allmulticast mode [ 6945.861380][T17315] vlan1: entered promiscuous mode [ 6945.863527][T17315] vlan1: entered allmulticast mode [ 6945.871318][T17315] macvlan0: entered promiscuous mode [ 6945.873181][T17315] macvlan0: entered allmulticast mode [ 6945.921887][T17315] macvlan1: entered promiscuous mode [ 6945.923983][T17315] macvlan1: entered allmulticast mode [ 6946.182548][T17315] ipvlan1: entered promiscuous mode [ 6946.184787][T17315] ipvlan1: entered allmulticast mode [ 6946.302446][T17315] veth1_macvtap: entered allmulticast mode [ 6946.492653][T17315] veth0_macvtap: entered allmulticast mode [ 6947.043122][T17315] macvtap0: entered promiscuous mode [ 6947.045351][T17315] macvtap0: entered allmulticast mode [ 6947.319842][T17315] macsec0: entered promiscuous mode [ 6947.321833][T17315] macsec0: entered allmulticast mode [ 6947.533730][T17315] geneve0: entered promiscuous mode [ 6947.549057][T17315] geneve0: entered allmulticast mode [ 6947.890735][T17315] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6947.893676][T17315] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6947.911590][T17315] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6947.914243][T17315] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6948.153161][T17315] geneve1: entered promiscuous mode [ 6948.158171][T17315] geneve1: entered allmulticast mode [ 6948.523678][T17315] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 6948.551584][T17315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 6948.603614][T17315] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 6948.609823][T17315] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 6948.890778][T17315] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 6948.893513][T17315] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 6949.081252][T17315] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 6949.083669][T17315] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 6949.229581][T17315] vxlan0: entered promiscuous mode [ 6949.231772][T17315] vxlan0: entered allmulticast mode [ 6949.451836][T17315] dvmrp0: entered promiscuous mode [ 6949.567940][T17315] vti0: entered promiscuous mode [ 6949.569258][T17315] vti0: entered allmulticast mode [ 6949.590857][T17315] ip6tnl1: entered promiscuous mode [ 6949.592155][T17315] ip6tnl1: entered allmulticast mode [ 6949.595174][T17315] geneve2: entered promiscuous mode [ 6949.640549][T17315] geneve2: entered allmulticast mode [ 6949.645069][T17315] gretap1: entered promiscuous mode [ 6949.657345][T17315] gretap1: entered allmulticast mode [ 6949.678403][T17315] bond1: entered promiscuous mode [ 6949.679775][T17315] bond1: entered allmulticast mode [ 6949.682098][T17315] bond2: entered promiscuous mode [ 6949.683674][T17315] bond2: entered allmulticast mode [ 6949.700054][T17315] ipip0: entered promiscuous mode [ 6949.707905][T17315] ipip0: entered allmulticast mode [ 6949.727921][T17315] bond3: entered promiscuous mode [ 6949.729217][T17315] bond3: entered allmulticast mode [ 6949.731836][T17315] vti1: entered promiscuous mode [ 6949.733352][T17315] vti1: entered allmulticast mode [ 6949.753566][T17315] bond4: entered promiscuous mode [ 6949.754911][T17315] bond4: entered allmulticast mode [ 6949.758832][T17315] ip6gre1: entered promiscuous mode [ 6949.760077][T17315] ip6gre1: entered allmulticast mode [ 6949.800191][T17315] ip6gre2: entered promiscuous mode [ 6949.801492][T17315] ip6gre2: entered allmulticast mode [ 6950.839282][T17315] bond5: entered promiscuous mode [ 6950.840695][T17315] bond5: entered allmulticast mode [ 6950.903162][T17315] ip6gre3: entered promiscuous mode [ 6950.904560][T17315] ip6gre3: entered allmulticast mode [ 6952.090994][T17315] ip6gretap1: entered promiscuous mode [ 6952.093195][T17315] ip6gretap1: entered allmulticast mode [ 6952.111132][T17315] erspan1: entered promiscuous mode [ 6952.113295][T17315] erspan1: entered allmulticast mode [ 6961.187772][T17363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3927'. [ 6966.150683][T17373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3932'. [ 6974.723939][T17387] netlink: 'syz.1.3939': attribute type 14 has an invalid length. [ 6989.052931][T17415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3953'. [ 7000.562701][ T35] audit: type=1800 audit(272007917.466:15): pid=17442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3966" name="/newroot/1985/file0" dev="tmpfs" ino=9989 res=0 errno=0 [ 7002.804017][T17455] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 7005.685166][T17459] xt_CT: No such helper "syz0" [ 7007.569105][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 7014.001825][T17484] tmpfs: Bad value for 'mpol' [ 7016.793871][T17489] xt_socket: unknown flags 0x8 [ 7031.912722][T17513] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 7033.344535][T17517] devtmpfs: Cannot enable quota on remount [ 7037.594440][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 7046.228457][T17322] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 7046.625181][T17322] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 7046.630516][T17322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7046.632692][T17322] usb 1-1: Product: syz [ 7046.634520][T17322] usb 1-1: Manufacturer: syz [ 7046.638091][T17322] usb 1-1: SerialNumber: syz [ 7046.724623][T17322] usb 1-1: config 0 descriptor?? [ 7048.051109][T17322] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 7048.568704][T15912] usb 1-1: USB disconnect, device number 32 [ 7053.054769][T17569] netlink: 'syz.1.4017': attribute type 5 has an invalid length. [ 7053.062577][T17569] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4017'. [ 7070.848566][T17611] netlink: 'syz.1.4038': attribute type 3 has an invalid length. [ 7070.850246][T17611] tc_dump_action: action bad kind [ 7080.369540][T17625] xt_CT: No such helper "pptp" [ 7083.689553][T17634] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.327680) [ 7087.289041][T17640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 7089.871382][T17644] AppArmor: change_hat: Invalid input '0' [ 7097.556588][ T35] audit: type=1400 audit(272008014.466:16): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=17661 comm="syz.0.4063" [ 7100.734175][T17668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4066'. [ 7109.327554][T17682] cgroup: none used incorrectly [ 7121.353813][T17706] netlink: 'syz.0.4085': attribute type 3 has an invalid length. [ 7129.341089][T17721] ip6t_srh: unknown srh match flags 4001 [ 7166.030185][T17787] netlink: 'syz.1.4125': attribute type 4 has an invalid length. [ 7174.937552][T17808] netlink: 'syz.0.4135': attribute type 13 has an invalid length. [ 7190.829333][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 7207.632017][T17882] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4172'. [ 7210.819288][T17890] trusted_key: encrypted_key: keylen parameter is missing [ 7216.673408][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4180'. [ 7220.134012][T17905] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 7221.401185][T17909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4185'. [ 7222.412860][T17913] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4187'. [ 7226.072014][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 7244.569899][T17959] sit0: left promiscuous mode [ 7244.572352][T17959] sit0: left allmulticast mode [ 7247.183720][T17959] ipvlan0: left promiscuous mode [ 7247.184989][T17959] ipvlan0: left allmulticast mode [ 7247.188386][T17959] veth0_vlan: left allmulticast mode [ 7247.812951][T17959] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 7247.827339][T17959] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 7247.829675][T17959] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 7247.831916][T17959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 7248.044699][T17959] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53522 - 0 [ 7248.048702][T17959] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53522 - 0 [ 7248.050993][T17959] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53522 - 0 [ 7248.089037][T17959] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53522 - 0 [ 7248.199611][T17959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 7248.278161][T17959] wireguard0: left promiscuous mode [ 7248.280380][T17959] wireguard0: left allmulticast mode [ 7248.678398][T17959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7248.730579][T17959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 7250.181003][T17959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 7250.353403][T17959] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 7255.289197][T17975] lo: entered promiscuous mode [ 7255.290514][T17975] lo: entered allmulticast mode [ 7255.518252][T17975] tunl0: entered promiscuous mode [ 7255.519692][T17975] tunl0: entered allmulticast mode [ 7255.591428][T17975] gre0: entered promiscuous mode [ 7255.592697][T17975] gre0: entered allmulticast mode [ 7256.448884][T17975] gretap0: entered promiscuous mode [ 7256.453439][T17975] gretap0: entered allmulticast mode [ 7256.492188][T11334] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 7256.749773][T11334] usb 2-1: Using ep0 maxpacket: 32 [ 7256.792473][T17975] erspan0: entered promiscuous mode [ 7256.793757][T17975] erspan0: entered allmulticast mode [ 7256.822361][T11334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 7256.882742][T11334] usb 2-1: config 8 has an invalid interface number: 10 but max is 0 [ 7256.885178][T11334] usb 2-1: config 8 has no interface number 0 [ 7256.891458][T11334] usb 2-1: config 8 interface 10 altsetting 250 bulk endpoint 0xA has invalid maxpacket 1024 [ 7256.893693][T11334] usb 2-1: config 8 interface 10 has no altsetting 0 [ 7256.951301][T17975] ip_vti0: entered promiscuous mode [ 7256.952693][T17975] ip_vti0: entered allmulticast mode [ 7256.990033][T11334] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=d0.01 [ 7256.992437][T11334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7257.002058][T11334] usb 2-1: Product: syz [ 7257.004241][T11334] usb 2-1: Manufacturer: syz [ 7257.008345][T11334] usb 2-1: SerialNumber: syz [ 7257.061199][T17975] ip6_vti0: entered promiscuous mode [ 7257.064502][T17975] ip6_vti0: entered allmulticast mode [ 7257.135431][T17977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7257.251038][T17975] sit0: entered promiscuous mode [ 7257.252475][T17975] sit0: entered allmulticast mode [ 7257.390350][T17975] ip6tnl0: entered promiscuous mode [ 7257.391685][T17975] ip6tnl0: entered allmulticast mode [ 7257.528883][T17975] ip6gre0: entered promiscuous mode [ 7257.530262][T17975] ip6gre0: entered allmulticast mode [ 7258.030956][T11334] usb 2-1: USB disconnect, device number 15 [ 7258.438864][T17975] syz_tun: entered promiscuous mode [ 7258.440144][T17975] syz_tun: entered allmulticast mode [ 7258.602067][T17975] ip6gretap0: entered promiscuous mode [ 7258.603421][T17975] ip6gretap0: entered allmulticast mode [ 7258.709776][T17975] vcan0: entered promiscuous mode [ 7258.711319][T17975] vcan0: entered allmulticast mode [ 7258.792928][T17975] .: entered promiscuous mode [ 7258.794072][T17975] bond_slave_0: entered promiscuous mode [ 7258.800129][T17975] bond_slave_1: entered promiscuous mode [ 7258.808624][T17975] .: entered allmulticast mode [ 7258.809720][T17975] bond_slave_0: entered allmulticast mode [ 7258.810775][T17975] bond_slave_1: entered allmulticast mode [ 7258.920796][T17975] dummy0: entered promiscuous mode [ 7258.922038][T17975] dummy0: entered allmulticast mode [ 7259.013702][T17975] nlmon0: entered promiscuous mode [ 7259.017775][T17975] nlmon0: entered allmulticast mode [ 7259.093449][T17975] vxcan0: entered promiscuous mode [ 7259.095175][T17975] vxcan0: entered allmulticast mode [ 7259.148728][T17975] vxcan1: entered promiscuous mode [ 7259.150006][T17975] vxcan1: entered allmulticast mode [ 7259.183739][T17975] veth0: entered promiscuous mode [ 7259.185066][T17975] veth0: entered allmulticast mode [ 7259.372658][T17975] veth1: entered promiscuous mode [ 7259.373920][T17975] veth1: entered allmulticast mode [ 7259.550951][T17975] wg0: entered promiscuous mode [ 7259.553202][T17975] wg0: entered allmulticast mode [ 7259.717960][T17975] wg1: entered promiscuous mode [ 7259.720071][T17975] wg1: entered allmulticast mode [ 7259.985046][T17975] wg2: entered promiscuous mode [ 7259.989839][T17975] wg2: entered allmulticast mode [ 7260.232299][T17975] veth0_to_bridge: entered promiscuous mode [ 7260.234461][T17975] veth0_to_bridge: entered allmulticast mode [ 7260.509863][T17975] bridge_slave_0: entered promiscuous mode [ 7260.518293][T17975] bridge_slave_0: entered allmulticast mode [ 7261.113771][T17975] veth1_to_bridge: entered promiscuous mode [ 7261.120800][T17975] veth1_to_bridge: entered allmulticast mode [ 7261.388403][T17975] bridge_slave_1: entered promiscuous mode [ 7261.390709][T17975] bridge_slave_1: entered allmulticast mode [ 7261.589267][T17975] veth0_to_bond: entered promiscuous mode [ 7261.594934][T17975] veth0_to_bond: entered allmulticast mode [ 7261.883068][T17975] veth1_to_bond: entered promiscuous mode [ 7261.884345][T17975] veth1_to_bond: entered allmulticast mode [ 7262.015158][T17975] veth0_to_team: entered promiscuous mode [ 7262.017230][T17975] veth0_to_team: entered allmulticast mode [ 7262.113980][T17975] team_slave_0: entered promiscuous mode [ 7262.115287][T17975] team_slave_0: entered allmulticast mode [ 7262.214459][T17975] veth1_to_team: entered promiscuous mode [ 7262.219116][T17975] veth1_to_team: entered allmulticast mode [ 7262.390162][T17975] team_slave_1: entered promiscuous mode [ 7262.391903][T17975] team_slave_1: entered allmulticast mode [ 7262.460237][T17975] veth0_to_batadv: entered promiscuous mode [ 7262.461604][T17975] veth0_to_batadv: entered allmulticast mode [ 7262.589735][T17975] batadv_slave_0: entered promiscuous mode [ 7262.592655][T17975] batadv_slave_0: entered allmulticast mode [ 7262.751133][T17975] veth1_to_batadv: entered promiscuous mode [ 7262.752944][T17975] veth1_to_batadv: entered allmulticast mode [ 7262.872602][T17975] batadv_slave_1: entered promiscuous mode [ 7262.873912][T17975] batadv_slave_1: entered allmulticast mode [ 7263.071468][T17975] xfrm0: entered promiscuous mode [ 7263.073553][T17975] xfrm0: entered allmulticast mode [ 7263.184608][T17975] veth0_to_hsr: entered promiscuous mode [ 7263.188081][T17975] veth0_to_hsr: entered allmulticast mode [ 7263.441053][T17975] hsr_slave_0: entered allmulticast mode [ 7263.659383][T17975] veth1_to_hsr: entered promiscuous mode [ 7263.661518][T17975] veth1_to_hsr: entered allmulticast mode [ 7264.023130][T17975] hsr_slave_1: entered allmulticast mode [ 7264.109131][T17975] hsr0: entered promiscuous mode [ 7264.110394][T17975] hsr0: entered allmulticast mode [ 7264.193421][T17975] veth1_virt_wifi: entered promiscuous mode [ 7264.197635][T17975] veth1_virt_wifi: entered allmulticast mode [ 7264.373400][T17975] veth0_virt_wifi: entered promiscuous mode [ 7264.374851][T17975] veth0_virt_wifi: entered allmulticast mode [ 7264.626936][T17975] veth1_vlan: entered allmulticast mode [ 7264.721006][T17975] veth0_vlan: entered allmulticast mode [ 7265.850882][T17975] vlan0: entered promiscuous mode [ 7265.852192][T17975] vlan0: entered allmulticast mode [ 7265.931618][T17975] vlan1: entered promiscuous mode [ 7265.932860][T17975] vlan1: entered allmulticast mode [ 7265.976257][T17975] macvlan0: entered promiscuous mode [ 7265.977590][T17975] macvlan0: entered allmulticast mode [ 7266.071661][T17975] macvlan1: entered promiscuous mode [ 7266.073010][T17975] macvlan1: entered allmulticast mode [ 7266.163121][T17975] ipvlan0: entered promiscuous mode [ 7266.171226][T17975] ipvlan0: entered allmulticast mode [ 7266.261473][T17975] ipvlan1: entered promiscuous mode [ 7266.262891][T17975] ipvlan1: entered allmulticast mode [ 7266.432039][T17975] veth1_macvtap: entered allmulticast mode [ 7266.744183][T17975] veth0_macvtap: entered allmulticast mode [ 7266.951042][T17975] macvtap0: entered promiscuous mode [ 7266.952651][T17975] macvtap0: entered allmulticast mode [ 7267.052061][T17975] macsec0: entered promiscuous mode [ 7267.053677][T17975] macsec0: entered allmulticast mode [ 7267.204870][T17975] geneve1: entered promiscuous mode [ 7267.208283][T17975] geneve1: entered allmulticast mode [ 7267.322166][T17975] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 7267.423193][T17975] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 7267.424993][T17975] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 7267.519502][T17975] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 7267.520937][T17975] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 7267.659285][T17975] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 7267.660661][T17975] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 7267.817594][T17975] ipip0: entered promiscuous mode [ 7267.818919][T17975] ipip0: entered allmulticast mode [ 7267.882387][T17975] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7267.883977][T17975] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7267.885276][T17975] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7267.887214][T17975] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7267.917556][T17975] vxlan0: entered promiscuous mode [ 7267.918884][T17975] vxlan0: entered allmulticast mode [ 7267.991247][T17975] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 53522 - 0 [ 7267.992979][T17975] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 53522 - 0 [ 7267.994545][T17975] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 53522 - 0 [ 7268.019997][T17975] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 53522 - 0 [ 7268.039945][T17975] geneve2: entered promiscuous mode [ 7268.041275][T17975] geneve2: entered allmulticast mode [ 7268.210239][T17975] bond1: entered promiscuous mode [ 7268.211662][T17975] bond1: entered allmulticast mode [ 7268.459573][T17975] wireguard0: entered promiscuous mode [ 7268.460852][T17975] wireguard0: entered allmulticast mode [ 7268.524748][T17975] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7268.529202][T17975] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7268.530544][T17975] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7268.531830][T17975] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7268.552593][T17975] geneve3: entered promiscuous mode [ 7268.553836][T17975] geneve3: entered allmulticast mode [ 7268.617603][T17975] sit1: entered promiscuous mode [ 7268.618884][T17975] sit1: entered allmulticast mode [ 7268.698236][T17975] bond0: entered promiscuous mode [ 7268.699695][T17975] bond0: entered allmulticast mode [ 7268.755069][T17975] bond2: entered promiscuous mode [ 7268.760704][T17975] bond2: entered allmulticast mode [ 7268.803676][T17975] sit2: entered promiscuous mode [ 7268.805104][T17975] sit2: entered allmulticast mode [ 7269.427375][T17975] dvmrp1: entered promiscuous mode [ 7269.528091][T17975] bond3: entered promiscuous mode [ 7269.529399][T17975] bond3: entered allmulticast mode [ 7269.568143][T17975] erspan1: entered promiscuous mode [ 7269.569416][T17975] erspan1: entered allmulticast mode [ 7269.630799][T17975] geneve0: entered promiscuous mode [ 7269.632149][T17975] geneve0: entered allmulticast mode [ 7269.635248][T17975] ip6erspan0: entered promiscuous mode [ 7269.637586][T17975] ip6erspan0: entered allmulticast mode [ 7269.641593][T17975] ip6gre1: entered promiscuous mode [ 7269.642876][T17975] ip6gre1: entered allmulticast mode [ 7269.652334][T17975] gretap1: entered allmulticast mode [ 7269.761046][T17975] ip6gre2: entered promiscuous mode [ 7269.763113][T17975] ip6gre2: entered allmulticast mode [ 7270.560665][T17975] syztnl2: entered promiscuous mode [ 7270.562058][T17975] syztnl2: entered allmulticast mode [ 7270.568197][T17975] bond4: entered promiscuous mode [ 7270.569405][T17975] bond4: entered allmulticast mode [ 7270.581085][T17975] ipip1: entered promiscuous mode [ 7270.582435][T17975] ipip1: entered allmulticast mode [ 7270.642652][T17975] syztnl1: entered promiscuous mode [ 7270.643958][T17975] syztnl1: entered allmulticast mode [ 7276.629072][T18002] AppArmor: change_hat: Invalid input 'p' [ 7278.097948][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4226'. [ 7289.399198][T16127] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 7289.628567][T16127] usb 2-1: Using ep0 maxpacket: 8 [ 7289.723648][T16127] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 7289.739208][T16127] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 7289.741516][T16127] usb 2-1: config 0 has no interface number 0 [ 7289.743390][T16127] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 7289.757521][T16127] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 7289.760206][T16127] usb 2-1: config 0 interface 255 has no altsetting 0 [ 7289.947775][T16127] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 7289.950973][T16127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7289.952785][T16127] usb 2-1: Product: syz [ 7289.954231][T16127] usb 2-1: Manufacturer: syz [ 7289.957764][T16127] usb 2-1: SerialNumber: syz [ 7290.047755][T16127] usb 2-1: config 0 descriptor?? [ 7291.174768][T16127] imon 2-1:0.255: unable to register, err -19 [ 7291.271453][T16127] usb 2-1: USB disconnect, device number 16 [ 7294.880498][T18053] netlink: 'syz.0.4243': attribute type 7 has an invalid length. [ 7301.655228][T18065] netlink: 'syz.0.4249': attribute type 12 has an invalid length. [ 7303.748084][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 7308.951303][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'. [ 7311.279471][T18085] @ÿ: renamed from bond_slave_0 [ 7311.763481][T18087] siw: device registration error -23 [ 7315.058582][T18097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4265'. [ 7323.782819][T18112] netlink: 'syz.0.4273': attribute type 2 has an invalid length. [ 7323.784319][T18112] netlink: 'syz.0.4273': attribute type 11 has an invalid length. [ 7323.801063][T18112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4273'. [ 7336.844494][T18141] tmpfs: Bad value for 'mpol' [ 7345.962749][T18159] sock: sock_timestamping_bind_phc: sock not bind to device [ 7355.858479][T18179] ubi0: attaching mtd0 [ 7355.938200][T18179] ubi0: scanning is finished [ 7355.940567][T18179] ubi0: empty MTD device detected [ 7356.556369][T18179] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 7356.557709][T18179] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 7356.558839][T18179] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 7356.559942][T18179] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 7356.561005][T18179] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 7356.562015][T18179] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 7356.563133][T18179] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4081199305 [ 7356.567664][T18179] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 7356.572028][T18183] ubi0: background thread "ubi_bgt0d" started, PID 18183 [ 7366.212611][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'. [ 7390.692081][T18251] xt_hashlimit: size too large, truncated to 1048576 [ 7392.025199][T18255] xt_cgroup: path and classid specified [ 7402.750038][T18269] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 7414.735030][T18291] tmpfs: Bad value for 'mpol' [ 7420.551231][T18303] IPv6: NLM_F_CREATE should be specified when creating new route [ 7426.154105][T18313] mmap: syz.1.4370 (18313): VmData 29085696 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 7428.053564][T18318] trusted_key: encrypted_key: master key parameter is missing [ 7430.326853][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 7449.083694][T18358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4392'. [ 7449.701143][T18360] netlink: 'syz.1.4393': attribute type 21 has an invalid length. [ 7449.702838][T18360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4393'. [ 7452.999076][T18366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 7453.251525][T18366] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 7453.741803][T18368] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7467.436457][ T35] audit: type=1400 audit(272008384.326:17): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18424 comm="syz.0.4407" [ 7470.442874][ T35] audit: type=1400 audit(272008387.356:18): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=18430 comm="syz.1.4410" [ 7472.602836][T18436] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 7476.935197][T18448] nftables ruleset with unbound chain [ 7478.798891][T11334] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 7479.008325][T11334] usb 1-1: Using ep0 maxpacket: 16 [ 7479.088154][T11334] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 112 [ 7479.183949][T11334] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 7479.209645][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7479.211940][T11334] usb 1-1: Product: syz [ 7479.213778][T11334] usb 1-1: Manufacturer: syz [ 7479.240247][T11334] usb 1-1: SerialNumber: syz [ 7479.313944][T11334] usb 1-1: config 0 descriptor?? [ 7479.341791][T18451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 7479.383112][T11334] hub 1-1:0.0: bad descriptor, ignoring hub [ 7479.387378][T11334] hub 1-1:0.0: probe with driver hub failed with error -5 [ 7479.468984][T11334] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 7479.879340][T11334] usb 1-1: USB disconnect, device number 33 [ 7496.300983][T11334] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 7496.792427][T11334] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 7496.802211][T11334] usb 2-1: config 179 has no interface number 0 [ 7496.816942][T11334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 7496.823446][T11334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 7496.830995][T11334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 7496.841092][T11334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 7496.854105][T11334] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 7496.893304][T11334] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 7496.907214][T11334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7497.123162][T18504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 7497.301518][T11334] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 7497.322632][T11334] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 7498.168099][T11334] usb 2-1: USB disconnect, device number 17 [ 7520.919153][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4451'. [ 7525.885260][T18566] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4457'. [ 7563.451612][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 7566.103532][T18635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4491'. [ 7573.093173][T18681] netlink: 'syz.0.4497': attribute type 61 has an invalid length. [ 7576.176895][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'. [ 7586.751402][T18707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4509'. [ 7596.607316][T18723] ubi0: detaching mtd0 [ 7597.033866][T18723] ubi0: mtd0 is detached [ 7609.099150][T11334] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 7609.405124][T11334] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 7609.408220][T11334] usb 2-1: config 0 has no interface number 0 [ 7609.489463][T11334] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd [ 7609.491734][T11334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 7609.494479][T11334] usb 2-1: Product: syz [ 7609.506898][T11334] usb 2-1: Manufacturer: syz [ 7609.508832][T11334] usb 2-1: SerialNumber: syz [ 7609.611374][T11334] usb 2-1: config 0 descriptor?? [ 7609.702870][T11334] kalmia 2-1:0.19: probe with driver kalmia failed with error -22 [ 7609.748651][T11334] option 2-1:0.19: GSM modem (1-port) converter detected [ 7610.687036][T11334] usb 2-1: USB disconnect, device number 18 [ 7610.803452][T11334] option 2-1:0.19: device disconnected [ 7613.209636][T18767] netlink: 'syz.0.4530': attribute type 21 has an invalid length. [ 7613.211195][T18767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4530'. [ 7618.584139][T18773] netlink: 'syz.0.4533': attribute type 21 has an invalid length. [ 7618.590014][T18773] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4533'. [ 7654.430367][T18839] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4564'. [ 7671.989131][ T35] audit: type=1400 audit(272008588.886:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18874 comm="syz.1.4582" [ 7672.067695][T18877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4583'. [ 7673.362849][T18880] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4585'. [ 7677.918391][T18921] cgroup: name respecified [ 7696.367212][T18956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4605'. [ 7696.392465][T18956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4605'. [ 7704.619967][T18970] netlink: 'syz.1.4612': attribute type 30 has an invalid length. [ 7718.722552][T19027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4624'. [ 7720.007905][T19029] netlink: 'syz.0.4625': attribute type 2 has an invalid length. [ 7720.009755][T19029] netlink: 'syz.0.4625': attribute type 1 has an invalid length. [ 7720.011435][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 7722.259550][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4627'. [ 7725.854582][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 7729.363141][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4633'. [ 7735.684514][T19053] infiniband syz!: set down [ 7735.691087][T19053] infiniband syz!: added team_slave_0 [ 7735.719841][T19053] syz!: rxe_create_cq: returned err = -12 [ 7735.723345][T19053] infiniband syz!: Couldn't create ib_mad CQ [ 7735.729564][T19053] infiniband syz!: Couldn't open port 1 [ 7736.611168][T19053] RDS/IB: syz!: added [ 7736.614677][T19053] smc: adding ib device syz! with port count 1 [ 7736.620806][T19053] smc: ib device syz! port 1 has pnetid [ 7742.366717][T19069] autofs4:pid:19069:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 7742.368549][T19069] autofs4:pid:19069:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 7745.832987][T19075] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 7747.209393][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4647'. [ 7756.903059][T19091] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 7756.913999][T19091] nbd: must specify at least one socket [ 7759.932293][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4657'. [ 7760.278550][T19097] vlan2: entered allmulticast mode [ 7780.509740][T19128] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4668'. [ 7818.598870][T19209] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 7818.601628][T19209] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4707'. [ 7822.072952][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4711'. [ 7858.150309][T19279] netlink: 'syz.0.4743': attribute type 12 has an invalid length. [ 7867.122200][T19297] tmpfs: Bad value for 'mpol' [ 7870.082586][T19303] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4754'. [ 7872.340657][T19307] syz.0.4756 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 7874.282844][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'. [ 7876.956969][T19318] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 7881.931055][T19360] dlm: no locking on control device [ 7917.268590][T19425] netlink: 'syz.1.4797': attribute type 1 has an invalid length. [ 7943.493866][T19487] netlink: 'syz.1.4821': attribute type 3 has an invalid length. [ 7944.801817][T19489] netlink: 'syz.0.4822': attribute type 5 has an invalid length. [ 7954.111871][T19513] tmpfs: Bad value for 'mpol' [ 7963.408691][T19529] tmpfs: Bad value for 'mpol' [ 7970.000195][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4846'. [ 8005.223286][T19598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8033.884931][T19639] Zero length message leads to an empty skb [ 8040.720110][T19649] [U] [ 8041.883471][T19652] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 8058.620099][T19690] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4918'. [ 8072.092759][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4930'. [ 8076.507000][T19720] xt_bpf: check failed: parse error [ 8082.212103][T19736] bpf: Bad value for 'gid' [ 8086.770785][T19749] netlink: 'syz.0.4948': attribute type 2 has an invalid length. [ 8086.772402][T19749] netlink: 'syz.0.4948': attribute type 8 has an invalid length. [ 8086.785145][T19749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4948'. [ 8086.828389][T19750] netlink: 'syz.1.4947': attribute type 4 has an invalid length. [ 8091.677188][T19764] netlink: 'syz.1.4955': attribute type 9 has an invalid length. [ 8091.679679][T19764] netlink: 'syz.1.4955': attribute type 7 has an invalid length. [ 8091.680939][T19764] netlink: 'syz.1.4955': attribute type 8 has an invalid length. [ 8095.501992][ T35] audit: type=1326 audit(272009012.406:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19776 comm="syz.1.4960" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 8095.504337][ T35] audit: type=1326 audit(272009012.406:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19776 comm="syz.1.4960" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x0 [ 8148.113705][T19914] netlink: 'syz.0.5011': attribute type 6 has an invalid length. [ 8148.513469][T19916] netlink: 'syz.1.5012': attribute type 2 has an invalid length. [ 8148.515006][T19916] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 8152.463293][T19927] netlink: 'syz.0.5018': attribute type 30 has an invalid length. [ 8152.472711][T19927] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 8152.474091][T19927] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 8156.651069][T16127] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 8157.042379][T16127] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 8157.044745][T16127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8157.047839][T16127] usb 1-1: Product: syz [ 8157.049324][T16127] usb 1-1: Manufacturer: syz [ 8157.050930][T16127] usb 1-1: SerialNumber: syz [ 8157.123192][T16127] usb 1-1: config 0 descriptor?? [ 8157.941689][T16127] hso 1-1:0.0: Can't find BULK IN endpoint [ 8157.964487][T16127] usb-storage 1-1:0.0: USB Mass Storage device detected [ 8158.428049][T16127] usb 1-1: USB disconnect, device number 34 [ 8163.653548][T19964] xt_TCPMSS: Only works on TCP SYN packets [ 8175.001317][T19986] sctp: [Deprecated]: syz.1.5039 (pid 19986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 8175.001317][T19986] Use struct sctp_sack_info instead [ 8177.786383][T19992] netlink: 'syz.0.5042': attribute type 6 has an invalid length. [ 8188.038274][T20021] dlm: non-version read from control device 0 [ 8204.690008][T20051] netlink: 'syz.0.5071': attribute type 16 has an invalid length. [ 8204.692386][T20051] netlink: 'syz.0.5071': attribute type 3 has an invalid length. [ 8204.694123][T20051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5071'. [ 8253.913790][T20177] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 8269.117373][ T35] audit: type=1800 audit(272009186.026:22): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5142" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 8292.179037][T20267] autofs4:pid:20267:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 8304.329984][T20233] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 8304.627742][T20233] usb 1-1: Using ep0 maxpacket: 32 [ 8304.723832][T20233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 8304.727259][T20233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 8304.776968][T20233] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 8304.779737][T20233] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 8304.781908][T20233] usb 1-1: Product: syz [ 8304.785822][T20233] usb 1-1: Manufacturer: syz [ 8305.029225][T20233] hub 1-1:4.0: USB hub found [ 8305.772399][T20233] hub 1-1:4.0: 7 ports detected [ 8305.793810][T20233] hub 1-1:4.0: insufficient power available to use all downstream ports [ 8306.011693][T20233] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 8306.035192][T20233] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 8306.378898][T20233] usb 1-1: USB disconnect, device number 35 [ 8331.282307][T17966] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 8331.519247][T17966] usb 2-1: Using ep0 maxpacket: 8 [ 8331.602691][T17966] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 8331.610209][T17966] usb 2-1: config 179 has no interface number 0 [ 8331.612846][T17966] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 8331.620897][T17966] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 8331.623846][T17966] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 8331.643720][T17966] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 8331.652868][T17966] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 8331.657142][T17966] usb 2-1: config 179 interface 65 has no altsetting 0 [ 8331.659958][T17966] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 8331.662227][T17966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8332.069046][T17966] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input46 [ 8332.553694][T17966] usb 2-1: USB disconnect, device number 19 [ 8332.674228][T17966] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 8358.227591][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5236'. [ 8364.064414][T20456] netlink: 'syz.0.5245': attribute type 8 has an invalid length. [ 8364.067875][T20456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5245'. [ 8372.965335][T20484] xt_l2tp: wrong L2TP version: 0 [ 8392.718256][T20526] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5280'. [ 8403.781860][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5292'. [ 8406.661990][T20562] netlink: 'syz.0.5296': attribute type 4 has an invalid length. [ 8406.663544][T20562] netlink: 'syz.0.5296': attribute type 6 has an invalid length. [ 8413.208360][T20578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5304'. [ 8421.213246][ T35] audit: type=1400 audit(272009352.547:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=20596 comm="syz.0.5313" [ 8422.810166][T20233] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 8423.085198][T20233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 8423.087430][T20233] usb 1-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 8423.089952][T20233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8423.123067][T20233] usb 1-1: config 0 descriptor?? [ 8423.206243][T20233] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 found [ 8423.985547][T20233] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 8424.000545][T20233] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 now disconnected [ 8424.050583][T20233] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 8424.648959][T17966] usb 1-1: USB disconnect, device number 36 [ 8427.919048][T20620] netlink: 'syz.1.5318': attribute type 30 has an invalid length. [ 8449.195823][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5340'. [ 8463.873021][T20700] kernel read not supported for file /'- (pid: 20700 comm: syz.1.5358) [ 8463.885898][ T35] audit: type=1800 audit(272009395.253:24): pid=20700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5358" name="'-" dev="mqueue" ino=38267 res=0 errno=0 [ 8465.849014][T20706] No such timeout policy "syz0" [ 8475.556801][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5374'. [ 8475.654069][T20732] vlan0: entered promiscuous mode [ 8476.023392][T20736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5375'. [ 8490.876856][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5395'. [ 8490.879336][T20779] gre0: left promiscuous mode [ 8490.880291][T20779] gre0: left allmulticast mode [ 8490.903879][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5395'. [ 8492.228173][T20783] tc_dump_action: action bad kind [ 8500.962742][T20798] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 8502.825415][T20801] new mount options do not match the existing superblock, will be ignored [ 8514.560344][T20828] netlink: 'syz.1.5419': attribute type 1 has an invalid length. [ 8522.726077][T20846] gre0: entered promiscuous mode [ 8522.728456][T20846] gre0: entered allmulticast mode [ 8522.765558][T20846] bond5: entered promiscuous mode [ 8522.767721][T20846] bond5: entered allmulticast mode [ 8522.779939][T20846] xfrm1: entered promiscuous mode [ 8522.788934][T20846] xfrm1: entered allmulticast mode [ 8522.804554][T20846] ip6_vti1: entered promiscuous mode [ 8522.806675][T20846] ip6_vti1: entered allmulticast mode [ 8522.815598][T20846] bond6: entered promiscuous mode [ 8522.817649][T20846] bond6: entered allmulticast mode [ 8522.848226][T20846] veth2: entered promiscuous mode [ 8522.850360][T20846] veth2: entered allmulticast mode [ 8522.868144][T20846] veth3: entered promiscuous mode [ 8522.873185][T20846] veth3: entered allmulticast mode [ 8522.878014][T20846] vxcan2: entered promiscuous mode [ 8522.879883][T20846] vxcan2: entered allmulticast mode [ 8522.909597][T20846] vxcan3: entered promiscuous mode [ 8522.911771][T20846] vxcan3: entered allmulticast mode [ 8522.960491][T20846] vlan0: entered allmulticast mode [ 8524.713298][T20850] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5430'. [ 8539.713573][T20886] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 8539.752957][T20885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 8539.756634][T20885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 8539.774162][T20885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 8539.776695][T20885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 8539.804728][T20885] geneve4: entered promiscuous mode [ 8539.806823][T20885] geneve4: entered allmulticast mode [ 8567.433500][T20947] veth0_to_hsr: left promiscuous mode [ 8567.440167][T20947] veth0_to_hsr: left allmulticast mode [ 8567.459421][T20947] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 8574.995863][T20970] netlink: 'syz.1.5488': attribute type 12 has an invalid length. [ 8584.951664][T20998] erspan0: default FDB implementation only supports local addresses [ 8592.343474][T21018] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.5511'. [ 8603.533150][T21044] xt_ecn: cannot match TCP bits for non-tcp packets [ 8614.756607][T21099] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 8616.405358][T21103] netlink: 'syz.1.5537': attribute type 3 has an invalid length. [ 8616.406935][T21103] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5537'. [ 8627.977565][T21126] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 8659.455084][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5581'. [ 8664.900784][T21208] netlink: 'syz.1.5585': attribute type 1 has an invalid length. [ 8706.630039][T20233] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 8706.853974][T20233] usb 2-1: Using ep0 maxpacket: 16 [ 8706.961196][T20233] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 8706.963041][T20233] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 8706.964230][T20233] usb 2-1: Product: syz [ 8706.965174][T20233] usb 2-1: SerialNumber: syz [ 8707.027072][T20233] usb 2-1: config 0 descriptor?? [ 8707.149524][T20233] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 8707.173803][T20233] usb 2-1: Detected FT2232C/D [ 8708.301323][T20233] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 8708.359495][T20233] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 8708.602320][T20233] usb 2-1: USB disconnect, device number 20 [ 8708.771640][T20233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 8708.785784][T20233] ftdi_sio 2-1:0.0: device disconnected [ 8714.879273][T21353] trusted_key: encrypted_key: hex blob is missing [ 8724.608561][T21373] IPv6: Can't replace route, no match found [ 8734.357809][T21395] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 8754.156537][T21429] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 8760.587065][T21444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 8782.455684][T21485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 8800.833400][T17966] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 8801.053137][T17966] usb 2-1: Using ep0 maxpacket: 16 [ 8801.319542][T17966] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 8801.322309][T17966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8801.324302][T17966] usb 2-1: Product: syz [ 8801.325869][T17966] usb 2-1: Manufacturer: syz [ 8801.329145][T17966] usb 2-1: SerialNumber: syz [ 8801.446520][T17966] r8152-cfgselector 2-1: Unknown version 0x0000 [ 8801.450109][T17966] r8152-cfgselector 2-1: config 0 descriptor?? [ 8802.470715][T17966] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 8815.447135][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5717'. [ 8824.642978][T21582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5727'. [ 8826.194500][T21584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5728'. [ 8826.195963][T21584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5728'. [ 8833.336147][T21603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 8840.241172][T21614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5743'. [ 8841.745799][T21619] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 8845.024600][T21657] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 8884.817272][T21723] netlink: 512 bytes leftover after parsing attributes in process `syz.0.5780'. [ 8921.006114][T21791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5812'. [ 8950.320678][T21833] netlink: 'syz.0.5832': attribute type 13 has an invalid length. [ 8950.323070][T21833] netlink: 'syz.0.5832': attribute type 58 has an invalid length. [ 8950.328904][T21833] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5832'. [ 8955.814147][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 9005.657219][T21965] tmpfs: Bad value for 'nr_blocks' [ 9012.910548][T20233] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 9013.172498][T20233] usb 2-1: Using ep0 maxpacket: 8 [ 9013.243694][T20233] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 9013.246247][T20233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 9013.260054][T20233] usb 2-1: config 0 has no interface number 0 [ 9013.263025][T20233] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 9013.265893][T20233] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 9013.282651][T20233] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 9013.289852][T20233] usb 2-1: config 0 interface 52 has no altsetting 0 [ 9013.356141][T20233] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 9013.359258][T20233] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 9013.361865][T20233] usb 2-1: Product: syz [ 9013.363047][T20233] usb 2-1: Manufacturer: syz [ 9013.366771][T20233] usb 2-1: SerialNumber: syz [ 9013.431862][T20233] usb 2-1: config 0 descriptor?? [ 9014.397080][T20233] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 9014.412520][T20233] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 9015.005922][T20233] usb 2-1: USB disconnect, device number 22 [ 9037.632494][T22042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5908'. [ 9081.847182][T22147] xt_hashlimit: invalid rate [ 9084.987354][T22152] netlink: 'syz.0.5946': attribute type 11 has an invalid length. [ 9084.992805][T22152] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5946'. [ 9101.160408][T22175] netlink: 'syz.1.5957': attribute type 5 has an invalid length. [ 9109.535790][T22189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5964'. [ 9109.542103][T22189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5964'. [ 9126.671459][T22212] netlink: 'syz.1.5975': attribute type 21 has an invalid length. [ 9126.690742][T22212] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5975'. [ 9131.319622][T22218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5978'. [ 9131.323503][T22218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5978'. [ 9133.900314][T22220] netlink: 'syz.0.5980': attribute type 4 has an invalid length. [ 9136.725956][T22224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 9139.753921][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5984'. [ 9177.462156][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6007'. [ 9194.355979][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6018'. [ 9195.960931][T20233] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 9196.262044][T20233] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 9196.263515][T20233] usb 2-1: config 0 has no interface number 0 [ 9196.264677][T20233] usb 2-1: config 0 interface 37 has no altsetting 0 [ 9196.349255][T20233] usb 2-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=e9.c7 [ 9196.351079][T20233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9196.352534][T20233] usb 2-1: Product: syz [ 9196.353597][T20233] usb 2-1: Manufacturer: syz [ 9196.354823][T20233] usb 2-1: SerialNumber: syz [ 9196.432446][T20233] usb 2-1: config 0 descriptor?? [ 9197.120001][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6021'. [ 9197.574687][T20233] usb 2-1: USB disconnect, device number 23 [ 9211.031942][T17966] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 9211.270773][T17966] usb 2-1: Using ep0 maxpacket: 16 [ 9211.316784][T17966] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 9211.321023][T17966] usb 2-1: config 0 has no interface number 0 [ 9211.323219][T17966] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 9211.325685][T17966] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 9211.343035][T17966] usb 2-1: config 0 interface 41 has no altsetting 0 [ 9211.611882][T17966] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 9211.615170][T17966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9211.622005][T17966] usb 2-1: Product: syz [ 9211.624123][T17966] usb 2-1: Manufacturer: syz [ 9211.625927][T17966] usb 2-1: SerialNumber: syz [ 9212.061272][T17966] usb 2-1: config 0 descriptor?? [ 9212.080599][T22339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9212.083232][T22339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9212.714237][T22339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9212.734578][T22339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9213.467203][T17966] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 9213.654876][T17966] usb 2-1: USB disconnect, device number 24 [ 9218.813861][T22361] fuse: Bad value for 'user_id' [ 9218.816132][T22361] fuse: Bad value for 'user_id' [ 9221.423783][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'. [ 9257.106778][T22415] PKCS8: Unsupported PKCS#8 version [ 9267.236057][ T35] audit: type=1326 audit(272010198.650:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22425 comm="syz.1.6061" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb636 code=0x7fc00000 [ 9287.144272][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6076'. [ 9291.600449][T22471] tmpfs: Group quota block hardlimit too large. [ 9294.410798][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6082'. [ 9309.924786][T22497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6090'. [ 9314.634237][T22505] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 9348.136623][T22579] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6130'. [ 9348.142843][T22579] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6130'. [ 9363.323160][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'. [ 9381.180687][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 9393.486280][T22682] rdma_op ff6000001bb2e1f0 conn xmit_rdma 0000000000000000 [ 9407.846690][T22714] CUSE: DEVNAME unspecified [ 9437.241246][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6212'. [ 9437.243833][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6212'. [ 9437.245906][T22775] netlink: 'syz.0.6212': attribute type 20 has an invalid length. [ 9439.045515][T22782] netlink: 'syz.0.6215': attribute type 3 has an invalid length. [ 9439.046914][T22782] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6215'. [ 9440.703525][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 9454.984395][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6234'. [ 9454.985834][T22827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6234'. [ 9476.201077][T17966] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 9476.418876][T17966] usb 2-1: Using ep0 maxpacket: 16 [ 9476.490304][T17966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9476.493144][T17966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 9476.496055][T17966] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 9476.515685][T17966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9476.681643][T17966] usb 2-1: config 0 descriptor?? [ 9478.436342][T17966] apple 0003:05AC:0244.0002: unknown main item tag 0x0 [ 9478.439523][T17966] apple 0003:05AC:0244.0002: unknown main item tag 0x0 [ 9478.440687][T17966] apple 0003:05AC:0244.0002: unknown main item tag 0x0 [ 9478.441810][T17966] apple 0003:05AC:0244.0002: unknown main item tag 0x0 [ 9478.442906][T17966] apple 0003:05AC:0244.0002: unknown main item tag 0x0 [ 9478.503732][T17966] apple 0003:05AC:0244.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.1-1/input0 [ 9479.134713][T20233] usb 2-1: USB disconnect, device number 25 [ 9500.669959][T22928] netlink: 'syz.1.6272': attribute type 2 has an invalid length. [ 9500.671426][T22928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6272'. [ 9504.111824][T22938] pim6reg: entered allmulticast mode [ 9504.256292][T22938] pim6reg: left allmulticast mode [ 9510.155601][T22957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6284'. [ 9510.251907][T22958] block nbd1: not configured, cannot reconfigure [ 9513.585705][T22967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6288'. [ 9513.625068][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6288'. [ 9513.626413][T22967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6288'. [ 9516.935255][T22975] tmpfs: Bad value for 'mpol' [ 9535.492121][T23012] vlan2: entered allmulticast mode [ 9540.050827][T16127] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 9540.249879][T16127] usb 2-1: Using ep0 maxpacket: 16 [ 9540.313302][T16127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9540.316393][T16127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9540.344127][T16127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 9540.361282][T16127] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 9540.363860][T16127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9540.490863][T16127] usb 2-1: config 0 descriptor?? [ 9541.595420][T16127] magicmouse 0003:05AC:0265.0003: unknown main item tag 0x0 [ 9541.674354][T16127] magicmouse 0003:05AC:0265.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 9541.843292][T16127] usb 2-1: USB disconnect, device number 26 [ 9559.814567][T23087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6332'. [ 9567.255615][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6341'. [ 9570.262212][T23111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6344'. [ 9570.790583][T23113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6345'. [ 9570.792799][T23113] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6345'. [ 9570.794376][T23113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6345'. [ 9573.330526][T20233] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 9573.706704][T20233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 9573.711154][T20233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 9573.719219][T20233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 9573.724466][T20233] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 9573.741529][T20233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9573.889481][T20233] usb 2-1: config 0 descriptor?? [ 9573.942648][T23121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9574.906218][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.908697][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.911084][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.912159][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.913209][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.914253][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.915334][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.916397][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.930364][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.931632][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.932690][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.933737][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.949214][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.950327][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.951433][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.962956][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.965016][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.966904][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.992531][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.993847][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.995011][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.996064][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9574.997107][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.009120][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.010235][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.015978][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.017075][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.023507][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.024604][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.025641][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.026695][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.041684][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.043030][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.059639][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.060962][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.062033][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.063209][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.064273][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.065363][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.066428][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.098814][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.100172][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.101212][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.102264][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.103416][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.104633][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.105854][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.106950][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.155999][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.160131][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.161689][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.162844][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.163953][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.164993][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.166036][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.167130][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.196083][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.197242][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.214005][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.215312][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.216406][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.238088][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.246455][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.251128][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.252294][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.253448][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.254545][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.255660][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.276907][T20233] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 9575.371701][T20233] aureal 0003:0755:2626.0004: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 9575.455187][T20233] usb 2-1: USB disconnect, device number 27 [ 9599.132647][T23195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6361'. [ 9627.722088][T23259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6382'. [ 9642.702476][T23292] x_tables: ip_tables: udp match: only valid for protocol 17 [ 9649.864024][T23308] hub 1-0:1.0: USB hub found [ 9649.932653][T23308] hub 1-0:1.0: 1 port detected [ 9670.839674][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6422'. [ 9670.841476][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6422'. [ 9690.012693][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6446'. [ 9690.014503][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6446'. [ 9690.015948][T23402] netlink: 'syz.1.6446': attribute type 13 has an invalid length. [ 9690.017072][T23402] netlink: 'syz.1.6446': attribute type 11 has an invalid length. [ 9691.912890][T23408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6449'. [ 9691.915456][T23408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 9698.451401][T23425] tmpfs: Bad value for 'mpol' [ 9718.625648][T23478] ubi0: attaching mtd0 [ 9718.745074][T23478] ubi0: scanning is finished [ 9718.761033][T23478] ================================================================== [ 9718.762374][T23478] BUG: KASAN: slab-out-of-bounds in notifier_chain_register+0x528/0x61a [ 9718.763514][T23478] Read of size 4 at addr ff6000002ecf98e0 by task syz.1.6480/23478 [ 9718.764362][T23478] [ 9718.766461][T23478] CPU: 1 UID: 0 PID: 23478 Comm: syz.1.6480 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 9718.768558][T23478] Hardware name: riscv-virtio,qemu (DT) [ 9718.769442][T23478] Call Trace: [ 9718.770170][T23478] [] dump_backtrace+0x2e/0x3c [ 9718.771160][T23478] [] show_stack+0x30/0x3c [ 9718.771956][T23478] [] dump_stack_lvl+0x12e/0x1a6 [ 9718.772854][T23478] [] print_report+0x28e/0x5aa [ 9718.773720][T23478] [] kasan_report+0xec/0x118 [ 9718.774555][T23478] [] __asan_report_load4_noabort+0x12/0x1a [ 9718.775522][T23478] [] notifier_chain_register+0x528/0x61a [ 9718.776370][T23478] [] blocking_notifier_chain_register+0x80/0xc6 [ 9718.777319][T23478] [] register_reboot_notifier+0x22/0x2c [ 9718.778259][T23478] [] ubi_wl_init+0xd0a/0x15c2 [ 9718.779190][T23478] [] ubi_attach+0x15da/0x4f90 [ 9718.780244][T23478] [] ubi_attach_mtd_dev+0x14d8/0x3646 [ 9718.781149][T23478] [] ctrl_cdev_ioctl+0x496/0x764 [ 9718.782799][T23478] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9718.783890][T23478] [] syscall_handler+0x94/0x118 [ 9718.784765][T23478] [] do_trap_ecall_u+0x1aa/0x216 [ 9718.785740][T23478] [] handle_exception+0x146/0x152 [ 9718.786925][T23478] [ 9718.787425][T23478] Allocated by task 23339: [ 9718.788140][T23478] stack_trace_save+0xa0/0xd2 [ 9718.788889][T23478] kasan_save_stack+0x3e/0x6a [ 9718.789754][T23478] kasan_save_track+0x16/0x28 [ 9718.790564][T23478] kasan_save_alloc_info+0x30/0x3e [ 9718.791406][T23478] __kasan_kmalloc+0xa0/0xa6 [ 9718.792107][T23478] __kmalloc_noprof+0x258/0x5ba [ 9718.792797][T23478] tomoyo_realpath_from_path+0xb8/0x64a [ 9718.793556][T23478] tomoyo_check_open_permission+0x2fe/0x3d6 [ 9718.794287][T23478] tomoyo_file_open+0xa0/0xc4 [ 9718.795073][T23478] security_file_open+0xa8/0x250 [ 9718.795790][T23478] do_dentry_open+0x4de/0x1946 [ 9718.796542][T23478] vfs_open+0xbe/0x37c [ 9718.797277][T23478] path_openat+0x1b70/0x28c2 [ 9718.798035][T23478] do_filp_open+0x19c/0x35c [ 9718.798842][T23478] do_sys_openat2+0x174/0x1ca [ 9718.799625][T23478] __riscv_sys_openat+0x178/0x1fe [ 9718.800410][T23478] syscall_handler+0x94/0x118 [ 9718.801114][T23478] do_trap_ecall_u+0x1aa/0x216 [ 9718.801871][T23478] handle_exception+0x146/0x152 [ 9718.802741][T23478] [ 9718.803214][T23478] Freed by task 23339: [ 9718.803786][T23478] stack_trace_save+0xa0/0xd2 [ 9718.804478][T23478] kasan_save_stack+0x3e/0x6a [ 9718.805197][T23478] kasan_save_track+0x16/0x28 [ 9718.805965][T23478] kasan_save_free_info+0x40/0x5c [ 9718.806860][T23478] __kasan_slab_free+0x4e/0x68 [ 9718.808078][T23478] kfree+0x13e/0x508 [ 9718.808906][T23478] tomoyo_realpath_from_path+0x19e/0x64a [ 9718.809797][T23478] tomoyo_check_open_permission+0x2fe/0x3d6 [ 9718.810588][T23478] tomoyo_file_open+0xa0/0xc4 [ 9718.811383][T23478] security_file_open+0xa8/0x250 [ 9718.812096][T23478] do_dentry_open+0x4de/0x1946 [ 9718.812844][T23478] vfs_open+0xbe/0x37c [ 9718.813641][T23478] path_openat+0x1b70/0x28c2 [ 9718.814351][T23478] do_filp_open+0x19c/0x35c [ 9718.815161][T23478] do_sys_openat2+0x174/0x1ca [ 9718.816029][T23478] __riscv_sys_openat+0x178/0x1fe [ 9718.816958][T23478] syscall_handler+0x94/0x118 [ 9718.818117][T23478] do_trap_ecall_u+0x1aa/0x216 [ 9718.819038][T23478] handle_exception+0x146/0x152 [ 9718.819826][T23478] [ 9718.820346][T23478] The buggy address belongs to the object at ff6000002ecf8000 [ 9718.820346][T23478] which belongs to the cache kmalloc-4k of size 4096 [ 9718.821489][T23478] The buggy address is located 2272 bytes to the right of [ 9718.821489][T23478] allocated 4096-byte region [ff6000002ecf8000, ff6000002ecf9000) [ 9718.822635][T23478] [ 9718.823177][T23478] The buggy address belongs to the physical page: [ 9718.824287][T23478] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xaecf8 [ 9718.825426][T23478] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 9718.826428][T23478] flags: 0xffe000000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 9718.828027][T23478] page_type: f5(slab) [ 9718.829323][T23478] raw: 0ffe000000000040 ff60000011402140 dead000000000100 dead000000000122 [ 9718.830250][T23478] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 9718.831224][T23478] head: 0ffe000000000040 ff60000011402140 dead000000000100 dead000000000122 [ 9718.831989][T23478] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 9718.832751][T23478] head: 0ffe000000000003 ff1c000000bb3e01 ffffffffffffffff 0000000000000000 [ 9718.833502][T23478] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 9718.834235][T23478] page dumped because: kasan: bad access detected [ 9718.835236][T23478] page_owner tracks the page as allocated [ 9718.836112][T23478] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3235, tgid 3235 (syz-executor), ts 8474946008300, free_ts 8472359561700 [ 9718.837630][T23478] __set_page_owner+0xa2/0x70c [ 9718.838515][T23478] post_alloc_hook+0xf0/0x1e8 [ 9718.839287][T23478] get_page_from_freelist+0xdb0/0x2c0e [ 9718.839995][T23478] __alloc_pages_noprof+0x1e8/0x1fc2 [ 9718.840744][T23478] alloc_pages_mpol_noprof+0xf8/0x488 [ 9718.841577][T23478] alloc_pages_noprof+0x174/0x2f0 [ 9718.842321][T23478] new_slab+0x2b6/0x40e [ 9718.843115][T23478] ___slab_alloc+0x9c8/0x10e6 [ 9718.843847][T23478] __slab_alloc.constprop.0+0x60/0xb0 [ 9718.844609][T23478] __kmalloc_noprof+0x1dc/0x5ba [ 9718.845303][T23478] tomoyo_realpath_from_path+0xb8/0x64a [ 9718.846176][T23478] tomoyo_path_number_perm+0x28c/0x5a4 [ 9718.846985][T23478] tomoyo_path_mkdir+0xa4/0xec [ 9718.847740][T23478] security_path_mkdir+0x174/0x32e [ 9718.848467][T23478] do_mkdirat+0x150/0x32e [ 9718.849130][T23478] __riscv_sys_mkdirat+0x80/0xa0 [ 9718.850143][T23478] page last free pid 3159 tgid 3159 stack trace: [ 9718.850933][T23478] __reset_page_owner+0x8c/0x400 [ 9718.851839][T23478] free_unref_page+0x618/0x11d2 [ 9718.852564][T23478] __free_pages+0x13a/0x1ba [ 9718.853224][T23478] __free_slab+0xd0/0x176 [ 9718.853948][T23478] free_slab+0x38/0x1ae [ 9718.854753][T23478] discard_slab+0x42/0x5a [ 9718.855482][T23478] __slab_free+0x346/0x3f6 [ 9718.856303][T23478] ___cache_free+0x1a4/0x1de [ 9718.857017][T23478] qlist_free_all+0x76/0x168 [ 9718.857744][T23478] kasan_quarantine_reduce+0x158/0x1ba [ 9718.858533][T23478] __kasan_slab_alloc+0x5c/0x82 [ 9718.859312][T23478] kmem_cache_alloc_node_noprof+0x10a/0x3e8 [ 9718.860078][T23478] __alloc_skb+0x32c/0x42a [ 9718.860846][T23478] tcp_stream_alloc_skb+0x38/0x516 [ 9718.861733][T23478] tcp_sendmsg_locked+0x10aa/0x3692 [ 9718.862564][T23478] tcp_sendmsg+0x32/0x4e [ 9718.863594][T23478] [ 9718.864139][T23478] Memory state around the buggy address: [ 9718.865146][T23478] ff6000002ecf9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9718.865910][T23478] ff6000002ecf9800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9718.866681][T23478] >ff6000002ecf9880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9718.867368][T23478] ^ [ 9718.868032][T23478] ff6000002ecf9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9718.868715][T23478] ff6000002ecf9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9718.869518][T23478] ================================================================== [ 9718.882467][T23478] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 9718.883974][T23478] CPU: 1 UID: 0 PID: 23478 Comm: syz.1.6480 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 [ 9718.884877][T23478] Hardware name: riscv-virtio,qemu (DT) [ 9718.885509][T23478] Call Trace: [ 9718.886047][T23478] [] dump_backtrace+0x2e/0x3c [ 9718.886910][T23478] [] show_stack+0x30/0x3c [ 9718.888038][T23478] [] dump_stack_lvl+0x110/0x1a6 [ 9718.888922][T23478] [] dump_stack+0x1c/0x24 [ 9718.889976][T23478] [] panic+0x38c/0x870 [ 9718.890882][T23478] [] check_panic_on_warn+0xc0/0xe4 [ 9718.891731][T23478] [] end_report.part.0+0x4e/0xae [ 9718.892595][T23478] [] kasan_report+0x102/0x118 [ 9718.893390][T23478] [] __asan_report_load4_noabort+0x12/0x1a [ 9718.894370][T23478] [] notifier_chain_register+0x528/0x61a [ 9718.895229][T23478] [] blocking_notifier_chain_register+0x80/0xc6 [ 9718.896033][T23478] [] register_reboot_notifier+0x22/0x2c [ 9718.896825][T23478] [] ubi_wl_init+0xd0a/0x15c2 [ 9718.897917][T23478] [] ubi_attach+0x15da/0x4f90 [ 9718.898857][T23478] [] ubi_attach_mtd_dev+0x14d8/0x3646 [ 9718.899825][T23478] [] ctrl_cdev_ioctl+0x496/0x764 [ 9718.900748][T23478] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9718.901733][T23478] [] syscall_handler+0x94/0x118 [ 9718.902534][T23478] [] do_trap_ecall_u+0x1aa/0x216 [ 9718.903459][T23478] [] handle_exception+0x146/0x152 [ 9718.904566][T23478] SMP: stopping secondary CPUs [ 9718.906656][T23478] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:09:30 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff804b6c8e mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff80083676 sepc ffffffff80a4b2b4 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a0147000000ada82 x0/zero 0000000000000000 x1/ra ffffffff855a757a x2/sp ff20000000006820 x3/gp ffffffff899f1660 x4/tp ff6000001ba64ec0 x5/t0 ff200000000069f8 x6/t1 ffebffff02a664f0 x7/t2 0000000000000005 x8/s0 ff20000000006ab0 x9/s1 ff60000015332640 x10/a0 ff200000000069a2 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 ffffffff8559dd8a x14/a4 0000000000000000 x15/a5 ff6000001ba64ec0 x16/a6 0000000000f00000 x17/a7 ff60000015332783 x18/s2 ff6000001c248940 x19/s3 0000000000000000 x20/s4 ff6000001c24892c x21/s5 ff60000015332640 x22/s6 0000000000000000 x23/s7 1fe4000000000d34 x24/s8 0000000000000000 x25/s9 ff200000000069a0 x26/s10 ff20000000006a40 x27/s11 000000000355897a x28/t3 0000000000000000 x29/t4 ffebffff02a664f0 x30/t5 ffebffff02a664f1 x31/t6 0000000000000004 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8032eaba mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861897f0 vstvec 0000000000000000 mepc ffffffff861360b2 sepc ffffffff804b6b86 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a1ca1000000bae47 x0/zero 0000000000000000 x1/ra ffffffff802d75e4 x2/sp ff20000001a17010 x3/gp ffffffff899f1660 x4/tp ff60000018479a40 x5/t0 ff20000001a17114 x6/t1 fffffffef133ea68 x7/t2 3939643935656363 x8/s0 ff20000001a17060 x9/s1 ffffffff880dce60 x10/a0 ffffffff880dce60 x11/a1 0000000000000008 x12/a2 0000000000000002 x13/a3 ffffffff802d2440 x14/a4 0000000000000000 x15/a5 0000000000000001 x16/a6 0000000000000003 x17/a7 0000000000000003 x18/s2 0000000000000000 x19/s3 0000000200000020 x20/s4 0000000000000000 x21/s5 ff20000001a17240 x22/s6 0000000000000000 x23/s7 1fe4000000342e4c x24/s8 ff20000001a17110 x25/s9 1fe4000000342e1c x26/s10 dfffffff00000000 x27/s11 ff20000001a17180 x28/t3 ff60000018479a48 x29/t4 fffffffef133ea68 x30/t5 fffffffef133ea69 x31/t6 ff20000001a16db8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000