netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. ================================================================================ UBSAN: Undefined behaviour in drivers/usb/gadget/udc/dummy_hcd.c:2302:33 TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. shift exponent 16403 is too large for 32-bit type 'int' CPU: 0 PID: 13679 Comm: syz-executor.1 Not tainted 4.19.149-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 dummy_hub_control.cold+0x1a/0xbf drivers/usb/gadget/udc/dummy_hcd.c:2302 rh_call_control drivers/usb/core/hcd.c:679 [inline] rh_urb_enqueue drivers/usb/core/hcd.c:838 [inline] usb_hcd_submit_urb+0xb7e/0x20d0 drivers/usb/core/hcd.c:1651 usb_submit_urb+0xba2/0x13b0 drivers/usb/core/urb.c:571 usb_start_wait_urb+0x108/0x2b0 drivers/usb/core/message.c:57 usb_internal_control_msg drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:152 proc_control+0x360/0x6d0 drivers/usb/core/devio.c:1143 TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. usbdev_do_ioctl+0x15fc/0x3580 drivers/usb/core/devio.c:2423 usbdev_ioctl+0x21/0x30 drivers/usb/core/devio.c:2580 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45dd99 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f0d1e619c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000001afc0 RCX: 000000000045dd99 RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffef6812f1f R14: 00007f0d1e61a9c0 R15: 000000000118bf2c netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. ================================================================================ netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. tmpfs: Bad value 'default=relative:' for mount option 'mpol' tmpfs: Bad value 'default=relative:' for mount option 'mpol' tmpfs: Bad value 'default=relative:' for mount option 'mpol' tmpfs: Bad value 'default=relative:' for mount option 'mpol' EXT4-fs: 19 callbacks suppressed EXT4-fs (sda1): Unrecognized mount option "////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// EXT4-fs (sda1): re-mounted. Opts: IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready EXT4-fs (sda1): re-mounted. Opts: IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready EXT4-fs (sda1): re-mounted. Opts: audit: type=1804 audit(1601644605.781:47): pid=13958 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir040390840/syzkaller.KrQjHe/243/file0/bus" dev="sda1" ino=16619 res=1 IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready audit: type=1804 audit(1601644606.431:48): pid=13958 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir040390840/syzkaller.KrQjHe/243/file0/file0/bus" dev="sda1" ino=16621 res=1 IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready audit: type=1804 audit(1601644607.021:49): pid=13994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir040390840/syzkaller.KrQjHe/244/file0/bus" dev="sda1" ino=16600 res=1 EXT4-fs (sda1): re-mounted. Opts: EXT4-fs (sda1): re-mounted. Opts: IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready audit: type=1804 audit(1601644608.541:50): pid=14049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir130172176/syzkaller.qFr9WA/255/file0/bus" dev="sda1" ino=16598 res=1 audit: type=1804 audit(1601644608.581:51): pid=14040 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir249214426/syzkaller.mTdh49/218/file0/bus" dev="sda1" ino=16614 res=1 audit: type=1804 audit(1601644608.651:52): pid=14044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir040390840/syzkaller.KrQjHe/245/file0/bus" dev="sda1" ino=16629 res=1