last executing test programs: 54m43.845944105s ago: executing program 1 (id=1774): syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) 54m20.432169767s ago: executing program 1 (id=1778): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x4, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x44) 54m5.157802942s ago: executing program 1 (id=1780): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) close(0x3) 53m52.787812307s ago: executing program 1 (id=1783): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1002, 0x9) 53m44.076414911s ago: executing program 1 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x52, 0x0, 0x0, 0x7fff, 0x11, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, 0x5, 0x700, 0xe, 0xbf7f}}) 53m37.233525611s ago: executing program 1 (id=1788): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 52m48.901869223s ago: executing program 32 (id=1788): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 20m56.935050436s ago: executing program 0 (id=2178): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) 20m49.562545633s ago: executing program 0 (id=2180): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x14000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 20m40.269918515s ago: executing program 0 (id=2182): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0xe, 0xa1, 0x0, 0xfd, @tick=0xc5a, {0x10, 0x49}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 20m30.870765954s ago: executing program 0 (id=2184): setuid(0xee01) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 20m28.047603661s ago: executing program 0 (id=2186): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 20m21.511952049s ago: executing program 0 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000110300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b00010065787468647200000c0002800800064000000002"], 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x8040) 19m29.372048155s ago: executing program 33 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000110300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b00010065787468647200000c0002800800064000000002"], 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x8040) 1m36.436505604s ago: executing program 3 (id=2351): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000003c0)={0x1d, r1}, 0x10) 1m23.004696854s ago: executing program 3 (id=2353): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x5f71, &(0x7f0000001000)={0x0, 0xf87b, 0x800, 0x0, 0x10001d4}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 1m0.86133365s ago: executing program 3 (id=2356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x40000) 57.53720882s ago: executing program 2 (id=2357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) 43.827525288s ago: executing program 2 (id=2358): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x11, 0x1, 0x0, &(0x7f0000001400)) 33.114399977s ago: executing program 3 (id=2359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) fstat(r0, 0x0) fstat(r0, &(0x7f0000003900)) 32.710647314s ago: executing program 2 (id=2360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) 25.029708583s ago: executing program 2 (id=2361): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 21.275234371s ago: executing program 3 (id=2362): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403010000000009050f", @ANYRES16], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xc, @string={0xc, 0x3, "e15e869dacd97ce5e688"}}}, 0x0) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 16.142842361s ago: executing program 2 (id=2363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) 4.396200079s ago: executing program 2 (id=2364): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, 0x8080) 0s ago: executing program 3 (id=2365): syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48761' (ED25519) to the list of known hosts. syzkaller login: [ 428.996194][ T3192] cgroup: Unknown subsys name 'net' [ 429.487102][ T3192] cgroup: Unknown subsys name 'cpuset' [ 429.694901][ T3192] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 490.858874][ T3192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 621.333372][ T3205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.519771][ T3205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.255525][ T3204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.454284][ T3204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.028323][ T3205] hsr_slave_0: entered promiscuous mode [ 636.155258][ T3205] hsr_slave_1: entered promiscuous mode [ 642.655445][ T3204] hsr_slave_0: entered promiscuous mode [ 642.739564][ T3204] hsr_slave_1: entered promiscuous mode [ 642.797699][ T3204] debugfs: 'hsr0' already exists in 'hsr' [ 642.803313][ T3204] Cannot create hsr debugfs directory [ 654.229833][ T3205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.923883][ T3205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.958136][ T3205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.467498][ T3205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.930214][ T3204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 662.339825][ T3204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 662.677264][ T3204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.038816][ T3204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 685.878797][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.320286][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.875278][ T3205] veth0_vlan: entered promiscuous mode [ 766.179719][ T3205] veth1_vlan: entered promiscuous mode [ 769.689795][ T3204] veth0_vlan: entered promiscuous mode [ 771.948748][ T3204] veth1_vlan: entered promiscuous mode [ 772.397167][ T3205] veth0_macvtap: entered promiscuous mode [ 774.038840][ T3205] veth1_macvtap: entered promiscuous mode [ 778.446337][ T3204] veth0_macvtap: entered promiscuous mode [ 779.665812][ T3204] veth1_macvtap: entered promiscuous mode [ 779.823979][ T949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.830412][ T949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.974182][ T949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.074596][ T949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.894066][ T949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.948760][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.118971][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.299044][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.980061][ T3205] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 839.285414][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 892.522475][ T3884] netlink: 'syz.0.32': attribute type 64 has an invalid length. [ 892.525084][ T3884] netlink: 152 bytes leftover after parsing attributes in process `syz.0.32'. [ 909.746888][ T3894] xt_connbytes: Forcing CT accounting to be enabled [ 909.748838][ T3894] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 909.758965][ T3894] xt_bpf: check failed: parse error [ 952.719216][ T3938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 1034.215722][ T3990] netlink: 'syz.1.77': attribute type 5 has an invalid length. [ 1035.165658][ T3992] capability: warning: `syz.0.78' uses deprecated v2 capabilities in a way that may be insecure [ 1046.090252][ T4002] vxcan1 speed is unknown, defaulting to 1000 [ 1046.137573][ T4002] vxcan1 speed is unknown, defaulting to 1000 [ 1046.195558][ T4002] vxcan1 speed is unknown, defaulting to 1000 [ 1056.329867][ T3815] vxcan1 speed is unknown, defaulting to 1000 [ 1056.353858][ T4002] infiniband syz2: set active [ 1056.367045][ T4002] infiniband syz2: added vxcan1 [ 1057.127481][ T4002] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1057.363703][ T4002] infiniband syz2: Couldn't open port 1 [ 1058.375914][ T4002] RDS/IB: syz2: added [ 1058.397646][ T4002] smc: adding ib device syz2 with port count 1 [ 1058.400161][ T4002] smc: ib device syz2 port 1 has no pnetid [ 1058.427635][ T3947] vxcan1 speed is unknown, defaulting to 1000 [ 1058.827234][ T4002] vxcan1 speed is unknown, defaulting to 1000 [ 1060.940077][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 1066.188776][ T4002] vxcan1 speed is unknown, defaulting to 1000 [ 1115.205756][ T4055] tmpfs: Bad value for 'mpol' [ 1120.576376][ T4061] netlink: 10 bytes leftover after parsing attributes in process `syz.1.107'. [ 1121.294251][ T4063] bond0: option ad_select: unable to set because the bond device is up [ 1133.825265][ T4069] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.111' sets config #0 [ 1141.797515][ T4074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 1213.298494][ T3358] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1213.826839][ T3358] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1213.829932][ T3358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.495394][ T3358] usb 2-1: config 0 descriptor?? [ 1216.794095][ T3358] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1216.836014][ T3358] [drm:udl_init] *ERROR* Selecting channel failed [ 1217.324020][ T3358] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1217.327577][ T3358] [drm] Initialized udl on minor 2 [ 1217.429862][ T3358] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1217.477640][ T3358] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1217.613988][ T3358] usb 2-1: USB disconnect, device number 2 [ 1217.734212][ T804] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1256.890417][ T4177] tmpfs: Bad value for 'huge' [ 1272.886859][ T4186] kernel profiling enabled (shift: 6) [ 1294.942446][ T3947] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1295.953794][ T3947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.956364][ T3947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1296.057472][ T3947] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1296.059737][ T3947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1296.095560][ T3947] usb 2-1: SerialNumber: syz [ 1297.004402][ T3947] usb 2-1: 0:2 : does not exist [ 1300.144155][ T3947] usb 2-1: USB disconnect, device number 3 [ 1303.161974][ T4231] ======================================================= [ 1303.161974][ T4231] WARNING: The mand mount option has been deprecated and [ 1303.161974][ T4231] and is ignored by this kernel. Remove the mand [ 1303.161974][ T4231] option from the mount to silence this warning. [ 1303.161974][ T4231] ======================================================= [ 1327.829256][ T4248] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1327.879150][ T4248] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1381.642938][ T31] audit: type=1326 audit(1380.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.198" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1381.705507][ T31] audit: type=1326 audit(1380.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.198" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1382.273750][ T31] audit: type=1326 audit(1381.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.198" exe="/syz-executor" sig=0 arch=c00000f3 syscall=72 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1382.334660][ T31] audit: type=1326 audit(1381.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.198" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1382.372023][ T31] audit: type=1326 audit(1381.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.198" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1490.446599][ T4387] tmpfs: Bad value for 'mpol' [ 1521.125029][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 1525.202319][ T4409] syz.1.255 uses obsolete (PF_INET,SOCK_PACKET) [ 1585.248960][ T4450] netlink: 'syz.1.272': attribute type 39 has an invalid length. [ 1619.554348][ T4471] x_tables: duplicate underflow at hook 3 [ 1630.632516][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 1679.308974][ T4512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1727.509611][ T4539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1749.710018][ T4553] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1749.737987][ T4553] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1757.702465][ T4557] xt_HMARK: spi-set and port-set can't be combined [ 1784.749661][ T4579] ipvlan1: entered promiscuous mode [ 1784.789021][ T4579] ipvlan1: entered allmulticast mode [ 1784.803672][ T4579] veth0_vlan: entered allmulticast mode [ 1828.846562][ T4603] netlink: 'syz.0.346': attribute type 46 has an invalid length. [ 1828.922244][ T4603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 1869.731528][ T4631] ip6t_rpfilter: unknown options [ 1884.357188][ T4639] Illegal XDP return value 4294967274 on prog (id 28) dev N/A, expect packet loss! [ 1893.978249][ T4645] netlink: 'syz.1.367': attribute type 6 has an invalid length. [ 1902.744223][ T3964] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1902.955304][ T3964] usb 1-1: Using ep0 maxpacket: 32 [ 1903.007383][ T3964] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1903.013964][ T3964] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1903.016179][ T3964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1903.018101][ T3964] usb 1-1: config 1 has no interface number 0 [ 1903.020230][ T3964] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1903.039238][ T3964] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1903.066864][ T3964] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1903.079314][ T3964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.025824][ T3964] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1904.958914][ T3964] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1906.204713][ T3947] usb 1-1: USB disconnect, device number 2 [ 1906.540418][ T3947] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1911.809805][ T4670] dlm: non-version read from control device 0 [ 1926.357268][ T4678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1970.954641][ T4711] comedi comedi4: bad chanlist[0]=0x000001a9 chan=425 range length=2 [ 1997.324694][ T4725] ubi31: attaching mtd0 [ 1997.705051][ T4725] ubi31: scanning is finished [ 1997.707200][ T4725] ubi31: empty MTD device detected [ 1998.477152][ T4725] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1998.479344][ T4725] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1998.499780][ T4725] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1998.505939][ T4725] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1998.507633][ T4725] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1998.509940][ T4725] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1998.584502][ T4725] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3965877440 [ 1998.586785][ T4725] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1998.595660][ T4727] ubi31: background thread "ubi_bgt31d" started, PID 4727 [ 2010.415966][ T4735] macvlan1: entered promiscuous mode [ 2010.428846][ T4735] macvlan1: entered allmulticast mode [ 2010.454839][ T4735] veth1_vlan: entered allmulticast mode [ 2014.615409][ T4741] ubi: mtd0 is already attached to ubi31 [ 2028.598077][ T4753] ubi: mtd0 is already attached to ubi31 [ 2038.257005][ T4759] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 2038.789750][ T3947] vxcan1 speed is unknown, defaulting to 1000 [ 2038.794912][ T3947] syz2: Port: 1 Link DOWN [ 2038.839555][ T3947] vxcan1 speed is unknown, defaulting to 1000 [ 2049.235858][ T4765] dlm: no locking on control device [ 2051.733312][ T4691] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2051.952935][ T4691] usb 1-1: Using ep0 maxpacket: 32 [ 2052.140352][ T4691] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.163703][ T4691] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2052.167644][ T4691] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2052.182894][ T4691] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2052.925779][ T4691] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2052.928239][ T4691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.930010][ T4691] usb 1-1: Product: syz [ 2052.941772][ T4691] usb 1-1: Manufacturer: syz [ 2052.943465][ T4691] usb 1-1: SerialNumber: syz [ 2053.698869][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2054.224092][ T4691] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input0 [ 2055.764866][ T4691] imon:send_packet: packet tx failed (-71) [ 2055.793235][ T4691] imon 1-1:155.0: panel buttons/knobs setup failed [ 2055.795283][ T4691] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2055.796802][ T4691] (id 0x00) [ 2057.334257][ T4691] rc_core: IR keymap rc-imon-pad not found [ 2057.337269][ T4691] Registered IR keymap rc-empty [ 2057.387070][ T4691] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2057.389479][ T4691] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2057.448882][ T4691] imon:send_packet: packet tx failed (-71) [ 2057.498141][ T4691] imon 1-1:155.0: remote input dev register failed [ 2057.530326][ T4691] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 2058.354321][ T4691] imon 1-1:155.0: unable to initialize intf0, err 0 [ 2058.356330][ T4691] imon:imon_probe: failed to initialize context! [ 2058.357861][ T4691] imon 1-1:155.0: unable to register, err -19 [ 2058.673525][ T4691] usb 1-1: USB disconnect, device number 3 [ 2078.672924][ T4801] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2115.645030][ T4828] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 2119.594896][ T4832] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2144.568196][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 2147.113298][ T4691] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2147.382320][ T4691] usb 2-1: Using ep0 maxpacket: 16 [ 2147.779732][ T4691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2147.885215][ T4691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.082884][ T4691] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2148.084241][ T4691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.085266][ T4691] usb 2-1: Product: syz [ 2148.086113][ T4691] usb 2-1: Manufacturer: syz [ 2148.086919][ T4691] usb 2-1: SerialNumber: syz [ 2150.584217][ T4691] usb 2-1: USB disconnect, device number 4 [ 2236.376696][ T4945] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 2245.575091][ T4667] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2245.813162][ T4667] usb 1-1: Using ep0 maxpacket: 16 [ 2245.904433][ T4667] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2245.906581][ T4667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.085240][ T4667] usb 1-1: config 0 descriptor?? [ 2246.566040][ T4667] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2248.307614][ T4667] usb 1-1: Detected FT232B [ 2248.898914][ T4667] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2248.927007][ T4667] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2249.252618][ T4667] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2249.420370][ T4667] usb 1-1: USB disconnect, device number 4 [ 2249.715411][ T4667] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2249.756361][ T4667] ftdi_sio 1-1:0.0: device disconnected [ 2299.534230][ T4513] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 2299.883036][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.884767][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2299.887638][ T4513] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2299.889605][ T4513] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2299.900095][ T4513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.153098][ T5020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2300.239607][ T4513] hub 2-1:1.0: bad descriptor, ignoring hub [ 2300.250375][ T4513] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2300.296120][ T4513] cdc_wdm 2-1:1.0: skipping garbage [ 2300.297402][ T4513] cdc_wdm 2-1:1.0: skipping garbage [ 2300.394521][ T4513] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2302.485240][ T3816] usb 2-1: USB disconnect, device number 5 [ 2307.278272][ T4513] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2307.669471][ T4513] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2307.685491][ T4513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.057361][ T4513] usb 1-1: config 0 descriptor?? [ 2311.264822][ T4513] usb 1-1: Cannot read MAC address [ 2311.294092][ T4513] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2311.468468][ T4513] usb 1-1: USB disconnect, device number 5 [ 2314.629232][ T5057] netlink: 'syz.1.512': attribute type 7 has an invalid length. [ 2314.633663][ T5057] netlink: 'syz.1.512': attribute type 8 has an invalid length. [ 2357.157648][ T5085] netlink: 228 bytes leftover after parsing attributes in process `syz.0.524'. [ 2374.643517][ T5103] ip6erspan0: entered allmulticast mode [ 2383.507270][ T5117] binder: 5116:5117 ioctl c018620c 2000000000c0 returned -1 [ 2419.404091][ T5024] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2419.727384][ T5024] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2419.740265][ T5024] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2419.748878][ T5024] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2419.775621][ T5024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.318849][ T5143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2421.029889][ T5024] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2429.520373][ T3816] usb 1-1: USB disconnect, device number 6 [ 2481.422303][ T3816] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2481.672886][ T3816] usb 1-1: Using ep0 maxpacket: 8 [ 2481.767468][ T3816] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2481.768806][ T3816] usb 1-1: config 0 has no interface number 0 [ 2481.770109][ T3816] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2481.782911][ T3816] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2481.784396][ T3816] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2481.785459][ T3816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.917511][ T3816] usb 1-1: config 0 descriptor?? [ 2482.234872][ T3816] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2483.432828][ T3816] usb 1-1: USB disconnect, device number 7 [ 2514.896347][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 2514.897976][ T5246] ksmbd: Unknown IPC event: 0, ignore. [ 2519.544892][ T5250] netlink: 184 bytes leftover after parsing attributes in process `syz.0.581'. [ 2562.051684][ T31] audit: type=1400 audit(2560.850:7): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=5344 comm="syz.1.587" [ 2568.469755][ T5351] @: renamed from hsr0 (while UP) [ 2594.126352][ T5363] netlink: 798 bytes leftover after parsing attributes in process `syz.0.596'. [ 2621.349432][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.605'. [ 2628.426737][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 2650.889051][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 2672.324953][ T5417] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 2748.546999][ T5472] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 2774.696553][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.650'. [ 2785.148416][ T5488] tmpfs: Bad value for 'mpol' [ 2801.278393][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 2801.294401][ T5497] netlink: 76 bytes leftover after parsing attributes in process `syz.1.658'. [ 2825.079612][ T5507] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 5507 comm: syz.1.663) [ 2831.097433][ T5509] IPv6: NLM_F_CREATE should be specified when creating new route [ 2831.157216][ T5509] IPv6: Can't replace route, no match found [ 2849.090058][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'. [ 2960.846782][ T3816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2961.199838][ T3816] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 2961.203876][ T3816] usb 2-1: config 2 has no interface number 0 [ 2961.205392][ T3816] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2961.207473][ T3816] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 2961.214045][ T3816] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 2961.821575][ T3816] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2961.824638][ T3816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2961.826299][ T3816] usb 2-1: Product: syz [ 2961.827658][ T3816] usb 2-1: Manufacturer: syz [ 2961.829039][ T3816] usb 2-1: SerialNumber: syz [ 2962.767771][ T5568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2962.826026][ T5568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2966.327257][ T3816] usb 2-1: probing VID:PID(0424:012C) [ 2966.619127][ T3816] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 2966.642719][ T3816] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 2966.645781][ T3816] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2966.649724][ T3816] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 2967.099504][ T3816] usb 2-1: USB disconnect, device number 6 [ 3016.223626][ T5378] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3017.075225][ T5615] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 3017.116254][ T5378] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3017.118564][ T5378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3017.506868][ T5378] usb 1-1: config 0 descriptor?? [ 3020.775535][ T5378] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3021.404304][ T5378] [drm:udl_init] *ERROR* Selecting channel failed [ 3022.177618][ T5378] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 3022.179814][ T5378] [drm] Initialized udl on minor 2 [ 3022.249460][ T5378] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3022.297545][ T5378] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3022.537570][ T5378] usb 1-1: USB disconnect, device number 8 [ 3022.736597][ T3816] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3219.048577][ T5790] netlink: 21 bytes leftover after parsing attributes in process `syz.0.780'. [ 3223.149864][ T31] audit: type=1326 audit(3221.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 3223.192083][ T31] audit: type=1326 audit(3221.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 3223.546946][ T31] audit: type=1326 audit(3222.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c00000f3 syscall=140 compat=0 ip=0xdc02e code=0x7ffc0000 [ 3223.641600][ T31] audit: type=1326 audit(3222.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 3223.675540][ T31] audit: type=1326 audit(3222.480:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 3231.240275][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 3242.299669][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 3248.329402][ T5815] netlink: 'syz.0.792': attribute type 7 has an invalid length. [ 3248.332574][ T5815] netlink: 'syz.0.792': attribute type 8 has an invalid length. [ 3251.986413][ T5817] netlink: 'syz.1.793': attribute type 17 has an invalid length. [ 3261.568956][ T5826] process 'syz.1.797' launched '/dev/fd/3' with NULL argv: empty string added [ 3279.166124][ T5840] xt_SECMARK: invalid mode: 0 [ 3282.725062][ T5844] netlink: 'syz.0.805': attribute type 13 has an invalid length. [ 3316.759214][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.814'. [ 3323.871400][ T5869] netlink: 830 bytes leftover after parsing attributes in process `syz.1.817'. [ 3323.874301][ T5869] dummy0: entered promiscuous mode [ 3341.706230][ T5889] netlink: 'syz.0.827': attribute type 3 has an invalid length. [ 3344.169487][ T5891] netlink: 'syz.0.828': attribute type 21 has an invalid length. [ 3344.173282][ T5891] netlink: 164 bytes leftover after parsing attributes in process `syz.0.828'. [ 3494.996962][ T6038] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 3532.188953][ T6074] netlink: 'syz.0.912': attribute type 12 has an invalid length. [ 3540.888803][ T6081] tmpfs: Bad value for 'mpol' [ 3579.776565][ T6112] xt_nfacct: accounting object `syz1' does not exist [ 3608.628308][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 3613.999487][ T6132] ip6t_srh: unknown srh invflags 4000 [ 3624.656525][ T6134] vxcan1 speed is unknown, defaulting to 1000 [ 3649.285569][ T6169] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 3672.589232][ T6182] mmap: syz.0.951 (6182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3688.865455][ T6190] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 3693.807345][ T6194] new mount options do not match the existing superblock, will be ignored [ 3695.300241][ T6196] autofs4:pid:6196:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc0189374) [ 3695.325338][ T6196] autofs4:pid:6196:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 3700.675526][ T6199] [U] ^B [ 3711.149267][ T6208] netlink: 'syz.0.964': attribute type 21 has an invalid length. [ 3711.166678][ T6208] netlink: 156 bytes leftover after parsing attributes in process `syz.0.964'. [ 3711.169908][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 3798.218599][ T6262] [U] [ 3832.639509][ T6289] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 3875.564227][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 3880.838977][ T31] audit: type=1107 audit(3879.620:13): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='w<' [ 3889.065010][ T6328] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1023'. [ 3896.427786][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 3943.154825][ T6375] tmpfs: Bad value for 'mpol' [ 3947.430245][ T6380] netlink: 'syz.1.1043': attribute type 5 has an invalid length. [ 3963.088392][ T6392] xt_hashlimit: max too large, truncated to 1048576 [ 4009.335785][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 4074.695810][ T6463] sit1: entered allmulticast mode [ 4087.906034][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 4170.060450][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 4175.093216][ T6532] binder: 6530:6532 ioctl 40046205 0 returned -22 [ 4202.615083][ T6548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 4229.887158][ T6561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4251.868150][ T6583] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 4297.598715][ T6612] No such timeout policy "syz0" [ 4348.065493][ T6648] netlink: 'syz.1.1169': attribute type 9 has an invalid length. [ 4373.906470][ T6674] tmpfs: Bad value for 'mpol' [ 4404.437400][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 4404.439220][ T6693] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1191'. [ 4404.445359][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 4411.030898][ C0] hrtimer: interrupt took 985900 ns [ 4446.864029][ T6729] raw_sendmsg: syz.0.1205 forgot to set AF_INET. Fix it! [ 4452.858528][ T6735] random: crng reseeded on system resumption [ 4478.193107][ T6601] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 4478.623346][ T6601] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 4478.625765][ T6601] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 4478.633229][ T6601] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 4478.637547][ T6601] usb 1-1: config 8 has no interface number 0 [ 4478.645524][ T6601] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 4478.647844][ T6601] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 4478.828950][ T6601] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 4478.836917][ T6601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4478.840277][ T6601] usb 1-1: Product: syz [ 4478.847714][ T6601] usb 1-1: Manufacturer: syz [ 4478.849503][ T6601] usb 1-1: SerialNumber: syz [ 4481.458252][ T6601] usb 1-1: USB disconnect, device number 9 [ 4546.114961][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 4546.116767][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 4546.117937][ T6820] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1241'. [ 4639.025805][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1277'. [ 4639.027566][ T6897] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1277'. [ 4639.089282][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1277'. [ 4639.108897][ T6897] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1277'. [ 4639.152915][ T6897] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1277'. [ 4651.223119][ T6907] TCP: TCP_TX_DELAY enabled [ 4656.134538][ T6911] capability: warning: `syz.1.1283' uses 32-bit capabilities (legacy support in use) [ 4683.197528][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1295'. [ 4683.200123][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1295'. [ 4683.264366][ T6935] netlink: 'syz.0.1295': attribute type 6 has an invalid length. [ 4708.438200][ T6947] netlink: 'syz.0.1301': attribute type 7 has an invalid length. [ 4708.446241][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1301'. [ 4708.453018][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 4728.009289][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1308'. [ 4730.376138][ T6963] netlink: 'syz.0.1309': attribute type 24 has an invalid length. [ 4737.184825][ T6969] tmpfs: Bad value for 'mpol' [ 4798.490070][ T7006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4841.546103][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 4868.598828][ T7052] xt_ecn: cannot match TCP bits for non-tcp packets [ 4872.973872][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 4893.103744][ T7067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4893.107134][ T7067] IPv6: NLM_F_CREATE should be set when creating new route [ 4910.566348][ T5647] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 4910.923049][ T5647] usb 2-1: Using ep0 maxpacket: 8 [ 4911.172559][ T5647] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 4911.174940][ T5647] usb 2-1: config 179 has no interface number 0 [ 4911.399190][ T5647] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 4911.415696][ T5647] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 4911.418320][ T5647] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 4911.432790][ T5647] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 4911.435657][ T5647] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 4911.463405][ T5647] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 4911.488200][ T5647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4911.870071][ T7079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4919.096807][ T6982] usb 2-1: USB disconnect, device number 7 [ 4919.099236][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 4919.102340][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 4940.394489][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 4949.486550][ T7108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5004.957045][ T7142] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 5058.207934][ T7183] IPv6: NLM_F_CREATE should be specified when creating new route [ 5154.446983][ T7244] binder: 7243:7244 ioctl c00c6211 0 returned -14 [ 5205.119493][ T7279] netlink: 'syz.1.1453': attribute type 11 has an invalid length. [ 5215.808075][ T7288] xt_l2tp: wrong L2TP version: 0 [ 5264.104321][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 5322.132593][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 5342.975520][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 5363.965449][ T6095] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 5364.384201][ T6095] usb 1-1: Using ep0 maxpacket: 8 [ 5365.466032][ T6095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5365.775052][ T6095] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 5365.777281][ T6095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5365.778992][ T6095] usb 1-1: Product: syz [ 5365.780393][ T6095] usb 1-1: Manufacturer: syz [ 5365.796132][ T6095] usb 1-1: SerialNumber: syz [ 5366.203521][ T6095] usb 1-1: config 0 descriptor?? [ 5366.792610][ T6095] cdc_acm 1-1:0.0: Zero length descriptor references [ 5366.817600][ T6095] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 5368.745469][ T3817] usb 1-1: USB disconnect, device number 10 [ 5398.370430][ T7424] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 5421.393378][ T7439] vlan0: entered promiscuous mode [ 5421.422406][ T7439] vlan0: entered allmulticast mode [ 5421.424416][ T7439] veth0_vlan: entered allmulticast mode [ 5438.718970][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 5451.062107][ T7465] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 5494.324426][ T7497] netlink: 'syz.0.1548': attribute type 4 has an invalid length. [ 5501.417675][ T7501] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 5543.206322][ T7528] usb usb1: usbfs: process 7528 (syz.1.1563) did not claim interface 0 before use [ 5578.806292][ T5550] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 5579.037538][ T5550] usb 2-1: Using ep0 maxpacket: 32 [ 5579.184496][ T5550] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 5579.186418][ T5550] usb 2-1: config 0 has no interface number 0 [ 5579.188152][ T5550] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 49455, setting to 1024 [ 5579.190107][ T5550] usb 2-1: config 0 interface 2 has no altsetting 0 [ 5579.613998][ T5550] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 5579.616086][ T5550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5579.617662][ T5550] usb 2-1: Product: syz [ 5579.618935][ T5550] usb 2-1: Manufacturer: syz [ 5579.620192][ T5550] usb 2-1: SerialNumber: syz [ 5579.939368][ T5550] usb 2-1: config 0 descriptor?? [ 5581.065588][ T5550] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 5582.815571][ T5550] usb 2-1: USB disconnect, device number 8 [ 5643.198129][ T5024] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 5643.584838][ T5024] usb 2-1: Using ep0 maxpacket: 8 [ 5644.022587][ T5024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5644.283970][ T5024] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 5644.286309][ T5024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5644.288135][ T5024] usb 2-1: Product: syz [ 5644.289567][ T5024] usb 2-1: Manufacturer: syz [ 5644.318454][ T5024] usb 2-1: SerialNumber: syz [ 5645.046028][ T5024] usb 2-1: config 0 descriptor?? [ 5645.295166][ T5024] cdc_acm 2-1:0.0: Zero length descriptor references [ 5645.298061][ T5024] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 5649.179604][ T7625] usb 2-1: USB disconnect, device number 9 [ 5667.435418][ T7663] netlink: 'syz.0.1609': attribute type 3 has an invalid length. [ 5667.439231][ T7663] netlink: 'syz.0.1609': attribute type 3 has an invalid length. [ 5676.752686][ T7673] netlink: 'syz.1.1614': attribute type 3 has an invalid length. [ 5683.128770][ T7679] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 5735.136257][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 5741.142525][ T7729] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1642'. [ 5804.203854][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1668'. [ 5849.203579][ T5550] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 5849.422603][ T5550] usb 1-1: Using ep0 maxpacket: 32 [ 5849.518056][ T5550] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 5849.522560][ T5550] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 5849.523883][ T5550] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5849.525210][ T5550] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 5849.526434][ T5550] usb 1-1: config 1 has no interface number 0 [ 5849.527897][ T5550] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 5849.529259][ T5550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5849.848717][ T5550] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 5850.555913][ T5550] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 5850.559018][ T5550] snd_usb_pod 1-1:1.1: invalid control EP [ 5850.559932][ T5550] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 5850.585129][ T5550] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 5850.606232][ T5550] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 5851.568503][ T3817] usb 1-1: USB disconnect, device number 11 [ 5857.344331][ T7843] wg1: entered promiscuous mode [ 5857.346272][ T7843] wg1: entered allmulticast mode [ 5872.853252][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1697'. [ 5939.309166][ T7916] netlink: 'syz.0.1725': attribute type 4 has an invalid length. [ 5939.315376][ T7916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1725'. [ 6030.426201][ T31] audit: type=1400 audit(6029.220:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A043AFA3D98F4CEB15D7D9D76F5145C571CE5 pid=7974 comm="syz.1.1753" [ 6083.539406][ T8006] geneve2: entered promiscuous mode [ 6083.557295][ T8006] geneve2: entered allmulticast mode [ 6094.003612][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'. [ 6096.476671][ T5550] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 6096.723406][ T5550] usb 1-1: Using ep0 maxpacket: 16 [ 6097.134768][ T5550] usb 1-1: config 0 interface 0 has no altsetting 0 [ 6097.254542][ T5550] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 6097.256677][ T5550] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 6097.259168][ T5550] usb 1-1: Product: syz [ 6097.282431][ T5550] usb 1-1: Manufacturer: syz [ 6097.284176][ T5550] usb 1-1: SerialNumber: syz [ 6097.578264][ T5550] usb 1-1: config 0 descriptor?? [ 6101.449602][ T5550] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 6101.704851][ T5550] usb 1-1: USB disconnect, device number 12 [ 6114.697441][ T5550] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 6115.196408][ T5550] usb 2-1: Using ep0 maxpacket: 16 [ 6116.123133][ T5550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 6116.992925][ T5550] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 6116.995213][ T5550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6116.997038][ T5550] usb 2-1: Product: syz [ 6116.998436][ T5550] usb 2-1: Manufacturer: syz [ 6116.999874][ T5550] usb 2-1: SerialNumber: syz [ 6117.536457][ T5550] usb 2-1: config 0 descriptor?? [ 6117.785910][ T5550] hub 2-1:0.0: bad descriptor, ignoring hub [ 6117.788466][ T5550] hub 2-1:0.0: probe with driver hub failed with error -5 [ 6118.214534][ T5550] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 6119.177970][ T5550] usb 2-1: USB disconnect, device number 10 [ 6167.389680][ T8080] xt_hashlimit: max too large, truncated to 1048576 [ 6179.726484][ T8088] smc: removing ib device syz2 [ 6327.809557][ T7313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6330.964261][ T7313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6334.959110][ T7313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6335.854355][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6336.345535][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6337.246439][ T7313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6360.182383][ T7313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6360.407633][ T7313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6360.627118][ T7313] bond0 (unregistering): Released all slaves [ 6362.862692][ T7313] hsr_slave_0: left promiscuous mode [ 6363.126406][ T7313] hsr_slave_1: left promiscuous mode [ 6363.983293][ T7313] veth1_macvtap: left promiscuous mode [ 6363.988643][ T7313] veth0_macvtap: left promiscuous mode [ 6364.024860][ T7313] veth1_vlan: left promiscuous mode [ 6377.349480][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1802'. [ 6408.383535][ T8300] wg1: entered promiscuous mode [ 6408.384999][ T8300] wg1: entered allmulticast mode [ 6420.217355][ T8104] hsr_slave_0: entered promiscuous mode [ 6420.555782][ T8104] hsr_slave_1: entered promiscuous mode [ 6441.948606][ T8104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6442.474348][ T8104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6442.896073][ T8104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6443.437267][ T8104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6470.365682][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6564.545687][ T8104] veth0_vlan: entered promiscuous mode [ 6565.857925][ T8104] veth1_vlan: entered promiscuous mode [ 6570.228017][ T8104] veth0_macvtap: entered promiscuous mode [ 6570.596785][ T8104] veth1_macvtap: entered promiscuous mode [ 6575.362248][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 6575.594361][ T8256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6575.698713][ T5281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6575.707900][ T5281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6575.709432][ T5281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6613.133965][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 6613.136687][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 6640.839640][ T8560] sit0: entered promiscuous mode [ 6641.946806][ T8560] netlink: 'syz.2.1825': attribute type 1 has an invalid length. [ 6641.948198][ T8560] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1825'. [ 6669.008033][ T8578] IPv6: NLM_F_CREATE should be specified when creating new route [ 6669.057762][ T8578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 6669.059768][ T8578] IPv6: NLM_F_CREATE should be set when creating new route [ 6675.798832][ T8580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 6723.672992][ T8121] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 6724.288138][ T8121] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 6725.146046][ T8121] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 6725.148512][ T8121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6725.175615][ T8121] usb 1-1: Product: syz [ 6725.177444][ T8121] usb 1-1: Manufacturer: syz [ 6725.180034][ T8121] usb 1-1: SerialNumber: syz [ 6725.715847][ T8121] usb 1-1: config 0 descriptor?? [ 6728.774804][ T8121] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 6728.797995][ T8121] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 6728.959664][ T8121] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 6729.029611][ T8121] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 6729.064258][ T8121] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 6729.247239][ T8121] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 6729.602607][ T8121] usb 1-1: USB disconnect, device number 13 [ 6730.015243][ T8121] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 6730.127494][ T8121] keyspan 1-1:0.0: device disconnected [ 6740.387078][ T8642] netlink: 'syz.0.1846': attribute type 83 has an invalid length. [ 6755.985202][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'. [ 6805.530355][ T8694] smc: net device bond0 applied user defined pnetid SYZ0 [ 6818.417456][ T8702] ip6tnl0: Caught tx_queue_len zero misconfig [ 6818.432990][ T8702] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 6825.019677][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 6844.428158][ T8720] faux_driver vkms: [drm] Unknown color mode 32768; guessing buffer size. [ 6894.612104][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 6911.445313][ T8770] comedi: No check for data length of config insn id 6 is implemented [ 6911.477967][ T8770] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 6911.479699][ T8770] comedi: Assuming n=419 is correct [ 7017.677635][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 7017.705442][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 7017.707799][ T8841] netlink: 'syz.0.1920': attribute type 14 has an invalid length. [ 7077.889538][ T8880] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 7077.894828][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 7197.388688][ T8947] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 7232.916922][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7233.047745][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7243.364286][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1966'. [ 7243.366507][ T8980] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1966'. [ 7243.369759][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1966'. [ 7243.402302][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 7262.655990][ T8999] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(+y;" [ 7262.657365][ T8999] CUSE: unknown device info ">f_ٮ,<_eF" [ 7262.658290][ T8999] CUSE: DEVNAME unspecified [ 7296.204514][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 7330.335966][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 7335.066904][ T9066] netlink: 'syz.2.2006': attribute type 16 has an invalid length. [ 7335.068374][ T9066] netlink: 'syz.2.2006': attribute type 17 has an invalid length. [ 7344.938115][ T9070] xt_hashlimit: max too large, truncated to 1048576 [ 7383.863706][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 7383.866169][ T9101] nbd: socks must be embedded in a SOCK_ITEM attr [ 7391.613314][ T9105] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 7446.576766][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 7450.142112][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7450.240556][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7486.132697][ T9153] nbd: must specify a device to reconfigure [ 7531.457591][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 7628.379329][ T9201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2064'. [ 7628.437263][ T9201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2064'. [ 7628.534646][ T9201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2064'. [ 7669.650014][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 7669.677301][ T9221] block nbd1: Unsupported socket: should be TCP or UNIX. [ 7698.832756][ T9183] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 7699.329874][ T9183] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 7699.338970][ T9183] usb 1-1: config 0 interface 0 has no altsetting 0 [ 7700.126786][ T9183] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 7700.128899][ T9183] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 7700.135255][ T9183] usb 1-1: Product: syz [ 7700.136842][ T9183] usb 1-1: Manufacturer: syz [ 7700.138949][ T9183] usb 1-1: SerialNumber: syz [ 7700.972627][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2079'. [ 7701.198891][ T9183] usb 1-1: config 0 descriptor?? [ 7701.496945][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2079'. [ 7702.463349][ T9183] usb 1-1: selecting invalid altsetting 0 [ 7708.454366][ T9231] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 7708.614794][ T9183] usb 1-1: USB disconnect, device number 14 [ 7714.656379][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 7795.512162][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 7809.520330][ T9319] ۜ}JX: renamed from lo (while UP) [ 7838.424434][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 7924.385448][ T9382] netlink: 'syz.0.2135': attribute type 2 has an invalid length. [ 7941.267129][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7941.474718][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7943.468330][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 8021.759753][ T9433] MPI: mpi too large (185152 bits) [ 8042.693604][ T9445] xt_l2tp: missing protocol rule (udp|l2tpip) [ 8067.310002][ T9459] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2164'. [ 8067.315282][ T9459] netlink: 'syz.0.2164': attribute type 5 has an invalid length. [ 8086.789048][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 8204.226671][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 8204.678092][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 8246.483915][ T9373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8249.507543][ T9373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8252.212856][ T9373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8254.096759][ T9373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8284.115385][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8284.356978][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8284.848472][ T9373] bond0 (unregistering): Released all slaves [ 8287.204522][ T9373] hsr_slave_0: left promiscuous mode [ 8287.368709][ T9373] hsr_slave_1: left promiscuous mode [ 8288.571182][ T9373] veth1_macvtap: left promiscuous mode [ 8288.584681][ T9373] veth0_macvtap: left promiscuous mode [ 8288.614426][ T9373] veth1_vlan: left allmulticast mode [ 8288.654581][ T9373] veth1_vlan: left promiscuous mode [ 8288.659449][ T9373] veth0_vlan: left promiscuous mode [ 8335.947450][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8336.059527][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8357.094770][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8357.488976][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8385.247948][ T9532] hsr_slave_0: entered promiscuous mode [ 8385.343029][ T9532] hsr_slave_1: entered promiscuous mode [ 8385.626955][ T9532] debugfs: 'hsr0' already exists in 'hsr' [ 8385.629612][ T9532] Cannot create hsr debugfs directory [ 8399.756403][ T9532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 8400.806153][ T9532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 8401.177359][ T9532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 8401.559463][ T9532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 8436.476947][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8540.602601][ T9532] veth0_vlan: entered promiscuous mode [ 8541.184613][ T9532] veth1_vlan: entered promiscuous mode [ 8544.004268][ T9532] veth0_macvtap: entered promiscuous mode [ 8544.197844][ T9532] veth1_macvtap: entered promiscuous mode [ 8546.449376][ T9098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8546.918861][ T5287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8546.998120][ T9541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8547.047888][ T9358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8581.905787][T10010] batadv_slave_1: entered promiscuous mode [ 8688.484604][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2252'. [ 8688.489478][T10064] Zero length message leads to an empty skb [ 8759.733294][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 8764.607908][T10101] ptrace attach of ""[10104] was attempted by "/syz-executor exec"[10101] [ 8875.710088][T10147] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2282'. [ 9006.427677][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2298'. [ 9010.356703][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 9158.948311][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 9183.185155][T10285] batadv_slave_0: entered allmulticast mode [ 9377.515763][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9377.558257][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10180.158041][ T33] INFO: task kworker/u8:6:9098 blocked for more than 431 seconds. [10182.017255][ T33] Tainted: G L syzkaller #0 [10182.020220][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [10190.535835][ T33] task:kworker/u8:6 state:D stack:0 pid:9098 tgid:9098 ppid:2 task_flags:0x4208060 flags:0x00000000 [10190.539763][ T33] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [10197.084472][ T33] Call Trace: [10197.085810][ T33] [] __schedule+0x102c/0x451e [10197.087746][ T33] [] schedule+0xc4/0x35e [10198.411972][ T33] [] schedule_preempt_disabled+0x16/0x28 [10198.413603][ T33] [] rwsem_down_write_slowpath+0x4ee/0xeb2 [10198.414572][ T33] [] down_write+0x180/0x19c [10198.415458][ T33] [] wg_noise_handshake_create_initiation+0xee/0x60e [10198.416693][ T33] [] wg_packet_send_handshake_initiation+0x182/0x2ea [10198.417786][ T33] [] wg_packet_handshake_send_worker+0x1c/0x2c [10198.418805][ T33] [] process_one_work+0x96a/0x1f3a [10198.419734][ T33] [] worker_thread+0x5ce/0xde8 [10200.362566][ T33] [] kthread+0x39e/0x7d8 [10202.187814][ T33] [] ret_from_fork_kernel+0x2a/0xc78 [10202.190274][ T33] [] ret_from_fork_kernel_asm+0x16/0x18