last executing test programs: 8m30.383458624s ago: executing program 0 (id=3907): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6cc7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080001"], 0x1c}}, 0x0) 8m28.715928711s ago: executing program 0 (id=3909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)="b7", &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 8m23.006383268s ago: executing program 0 (id=3913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xf, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 8m19.971236906s ago: executing program 0 (id=3915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m17.336565854s ago: executing program 0 (id=3917): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 8m16.092657698s ago: executing program 0 (id=3919): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 7m29.96591372s ago: executing program 32 (id=3919): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 21.481013912s ago: executing program 2 (id=4102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04320000000000000002000000380004803400018009000100686173680000000024000280080006400000001108000740000000a046ff521b2f06eefc08000240000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 20.297441413s ago: executing program 1 (id=4103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', '', [], 0xa, "18203bfa210e1ca0bd821601aeab4d8cfbbebcaa488e651096753ce1"}, 0x20) ftruncate(r0, 0x20) 18.04758402s ago: executing program 2 (id=4104): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) 16.590474696s ago: executing program 1 (id=4105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 14.562750772s ago: executing program 2 (id=4106): capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x5}) r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 13.387263373s ago: executing program 1 (id=4107): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0", 0x4e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x114) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) 10.683299784s ago: executing program 2 (id=4108): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) 9.647377958s ago: executing program 1 (id=4109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.655608184s ago: executing program 2 (id=4110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}}, 0x0) 3.701191547s ago: executing program 1 (id=4111): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "f01bbe0327cc4c7cbbb221a7180b8a1a1224c372b06873a6779e5d229187ed1816099aaf42dc5cfb685028fb133783fa45a91bae6c2b461a671dfb0181c9b33855c6c2e706765bc6c9986520c191dae72f744d86ca41d48997092ba23478567e52dfbabafcd0d82c21cdca422800db9bd9e4fdb70b1bc2e57538219f1790fbe3894b8ea44352e2e405f85f05c5f742a4890a489f3940ff31938fc3c659fc3dd32f4f11d2ca4032d8602173d6db33eea09fea5c345a03434474429549c49e140adb6ebc34dde37acd203541bb0107a206b843fbffd77972a3ef4867010bf3a6b6749e79ed02237fba39e2d4d4ef3adb2ed958d1126c0c20324992cac37ecdd623"}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1b, 0x91}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 2.220290385s ago: executing program 2 (id=4112): sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000030426bd70000000000000000300", @ANYRES32, @ANYBLOB="0100000000000000340012800b00010067656e657665"], 0x5c}}, 0x0) 0s ago: executing program 1 (id=4113): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)='\'', 0x7ffff000}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:37944' (ED25519) to the list of known hosts. syzkaller login: [ 348.047866][ T3187] cgroup: Unknown subsys name 'net' [ 348.585897][ T3187] cgroup: Unknown subsys name 'cpuset' [ 348.707553][ T3187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 406.143821][ T3187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 499.165327][ T3195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.390505][ T3195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.805354][ T3194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.901338][ T3194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.826647][ T3195] hsr_slave_0: entered promiscuous mode [ 511.876757][ T3195] hsr_slave_1: entered promiscuous mode [ 515.511127][ T3194] hsr_slave_0: entered promiscuous mode [ 515.554203][ T3194] hsr_slave_1: entered promiscuous mode [ 515.597776][ T3194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.614296][ T3194] Cannot create hsr debugfs directory [ 522.103740][ T3195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.340539][ T3195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.634620][ T3195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.737383][ T3195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 524.377068][ T3194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.623640][ T3194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.859095][ T3194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.015230][ T3194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.146045][ T3195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.430051][ T3194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.795558][ T3195] veth0_vlan: entered promiscuous mode [ 566.077644][ T3195] veth1_vlan: entered promiscuous mode [ 566.781375][ T3195] veth0_macvtap: entered promiscuous mode [ 566.909378][ T3195] veth1_macvtap: entered promiscuous mode [ 569.405708][ T3195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.421313][ T3195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.425059][ T3195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.450545][ T3195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.892575][ T3194] veth0_vlan: entered promiscuous mode [ 573.671313][ T3194] veth1_vlan: entered promiscuous mode [ 573.844890][ T3195] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 575.776680][ T3194] veth0_macvtap: entered promiscuous mode [ 575.967114][ T3194] veth1_macvtap: entered promiscuous mode [ 578.471412][ T3194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.473992][ T3194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.475965][ T3194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.477812][ T3194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.290560][ T3927] binder: 3926:3927 ioctl c0306201 200000000a00 returned -14 [ 623.944854][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 629.342925][ T3852] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 629.779827][ T3852] usb 1-1: Using ep0 maxpacket: 32 [ 630.059356][ T3852] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 630.061059][ T3852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.062150][ T3852] usb 1-1: Product: syz [ 630.062990][ T3852] usb 1-1: Manufacturer: syz [ 630.063913][ T3852] usb 1-1: SerialNumber: syz [ 630.922884][ T3852] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 630.925251][ T3852] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 631.069364][ T3852] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 631.317381][ T3852] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 631.466826][ T3852] usb 1-1: USB disconnect, device number 2 [ 631.762132][ T3852] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 631.943289][ T3852] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 631.983078][ T3852] visor 1-1:1.0: device disconnected [ 634.907984][ T3992] netlink: 'syz.1.30': attribute type 13 has an invalid length. [ 635.053359][ T3992] gretap0: refused to change device tx_queue_len [ 635.092438][ T3992] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 676.270034][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 687.325255][ T4064] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 687.735008][ T4064] gretap0: refused to change device tx_queue_len [ 687.800390][ T4064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 696.271492][ T4076] netlink: 'syz.0.71': attribute type 13 has an invalid length. [ 696.332657][ T4076] gretap0: refused to change device tx_queue_len [ 696.343969][ T4076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 704.507308][ T4090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 718.773764][ T4112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 748.493986][ T4163] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 755.892434][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 767.957232][ T4183] kernel profiling enabled (shift: 9) [ 786.314691][ T4231] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 795.076734][ T4244] netlink: 104 bytes leftover after parsing attributes in process `syz.1.139'. [ 814.461138][ T4272] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 825.975644][ T4283] netlink: 'syz.0.159': attribute type 21 has an invalid length. [ 832.371000][ T4291] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 832.382068][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 834.907206][ T4326] tmpfs: Bad value for 'mpol' [ 847.082714][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 855.601591][ T4353] netlink: 596 bytes leftover after parsing attributes in process `syz.0.177'. [ 868.564865][ T34] audit: type=1326 audit(867.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 868.584478][ T34] audit: type=1326 audit(867.730:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 868.764625][ T34] audit: type=1326 audit(867.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb906 code=0x7ffc0000 [ 868.766681][ T34] audit: type=1326 audit(867.910:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 868.770113][ T34] audit: type=1326 audit(867.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 881.655476][ T4387] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 882.125038][ T4387] xt_SECMARK: invalid mode: 0 [ 888.796105][ T4395] bond0: entered promiscuous mode [ 888.797496][ T4395] bond_slave_0: entered promiscuous mode [ 888.822910][ T4395] bond_slave_1: entered promiscuous mode [ 888.826839][ T4395] bond0: entered allmulticast mode [ 888.828123][ T4395] bond_slave_0: entered allmulticast mode [ 888.884030][ T4395] bond_slave_1: entered allmulticast mode [ 902.205224][ T4421] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 903.784715][ T4425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.212'. [ 912.464924][ T4439] bond0: entered promiscuous mode [ 912.466869][ T4439] bond_slave_0: entered promiscuous mode [ 912.483880][ T4439] bond_slave_1: entered promiscuous mode [ 912.517446][ T4439] bond0: entered allmulticast mode [ 912.530864][ T4439] bond_slave_0: entered allmulticast mode [ 912.532805][ T4439] bond_slave_1: entered allmulticast mode [ 920.367861][ T4449] random: crng reseeded on system resumption [ 923.625661][ T4455] netlink: 'syz.1.227': attribute type 21 has an invalid length. [ 923.651866][ T4455] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 923.653215][ T4455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.227'. [ 938.672148][ T4479] block device autoloading is deprecated and will be removed. [ 938.694815][ T4479] syz.0.239: attempt to access beyond end of device [ 938.694815][ T4479] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 939.736908][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 939.747205][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 958.766678][ T4506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 962.205181][ T4511] netlink: 'syz.0.254': attribute type 7 has an invalid length. [ 962.207392][ T4511] netlink: 'syz.0.254': attribute type 6 has an invalid length. [ 979.333168][ T4535] syz.1.266: attempt to access beyond end of device [ 979.333168][ T4535] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 982.764322][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 983.001206][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 983.092900][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 983.157747][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 983.183655][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 983.186016][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 983.201702][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 983.204153][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 983.220218][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 983.223141][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 983.240970][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 983.253395][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 983.432733][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 983.435163][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.436939][ T9] usb 2-1: Product: syz [ 983.443470][ T9] usb 2-1: Manufacturer: syz [ 983.445036][ T9] usb 2-1: SerialNumber: syz [ 983.595371][ T9] usb 2-1: config 0 descriptor?? [ 983.637694][ T4539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.891724][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 985.725124][ T9] usb 2-1: USB disconnect, device number 2 [ 992.882037][ T4576] syz.0.272: attempt to access beyond end of device [ 992.882037][ T4576] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1004.283494][ T4595] netlink: 196 bytes leftover after parsing attributes in process `syz.0.278'. [ 1004.295552][ T4595] netlink: 196 bytes leftover after parsing attributes in process `syz.0.278'. [ 1004.297892][ T4595] netlink: 19 bytes leftover after parsing attributes in process `syz.0.278'. [ 1010.586775][ T4603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 1027.211308][ T4631] netlink: 'syz.1.297': attribute type 32 has an invalid length. [ 1027.213422][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 1027.217663][ T4631] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1033.999950][ T4673] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.301'. [ 1036.907942][ T4679] [U] [ 1036.910462][ T4679] [U] [ 1036.911847][ T4679] [U] [ 1036.913520][ T4679] [U] [ 1036.926205][ T4679] [U] [ 1036.927843][ T4679] [U] [ 1036.929199][ T4679] [U] [ 1036.930461][ T4679] [U] [ 1036.960779][ T4679] [U] [ 1036.962530][ T4679] [U] [ 1036.963794][ T4679] [U] [ 1037.062329][ T4678] [U] [ 1040.586839][ T4683] netlink: 296 bytes leftover after parsing attributes in process `syz.1.306'. [ 1040.603594][ T4683] netlink: 296 bytes leftover after parsing attributes in process `syz.1.306'. [ 1079.121131][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1079.491318][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1079.493496][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.652538][ T10] usb 2-1: config 0 descriptor?? [ 1079.875063][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input2 [ 1080.536219][ T10] usb 2-1: USB disconnect, device number 3 [ 1096.467502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.767080][ T4794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.984898][ T4845] netlink: 'syz.1.372': attribute type 29 has an invalid length. [ 1144.882604][ T4848] xt_NFQUEUE: number of total queues is 0 [ 1175.173182][ T4890] netlink: 208 bytes leftover after parsing attributes in process `syz.1.394'. [ 1203.125014][ T4937] dlm: no local IP address has been set [ 1203.127727][ T4937] dlm: cannot start dlm midcomms -107 [ 1207.026672][ T4943] lo: entered promiscuous mode [ 1207.031015][ T4943] lo: entered allmulticast mode [ 1207.484251][ T4943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1218.305510][ T4955] netlink: 'syz.1.420': attribute type 5 has an invalid length. [ 1222.786789][ T4963] random: crng reseeded on system resumption [ 1262.437145][ T5008] cgroup: noprefix used incorrectly [ 1274.704654][ T5024] No such timeout policy "syz0" [ 1279.586058][ T34] audit: type=1326 audit(1278.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.457" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 1279.615659][ T34] audit: type=1326 audit(1278.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.457" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 1296.574721][ T5055] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 1300.783588][ T5061] netlink: 'syz.0.466': attribute type 4 has an invalid length. [ 1313.369890][ T5076] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1355.141849][ T5125] xt_CONNSECMARK: invalid mode: 0 [ 1362.662042][ T5135] autofs4:pid:5135:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1388.017917][ T5163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.726409][ T5172] syz.0.514: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1390.735261][ T5172] CPU: 1 UID: 0 PID: 5172 Comm: syz.0.514 Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 1390.735854][ T5172] Hardware name: riscv-virtio,qemu (DT) [ 1390.736249][ T5172] Call Trace: [ 1390.736467][ T5172] [] dump_backtrace+0x2e/0x3c [ 1390.736919][ T5172] [] show_stack+0x30/0x3c [ 1390.737177][ T5172] [] dump_stack_lvl+0x12e/0x1a6 [ 1390.737531][ T5172] [] dump_stack+0x1c/0x24 [ 1390.737881][ T5172] [] warn_alloc+0x170/0x292 [ 1390.738295][ T5172] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 1390.738705][ T5172] [] vmalloc_user_noprof+0xfc/0x128 [ 1390.739090][ T5172] [] xskq_create+0xf2/0x1ae [ 1390.739469][ T5172] [] xsk_setsockopt+0x338/0x908 [ 1390.739821][ T5172] [] do_sock_setsockopt+0x208/0x400 [ 1390.740239][ T5172] [] __sys_setsockopt+0x142/0x1e6 [ 1390.740659][ T5172] [] __riscv_sys_setsockopt+0xa6/0x114 [ 1390.741073][ T5172] [] syscall_handler+0x94/0x118 [ 1390.741376][ T5172] [] do_trap_ecall_u+0x396/0x530 [ 1390.741729][ T5172] [] handle_exception+0x146/0x152 [ 1390.753474][ T5172] Mem-Info: [ 1390.754959][ T5172] active_anon:2215 inactive_anon:0 isolated_anon:0 [ 1390.754959][ T5172] active_file:1633 inactive_file:34527 isolated_file:0 [ 1390.754959][ T5172] unevictable:768 dirty:108 writeback:0 [ 1390.754959][ T5172] slab_reclaimable:2331 slab_unreclaimable:26604 [ 1390.754959][ T5172] mapped:12475 shmem:806 pagetables:770 [ 1390.754959][ T5172] sec_pagetables:0 bounce:0 [ 1390.754959][ T5172] kernel_misc_reclaimable:0 [ 1390.754959][ T5172] free:224358 free_pcp:6072 free_cma:52608 [ 1390.764008][ T5172] Node 0 active_anon:8860kB inactive_anon:0kB active_file:6532kB inactive_file:138108kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:49900kB dirty:432kB writeback:0kB shmem:3224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6168kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1390.766641][ T5172] Node 0 DMA32 free:897432kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8860kB inactive_anon:0kB active_file:6532kB inactive_file:138108kB unevictable:3072kB writepending:432kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:24288kB local_pcp:12668kB free_cma:210432kB [ 1390.774385][ T5172] lowmem_reserve[]: 0 0 0 [ 1390.776572][ T5172] Node 0 DMA32: 272*4kB (UME) 139*8kB (UME) 60*16kB (UM) 74*32kB (UME) 18*64kB (UME) 5*128kB (UME) 1*256kB (M) 6*512kB (MEC) 8*1024kB (MEC) 5*2048kB (UM) 212*4096kB (UMC) = 897432kB [ 1390.787456][ T5172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.808864][ T5172] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1390.810370][ T5172] 36966 total pagecache pages [ 1390.811240][ T5172] 0 pages in swap cache [ 1390.812009][ T5172] Free swap = 124996kB [ 1390.812785][ T5172] Total swap = 124996kB [ 1390.813680][ T5172] 524288 pages RAM [ 1390.814471][ T5172] 0 pages HighMem/MovableOnly [ 1390.815294][ T5172] 166404 pages reserved [ 1390.816117][ T5172] 52736 pages cma reserved [ 1462.206440][ T5336] xt_nat: multiple ranges no longer supported [ 1472.651777][ T5353] C: renamed from lo [ 1472.877233][ T5353] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1475.987197][ T5357] capability: warning: `syz.1.569' uses deprecated v2 capabilities in a way that may be insecure [ 1507.723871][ T5398] tmpfs: Bad value for 'mpol' [ 1540.955388][ T5452] trusted_key: encrypted_key: master key parameter is missing [ 1546.792166][ T5460] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1549.296765][ T5465] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 1571.222883][ T5490] syz.0.633 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1572.441761][ T5492] tmpfs: Bad value for 'mpol' [ 1573.465339][ T5494] ======================================================= [ 1573.465339][ T5494] WARNING: The mand mount option has been deprecated and [ 1573.465339][ T5494] and is ignored by this kernel. Remove the mand [ 1573.465339][ T5494] option from the mount to silence this warning. [ 1573.465339][ T5494] ======================================================= [ 1580.838069][ T5506] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 1580.863887][ T5506] netlink: 156 bytes leftover after parsing attributes in process `syz.0.641'. [ 1590.532788][ T5518] netlink: 'syz.0.647': attribute type 22 has an invalid length. [ 1590.534912][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 1599.281505][ T3190] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1599.681653][ T3190] usb 2-1: Using ep0 maxpacket: 16 [ 1599.764992][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1599.766396][ T3190] usb 2-1: config 28 has no interface number 0 [ 1599.767561][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1599.826261][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1599.827795][ T3190] usb 2-1: config 28 has no interface number 0 [ 1599.840394][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1599.961887][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1599.964220][ T3190] usb 2-1: config 28 has no interface number 0 [ 1599.966072][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1600.027950][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1600.035228][ T3190] usb 2-1: config 28 has no interface number 0 [ 1600.036999][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1600.326194][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1600.349910][ T3190] usb 2-1: config 28 has no interface number 0 [ 1600.352194][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1600.422889][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1600.425049][ T3190] usb 2-1: config 28 has no interface number 0 [ 1600.426778][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1600.529785][ T3190] usb 2-1: config 28 has an invalid interface number: 162 but max is 0 [ 1600.532403][ T3190] usb 2-1: config 28 has no interface number 0 [ 1600.534153][ T3190] usb 2-1: config 28 interface 162 has no altsetting 0 [ 1601.536766][ T3190] usb 2-1: string descriptor 0 read error: -71 [ 1601.552761][ T3190] usb 2-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=8b.bc [ 1601.555063][ T3190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.607787][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 1601.611443][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 1601.797572][ T3190] usb 2-1: rejected 7 configurations due to insufficient available bus power [ 1601.800939][ T3190] usb 2-1: no configuration chosen from 7 choices [ 1601.896091][ T3190] usb 2-1: USB disconnect, device number 4 [ 1622.887772][ T34] audit: type=1400 audit(1622.010:9): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5577 comm="syz.0.664" [ 1633.426207][ T5593] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 1633.442650][ T5593] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 1633.445509][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 1641.385911][ T5399] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1641.686791][ T5399] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1641.688857][ T5399] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1641.691049][ T5399] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1641.692498][ T5399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.830689][ T5609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1642.370531][ T5399] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1645.501231][ T4895] usb 2-1: USB disconnect, device number 5 [ 1649.488204][ T5645] cgroup: none used incorrectly [ 1679.135461][ T5685] gretap2: entered promiscuous mode [ 1679.173392][ T5685] gretap2: entered allmulticast mode [ 1695.704213][ T5706] netlink: 'syz.1.709': attribute type 15 has an invalid length. [ 1695.706208][ T5706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.709'. [ 1698.149227][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 1727.727101][ T5753] Process accounting resumed [ 1733.079761][ T34] audit: type=1326 audit(1732.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.083717][ T34] audit: type=1326 audit(1732.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.086771][ T34] audit: type=1326 audit(1732.210:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.130727][ T34] audit: type=1326 audit(1732.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.200942][ T34] audit: type=1326 audit(1732.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.204365][ T34] audit: type=1326 audit(1732.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.207318][ T34] audit: type=1326 audit(1732.350:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.242886][ T34] audit: type=1326 audit(1732.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.246309][ T34] audit: type=1326 audit(1732.350:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1733.290012][ T34] audit: type=1326 audit(1732.350:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.131241][ T34] kauditd_printk_skb: 164 callbacks suppressed [ 1738.131845][ T34] audit: type=1326 audit(1737.230:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.135849][ T34] audit: type=1326 audit(1737.250:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.163656][ T34] audit: type=1326 audit(1737.250:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.167279][ T34] audit: type=1326 audit(1737.250:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.191367][ T34] audit: type=1326 audit(1737.290:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.194371][ T34] audit: type=1326 audit(1737.310:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.197011][ T34] audit: type=1326 audit(1737.310:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.243837][ T34] audit: type=1326 audit(1737.310:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.279914][ T34] audit: type=1326 audit(1737.410:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1738.283124][ T34] audit: type=1326 audit(1737.410:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.142891][ T34] kauditd_printk_skb: 157 callbacks suppressed [ 1743.143162][ T34] audit: type=1326 audit(1742.280:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.219765][ T34] audit: type=1326 audit(1742.340:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.240976][ T34] audit: type=1326 audit(1742.360:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.244391][ T34] audit: type=1326 audit(1742.360:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.247039][ T34] audit: type=1326 audit(1742.360:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.290115][ T34] audit: type=1326 audit(1742.360:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.326872][ T34] audit: type=1326 audit(1742.410:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.536613][ T34] audit: type=1326 audit(1742.470:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.542497][ T34] audit: type=1326 audit(1742.690:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1743.546430][ T34] audit: type=1326 audit(1742.690:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.737" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x50000 [ 1745.637196][ T5772] random: crng reseeded on system resumption [ 1751.907611][ T5780] netlink: 'syz.0.745': attribute type 2 has an invalid length. [ 1766.499325][ T34] kauditd_printk_skb: 80 callbacks suppressed [ 1766.499835][ T34] audit: type=1107 audit(1765.620:441): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1783.877879][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 1783.943857][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 1783.996735][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 1784.485552][ T5831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1784.942063][ T5831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1786.233058][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 1786.331427][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 1804.878025][ T34] audit: type=1400 audit(1804.020:442): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5860 comm="syz.0.782" [ 1816.154082][ T5879] syz.0.791 uses obsolete (PF_INET,SOCK_PACKET) [ 1819.263566][ T5883] !: renamed from dummy0 (while UP) [ 1834.841509][ T5909] netlink: 'syz.1.805': attribute type 21 has an invalid length. [ 1860.303047][ T5945] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 1860.320928][ T5945] netlink: 224 bytes leftover after parsing attributes in process `syz.0.822'. [ 1862.602312][ T5948] netlink: 'syz.0.824': attribute type 64 has an invalid length. [ 1862.603722][ T5948] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 1862.607646][ T5948] netlink: 152 bytes leftover after parsing attributes in process `syz.0.824'. [ 1874.635297][ T5966] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 1876.516475][ T5968] binder: 5967:5968 ioctl c00c6211 ffffffffffffffff returned -14 [ 1880.004333][ T5974] netlink: 'syz.0.837': attribute type 4 has an invalid length. [ 1897.604350][ T6005] bpf: Bad value for 'gid' [ 1913.436256][ T6033] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.866'. [ 1928.035632][ T6053] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 1928.036921][ T6053] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 1930.068041][ T6055] netlink: 9 bytes leftover after parsing attributes in process `syz.1.877'. [ 1935.836445][ T6068] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 1935.840329][ T6068] nbd: must specify at least one socket [ 1947.781723][ T6093] netlink: 'syz.0.896': attribute type 3 has an invalid length. [ 1948.907282][ T6095] trusted_key: encrypted_key: hex blob is missing [ 1953.374974][ T6103] netlink: 1 bytes leftover after parsing attributes in process `syz.1.901'. [ 1953.377154][ T6103] netlink: 1 bytes leftover after parsing attributes in process `syz.1.901'. [ 1958.596030][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 1958.597759][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 1968.775899][ T6126] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 1968.807747][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.912'. [ 1968.815471][ T6126] ipvlan0: entered promiscuous mode [ 1968.817266][ T6126] ipvlan0: entered allmulticast mode [ 1968.841205][ T6126] veth0_vlan: entered allmulticast mode [ 1969.114795][ T6126] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1990.342272][ T6154] netlink: 'syz.1.926': attribute type 11 has an invalid length. [ 1993.903926][ T6158] random: crng reseeded on system resumption [ 2001.396300][ T6167] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 2001.432549][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 2001.436781][ T6167] ipvlan0: entered promiscuous mode [ 2001.492908][ T6167] ipvlan0: entered allmulticast mode [ 2001.494842][ T6167] veth0_vlan: entered allmulticast mode [ 2001.614080][ T6167] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2010.545955][ T6181] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 2010.548174][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'. [ 2010.613361][ T6181] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2065.188850][ T6258] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 2071.200610][ T6266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2089.682020][ T6289] veth0_macvtap: left promiscuous mode [ 2094.861516][ T6297] netlink: 'syz.0.993': attribute type 21 has an invalid length. [ 2094.866369][ T6297] netlink: 156 bytes leftover after parsing attributes in process `syz.0.993'. [ 2099.226356][ T6305] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.996'. [ 2106.633431][ T6313] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 2111.123559][ T6317] netlink: 'syz.0.1002': attribute type 12 has an invalid length. [ 2122.525050][ T6331] cgroup: release_agent respecified [ 2160.803118][ T6416] IPv6: NLM_F_CREATE should be specified when creating new route [ 2184.052234][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 2184.683068][ T6445] veth0_macvtap: left promiscuous mode [ 2192.035339][ T6455] sock: sock_timestamping_bind_phc: sock not bind to device [ 2193.006285][ T6457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2195.130854][ T6458] [U] [ 2197.783755][ T6465] netlink: 'syz.0.1053': attribute type 21 has an invalid length. [ 2197.786043][ T6465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1053'. [ 2197.946823][ T6465] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 2197.961551][ T6465] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1053'. [ 2208.124219][ T6481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2211.771182][ T6486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2227.102570][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 2227.635992][ T6512] xfrm1: entered promiscuous mode [ 2227.638031][ T6512] xfrm1: entered allmulticast mode [ 2251.115307][ T6546] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1091'. [ 2252.828063][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'. [ 2254.699600][ T34] audit: type=1400 audit(2253.840:443): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6552 comm="syz.0.1095" [ 2259.246201][ T5370] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2259.590744][ T5370] usb 2-1: Using ep0 maxpacket: 32 [ 2259.730351][ T5370] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 2259.732590][ T5370] usb 2-1: config 0 has no interface number 0 [ 2259.734511][ T5370] usb 2-1: config 0 interface 152 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1024 [ 2259.736800][ T5370] usb 2-1: config 0 interface 152 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 2259.753992][ T5370] usb 2-1: config 0 interface 152 has no altsetting 0 [ 2259.897275][ T5370] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 2259.900503][ T5370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.902390][ T5370] usb 2-1: Product: syz [ 2259.903859][ T5370] usb 2-1: Manufacturer: syz [ 2259.905384][ T5370] usb 2-1: SerialNumber: syz [ 2260.196386][ T5370] usb 2-1: config 0 descriptor?? [ 2260.282933][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2260.302994][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2260.813299][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2260.815377][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2261.270914][ T5370] cdc_subset 2-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Yopy, 7e:bc:19:04:77:c5 [ 2261.663756][ T5370] usb 2-1: USB disconnect, device number 6 [ 2261.911539][ T5370] cdc_subset 2-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Yopy [ 2271.136411][ T6595] xt_l2tp: wrong L2TP version: 0 [ 2273.233483][ T6599] binder: 6597:6599 unknown command 1078485779 [ 2273.235765][ T6599] binder: 6597:6599 ioctl c0306201 2000000001c0 returned -22 [ 2321.123392][ T34] audit: type=1326 audit(2320.270:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.1142" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 2326.477835][ T6677] No such timeout policy "syz1" [ 2337.754050][ T6697] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2339.595039][ T6732] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 2339.596647][ T6732] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1157'. [ 2342.469528][ T6736] batadv_slave_0: entered promiscuous mode [ 2342.471242][ T6736] batadv_slave_0: entered allmulticast mode [ 2351.622954][ T6748] netlink: 'syz.0.1165': attribute type 5 has an invalid length. [ 2361.203497][ T6760] netlink: 'syz.0.1171': attribute type 13 has an invalid length. [ 2367.987137][ T6760] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 2368.043121][ T3256] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2369.263524][ T5370] xfrm0 speed is unknown, defaulting to 1000 [ 2371.811439][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2378.583369][ T6777] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1179'. [ 2378.587632][ T6777] 0X: renamed from veth0 (while UP) [ 2378.690305][ T6777] 0X: entered allmulticast mode [ 2378.713904][ T6777] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 2379.574094][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2382.049956][ T6781] 8021q: VLANs not supported on ipvlan1 [ 2385.533897][ T6787] tmpfs: Bad value for 'mpol' [ 2388.322264][ T6793] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 2388.323499][ T6793] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1187'. [ 2394.930411][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2394.966198][ T6804] netlink: 'syz.0.1192': attribute type 21 has an invalid length. [ 2403.457528][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 2407.651074][ T6825] ./file0: Can't lookup blockdev [ 2425.662162][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2446.264411][ T6880] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2475.277732][ T6930] dvmrp1: entered allmulticast mode [ 2480.023121][ T6939] random: crng reseeded on system resumption [ 2487.091477][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2488.000157][ T6954] netlink: 'syz.1.1258': attribute type 61 has an invalid length. [ 2517.910769][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 2526.564672][ T34] audit: type=1326 audit(2525.710:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.1293" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2526.610014][ T34] audit: type=1326 audit(2525.710:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.1293" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2526.659024][ T34] audit: type=1326 audit(2525.800:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.1293" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2526.662372][ T34] audit: type=1326 audit(2525.800:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.1293" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2526.665315][ T34] audit: type=1326 audit(2525.810:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.1293" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2529.789996][ T7032] batadv_slave_1: entered promiscuous mode [ 2555.094858][ T7069] netlink: 'syz.0.1314': attribute type 7 has an invalid length. [ 2555.434010][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'. [ 2574.464369][ T7102] : renamed from vlan0 (while UP) [ 2580.303524][ T7113] netlink: 'syz.1.1336': attribute type 11 has an invalid length. [ 2580.655490][ T7114] tmpfs: Bad value for 'mpol' [ 2594.360835][ T5370] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2594.582623][ T5370] usb 1-1: Using ep0 maxpacket: 8 [ 2594.760272][ T5370] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 2594.761600][ T5370] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2594.762725][ T5370] usb 1-1: config 0 has no interface number 0 [ 2594.763907][ T5370] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2594.765215][ T5370] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2594.766644][ T5370] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2594.768027][ T5370] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2594.780220][ T5370] usb 1-1: config 0 interface 52 has no altsetting 0 [ 2594.841606][ T5370] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2594.842958][ T5370] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2594.844028][ T5370] usb 1-1: Product: syz [ 2594.844902][ T5370] usb 1-1: SerialNumber: syz [ 2594.946247][ T5370] usb 1-1: config 0 descriptor?? [ 2596.280764][ T5370] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input4 [ 2596.612269][ T7141] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 2596.815554][ T5370] usb 1-1: USB disconnect, device number 3 [ 2609.970211][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2611.717559][ T7173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2614.504096][ T7175] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 2614.693596][ T7175] bond0: (slave bond_slave_1): Releasing backup interface [ 2614.766023][ T7175] bond_slave_1: left promiscuous mode [ 2614.782985][ T7175] bond_slave_1: left allmulticast mode [ 2615.477636][ T7177] xt_l2tp: unknown flags: 42 [ 2625.497705][ T7193] IPv6: sit1: Disabled Multicast RS [ 2633.405333][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 2635.053070][ T5399] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2635.366699][ T5399] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 2635.372166][ T5399] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2635.373776][ T5399] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2635.376670][ T5399] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2635.378069][ T5399] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x8 has invalid maxpacket 0 [ 2635.393033][ T5399] usb 1-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2635.394615][ T5399] usb 1-1: config 48 interface 0 has no altsetting 0 [ 2635.730492][ T5399] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 2635.775538][ T5399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.777692][ T5399] usb 1-1: Product: syz [ 2635.800093][ T5399] usb 1-1: Manufacturer: syz [ 2635.802226][ T5399] usb 1-1: SerialNumber: syz [ 2637.822729][ T5399] usb 1-1: USB disconnect, device number 4 [ 2646.241670][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 2646.243292][ T7230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1376'. [ 2698.012428][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1411'. [ 2701.196735][ T7314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2740.680905][ T7365] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1438'. [ 2769.430064][ T3893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2769.681055][ T3893] usb 1-1: Using ep0 maxpacket: 16 [ 2769.795930][ T3893] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2769.810466][ T3893] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2769.812804][ T3893] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2769.815362][ T3893] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2769.817533][ T3893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2770.118284][ T3893] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2770.122558][ T3893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.124395][ T3893] usb 1-1: Product: syz [ 2770.125892][ T3893] usb 1-1: Manufacturer: syz [ 2770.127459][ T3893] usb 1-1: SerialNumber: syz [ 2770.355831][ T3893] usb 1-1: config 0 descriptor?? [ 2770.472503][ T7399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2773.405272][ T7399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2773.566117][ T3893] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 2773.913206][ T3893] usb 1-1: USB disconnect, device number 5 [ 2786.041839][ T7432] xt_CT: No such helper "snmp_trap" [ 2792.222605][ T7441] wg0: entered promiscuous mode [ 2797.761862][ T7447] syz.0.1468 (7447): drop_caches: 0 [ 2820.196941][ T7480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 2855.732201][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2861.474655][ T7540] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2867.070769][ T7546] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2869.488037][ T7551] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 2874.113342][ T7556] xt_CT: No such helper "syz1" [ 2885.599925][ T7573] netlink: 'syz.1.1526': attribute type 21 has an invalid length. [ 2885.601377][ T7573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1526'. [ 2885.603166][ T7573] netlink: 'syz.1.1526': attribute type 4 has an invalid length. [ 2885.604192][ T7573] netlink: 'syz.1.1526': attribute type 5 has an invalid length. [ 2885.607622][ T7573] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1526'. [ 2886.361560][ T7575] xt_l2tp: v2 doesn't support IP mode [ 2894.316863][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 2919.696826][ T7617] IPv6: Can't replace route, no match found [ 3018.614673][ T7752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1609'. [ 3018.617570][ T7752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1609'. [ 3066.482390][ T7808] xt_policy: output policy not valid in PREROUTING and INPUT [ 3092.103003][ T7844] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 3097.583650][ T7848] autofs4:pid:7848:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 3101.146993][ T7852] tmpfs: Bad value for 'mpol' [ 3114.566480][ T7869] block nbd1: NBD_DISCONNECT [ 3131.586475][ T7897] xt_ecn: cannot match TCP bits for non-tcp packets [ 3154.737732][ T7925] siw: device registration error -23 [ 3158.740764][ T7927] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1692'. [ 3207.917507][ T7990] [U]  [ 3207.919559][ T7990] [U] K{ [ 3207.944320][ T7990] [U] t 1ŠFfˊ`GJgo/mC [ 3207.984141][ T7990] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 3207.986694][ T7990] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 3208.001121][ T7990] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 3208.006259][ T7990] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 3208.043015][ T7990] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 3208.045110][ T7990] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 3208.047301][ T7990] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 3208.110066][ T7990] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 3208.112608][ T7990] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 3208.114850][ T7990] [U] 22Ʃx?0;3u [ 3208.117567][ T7990] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 3208.182598][ T7990] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 3208.184785][ T7990] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 3208.186362][ T7990] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 3208.188102][ T7990] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 3208.202527][ T7990] [U] ec [ 3208.204030][ T7990] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 3208.274899][ T7989] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 3210.797757][ T7995] C: left promiscuous mode [ 3210.984499][ T7995] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3214.812812][ T8000] netlink: 'syz.0.1727': attribute type 15 has an invalid length. [ 3214.814954][ T8000] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1727'. [ 3250.242635][ T8047] xt_ecn: cannot match TCP bits for non-tcp packets [ 3292.413218][ T8098] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1775'. [ 3295.191048][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1776'. [ 3310.326869][ T8121] tmpfs: Bad value for 'mpol' [ 3313.911302][ T8127] tmpfs: Bad value for 'mpol' [ 3331.902723][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3360.510994][ T8185] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 3360.514354][ T8185] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1816'. [ 3367.553258][ T8193] netlink: 'syz.1.1820': attribute type 11 has an invalid length. [ 3392.522376][ T8227] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 3392.523996][ T8227] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1835'. [ 3405.702181][ T8271] mmap: syz.1.1841 (8271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3446.730167][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 3452.673902][ T8336] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1866'. [ 3458.060447][ T7169] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 3459.011360][ T7169] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3459.013043][ T7169] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 3459.014604][ T7169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 3459.016157][ T7169] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3459.163287][ T7169] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 3459.165429][ T7169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.166693][ T7169] usb 2-1: Product: syz [ 3459.167632][ T7169] usb 2-1: Manufacturer: syz [ 3459.179207][ T7169] usb 2-1: SerialNumber: syz [ 3459.313279][ T7169] usb 2-1: config 0 descriptor?? [ 3459.616299][ T7169] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 3461.792506][ T7169] usb 2-1: USB disconnect, device number 7 [ 3488.323284][ T8391] netlink: 'syz.1.1883': attribute type 12 has an invalid length. [ 3518.436926][ T8434] netlink: 'syz.0.1905': attribute type 13 has an invalid length. [ 3518.465948][ T8434] netlink: 'syz.0.1905': attribute type 58 has an invalid length. [ 3518.468089][ T8434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1905'. [ 3521.204310][ T8436] dlm: Unknown command passed to DLM device : 0 [ 3521.204310][ T8436] [ 3537.254611][ T8456] __vm_enough_memory: pid: 8456, comm: syz.0.1916, bytes: 4115879641088 not enough memory for the allocation [ 3560.202961][ T8486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1930'. [ 3566.115756][ T8494] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1934'. [ 3571.435064][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 3571.437540][ T8502] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1938'. [ 3571.454668][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 3580.858067][ T8514] netlink: 'syz.0.1944': attribute type 2 has an invalid length. [ 3580.866256][ T8514] netlink: 'syz.0.1944': attribute type 3 has an invalid length. [ 3583.083701][ T8516] netlink: 'syz.1.1945': attribute type 12 has an invalid length. [ 3593.110823][ T7997] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3593.321041][ T7997] usb 1-1: Using ep0 maxpacket: 8 [ 3593.403973][ T7997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3593.406903][ T7997] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3593.412642][ T7997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3593.587616][ T7997] usb 1-1: config 0 descriptor?? [ 3594.974383][ T7997] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3595.155554][ T7997] usb 1-1: USB disconnect, device number 6 [ 3604.529775][ T8552] xt_NFQUEUE: number of total queues is 0 [ 3614.198002][ T8565] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3614.214242][ T8565] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3614.216441][ T8565] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3614.240392][ T8565] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3614.291880][ T8565] geneve3: entered promiscuous mode [ 3614.293949][ T8565] geneve3: entered allmulticast mode [ 3620.637382][ T8575] ubi31: attaching mtd0 [ 3620.796281][ T8575] ubi31: scanning is finished [ 3620.800883][ T8575] ubi31: empty MTD device detected [ 3621.415983][ T8575] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3621.418177][ T8575] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3621.445117][ T8575] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3621.446935][ T8575] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 3621.463814][ T8575] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3621.465825][ T8575] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3621.467591][ T8575] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3347854323 [ 3621.502070][ T8575] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3621.514395][ T8578] ubi31: background thread "ubi_bgt31d" started, PID 8578 [ 3638.494668][ T8600] netlink: 'syz.1.1976': attribute type 3 has an invalid length. [ 3638.499875][ T8600] netlink: 'syz.1.1976': attribute type 3 has an invalid length. [ 3638.506884][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 3655.803000][ T8624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3658.827285][ T8628] ipt_ECN: cannot use operation on non-tcp rule [ 3666.843520][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1993'. [ 3668.086306][ T8640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3674.713324][ T8648] xt_hashlimit: max too large, truncated to 1048576 [ 3682.627704][ T8660] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 3703.172375][ T8688] netlink: 'syz.1.2016': attribute type 21 has an invalid length. [ 3703.183809][ T8688] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2016'. [ 3719.284472][ T8705] ubi: mtd0 is already attached to ubi31 [ 3758.400971][ T8745] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 3784.273813][ T8765] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2052'. [ 3810.886092][ T8792] fuse: Bad value for 'source' [ 3838.161110][ T8820] xt_cgroup: xt_cgroup: no path or classid specified [ 3844.572236][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 3850.244837][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2085'. [ 3861.013354][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 3861.015793][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 3861.018171][ T8885] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 3869.710833][ T8896] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3877.389781][ T8905] ipt_REJECT: ECHOREPLY no longer supported. [ 3885.966536][ T5370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3886.253117][ T5370] usb 1-1: Using ep0 maxpacket: 16 [ 3887.137709][ T5370] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3887.157445][ T5370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3887.160869][ T5370] usb 1-1: Product: syz [ 3887.162498][ T5370] usb 1-1: Manufacturer: syz [ 3887.164075][ T5370] usb 1-1: SerialNumber: syz [ 3887.357244][ T5370] usb 1-1: config 0 descriptor?? [ 3887.560109][ T5370] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 3889.473487][ T5370] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 3889.476756][ T5370] visor 1-1:0.0: probe with driver visor failed with error -5 [ 3891.102559][ T5370] usb 1-1: USB disconnect, device number 7 [ 3916.923618][ T8958] tmpfs: Bad value for 'mpol' [ 3935.545726][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 3943.593891][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 3943.595517][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 3946.141730][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 3952.536398][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 3952.562281][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 3952.564415][ T9019] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2143'. [ 3959.776447][ T9024] ALSA: mixer_oss: invalid OSS volume '' [ 3973.002604][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 3996.163209][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 4008.855188][ T9092] netlink: 'syz.0.2179': attribute type 10 has an invalid length. [ 4028.686305][ T9111] C: entered promiscuous mode [ 4028.861126][ T9111] tunl0: entered promiscuous mode [ 4028.864047][ T9111] tunl0: entered allmulticast mode [ 4029.075791][ T9111] gre0: entered promiscuous mode [ 4029.081189][ T9111] gre0: entered allmulticast mode [ 4029.432830][ T9111] gretap0: entered promiscuous mode [ 4029.434648][ T9111] gretap0: entered allmulticast mode [ 4029.685558][ T9111] erspan0: entered promiscuous mode [ 4029.691026][ T9111] erspan0: entered allmulticast mode [ 4030.277366][ T9111] ip_vti0: entered promiscuous mode [ 4030.300950][ T9111] ip_vti0: entered allmulticast mode [ 4030.534933][ T9111] ip6_vti0: entered promiscuous mode [ 4030.537727][ T9111] ip6_vti0: entered allmulticast mode [ 4030.913609][ T9111] sit0: entered promiscuous mode [ 4030.915618][ T9111] sit0: entered allmulticast mode [ 4031.232155][ T9111] ip6tnl0: entered promiscuous mode [ 4031.234794][ T9111] ip6tnl0: entered allmulticast mode [ 4031.432505][ T9111] ip6gre0: entered promiscuous mode [ 4031.435290][ T9111] ip6gre0: entered allmulticast mode [ 4031.616032][ T9111] syz_tun: entered promiscuous mode [ 4031.618063][ T9111] syz_tun: entered allmulticast mode [ 4031.843727][ T9111] ip6gretap0: entered promiscuous mode [ 4031.845809][ T9111] ip6gretap0: entered allmulticast mode [ 4032.377508][ T9111] !: entered promiscuous mode [ 4032.382943][ T9111] !: entered allmulticast mode [ 4032.613515][ T9111] nlmon0: entered promiscuous mode [ 4032.615853][ T9111] nlmon0: entered allmulticast mode [ 4032.802961][ T9111] vxcan0: entered promiscuous mode [ 4032.805350][ T9111] vxcan0: entered allmulticast mode [ 4032.855591][ T9111] vxcan1: entered promiscuous mode [ 4032.860734][ T9111] vxcan1: entered allmulticast mode [ 4032.913518][ T9111] 0X: entered promiscuous mode [ 4033.165408][ T9111] veth1: entered promiscuous mode [ 4033.167734][ T9111] veth1: entered allmulticast mode [ 4033.356495][ T9111] wg0: entered allmulticast mode [ 4033.427628][ T9111] wg1: entered promiscuous mode [ 4033.431016][ T9111] wg1: entered allmulticast mode [ 4033.631926][ T9111] wg2: entered promiscuous mode [ 4033.633914][ T9111] wg2: entered allmulticast mode [ 4033.857526][ T9111] veth0_to_bridge: entered promiscuous mode [ 4033.874831][ T9111] veth0_to_bridge: entered allmulticast mode [ 4034.138147][ T9111] bridge_slave_0: entered promiscuous mode [ 4034.152955][ T9111] bridge_slave_0: entered allmulticast mode [ 4034.281140][ T9111] veth1_to_bridge: entered promiscuous mode [ 4034.282997][ T9111] veth1_to_bridge: entered allmulticast mode [ 4034.446609][ T9111] bridge_slave_1: entered promiscuous mode [ 4034.465821][ T9111] bridge_slave_1: entered allmulticast mode [ 4034.602275][ T9111] veth0_to_bond: entered promiscuous mode [ 4034.604494][ T9111] veth0_to_bond: entered allmulticast mode [ 4034.816574][ T9111] veth1_to_bond: entered promiscuous mode [ 4034.820515][ T9111] veth1_to_bond: entered allmulticast mode [ 4035.265016][ T9111] veth0_to_team: entered promiscuous mode [ 4035.267045][ T9111] veth0_to_team: entered allmulticast mode [ 4035.489368][ T9111] team_slave_0: entered promiscuous mode [ 4035.491418][ T9111] team_slave_0: entered allmulticast mode [ 4035.663064][ T9111] veth1_to_team: entered promiscuous mode [ 4035.667580][ T9111] veth1_to_team: entered allmulticast mode [ 4035.917199][ T9111] team_slave_1: entered promiscuous mode [ 4035.934330][ T9111] team_slave_1: entered allmulticast mode [ 4036.126051][ T9111] veth0_to_batadv: entered promiscuous mode [ 4036.127649][ T9111] veth0_to_batadv: entered allmulticast mode [ 4036.866696][ T9111] veth1_to_batadv: entered promiscuous mode [ 4036.872784][ T9111] veth1_to_batadv: entered allmulticast mode [ 4037.011302][ T9111] batadv_slave_1: entered allmulticast mode [ 4037.017292][ T9111] xfrm0: entered promiscuous mode [ 4037.031465][ T9111] xfrm0: entered allmulticast mode [ 4037.206905][ T9111] veth0_to_hsr: entered promiscuous mode [ 4037.217149][ T9111] veth0_to_hsr: entered allmulticast mode [ 4037.405244][ T9111] hsr_slave_0: entered allmulticast mode [ 4037.585616][ T9111] veth1_to_hsr: entered promiscuous mode [ 4037.587744][ T9111] veth1_to_hsr: entered allmulticast mode [ 4037.827872][ T9111] hsr_slave_1: entered allmulticast mode [ 4038.333956][ T9111] hsr0: entered promiscuous mode [ 4038.336147][ T9111] hsr0: entered allmulticast mode [ 4038.364304][ T9111] veth1_virt_wifi: entered promiscuous mode [ 4038.375141][ T9111] veth1_virt_wifi: entered allmulticast mode [ 4038.543104][ T9111] veth0_virt_wifi: entered promiscuous mode [ 4038.545122][ T9111] veth0_virt_wifi: entered allmulticast mode [ 4038.706966][ T9111] veth1_vlan: entered allmulticast mode [ 4039.786374][ T9111] vlan0: entered promiscuous mode [ 4039.822042][ T9111] vlan0: entered allmulticast mode [ 4039.838101][ T9111] vlan1: entered promiscuous mode [ 4039.883816][ T9111] vlan1: entered allmulticast mode [ 4039.913898][ T9111] macvlan0: entered promiscuous mode [ 4039.922930][ T9111] macvlan0: entered allmulticast mode [ 4040.132600][ T9111] macvlan1: entered promiscuous mode [ 4040.134537][ T9111] macvlan1: entered allmulticast mode [ 4040.481967][ T9111] ipvlan1: entered promiscuous mode [ 4040.483916][ T9111] ipvlan1: entered allmulticast mode [ 4040.700730][ T9111] veth1_macvtap: entered allmulticast mode [ 4041.113355][ T9111] veth0_macvtap: entered promiscuous mode [ 4041.114875][ T9111] veth0_macvtap: entered allmulticast mode [ 4041.386771][ T9111] macsec0: entered promiscuous mode [ 4041.390343][ T9111] macsec0: entered allmulticast mode [ 4041.757624][ T9111] geneve0: entered promiscuous mode [ 4041.763292][ T9111] geneve0: entered allmulticast mode [ 4041.917565][ T9111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4041.923992][ T9111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4041.927754][ T9111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4041.936450][ T9111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4041.983190][ T9111] geneve1: entered promiscuous mode [ 4042.007867][ T9111] geneve1: entered allmulticast mode [ 4042.196391][ T9111] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 4042.200078][ T9111] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 4042.582375][ T9111] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 4042.585437][ T9111] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 4042.744608][ T9111] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 4042.746971][ T9111] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 4042.886099][ T9111] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 4042.892090][ T9111] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 4043.011569][ T9111] syztnl1: entered promiscuous mode [ 4043.020065][ T9111] syztnl1: entered allmulticast mode [ 4043.123771][ T9111] ipip0: entered promiscuous mode [ 4043.125735][ T9111] ipip0: entered allmulticast mode [ 4043.204307][ T9111] erspan1: entered promiscuous mode [ 4043.206295][ T9111] erspan1: entered allmulticast mode [ 4043.310178][ T9111] veth2: entered promiscuous mode [ 4043.312199][ T9111] veth2: entered allmulticast mode [ 4043.410894][ T9111] veth3: entered promiscuous mode [ 4043.412864][ T9111] veth3: entered allmulticast mode [ 4043.503284][ T9111] gtp0: entered promiscuous mode [ 4043.505553][ T9111] gtp0: entered allmulticast mode [ 4043.624311][ T9111] geneve2: entered promiscuous mode [ 4043.626367][ T9111] geneve2: entered allmulticast mode [ 4043.633197][ T9111] ip6gre1: entered promiscuous mode [ 4043.635424][ T9111] ip6gre1: entered allmulticast mode [ 4043.650952][ T9111] ip6gre2: entered promiscuous mode [ 4043.652857][ T9111] ip6gre2: entered allmulticast mode [ 4044.045134][ T9111] dvmrp1: entered promiscuous mode [ 4044.164467][ T9111] gre1: entered promiscuous mode [ 4044.167757][ T9111] gre1: entered allmulticast mode [ 4044.263894][ T9111] sit1: entered promiscuous mode [ 4044.265542][ T9111] sit1: entered allmulticast mode [ 4044.340681][ T9111] xfrm1: entered promiscuous mode [ 4044.343027][ T9111] xfrm1: entered allmulticast mode [ 4044.347592][ T9111] vti0: entered promiscuous mode [ 4044.352244][ T9111] vti0: entered allmulticast mode [ 4044.356840][ T9111] bond1: entered promiscuous mode [ 4044.363286][ T9111] bond1: entered allmulticast mode [ 4044.407957][ T9111] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4044.423750][ T9111] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4044.425828][ T9111] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4044.427838][ T9111] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 4044.654518][ T9111] bond2: entered promiscuous mode [ 4044.656334][ T9111] bond2: entered allmulticast mode [ 4044.667372][ T9111] veth0: entered promiscuous mode [ 4044.672511][ T9111] veth0: entered allmulticast mode [ 4044.683236][ T9111] veth4: entered promiscuous mode [ 4044.684951][ T9111] veth4: entered allmulticast mode [ 4044.701094][ T9111] vxcan2: entered promiscuous mode [ 4044.702942][ T9111] vxcan2: entered allmulticast mode [ 4044.706440][ T9111] vxcan3: entered promiscuous mode [ 4044.721917][ T9111] vxcan3: entered allmulticast mode [ 4044.750752][ T8921] xfrm0 speed is unknown, defaulting to 1000 [ 4044.752997][ T8921] syz1: Port: 1 Link DOWN [ 4050.004974][ T9121] xt_hashlimit: size too large, truncated to 1048576 [ 4071.833709][ T9156] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 4090.410933][ T9181] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 4106.105503][ T9208] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 4132.995159][ T9248] random: crng reseeded on system resumption [ 4144.734385][ T9259] netlink: 'syz.0.2261': attribute type 11 has an invalid length. [ 4144.735725][ T9259] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2261'. [ 4144.821693][ T9260] netlink: 'syz.1.2260': attribute type 1 has an invalid length. [ 4162.133799][ T9286] netlink: 'syz.0.2274': attribute type 5 has an invalid length. [ 4162.655646][ T9288] binder: 9287:9288 unknown command 0 [ 4162.657552][ T9288] binder: 9287:9288 ioctl c0306201 200000000480 returned -22 [ 4164.923090][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 4164.934549][ T9290] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2276'. [ 4164.936728][ T9290] netlink: 'syz.0.2276': attribute type 3 has an invalid length. [ 4164.973022][ T9290] netlink: 'syz.0.2276': attribute type 2 has an invalid length. [ 4164.989916][ T9290] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2276'. [ 4172.193557][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 4178.319867][ T34] audit: type=1400 audit(4177.460:450): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9312 comm="syz.1.2285" [ 4197.730650][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2301'. [ 4227.013311][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 4232.797822][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'. [ 4238.094241][ T9409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 4240.420412][ T9414] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2335'. [ 4252.976405][ T9441] cgroup: Need name or subsystem set [ 4265.354759][ T9457] cgroup: name respecified [ 4278.837805][ T9480] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 4299.812047][ T9512] new mount options do not match the existing superblock, will be ignored [ 4334.572273][ T9558] netlink: 'syz.1.2399': attribute type 21 has an invalid length. [ 4334.574020][ T9558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2399'. [ 4334.575864][ T9558] netlink: 'syz.1.2399': attribute type 5 has an invalid length. [ 4334.576971][ T9558] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2399'. [ 4338.248301][ T9563] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 4339.226595][ T9564] tmpfs: Bad value for 'mpol' [ 4371.625197][ T34] audit: type=1400 audit(4370.770:451): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9592 comm="syz.0.2416" [ 4401.062496][ C1] vkms_vblank_simulate: vblank timer overrun [ 4407.675754][ T9672] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 4415.961250][ T9684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2444'. [ 4417.827830][ T9686] ipvlan1: left promiscuous mode [ 4417.829622][ T9686] ipvlan1: left allmulticast mode [ 4435.763515][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2460'. [ 4459.428090][ T34] audit: type=1800 audit(4458.570:452): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2469" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 4471.303796][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 4484.776097][ T9778] dlm: no locking on control device [ 4499.327755][ T9801] netlink: 'syz.0.2498': attribute type 21 has an invalid length. [ 4502.381792][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2500'. [ 4538.206240][ T9855] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 4566.733235][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 4571.422226][ T9927] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 4575.203441][ T9931] dlm: non-version read from control device 193 [ 4578.257469][ T9934] netlink: 2756 bytes leftover after parsing attributes in process `syz.1.2546'. [ 4578.263716][ T9934] netlink: 1740 bytes leftover after parsing attributes in process `syz.1.2546'. [ 4578.275100][ T9934] netlink: 1740 bytes leftover after parsing attributes in process `syz.1.2546'. [ 4615.906231][ T9996] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 4623.292684][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2581'. [ 4626.917840][T10012] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 4632.403493][T10050] sit2: entered promiscuous mode [ 4635.909594][T10056] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 4648.603023][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 4691.216666][T10137] xt_CT: No such helper "pptp" [ 4699.944916][ T8921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 4700.275528][ T8921] usb 1-1: Using ep0 maxpacket: 8 [ 4700.446733][ T8921] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 4700.452430][ T8921] usb 1-1: config 0 has no interface number 0 [ 4700.454821][ T8921] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 4700.457319][ T8921] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 4700.471719][ T8921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4700.826216][ T8921] usb 1-1: config 0 descriptor?? [ 4701.210991][ T8921] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 4701.612187][ T5370] usb 1-1: USB disconnect, device number 8 [ 4707.157306][T10202] x_tables: duplicate underflow at hook 1 [ 4735.164507][T10242] xt_connbytes: Forcing CT accounting to be enabled [ 4735.174293][T10242] xt_bpf: check failed: parse error [ 4749.575119][T10260] tmpfs: Bad value for 'mpol' [ 4751.327008][ T34] audit: type=1400 audit(4750.470:453): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&" pid=10261 comm="syz.1.2663" [ 4761.133657][T10272] netlink: 'syz.0.2668': attribute type 21 has an invalid length. [ 4781.262667][T10304] : renamed from hsr0 (while UP) [ 4783.459973][ T5399] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 4783.817305][ T5399] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 4783.829538][ T5399] usb 1-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 4783.831330][ T5399] usb 1-1: Product: syz [ 4783.832733][ T5399] usb 1-1: Manufacturer: syz [ 4783.834182][ T5399] usb 1-1: SerialNumber: syz [ 4784.051004][ T5399] r8152-cfgselector 1-1: Unknown version 0x0000 [ 4784.053116][ T5399] r8152-cfgselector 1-1: config 0 descriptor?? [ 4786.133033][ T5370] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 4795.451463][T10329] netlink: 'syz.0.2690': attribute type 2 has an invalid length. [ 4795.457918][T10329] netlink: 'syz.0.2690': attribute type 1 has an invalid length. [ 4804.736238][T10344] xt_hashlimit: Unknown mode mask 8C, kernel too old? [ 4847.027966][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.043367][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.045677][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.052767][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.055341][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.066727][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.141459][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.145830][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.164402][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4847.177595][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 4857.853208][T10418] netlink: 'syz.0.2732': attribute type 27 has an invalid length. [ 4868.543920][T10434] dns_resolver: Unsupported server list version (0) [ 4877.857653][T10443] tmpfs: Bad value for 'mpol' [ 4895.962215][T10475] netlink: 'syz.1.2756': attribute type 2 has an invalid length. [ 4895.964213][T10475] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 4897.487582][T10477] capability: warning: `syz.0.2757' uses 32-bit capabilities (legacy support in use) [ 4942.753064][T10548] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 4956.810855][T10568] __nla_validate_parse: 40 callbacks suppressed [ 4956.811378][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 4977.881677][T10600] xt_addrtype: ipv6 does not support BROADCAST matching [ 4989.741400][T10618] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2825'. [ 5007.171268][T10639] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 5016.357620][T10652] netlink: 'syz.0.2842': attribute type 12 has an invalid length. [ 5031.891412][T10678] Option ' ' to dns_resolver key: bad/missing value [ 5068.937196][T10726] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 5103.913060][T10783] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 5118.257591][T10803] kernel read not supported for file /'- (pid: 10803 comm: syz.1.2917) [ 5118.273508][ T34] audit: type=1800 audit(5117.410:454): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2917" name="'-" dev="mqueue" ino=23031 res=0 errno=0 [ 5121.506255][T10806] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 5131.636905][T10818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2925'. [ 5131.642982][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2925'. [ 5131.645102][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 5144.242853][ T8921] hid-generic D158:334EB097:0E39.0001: item fetching failed at offset 0/1 [ 5144.276380][ T8921] hid-generic D158:334EB097:0E39.0001: probe with driver hid-generic failed with error -22 [ 5149.156169][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2939'. [ 5176.014486][T10919] cgroup: Bad value for 'name' [ 5192.090848][T10939] netlink: 'syz.0.2965': attribute type 1 has an invalid length. [ 5210.382820][T10965] netlink: 'syz.1.2979': attribute type 12 has an invalid length. [ 5210.384286][T10965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2979'. [ 5217.306130][T10976] xt_cgroup: invalid path, errno=-2 [ 5242.767625][T11013] xt_bpf: check failed: parse error [ 5261.431434][T11035] tmpfs: Bad value for 'nr_inodes' [ 5270.506130][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'. [ 5272.420384][T11051] netlink: 'syz.1.3021': attribute type 7 has an invalid length. [ 5275.165255][T11056] xt_TCPMSS: Only works on TCP SYN packets [ 5283.566412][T11067] xt_NFQUEUE: number of queues (65535) out of range (got 129383) [ 5289.964698][T11077] ip6t_rpfilter: unknown options [ 5311.114950][T11103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3046'. [ 5324.287374][T11122] random: crng reseeded on system resumption [ 5337.444365][T11141] dlm: no locking on control device [ 5349.110462][T11161] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3076'. [ 5396.223978][T11231] xt_nfacct: accounting object `syz1' does not exists [ 5405.228215][T11245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3112'. [ 5405.233153][T11245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3112'. [ 5408.202816][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 5408.205071][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 5427.961919][ T7169] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 5428.202958][ T7169] usb 2-1: Using ep0 maxpacket: 16 [ 5428.484199][ T7169] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 5428.486557][ T7169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5428.492991][ T7169] usb 2-1: Product: syz [ 5428.494761][ T7169] usb 2-1: Manufacturer: syz [ 5428.496173][ T7169] usb 2-1: SerialNumber: syz [ 5429.966978][ T7169] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 5430.603146][ T7169] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 5430.733191][ T7169] usb 2-1: USB disconnect, device number 8 [ 5432.266525][T11297] random: crng reseeded on system resumption [ 5449.202494][T11319] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3139'. [ 5449.204869][T11319] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 5451.851697][T11323] netlink: 'syz.1.3141': attribute type 7 has an invalid length. [ 5467.060902][T11348] (unnamed net_device) (uninitialized): down delay (58844) is not a multiple of miimon (1023), value rounded to 58311 ms [ 5537.903819][T11479] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3198'. [ 5540.515048][T11483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 5572.953300][T11522] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 5572.955885][T11522] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3219'. [ 5579.253694][T11534] binder: 11532:11534 ioctl c00c620f 200000000580 returned -22 [ 5586.863186][T11546] misc userio: No port type given on /dev/userio [ 5598.121849][T11593] [U]  [ 5618.197295][T11621] netlink: 'syz.1.3252': attribute type 58 has an invalid length. [ 5618.201596][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3252'. [ 5653.073720][T11671] netlink: 'syz.1.3273': attribute type 40 has an invalid length. [ 5711.150732][T11737] autofs4:pid:11737:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 5712.682602][T11739] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 5721.060476][T11751] xt_hashlimit: invalid interval [ 5726.443884][T11761] C: left promiscuous mode [ 5726.445759][T11761] C: left allmulticast mode [ 5737.314268][T11775] usb usb1: usbfs: process 11775 (syz.0.3325) did not claim interface 0 before use [ 5737.323740][T11775] usb usb1: selecting invalid altsetting 11 [ 5743.133079][T11781] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3329'. [ 5772.372752][T11820] netlink: 'syz.0.3347': attribute type 2 has an invalid length. [ 5772.374846][T11820] netlink: 'syz.0.3347': attribute type 11 has an invalid length. [ 5772.376613][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3347'. [ 5778.072964][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'. [ 5786.064281][T11844] xt_TCPMSS: Only works on TCP SYN packets [ 5794.133915][T11854] xt_socket: unknown flags 0x8 [ 5814.245553][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 5819.521643][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3379'. [ 5819.524021][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3379'. [ 5824.836680][T11900] netlink: 'syz.1.3383': attribute type 3 has an invalid length. [ 5828.342508][T11906] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 5828.346442][T11906] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3386'. [ 5867.653270][T11962] cgroup: Name too long [ 5876.661542][T11974] cgroup: subsys name conflicts with all [ 5882.777025][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 5882.781115][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3421'. [ 5912.966972][T12028] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 5933.384558][T12052] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 5945.044673][T12075] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3463'. [ 5947.734205][ T34] audit: type=1400 audit(5946.840:455): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625 pid=12078 comm="syz.0.3465" [ 5978.886267][T12126] netlink: 'syz.0.3485': attribute type 2 has an invalid length. [ 5978.911056][T12126] netlink: 46 bytes leftover after parsing attributes in process `syz.0.3485'. [ 5998.337815][T12156] netlink: 'syz.1.3500': attribute type 30 has an invalid length. [ 5998.343611][T12156] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 5998.345245][T12156] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 6003.015419][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3503'. [ 6013.794075][ T7169] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 6014.225701][ T7169] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 6014.240540][ T7169] usb 2-1: config 1 has no interface number 0 [ 6014.242763][ T7169] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 6014.244643][ T7169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6014.726348][ T7169] usb 2-1: MBOX3: Invalid descriptor size=18. [ 6015.873464][ T8921] usb 2-1: USB disconnect, device number 9 [ 6017.543401][T12197] netlink: 'syz.0.3514': attribute type 21 has an invalid length. [ 6017.546108][T12197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3514'. [ 6017.554377][T12197] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 6017.556308][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3514'. [ 6030.245434][T12215] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 6065.502993][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3546'. [ 6108.185802][T12324] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 6118.787580][T12336] netlink: 802 bytes leftover after parsing attributes in process `syz.1.3582'. [ 6131.931437][T12357] netlink: 'syz.0.3592': attribute type 2 has an invalid length. [ 6136.172122][ T5399] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 6136.470391][ T5399] usb 2-1: Using ep0 maxpacket: 16 [ 6136.549618][ T5399] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 6136.553174][ T5399] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 6136.592941][ T5399] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 6136.595933][ T5399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 6136.601847][ T5399] usb 2-1: SerialNumber: syz [ 6136.735078][T12364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 6137.871023][ T5399] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 6138.165536][ T5399] usb 2-1: USB disconnect, device number 10 [ 6198.977757][T12468] [U]  [ 6205.911529][T12483] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3636'. [ 6210.752893][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3641'. [ 6273.293023][T12597] trusted_key: encrypted_key: master key parameter '' is invalid [ 6294.457629][T12627] xt_CT: No such helper "pptp" [ 6300.507630][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 6300.510743][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 6300.512052][T12638] netlink: 'syz.0.3710': attribute type 12 has an invalid length. [ 6300.513108][T12638] netlink: 'syz.0.3710': attribute type 11 has an invalid length. [ 6318.062223][T12668] process 'syz.1.3720' launched './file2' with NULL argv: empty string added [ 6331.343764][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'. [ 6331.352022][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3731'. [ 6331.353977][T12694] netlink: 'syz.1.3731': attribute type 20 has an invalid length. [ 6331.873728][T12695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 6331.876717][T12695] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3730'. [ 6331.920589][T12695] netlink: 'syz.0.3730': attribute type 10 has an invalid length. [ 6334.656284][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.660940][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.663192][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.664893][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.666574][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.670844][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.672787][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.674467][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.676074][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.677682][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.680217][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.683858][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.685492][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.687222][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.691973][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.695873][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.697588][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.699988][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.701574][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.703205][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.706839][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.709463][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.711172][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.712825][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.714588][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.716391][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.723849][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.725763][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.727532][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.743121][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.745102][ T8921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 6334.856259][ T8921] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 6336.912276][T12710] macvtap0: entered promiscuous mode [ 6350.955077][ T8921] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 6351.191522][ T8921] usb 2-1: Using ep0 maxpacket: 16 [ 6351.284152][ T8921] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6351.286591][ T8921] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6351.300068][ T8921] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 6351.302498][ T8921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6351.304405][ T8921] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 6351.306236][ T8921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6351.584452][ T8921] usb 2-1: config 0 descriptor?? [ 6353.110277][ T8921] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 6353.114769][ T8921] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 6353.116447][ T8921] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 6353.118216][ T8921] hid-generic 0003:045E:05DA.0003: ignoring exceeding usage max [ 6353.208088][ T8921] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 6353.235561][ T8921] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 6353.237419][ T8921] hid-generic 0003:045E:05DA.0003: unbalanced collection at end of report description [ 6353.358157][ T8921] hid-generic 0003:045E:05DA.0003: probe with driver hid-generic failed with error -22 [ 6353.582059][ T8921] usb 2-1: USB disconnect, device number 11 [ 6382.162507][T12801] autofs: Bad value for 'fd' [ 6403.031621][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 6434.740807][T12892] veth0_to_bond: entered allmulticast mode [ 6441.961305][T12903] tmpfs: Cannot enable quota on remount [ 6443.426803][T12904] xt_CT: No such helper "syz1" [ 6445.917055][T12910] tmpfs: Invalid gid '0x00000000ffffffff' [ 6446.997210][T12912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3815'. [ 6446.999988][T12912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3815'. [ 6447.001130][T12912] netlink: 'syz.1.3815': attribute type 6 has an invalid length. [ 6447.002203][T12912] netlink: 'syz.1.3815': attribute type 5 has an invalid length. [ 6447.003184][T12912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3815'. [ 6450.581306][T12918] usb usb2: usbfs: interface 0 claimed by hub while 'syz.1.3818' resets device [ 6455.492037][T12928] ptrace attach of "/syz-executor exec"[3194] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x0 [ 6474.513728][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3837'. [ 6490.414112][T12992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3850'. [ 6501.142640][T13009] tmpfs: Group quota block hardlimit too large. [ 6540.310212][T13067] netlink: 'syz.1.3881': attribute type 3 has an invalid length. [ 6576.881639][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'. [ 6600.311526][T13155] veth1_macvtap: left promiscuous mode [ 6600.323021][T13155] macsec0: entered promiscuous mode [ 6600.324160][T13155] macsec0: entered allmulticast mode [ 6600.755711][T13155] veth1_macvtap: entered promiscuous mode [ 6600.757582][T13155] veth1_macvtap: entered allmulticast mode [ 6600.780763][T13155] macsec0: left promiscuous mode [ 6600.786197][T13155] macsec0: left allmulticast mode [ 6600.787867][T13155] veth1_macvtap: left allmulticast mode [ 6620.262812][T13175] netlink: 'syz.1.3933': attribute type 2 has an invalid length. [ 6620.264185][T13175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3933'. [ 6654.519827][T13226] TCP: TCP_TX_DELAY enabled [ 6663.253364][ T3256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6663.334422][ T3256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6663.376256][ T3256] bond0 (unregistering): Released all slaves [ 6664.181328][ T3256] bond1 (unregistering): Released all slaves [ 6664.856419][ T3256] bond2 (unregistering): Released all slaves [ 6665.517569][ T3256] bond3 (unregistering): Released all slaves [ 6666.033622][ T3256] bond4 (unregistering): Released all slaves [ 6666.566464][ T3256] bond5 (unregistering): Released all slaves [ 6696.336846][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6696.642797][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6715.043602][T13199] hsr_slave_0: entered promiscuous mode [ 6715.073641][T13199] hsr_slave_1: entered promiscuous mode [ 6728.577305][T13199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6728.905044][T13199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6729.222509][T13199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6729.675949][T13199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6743.635802][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 6743.640764][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 6743.874082][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6803.024567][T13199] veth0_vlan: entered promiscuous mode [ 6803.262301][T13199] veth1_vlan: entered promiscuous mode [ 6805.494274][T13199] veth0_macvtap: entered promiscuous mode [ 6806.158225][T13199] veth1_macvtap: entered promiscuous mode [ 6808.345219][T13199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6808.373518][T13199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6808.374680][T13199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6808.375778][T13199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6835.821711][T13736] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 6862.521133][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3998'. [ 6879.133874][T13782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4006'. [ 6879.305443][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'. [ 6879.307603][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4006'. [ 6894.474877][T13796] devtmpfs: Too few inodes for current use [ 6918.920522][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 6918.922637][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 6929.909163][ T34] audit: type=1800 audit(6929.050:456): pid=13837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4030" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 6946.753727][T13708] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 6946.822051][T13708] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 6949.797356][T13870] sock: sock_timestamping_bind_phc: sock not bind to device [ 6953.258885][ T34] audit: type=1326 audit(6952.400:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.1.4045" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 6957.216152][T13877] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 6975.451577][T13891] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 6985.403754][T13901] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4058'. [ 7042.717181][T13968] Zero length message leads to an empty skb [ 7064.853460][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4102'. [ 7073.017309][T14004] tmpfs: Bad value for 'mpol' [ 7084.632131][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4112'. [ 7084.876041][ T37] INFO: task kworker/u9:0:11857 blocked for more than 430 seconds. [ 7084.914507][ T37] Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 [ 7084.916562][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 7084.943586][ T37] task:kworker/u9:0 state:D stack:0 pid:11857 tgid:11857 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 7084.947256][ T37] Workqueue: ib-unreg-wq ib_unregister_work [ 7084.973873][ T37] Call Trace: [ 7084.975248][ T37] [] __schedule+0x1022/0x4094 [ 7084.977035][ T37] [] schedule+0xc4/0x35e SYZFAIL: failed to recv rpc [ 7084.998011][ T37] [] schedule_timeout+0x1c6/0x2ae [ 7085.012269][ T37] [] __wait_for_common+0x1d2/0x3e8 [ 7085.013868][ T37] [] wait_for_completion+0x1a/0x22 [ 7085.016302][ T37] [] disable_device+0x1b2/0x2ba [ 7085.029524][ T37] [] __ib_unregister_device+0x28e/0x402 [ 7085.032862][ T37] [] ib_unregister_work+0x20/0x36 [ 7085.035407][ T37] [] process_one_work+0x96a/0x1f32 [ 7085.064177][ T37] [] worker_thread+0x5ce/0xde8 [ 7085.066320][ T37] [] kthread+0x39c/0x7d4 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7085.109495][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 7085.112637][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 7085.115963][ T37] [ 7085.115963][ T37] Showing all locks held in the system: [ 7085.117913][ T37] 1 lock held by khungtaskd/37: [ 7085.156634][ T37] #0: ffffffff883dc420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 7085.194050][ T37] 2 locks held by syslogd/3001: [ 7085.195563][ T37] 2 locks held by getty/3157: [ 7085.196941][ T37] #0: ffffaf8018bf20a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 7085.236266][ T37] #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12b6 [ 7085.255074][ T37] 2 locks held by syz-executor/3187: [ 7085.256344][ T37] 3 locks held by kworker/0:2/3189: [ 7085.257668][ T37] 4 locks held by syz-executor/3195: [ 7085.271308][ T37] 3 locks held by kworker/u8:2/3256: [ 7085.273100][ T37] #0: ffffaf80126e2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 [ 7085.277394][ T37] #1: ffff8f800ccd7b70 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 [ 7085.334747][ T37] #2: ffffffff89855570 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xcc/0x7ce [ 7085.360415][ T37] 3 locks held by kworker/u10:4/8154: [ 7085.362136][ T37] 3 locks held by kworker/u9:0/11857: [ 7085.363424][ T37] #0: ffffaf8011f3c948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 [ 7085.367222][ T37] #1: ffff8f8000ad7b70 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 [ 7085.404069][ T37] #2: ffffaf801f0346d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x200/0x402 [ 7085.407965][ T37] 3 locks held by kworker/u9:1/12365: [ 7085.441351][ T37] #0: ffffaf806ed3b0d8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x304/0x4094 [ 7085.445078][ T37] #1: ffffaf806ed25688 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x22a/0x718 [ 7085.499338][ T37] #2: ffffaf806ed27098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x156/0x1f4 [ 7085.504304][ T37] 3 locks held by syz.2.4112/14014: [ 7085.506088][ T37] [ 7085.507289][ T37] ============================================= [ 7085.507289][ T37] [ 7085.561544][ T37] NMI backtrace for cpu 1 [ 7085.562040][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 7085.562533][ T37] Hardware name: riscv-virtio,qemu (DT) [ 7085.562691][ T37] Call Trace: [ 7085.562825][ T37] [] dump_backtrace+0x2e/0x3c [ 7085.563371][ T37] [] show_stack+0x30/0x3c [ 7085.563742][ T37] [] dump_stack_lvl+0x12e/0x1a6 [ 7085.564285][ T37] [] dump_stack+0x1c/0x24 [ 7085.564822][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 7085.565328][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [ 7085.565853][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 7085.566482][ T37] [] watchdog+0xcf2/0x11de [ 7085.567028][ T37] [] kthread+0x39c/0x7d4 [ 7085.567440][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 7085.567899][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 7085.583154][ T37] Sending NMI from CPU 1 to CPUs 0: [ 7085.585463][ C0] NMI backtrace for cpu 0 [ 7085.586059][ C0] CPU: 0 UID: 0 PID: 3187 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 7085.586608][ C0] Hardware name: riscv-virtio,qemu (DT) [ 7085.586875][ C0] epc : _raw_spin_unlock_irqrestore+0x36/0xd4 [ 7085.587536][ C0] ra : _raw_spin_unlock_irqrestore+0x86/0xd4 [ 7085.588205][ C0] epc : ffffffff86348bd2 ra : ffffffff86348c22 sp : ffff8f8007776de0 [ 7085.588556][ C0] gp : ffffffff89c83e20 tp : ffffaf8019c9cec0 t0 : ffff8f8007776ec0 [ 7085.588897][ C0] t1 : fffffffef21f134a t2 : ffffaf806ed256c0 s0 : ffff8f8007776e00 [ 7085.589221][ C0] s1 : 0000000000000002 a0 : 0000000000000000 a1 : ffffffff87d71d08 [ 7085.589551][ C0] a2 : 0000000000000007 a3 : 0000000000000001 a4 : 0000000000000001 [ 7085.589848][ C0] a5 : 0000000000000000 a6 : 0000000000000003 a7 : ffffffff90f89a53 [ 7085.590189][ C0] s2 : ffffffff90f89a50 s3 : dead000000000100 s4 : dead000000000122 [ 7085.590522][ C0] s5 : dfffffff00000000 s6 : ffffaf803ff76000 s7 : ffffaf803ff75000 [ 7085.590835][ C0] s8 : 0000000000000002 s9 : 0000000000000002 s10: ffffaf803ff76000 [ 7085.591129][ C0] s11: ffffaf803ff75000 t3 : d09dfecc00000000 t4 : fffffffef21f134a [ 7085.591432][ C0] t5 : fffffffef21f134b t6 : 0000000000000002 [ 7085.591689][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 7085.592083][ C0] [] _raw_spin_unlock_irqrestore+0x36/0xd4 [ 7085.592761][ C0] [] debug_check_no_obj_freed+0x26a/0x4fc [ 7085.593285][ C0] [] free_unref_folios+0x4ac/0x1d2c [ 7085.593819][ C0] [] folios_put_refs+0x418/0x5fa [ 7085.594314][ C0] [] free_pages_and_swap_cache+0x268/0x490 [ 7085.594949][ C0] [] __tlb_batch_free_encoded_pages+0x100/0x2b2 [ 7085.595393][ C0] [] tlb_flush_mmu+0xe2/0x604 [ 7085.595791][ C0] [] unmap_page_range+0x183e/0x3466 [ 7085.596271][ C0] [] unmap_single_vma.constprop.0+0x13c/0x232 [ 7085.596779][ C0] [] unmap_vmas+0x1e8/0x40a [ 7085.597253][ C0] [] exit_mmap+0x18c/0xd00 [ 7085.597853][ C0] [] __mmput+0x108/0x3c0 [ 7085.598418][ C0] [] mmput+0x74/0x88 [ 7085.598911][ C0] [] do_exit+0x7b4/0x28ca [ 7085.599345][ C0] [] do_group_exit+0xd4/0x26c [ 7085.599815][ C0] [] __riscv_sys_exit_group+0x4a/0x54 [ 7085.600304][ C0] [] syscall_handler+0x94/0x118 [ 7085.600791][ C0] [] do_trap_ecall_u+0x396/0x530 [ 7085.601329][ C0] [] handle_exception+0x146/0x152 [ 7085.740659][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 7085.742969][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 7085.745023][ T37] Hardware name: riscv-virtio,qemu (DT) [ 7085.746159][ T37] Call Trace: [ 7085.747027][ T37] [] dump_backtrace+0x2e/0x3c [ 7085.748466][ T37] [] show_stack+0x30/0x3c [ 7085.749628][ T37] [] dump_stack_lvl+0x110/0x1a6 [ 7085.751116][ T37] [] dump_stack+0x1c/0x24 [ 7085.752412][ T37] [] panic+0x38c/0x86a [ 7085.753687][ T37] [] watchdog+0x78a/0x11de [ 7085.755057][ T37] [] kthread+0x39c/0x7d4 [ 7085.756200][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 7085.757392][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 7085.759208][ T37] SMP: stopping secondary CPUs [ 7085.762517][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:57:27 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff80078472 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634d254 vstvec 0000000000000000 mepc ffffffff802cf538 sepc ffffffff86348bd2 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 911d40000009b572 x0/zero 0000000000000000 x1/ra ffffffff802d32de x2/sp ffff8f8000007b20 x3/gp ffffffff89c83e20 x4/tp ffffaf801a344ec0 x5/t0 ffffaf806ed29260 x6/t1 fffff1ef00000f80 x7/t2 ffffaf806ed256c0 x8/s0 ffff8f8000007cf0 x9/s1 ffffffff9103c3c0 x10/a0 ffffffff88427400 x11/a1 000000000000003f x12/a2 0000000000f00000 x13/a3 ffffffff8041bf9e x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 0000000000000003 x18/s2 ffffaf806ed25748 x19/s3 ffffffff89cc4e20 x20/s4 0000000000000006 x21/s5 ffffffff884273c0 x22/s6 ffffffff884273f0 x23/s7 0000000000000015 x24/s8 1ffff5f00dda779d x25/s9 ffffaf806ed3bc40 x26/s10 ffff8f8000007d60 x27/s11 ffffaf806ed3b0d8 x28/t3 cc1f0e4c00000000 x29/t4 fffff1ef00000f80 x30/t5 fffff1ef00000f81 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff85bae930 mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634d254 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff802ffed6 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90132000000af622 x0/zero 0000000000000000 x1/ra ffffffff804eb5ac x2/sp ffff8f8004f27940 x3/gp ffffffff89c83e20 x4/tp ffffaf8011579a40 x5/t0 ffff8f80002f7814 x6/t1 fffff5ef0407c1d9 x7/t2 736174203a4f464e x8/s0 ffff8f8004f27920 x9/s1 ffffaf8011579a40 x10/a0 0000000000000005 x11/a1 0000000000000000 x12/a2 0000000000000001 x13/a3 ffffffff85bae930 x14/a4 0000000000000000 x15/a5 fffffffef2207879 x16/a6 0000000000000003 x17/a7 ffffaf80203e0ecf x18/s2 0000000000000008 x19/s3 ffffaf801ca1f400 x20/s4 0000000000000000 x21/s5 ffffaf801944746c x22/s6 0000000000000000 x23/s7 dfffffff00000000 x24/s8 1ffff5f0024d5d8d x25/s9 0000000000000001 x26/s10 0000000000000000 x27/s11 0000000000000004 x28/t3 b4b7ea0100000000 x29/t4 fffff5ef0407c1d9 x30/t5 fffff5ef0407c1da x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000