last executing test programs: 463.341529ms ago: executing program 1 (id=7950): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 369.557996ms ago: executing program 2 (id=7956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 302.860768ms ago: executing program 2 (id=7959): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x30) 249.481531ms ago: executing program 2 (id=7962): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 249.405435ms ago: executing program 3 (id=7963): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 247.288473ms ago: executing program 1 (id=7965): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000002040)="11054300", 0x4, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @random="a3cac7f9a4c7"}, 0x14) 204.953472ms ago: executing program 0 (id=7966): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) close(r0) 204.756636ms ago: executing program 3 (id=7967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 204.437305ms ago: executing program 1 (id=7968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) 204.293297ms ago: executing program 2 (id=7969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) 198.867325ms ago: executing program 0 (id=7970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8840, 0x114, 0x14}, 0x18) 152.638888ms ago: executing program 2 (id=7971): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 149.986239ms ago: executing program 3 (id=7972): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000280)={0x18, r1, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) 148.522538ms ago: executing program 0 (id=7973): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000300)={0x666666666666799}) 83.311063ms ago: executing program 2 (id=7974): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/53, 0x35) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x2) 82.857622ms ago: executing program 3 (id=7975): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) 82.736651ms ago: executing program 0 (id=7976): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 49.963788ms ago: executing program 1 (id=7977): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) 49.821905ms ago: executing program 0 (id=7978): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 43.38056ms ago: executing program 3 (id=7979): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x1000000000000}) 42.548298ms ago: executing program 1 (id=7980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4.255981ms ago: executing program 0 (id=7981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x4}) 517.415µs ago: executing program 1 (id=7982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x2, 0x0, 0x6, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffb, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 3 (id=7983): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 84878][T12811] netlink: 'syz.3.3273': attribute type 10 has an invalid length. [ 126.599888][T12813] __nla_validate_parse: 12 callbacks suppressed [ 126.599901][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 126.640774][T12811] team0: Port device geneve0 added [ 126.768829][T12827] geneve3: entered promiscuous mode [ 126.770483][T12827] geneve3: entered allmulticast mode [ 126.796297][T12829] SELinux: policydb string length 0 does not match expected length 8 [ 126.799536][T12829] SELinux: failed to load policy [ 126.985675][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'. [ 126.989060][T12848] bond1: Removing last arp target with arp_interval on [ 127.196979][T12879] validate_nla: 2 callbacks suppressed [ 127.196991][T12879] netlink: 'syz.3.3305': attribute type 1 has an invalid length. [ 127.205807][T12872] usb usb3: usbfs: process 12872 (syz.1.3303) did not claim interface 0 before use [ 127.297019][T12892] new mount options do not match the existing superblock, will be ignored [ 127.437399][T12910] overlayfs: unescaped trailing colons in lowerdir mount option. [ 127.463154][T12914] binder: binder_mmap: 12911 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 127.533978][T12923] xt_cgroup: path and classid specified [ 127.536448][T12925] comedi comedi2: dt2815: I/O base address or length out of range [ 127.763378][T12968] nfs: Unknown parameter './file0' [ 127.935968][ T40] kauditd_printk_skb: 28483 callbacks suppressed [ 127.935985][ T40] audit: type=1400 audit(127.854:29092): avc: denied { connect } for pid=12996 comm="syz.2.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.961577][ T40] audit: type=1400 audit(127.874:29093): avc: denied { create } for pid=13003 comm="syz.1.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.967329][T13004] netlink: 'syz.0.3366': attribute type 2 has an invalid length. [ 127.967968][ T40] audit: type=1400 audit(127.874:29094): avc: denied { getopt } for pid=13003 comm="syz.1.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.002137][ T40] audit: type=1400 audit(127.914:29095): avc: denied { write } for pid=13008 comm="syz.1.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.048677][T13016] hfs: unable to load iocharset "io#harset" [ 128.080301][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3376'. [ 128.085534][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 128.085795][T13025] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 128.126149][T13034] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 128.129747][T13034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.156995][ T40] audit: type=1400 audit(128.074:29096): avc: denied { read append } for pid=13040 comm="syz.2.3383" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.164463][ T40] audit: type=1400 audit(128.074:29097): avc: denied { open } for pid=13040 comm="syz.2.3383" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.171621][ T40] audit: type=1400 audit(128.074:29098): avc: denied { ioctl } for pid=13040 comm="syz.2.3383" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.284525][T13067] xt_socket: unknown flags 0xc [ 128.354319][T13083] netlink: 'syz.2.3403': attribute type 1 has an invalid length. [ 128.357942][T13083] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3403'. [ 128.361039][T13083] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3403'. [ 128.364349][T13083] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3403'. [ 128.466147][ T40] audit: type=1400 audit(128.384:29099): avc: denied { write } for pid=13109 comm="syz.3.3415" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.561242][T13130] can0: slcan on ttyS3. [ 128.644712][T13129] can0 (unregistered): slcan off ttyS3. [ 128.825606][ T40] audit: type=1400 audit(128.744:29100): avc: denied { setcurrent } for pid=13175 comm="syz.1.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 128.832870][ T40] audit: type=1401 audit(128.744:29101): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 128.853449][T13180] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.856000][T13180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.858283][T13180] IPv6: NLM_F_CREATE should be set when creating new route [ 128.858335][T13182] kAFS: Can only specify source 'none' with -o dyn [ 128.890347][T13189] random: crng reseeded on system resumption [ 129.090220][T13214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3463'. [ 129.243362][ T844] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.270709][T13226] netlink: 'syz.0.3469': attribute type 21 has an invalid length. [ 129.402160][ T844] usb 6-1: Using ep0 maxpacket: 8 [ 129.405311][ T844] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.407880][ T844] usb 6-1: config 179 has no interface number 0 [ 129.409883][ T844] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 129.414718][ T844] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 129.418875][ T844] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.422924][ T844] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.426416][ T844] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.430895][ T844] usb 6-1: config 179 interface 65 has no altsetting 0 [ 129.433491][ T844] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 129.436323][ T844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.454010][ T844] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input16 [ 129.467495][T13238] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 129.470019][T13238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3475'. [ 129.869375][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 129.875728][ T844] usb 6-1: USB disconnect, device number 4 [ 129.995998][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 130.019152][T13268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.174163][T13297] PM: Enabling pm_trace changes system date and time during resume. [ 130.174163][T13297] PM: Correct system time has to be restored manually after resume. [ 130.247481][T13279] infiniband sy1: set active [ 130.250849][T13279] infiniband sy1: added bond0 [ 130.269868][T13279] smbdirect: ib_dev[sy1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 130.274936][T13279] smbdirect: ib_dev[sy1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 130.281692][T13279] smbdirect: ib_dev[sy1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 130.304016][T13279] RDS/IB: sy1: added [ 130.307455][T13279] smc: adding ib device sy1 with port count 1 [ 130.309858][T13279] smc: ib device sy1 port 1 has no pnetid [ 130.425928][T13338] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 130.456754][T13341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 130.458841][T13341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.461928][T13341] vhci_hcd vhci_hcd.0: Device attached [ 130.466667][T13342] vhci_hcd: unknown pdu 1 [ 130.470933][ T1266] vhci_hcd vhci_hcd.3: stop threads [ 130.474057][ T1266] vhci_hcd vhci_hcd.3: release socket [ 130.475847][ T1266] vhci_hcd vhci_hcd.3: disconnect device [ 130.550740][T13357] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 130.616747][T13368] xt_l2tp: v2 doesn't support IP mode [ 130.683491][T13377] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 130.880339][T13410] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.898677][T13414] netlink: 'syz.0.3559': attribute type 1 has an invalid length. [ 130.983473][T13432] kAFS: unparsable volume name [ 131.056681][T13445] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 131.164859][T13474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 131.289059][T13505] /dev/sg0: Can't lookup blockdev [ 131.320392][T13512] program syz.1.3606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.393957][T13530] [U] [ 131.394922][T13530] [U] [ 131.395819][T13530] [U] [ 131.396724][T13530] [U] [ 131.397730][T13530] [U] [ 131.398636][T13530] [U] [ 131.399525][T13530] [U] [ 131.400426][T13530] [U] [ 131.401397][T13530] [U] [ 131.402308][T13530] [U] [ 131.403243][T13530] [U] [ 131.404089][T13530] [U] [ 131.405922][T13530] [U] [ 131.406850][T13530] [U] [ 131.407755][T13530] [U] [ 131.408671][T13530] [U] [ 131.410337][T13529] [U] [ 131.471889][T13551] netlink: 'syz.0.3625': attribute type 12 has an invalid length. [ 131.483830][T13554] (syz.1.3627,13554,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 131.487046][T13554] (syz.1.3627,13554,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 131.489405][T13554] (syz.1.3627,13554,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 131.493385][T13554] (syz.1.3627,13554,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 131.507327][T13558] netlink: 'syz.2.3629': attribute type 10 has an invalid length. [ 131.569957][T13570] netlink: 'syz.0.3635': attribute type 1 has an invalid length. [ 131.770468][T13610] xt_l2tp: v2 doesn't support IP mode [ 131.818567][T13619] i2c i2c-1: Invalid block write size 34 [ 131.908081][T13625] wg1 speed is unknown, defaulting to 1000 [ 131.920739][T13625] wg1 speed is unknown, defaulting to 1000 [ 131.927819][T13625] wg1 speed is unknown, defaulting to 1000 [ 132.068622][T13655] vivid-001: ================= START STATUS ================= [ 132.071372][T13655] vivid-001: Radio HW Seek Mode: Bounded [ 132.075217][T13655] vivid-001: Radio Programmable HW Seek: false [ 132.078358][T13655] vivid-001: RDS Rx I/O Mode: Block I/O [ 132.080232][T13655] vivid-001: Generate RBDS Instead of RDS: false [ 132.085767][T13655] vivid-001: RDS Reception: true [ 132.091617][T13655] vivid-001: RDS Program Type: 0 inactive [ 132.095481][T13655] vivid-001: RDS PS Name: inactive [ 132.097218][T13655] vivid-001: RDS Radio Text: inactive [ 132.099010][T13655] vivid-001: RDS Traffic Announcement: false inactive [ 132.101255][T13655] vivid-001: RDS Traffic Program: false inactive [ 132.103337][T13655] vivid-001: RDS Music: false inactive [ 132.105078][T13655] vivid-001: ================== END STATUS ================== [ 132.165590][T13625] infiniband syz2: set active [ 132.167203][ T50] wg1 speed is unknown, defaulting to 1000 [ 132.171004][T13625] infiniband syz2: added wg1 [ 132.193139][T13625] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.200153][T13625] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.210282][T13625] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.226746][T13673] netlink: 'syz.0.3685': attribute type 30 has an invalid length. [ 132.253873][T13625] RDS/IB: syz2: added [ 132.256395][T13625] smc: adding ib device syz2 with port count 1 [ 132.258457][T13625] smc: ib device syz2 port 1 has no pnetid [ 132.295094][T13673] bond3: option arp_missed_max: invalid value (0) [ 132.299560][T13673] bond3: option arp_missed_max: allowed values 1 - 255 [ 132.307745][T13673] bond3 (unregistering): Released all slaves [ 132.343426][ T50] wg1 speed is unknown, defaulting to 1000 [ 132.348458][T13625] wg1 speed is unknown, defaulting to 1000 [ 132.487283][T13702] __nla_validate_parse: 2 callbacks suppressed [ 132.487298][T13702] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3698'. [ 132.572685][T13625] wg1 speed is unknown, defaulting to 1000 [ 132.573574][T13720] netlink: 'syz.3.3707': attribute type 11 has an invalid length. [ 132.641181][T13730] netlink: 'syz.0.3712': attribute type 11 has an invalid length. [ 132.643789][T13730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3712'. [ 132.738907][T13625] wg1 speed is unknown, defaulting to 1000 [ 132.775724][T13756] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 132.849349][T13770] SET target dimension over the limit! [ 132.873534][T13625] wg1 speed is unknown, defaulting to 1000 [ 132.995261][T13795] netlink: 'syz.1.3744': attribute type 5 has an invalid length. [ 133.084144][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 133.084155][ T40] audit: type=1400 audit(133.004:29127): avc: denied { write } for pid=13806 comm="syz.2.3750" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.371838][ T40] audit: type=1400 audit(133.284:29128): avc: denied { bind } for pid=13856 comm="syz.1.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.381659][ T40] audit: type=1400 audit(133.284:29129): avc: denied { name_bind } for pid=13856 comm="syz.1.3775" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 133.389000][ T40] audit: type=1400 audit(133.284:29130): avc: denied { node_bind } for pid=13856 comm="syz.1.3775" saddr=10.1.1.0 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 133.408564][T13863] /dev/sg0: Can't lookup blockdev [ 133.439867][T13869] netlink: 'syz.1.3780': attribute type 2 has an invalid length. [ 133.443046][T13869] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 133.505258][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3788'. [ 133.538150][ T40] audit: type=1400 audit(133.454:29131): avc: denied { read } for pid=13888 comm="syz.1.3792" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.539515][T13892] netlink: 'syz.2.3791': attribute type 16 has an invalid length. [ 133.548952][T13892] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3791'. [ 133.554018][ T40] audit: type=1400 audit(133.454:29132): avc: denied { open } for pid=13888 comm="syz.1.3792" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.565835][ T40] audit: type=1400 audit(133.454:29133): avc: denied { ioctl } for pid=13888 comm="syz.1.3792" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.582905][T13899] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 133.651404][ T40] audit: type=1400 audit(133.564:29134): avc: denied { module_load } for pid=13909 comm="syz.3.3800" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 133.651490][T13910] kernel read not supported for file /policy (pid: 13910 comm: syz.3.3800) [ 133.680059][T13916] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3803'. [ 133.711372][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 133.715126][T13920] openvswitch: netlink: Missing key (keys=40, expected=80) [ 133.779892][ T40] audit: type=1400 audit(133.694:29135): avc: denied { getopt } for pid=13935 comm="syz.2.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.803945][ T40] audit: type=1400 audit(133.724:29136): avc: denied { append } for pid=13939 comm="syz.1.3815" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 133.912327][T13948] cgroup: Need name or subsystem set [ 134.077591][T13970] tipc: Trying to set illegal importance in message [ 134.083315][T13969] kAFS: unable to lookup cell '(,cL' [ 134.213369][T13994] netlink: 'syz.0.3841': attribute type 3 has an invalid length. [ 134.351757][T14015] netlink: 'syz.0.3852': attribute type 1 has an invalid length. [ 134.355656][T14015] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3852'. [ 134.558367][T14042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 134.560494][T14042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.570748][T14042] vhci_hcd vhci_hcd.0: Device attached [ 134.575110][T14043] vhci_hcd: unknown pdu 2 [ 134.579423][ T12] vhci_hcd vhci_hcd.3: stop threads [ 134.581206][ T12] vhci_hcd vhci_hcd.3: release socket [ 134.585189][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 134.849656][T14086] JFS: charset not found [ 134.970792][T13995] syz.1.3842 (13995): drop_caches: 3 [ 135.105489][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 135.226673][T14133] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3909'. [ 135.257283][T14139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3912'. [ 135.271278][ T5742] IPVS: starting estimator thread 0... [ 135.364070][T14142] IPVS: using max 44 ests per chain, 105600 per kthread [ 135.374620][T14162] netlink: 'syz.3.3923': attribute type 3 has an invalid length. [ 135.404236][T14168] CIFS mount error: No usable UNC path provided in device string! [ 135.404236][T14168] [ 135.407440][T14168] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.676036][T14224] Mount JFS Failure: -5 [ 135.678524][T14224] jfs_mount failed w/return code = -5 [ 135.900765][T14275] xt_cluster: node mask cannot exceed total number of nodes [ 135.908758][T14278] team_slave_1: entered promiscuous mode [ 135.910965][T14277] team_slave_1: left promiscuous mode [ 135.938120][T14284] block nbd2: NBD_DISCONNECT [ 136.007013][T14298] dlm: non-version read from control device 0 [ 136.056903][T14310] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 136.061216][T14310] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 136.347985][T14374] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 136.600908][T14417] xt_nfacct: accounting object `syz0' does not exist [ 136.642344][T14424] bond0: entered allmulticast mode [ 136.644150][T14424] bond_slave_0: entered allmulticast mode [ 136.645975][T14424] bond_slave_1: entered allmulticast mode [ 136.680612][T14430] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.740676][ T5138] pmem0: [POWERTEC] [ 136.815286][T14453] random: crng reseeded on system resumption [ 136.913839][T14472] netlink: 'syz.2.4071': attribute type 11 has an invalid length. [ 136.957042][T14483] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.084766][T14511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.085675][T14512] SET target dimension over the limit! [ 137.213638][T14544] erspan1: entered promiscuous mode [ 137.260987][T14556] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 137.327758][T14570] program syz.3.4120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.397484][T14580] usb usb9: usbfs: process 14580 (syz.3.4126) did not claim interface 0 before use [ 137.548927][T14602] ipvlan1: entered promiscuous mode [ 137.550706][T14602] ipvlan1: entered allmulticast mode [ 137.552416][T14602] veth0_vlan: entered allmulticast mode [ 137.894245][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.896378][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.103392][T14558] orangefs_mount: mount request failed with -4 [ 138.176636][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 138.176649][ T40] audit: type=1400 audit(138.094:29341): avc: denied { getopt } for pid=14639 comm="syz.1.4155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.206488][ T40] audit: type=1400 audit(138.124:29342): avc: denied { bind } for pid=14641 comm="syz.1.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.222370][ T40] audit: type=1400 audit(138.124:29343): avc: denied { name_bind } for pid=14641 comm="syz.1.4156" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 138.231185][ T40] audit: type=1400 audit(138.124:29344): avc: denied { node_bind } for pid=14641 comm="syz.1.4156" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 138.405118][ T40] audit: type=1400 audit(138.324:29345): avc: denied { write } for pid=14656 comm="syz.3.4163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.439886][ T40] audit: type=1400 audit(138.354:29346): avc: denied { create } for pid=14659 comm="syz.1.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.447135][ T40] audit: type=1400 audit(138.364:29347): avc: denied { connect } for pid=14659 comm="syz.1.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.497426][T14666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.528795][ T40] audit: type=1400 audit(138.444:29348): avc: denied { create } for pid=14667 comm="syz.3.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.539548][ T40] audit: type=1400 audit(138.454:29349): avc: denied { setopt } for pid=14667 comm="syz.3.4168" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.606941][ T40] audit: type=1400 audit(138.524:29350): avc: denied { read write } for pid=14673 comm="syz.1.4171" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.657119][T14679] __nla_validate_parse: 10 callbacks suppressed [ 138.657136][T14679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4173'. [ 138.749085][T14692] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 138.827474][T14704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.990312][T14744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.069568][T14758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.156744][T14774] vxfs: unable to read disk superblock at 1 [ 139.162424][T14774] vxfs: unable to read disk superblock at 8 [ 139.164426][T14774] vxfs: can't find superblock. [ 139.189287][T14776] cgroup: Name too long [ 139.235085][T14788] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 139.346915][T14809] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4237'. [ 139.417891][T14825] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4245'. [ 139.417934][T14825] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4245'. [ 139.431806][T14829] netlink: 'syz.1.4247': attribute type 11 has an invalid length. [ 139.431821][T14829] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4247'. [ 139.454905][T14831] netlink: zone id is out of range [ 139.527922][T14847] No source specified [ 139.690468][T14881] validate_nla: 3 callbacks suppressed [ 139.690480][T14881] netlink: 'syz.2.4273': attribute type 2 has an invalid length. [ 139.696356][T14881] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 139.698824][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'. [ 139.713559][T14885] cgroup: release_agent respecified [ 139.731111][T14889] SELinux: syz.2.4277 (14889) set checkreqprot to 1. This is no longer supported. [ 139.737562][T14891] netlink: 'syz.0.4278': attribute type 3 has an invalid length. [ 139.746732][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 139.792581][T14897] xt_CT: No such helper "pptp" [ 139.931247][T14932] comedi comedi3: rti802: I/O base address or length out of range [ 139.936158][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 139.943377][T14937] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4297'. [ 140.077465][T14960] ipvlan1: left promiscuous mode [ 140.081833][T14960] ipvlan1: left allmulticast mode [ 140.084072][T14960] veth0_vlan: left allmulticast mode [ 140.161092][T14974] netlink: 'syz.0.4317': attribute type 1 has an invalid length. [ 140.228177][T14991] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 140.296847][T15006] netlink: 'syz.3.4334': attribute type 2 has an invalid length. [ 140.299533][T15006] netlink: 151 bytes leftover after parsing attributes in process `syz.3.4334'. [ 140.319932][T15008] XFS (nbd0): SB validate failed with error -5. [ 140.436114][T15038] ksmbd: Unknown IPC event: 1, ignore. [ 140.452796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.810434][T15118] openvswitch: netlink: Missing valid actions attribute. [ 140.814169][T15118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.841747][T15123] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 140.845634][T15123] overlayfs: overlapping lowerdir path [ 140.848556][T15126] openvswitch: netlink: IP tunnel dst address not specified [ 141.041629][T15165] SET target dimension over the limit! [ 141.217300][T15193] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 141.307928][T15212] program syz.1.4434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.315891][T15215] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 141.383637][ T1133] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 141.386199][ T1133] ata1.00: irq_stat 0x40000000 [ 141.387740][ T1133] ata1.00: failed command: ZAC MANAGEMENT OUT [ 141.390000][ T1133] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 22 [ 141.390000][ T1133] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 141.399620][ T1133] ata1.00: status: { DRDY ERR } [ 141.401807][ T1133] ata1.00: error: { ABRT } [ 141.404446][ T1133] ata1.00: device reported invalid CHS sector 0 [ 141.450753][T15233] lo speed is unknown, defaulting to 1000 [ 141.453878][T15233] lo speed is unknown, defaulting to 1000 [ 141.456942][T15233] lo speed is unknown, defaulting to 1000 [ 141.463597][T15233] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 141.469828][T15233] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 141.476501][T15233] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 141.481409][T15233] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.491911][T15233] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 141.532904][T15233] lo speed is unknown, defaulting to 1000 [ 141.539327][T15233] lo speed is unknown, defaulting to 1000 [ 141.544431][T15233] lo speed is unknown, defaulting to 1000 [ 141.549354][T15233] lo speed is unknown, defaulting to 1000 [ 141.555247][T15254] QAT: Device 2 not found [ 141.594678][T15262] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 141.724203][T15289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.763320][T15295] netlink: 'syz.0.4474': attribute type 27 has an invalid length. [ 141.855558][T15302] syz.1.4477 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.177734][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.188231][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.572432][T15295] wireguard0: left allmulticast mode [ 142.598125][ T1266] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.609322][ T1266] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.613379][ T1266] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.622303][ T1266] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.708999][T15339] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.734527][T15345] comedi comedi3: comedi_config --init_data is deprecated [ 142.767078][T15351] xt_l2tp: missing protocol rule (udp|l2tpip) [ 142.835070][T15353] bond2: entered promiscuous mode [ 143.035766][T15398] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 143.122283][T15414] ip6t_srh: unknown srh match flags 4000 [ 143.125028][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.127600][T15418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.131212][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.134234][T15418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.174025][T15426] kAFS: No cell specified [ 143.184583][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 143.184599][ T40] audit: type=1400 audit(143.104:29563): avc: denied { ioctl } for pid=15427 comm="syz.1.4538" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 143.210043][ T40] audit: type=1400 audit(143.124:29564): avc: denied { read } for pid=15431 comm="syz.0.4539" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.221436][ T40] audit: type=1400 audit(143.124:29565): avc: denied { open } for pid=15431 comm="syz.0.4539" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.236503][ T40] audit: type=1400 audit(143.134:29566): avc: denied { ioctl } for pid=15431 comm="syz.0.4539" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.258903][ T40] audit: type=1400 audit(143.174:29567): avc: denied { setopt } for pid=15439 comm="syz.3.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.267645][ T40] audit: type=1400 audit(143.184:29568): avc: denied { map_create } for pid=15441 comm="syz.0.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.275013][ T40] audit: type=1400 audit(143.184:29569): avc: denied { map_read map_write } for pid=15441 comm="syz.0.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.283700][ T40] audit: type=1400 audit(143.184:29570): avc: denied { prog_load } for pid=15441 comm="syz.0.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.307546][ T40] audit: type=1400 audit(143.184:29571): avc: denied { prog_run } for pid=15441 comm="syz.0.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.315937][ T40] audit: type=1400 audit(143.204:29572): avc: denied { read write } for pid=15443 comm="syz.3.4547" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.438605][T15472] program syz.0.4561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.501265][T15486] netlink: 'syz.2.4567': attribute type 2 has an invalid length. [ 143.616697][T15507] ipt_ECN: cannot use operation on non-tcp rule [ 143.643343][T15512] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 143.807647][T15547] batadv_slave_0: entered promiscuous mode [ 143.810180][T15547] batadv_slave_0: entered allmulticast mode [ 143.815527][T15549] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 144.057254][T15597] 8021q: VLANs not supported on gre0 [ 144.089344][T15605] tmpfs: Bad value for 'mpol' [ 144.139201][T15616] net_ratelimit: 2 callbacks suppressed [ 144.139215][T15616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.206086][T15631] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.293296][T15652] ip6gretap1: entered promiscuous mode [ 144.295262][T15652] ip6gretap1: entered allmulticast mode [ 144.372351][T15668] netlink: 'syz.1.4656': attribute type 1 has an invalid length. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 144.552538][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 144.703553][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.706871][ T50] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.709873][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.714280][ T50] usb 7-1: config 0 descriptor?? [ 144.720236][ T50] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 144.929545][ T50] usb 7-1: USB disconnect, device number 3 [ 145.363429][T15697] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 145.405276][T15704] Process accounting resumed [ 145.522993][T15727] netlink: 'syz.1.4681': attribute type 1 has an invalid length. [ 145.525440][T15727] __nla_validate_parse: 9 callbacks suppressed [ 145.525451][T15727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4681'. [ 145.576731][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'. [ 145.675490][T15759] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4693'. [ 145.691774][T15761] netlink: 'syz.1.4696': attribute type 64 has an invalid length. [ 145.695602][T15761] netlink: 'syz.1.4696': attribute type 4 has an invalid length. [ 145.698666][T15761] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4696'. [ 145.748804][T15769] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 145.819763][T15787] 9p: Unknown Cache mode or invalid value f [ 145.894757][T15802] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4714'. [ 145.930346][T15810] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.954682][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4722'. [ 145.974150][T15820] netlink: 'syz.2.4723': attribute type 39 has an invalid length. [ 146.073741][T15833] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 146.137083][T15847] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 146.173076][T15854] netlink: 'syz.0.4741': attribute type 2 has an invalid length. [ 146.206318][T15860] netlink: 'syz.3.4745': attribute type 10 has an invalid length. [ 146.209046][T15860] veth1_macvtap: left promiscuous mode [ 146.215267][T15860] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 146.217367][T15850] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 146.230356][T15864] IPVS: dh: FWM 3 0x00000003 - no destination available [ 146.248633][T15866] SET target dimension over the limit! [ 146.307811][T15881] binder: 15879:15881 ioctl c018620c 200000000c40 returned -1 [ 146.319117][T15884] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.370461][T15892] netlink: 'syz.1.4760': attribute type 3 has an invalid length. [ 146.387501][T15892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4760'. [ 146.404646][T15896] Driver unsupported XDP return value 0 on prog (id 142) dev N/A, expect packet loss! [ 146.464015][T15908] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4768'. [ 146.464295][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4769'. [ 146.470581][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4769'. [ 146.558284][T15926] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 146.606779][T15938] libceph: secret too big 289 [ 146.621849][T15940] binfmt_misc: register: failed to install interpreter file ./file1 [ 146.674806][T15951] openvswitch: netlink: IPv4 tun info is not correct [ 146.765165][T15970] netlink: 'syz.0.4799': attribute type 23 has an invalid length. [ 146.960680][T16000] ata1.00: invalid cdb length 6 [ 147.031455][T16014] overlay: Bad value for 'workdir' [ 147.044956][T16016] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.114985][T16031] netlink: 'syz.3.4828': attribute type 10 has an invalid length. [ 147.182363][ T34] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 147.347077][ T34] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.351357][ T34] usb 6-1: config 0 has no interface number 0 [ 147.357671][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.372118][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 147.376689][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 147.381482][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 147.386393][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 147.390571][ T34] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.391854][T16075] xt_hl: Unknown TTL match mode: 255 [ 147.396505][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.400471][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.406497][ T34] usb 6-1: config 0 descriptor?? [ 147.408682][T15996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.417359][T15996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.423131][ T34] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.626970][ T34] usb 6-1: USB disconnect, device number 5 [ 147.643566][ T34] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 147.645952][T16113] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 147.723216][T16125] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 147.954136][T16158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.066520][T16178] NCSI netlink: No device for ifindex 33022 [ 148.094451][T16180] tmpfs: Bad value for 'mpol' [ 148.193154][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 148.193166][ T40] audit: type=1400 audit(148.114:29808): avc: denied { ioctl } for pid=16196 comm="syz.0.4903" path="/dev/v4l-subdev4" dev="devtmpfs" ino=969 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.215324][ T40] audit: type=1400 audit(148.114:29809): avc: denied { create } for pid=16198 comm="syz.2.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.223927][ T40] audit: type=1400 audit(148.114:29810): avc: denied { connect } for pid=16198 comm="syz.2.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.226920][T16204] NCSI netlink: No device for ifindex 0 [ 148.235719][ T40] audit: type=1400 audit(148.134:29811): avc: denied { map_create } for pid=16195 comm="syz.3.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.241940][ T40] audit: type=1400 audit(148.134:29812): avc: denied { perfmon } for pid=16195 comm="syz.3.4904" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.267760][ T40] audit: type=1400 audit(148.184:29813): avc: denied { map } for pid=16207 comm="syz.3.4910" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 148.297848][ T40] audit: type=1400 audit(148.214:29814): avc: denied { write } for pid=16215 comm="syz.3.4913" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.305737][ T40] audit: type=1400 audit(148.214:29815): avc: denied { open } for pid=16215 comm="syz.3.4913" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.314405][ T40] audit: type=1400 audit(148.214:29816): avc: denied { ioctl } for pid=16215 comm="syz.3.4913" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.341281][ T40] audit: type=1400 audit(148.254:29817): avc: denied { write } for pid=16221 comm="syz.1.4916" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.433872][T16237] MTD: Couldn't look up './bus': -15 [ 148.536938][T16248] xt_CT: No such helper "snmp_trap" qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x204000) [ 148.708892][T16284] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 148.902808][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 148.905026][ T1133] ata1: failed to read log page 10h (errno=-5) [ 148.907227][ T1133] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 148.909672][ T1133] ata1.00: irq_stat 0x41000000 [ 148.911177][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 148.913860][ T1133] ata1.00: cmd 60/20:58:b6:14:08/10:00:00:00:00/40 tag 11 ncq dma 2113536 in [ 148.913860][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 148.919519][ T1133] ata1.00: status: { DRDY } [ 148.921007][ T1133] ata1.00: error: { ABRT } [ 148.922679][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 148.924634][ T1133] ata1.00: cmd 61/30:60:ae:07:10/00:00:00:00:00/40 tag 12 ncq dma 24576 out [ 148.924634][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 148.930083][ T1133] ata1.00: status: { DRDY } [ 148.931442][ T1133] ata1.00: error: { ABRT } [ 148.933809][ T1133] ata1.00: configured for UDMA/100 [ 148.935691][ T1133] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 148.938796][ T1133] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 148.941376][ T1133] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 148.944101][ T1133] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 08 14 b6 00 10 20 00 [ 148.946824][ T1133] I/O error, dev sda, sector 529590 op 0x0:(READ) flags 0x80700 phys_seg 37 prio class 2 [ 148.951379][ T1133] ata1: EH complete [ 149.094082][T16343] CIFS: VFS: UNC: missing share name [ 149.096624][T16343] CIFS: VFS: Malformed UNC in devname [ 149.119553][T16347] SET target dimension over the limit! [ 149.423149][T16404] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 149.643285][T16454] random: crng reseeded on system resumption [ 149.701240][T16466] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 149.822714][T16494] comedi comedi3: multiq3: a I/O base address must be specified [ 149.829102][T16496] sctp: [Deprecated]: syz.1.5050 (pid 16496) Use of int in max_burst socket option. [ 149.829102][T16496] Use struct sctp_assoc_value instead [ 149.862832][T16504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.865161][T16504] IPv6: NLM_F_CREATE should be set when creating new route [ 149.867378][T16504] IPv6: NLM_F_CREATE should be set when creating new route [ 150.163527][T16563] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.177872][T16567] trusted_key: encrypted_key: keylen parameter is missing [ 150.395253][T16606] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 150.413015][T16606] bond3 (unregistering): Released all slaves [ 150.436607][T16618] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.568439][T16639] bond3: entered promiscuous mode [ 150.570308][T16639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.875753][T16693] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 150.879987][T16693] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 150.918650][T16704] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 150.991805][T16718] validate_nla: 9 callbacks suppressed [ 150.991817][T16718] netlink: 'syz.3.5154': attribute type 4 has an invalid length. [ 151.008832][T16724] __nla_validate_parse: 14 callbacks suppressed [ 151.008844][T16724] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5156'. [ 151.029131][T16726] Cannot find add_set index 65532 as target [ 151.308487][T16777] xt_hashlimit: size too large, truncated to 1048576 [ 151.601540][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 151.605747][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 151.608889][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 151.611763][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 151.739526][T16859] program syz.1.5219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.945645][T16897] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 152.077028][T16921] trusted_key: encrypted_key: hex blob is missing [ 152.197558][T16942] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 152.251061][T16951] netlink: 'syz.2.5264': attribute type 1 has an invalid length. [ 152.253959][T16951] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5264'. [ 152.256859][T16951] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5264'. [ 152.259723][T16951] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5264'. [ 152.321616][T16814] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.326860][T16962] usb usb8: usbfs: process 16962 (syz.3.5269) did not claim interface 0 before use [ 152.450618][T16986] nbd: couldn't find device at index -2127233020 [ 152.487209][T16992] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 152.489954][T16992] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 152.549844][T17006] program syz.3.5291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.553946][T17006] ata1.00: invalid transfer count 0 [ 152.827015][T17062] program syz.0.5319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.953577][T17087] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 152.958384][T17087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5330'. [ 153.252795][ T40] kauditd_printk_skb: 246 callbacks suppressed [ 153.252810][ T40] audit: type=1400 audit(153.164:30064): avc: denied { read write } for pid=17134 comm="syz.2.5354" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.275106][ T40] audit: type=1400 audit(153.164:30065): avc: denied { open } for pid=17134 comm="syz.2.5354" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.288875][ T40] audit: type=1400 audit(153.194:30066): avc: denied { read } for pid=17136 comm="syz.2.5355" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.338234][ T40] audit: type=1400 audit(153.254:30067): avc: denied { write } for pid=17145 comm="syz.2.5359" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.345501][ T40] audit: type=1400 audit(153.254:30068): avc: denied { open } for pid=17145 comm="syz.2.5359" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.353927][ T40] audit: type=1400 audit(153.254:30069): avc: denied { ioctl } for pid=17145 comm="syz.2.5359" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.399689][T17156] netlink: 'syz.0.5364': attribute type 29 has an invalid length. [ 153.402276][T17156] netlink: 'syz.0.5364': attribute type 3 has an invalid length. [ 153.404687][T17156] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5364'. [ 153.420194][ T40] audit: type=1400 audit(153.334:30070): avc: denied { read append } for pid=17157 comm="syz.2.5365" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.429729][ T40] audit: type=1400 audit(153.334:30071): avc: denied { open } for pid=17157 comm="syz.2.5365" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.445258][ T40] audit: type=1400 audit(153.334:30072): avc: denied { ioctl } for pid=17157 comm="syz.2.5365" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 ioctlcmd=0x565b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.483689][ T40] audit: type=1400 audit(153.404:30073): avc: denied { create } for pid=17167 comm="syz.2.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.734888][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.752359][T17208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.773823][T17208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.781322][T17208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.787173][T17208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.801697][ T1351] wg1 speed is unknown, defaulting to 1000 [ 153.953092][T17242] block device autoloading is deprecated and will be removed. [ 154.182985][T17250] /dev/sr0: Can't open blockdev [ 154.248354][T17279] netlink: 'syz.0.5424': attribute type 2 has an invalid length. [ 154.282166][ T34] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 154.372882][T17296] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 154.376944][T17293] bond6: Unable to set up delay as MII monitoring is disabled [ 154.380287][T17293] bond6 (unregistering): Released all slaves [ 154.435662][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.440331][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.448659][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.452730][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.456700][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.461017][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.464474][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.468051][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.471851][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.479650][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.486878][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.491208][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.495086][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.498769][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.502411][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.508866][ T34] usb 7-1: string descriptor 0 read error: -22 [ 154.511649][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.514852][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.527272][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.561867][T17308] netlink: 'syz.3.5438': attribute type 1 has an invalid length. [ 154.570705][T17308] netlink: 'syz.3.5438': attribute type 1 has an invalid length. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb4000) [ 154.639443][T17315] netlink: 'syz.0.5442': attribute type 3 has an invalid length. [ 154.642716][T17315] netlink: 'syz.0.5442': attribute type 1 has an invalid length. [ 154.645163][T17315] NCSI netlink: No device for ifindex 0 [ 154.673649][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 154.675848][ T1133] ata1: failed to read log page 10h (errno=-5) [ 154.677912][ T1133] ata1.00: NCQ disabled due to excessive errors [ 154.679941][ T1133] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 154.685098][ T1133] ata1.00: irq_stat 0x41000000 [ 154.686675][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 154.689506][ T1133] ata1.00: cmd 60/a0:70:ee:58:01/05:00:00:00:00/40 tag 14 ncq dma 737280 in [ 154.689506][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 154.696230][ T1133] ata1.00: status: { DRDY } [ 154.697852][ T1133] ata1.00: error: { ABRT } [ 154.699359][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 154.701270][ T1133] ata1.00: cmd 60/60:78:8e:5e:01/03:00:00:00:00/40 tag 15 ncq dma 442368 in [ 154.701270][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 154.706849][ T1133] ata1.00: status: { DRDY } [ 154.710598][ T1133] ata1.00: error: { ABRT } [ 154.717671][ T1133] ata1.00: configured for UDMA/100 [ 154.721318][ T1133] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 154.725013][ T1133] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 154.727483][ T1133] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 154.729577][ T5814] usb 7-1: USB disconnect, device number 4 [ 154.730397][ T1133] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 58 ee 00 05 a0 00 [ 154.735982][ T1133] I/O error, dev sda, sector 88302 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 154.739194][ T1133] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 154.742341][ T1133] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 154.744760][ T1133] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 154.747178][ T1133] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 5e 8e 00 03 60 00 [ 154.749662][ T1133] I/O error, dev sda, sector 89742 op 0x0:(READ) flags 0x80700 phys_seg 108 prio class 2 [ 154.753283][ T1133] ata1: EH complete [ 154.990504][T17347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 155.038071][T17353] CIFS mount error: No usable UNC path provided in device string! [ 155.038071][T17353] [ 155.041285][T17353] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.077268][T17357] JFS: discard option not supported on device [ 155.079790][T17357] Mount JFS Failure: -5 [ 155.242997][T17378] dlm: no locking on control device [ 155.345328][T17390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.350011][T17390] block device autoloading is deprecated and will be removed. [ 155.529734][T17418] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 155.804192][T17450] bridge_slave_0: left allmulticast mode [ 155.806108][T17450] bridge_slave_0: left promiscuous mode [ 155.809146][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.815562][T17450] bridge_slave_1: left allmulticast mode [ 155.817450][T17450] bridge_slave_1: left promiscuous mode [ 155.819341][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.826168][T17450] bond0: (slave bond_slave_0): Releasing backup interface [ 155.864692][T17450] bond0: (slave bond_slave_1): Releasing backup interface [ 155.895913][T17450] team0: Port device team_slave_0 removed [ 155.900199][T17450] team0: Port device team_slave_1 removed [ 155.903273][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.905391][T17450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.908301][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.910453][T17450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.914734][T17450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.987769][T17460] comedi comedi3: ni_at_a2150: I/O port conflict (0x100,28) [ 156.122328][ T29] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 156.275397][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.285231][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.291485][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.295695][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 156.301500][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.314177][ T29] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 156.317156][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.319689][ T29] usb 7-1: Product: syz [ 156.321026][ T29] usb 7-1: Manufacturer: syz [ 156.322894][ T29] usb 7-1: SerialNumber: syz [ 156.336301][ T29] usb 7-1: config 0 descriptor?? [ 156.338118][T17506] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 156.344882][T17456] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.354921][ T29] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 156.380904][T17511] openvswitch: netlink: IP tunnel dst address not specified [ 156.484396][ C0] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 156.563608][T17540] netlink: 'syz.1.5551': attribute type 4 has an invalid length. [ 156.673367][T17560] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.771593][T17578] program syz.0.5570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.780054][ T5814] usb 7-1: USB disconnect, device number 5 [ 157.161624][T17636] netlink: 'syz.0.5598': attribute type 1 has an invalid length. [ 157.164420][T17636] __nla_validate_parse: 8 callbacks suppressed [ 157.164431][T17636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5598'. [ 157.192695][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5603'. [ 157.200424][T17646] x_tables: duplicate underflow at hook 1 [ 157.216720][T17648] netlink: 512 bytes leftover after parsing attributes in process `syz.1.5605'. [ 157.301667][T17664] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 157.563701][T17703] netlink: 'syz.1.5631': attribute type 7 has an invalid length. [ 157.576187][T17705] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5632'. [ 157.941232][T17765] i2c i2c-1: Invalid block write size 34 [ 157.967085][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5660'. [ 158.227847][T17802] geneve2: entered promiscuous mode [ 158.229832][T17802] geneve2: entered allmulticast mode [ 158.232002][ T223] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 20000 - 0 [ 158.236327][ T223] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.241153][ T223] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.244284][ T223] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.325528][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 158.325541][ T40] audit: type=1400 audit(158.244:30258): avc: denied { read } for pid=17817 comm="syz.3.5685" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.338694][ T40] audit: type=1400 audit(158.244:30259): avc: denied { open } for pid=17817 comm="syz.3.5685" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.339297][T17819] deleting an unspecified loop device is not supported. [ 158.356785][ T40] audit: type=1400 audit(158.244:30260): avc: denied { create } for pid=17818 comm="syz.1.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.363088][ T40] audit: type=1400 audit(158.244:30261): avc: denied { write } for pid=17818 comm="syz.1.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.370068][ T40] audit: type=1400 audit(158.244:30262): avc: denied { nlmsg_write } for pid=17818 comm="syz.1.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.382966][ T40] audit: type=1400 audit(158.254:30263): avc: denied { read write } for pid=17821 comm="syz.2.5684" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 158.391622][ T40] audit: type=1400 audit(158.254:30264): avc: denied { open } for pid=17821 comm="syz.2.5684" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 158.399227][ T40] audit: type=1400 audit(158.254:30265): avc: denied { ioctl } for pid=17821 comm="syz.2.5684" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 158.407285][ T40] audit: type=1400 audit(158.254:30266): avc: denied { ioctl } for pid=17817 comm="syz.3.5685" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.417217][ T40] audit: type=1400 audit(158.324:30267): avc: denied { getopt } for pid=17830 comm="syz.3.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.630648][T17864] netlink: 'syz.2.5708': attribute type 23 has an invalid length. [ 158.817225][T17894] netlink: 'syz.3.5721': attribute type 2 has an invalid length. [ 158.892296][T17904] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.900191][T17906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5729'. [ 158.944236][T17914] overlayfs: conflicting options: userxattr,metacopy=on [ 158.952697][T17920] random: crng reseeded on system resumption [ 159.010500][T17926] vivid-007: ================= START STATUS ================= [ 159.017387][T17926] vivid-007: Enable Output Cropping: true [ 159.019583][T17926] vivid-007: Enable Output Composing: true [ 159.021530][T17926] vivid-007: Enable Output Scaler: true [ 159.032830][T17926] vivid-007: Tx RGB Quantization Range: Automatic [ 159.043254][T17926] vivid-007: Transmit Mode: HDMI [ 159.044937][T17926] vivid-007: Hotplug Present: 0x00000000 [ 159.048907][T17926] vivid-007: RxSense Present: 0x00000000 [ 159.053632][T17926] vivid-007: EDID Present: 0x00000000 [ 159.058049][T17926] vivid-007: ================== END STATUS ================== [ 159.110585][T17944] random: crng reseeded on system resumption [ 159.118689][T17946] overlayfs: cannot append lower layer [ 159.119718][T17944] Unrecognized hibernate image header format! [ 159.123343][T17944] PM: hibernation: Image mismatch: architecture specific data [ 159.173193][T17957] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.175988][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5753'. [ 159.303521][T17983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.336500][T17990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5771'. [ 159.339282][T17990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5771'. [ 159.383054][T17998] usb usb8: usbfs: process 17998 (syz.1.5774) did not claim interface 0 before use [ 159.419399][T18006] ipt_REJECT: ECHOREPLY no longer supported. [ 159.437989][T18010] netlink: 'syz.2.5780': attribute type 7 has an invalid length. [ 159.590059][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5792'. [ 159.627426][T18043] netlink: 'syz.3.5796': attribute type 11 has an invalid length. [ 159.628749][T18044] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 159.705299][T18057] bridge6: entered promiscuous mode [ 159.706524][T18059] --map-set only usable from mangle table [ 159.808895][T18083] dlm: Unknown command passed to DLM device : 33 [ 159.808895][T18083] [ 159.849676][T18091] netlink: 'syz.3.5819': attribute type 2 has an invalid length. [ 159.852307][T18091] netlink: 'syz.3.5819': attribute type 2 has an invalid length. [ 159.880726][T18096] netlink: 'syz.3.5821': attribute type 2 has an invalid length. [ 159.948855][T18114] QAT: failed to copy from user cfg_data. [ 159.971689][T18117] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 159.973882][T18117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.979719][T18117] vhci_hcd vhci_hcd.0: Device attached [ 159.987917][T18117] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 159.990022][T18117] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.993363][T18117] vhci_hcd vhci_hcd.0: Device attached [ 159.997342][T18125] vhci_hcd: connection closed [ 159.997930][ T1266] vhci_hcd vhci_hcd.1: stop threads [ 159.998600][T18118] vhci_hcd: connection closed [ 160.000867][ T1266] vhci_hcd vhci_hcd.1: release socket [ 160.004781][ T1266] vhci_hcd vhci_hcd.1: disconnect device [ 160.008554][ T1266] vhci_hcd vhci_hcd.1: stop threads [ 160.020793][ T1266] vhci_hcd vhci_hcd.1: release socket [ 160.029952][ T1266] vhci_hcd vhci_hcd.1: disconnect device [ 160.129916][T18153] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 160.769317][T18268] openvswitch: netlink: Key type 51 is out of range max 32 [ 160.845736][T18282] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 160.940885][T18302] No source specified [ 160.990055][T18314] vxfs: WRONG superblock magic 00000000 at 1 [ 160.992854][T18314] vxfs: WRONG superblock magic 00000000 at 8 [ 160.995557][T18314] vxfs: can't find superblock. [ 161.037991][ T5138] pmem0: [POWERTEC] [ 161.164900][T18352] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 161.261243][T18367] Cannot find del_set index 4 as target [ 161.363502][T18389] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 161.366128][T18389] CIFS: VFS: Malformed UNC in devname [ 161.528316][T18416] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 161.547187][T18420] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 161.549334][T18420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.551026][T18421] ubi: mtd0 is already attached to ubi31 [ 161.552561][T18420] vhci_hcd vhci_hcd.0: Device attached [ 161.558932][T18423] vhci_hcd: cannot find the pending unlink 4 [ 161.561667][T18423] vhci_hcd: connection closed [ 161.561842][ T12] vhci_hcd vhci_hcd.1: stop threads [ 161.565689][ T12] vhci_hcd vhci_hcd.1: release socket [ 161.567385][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 161.680104][T18445] overlayfs: failed to resolve './file0': -2 [ 161.783802][T18463] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.800136][T18467] sctp: [Deprecated]: syz.0.6000 (pid 18467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.800136][T18467] Use struct sctp_sack_info instead [ 161.879761][T18479] /dev/sg0: Can't lookup blockdev [ 161.976070][T18491] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 162.179870][T18523] xfrm1: entered promiscuous mode [ 162.181683][T18523] xfrm1: entered allmulticast mode [ 162.294520][T18549] __nla_validate_parse: 9 callbacks suppressed [ 162.294533][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6040'. [ 162.440047][T18577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.570013][T18601] bridge_slave_1: left allmulticast mode [ 162.576107][T18601] bridge_slave_1: left promiscuous mode [ 162.578513][T18601] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.586009][T18601] bridge_slave_0: left allmulticast mode [ 162.588159][T18601] bridge_slave_0: left promiscuous mode [ 162.590275][T18601] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.596750][T18609] validate_nla: 6 callbacks suppressed [ 162.596762][T18609] netlink: 'syz.3.6070': attribute type 1 has an invalid length. [ 162.692267][T18621] QAT: failed to copy from user cfg_data. [ 162.744262][T18631] /dev/sg0: Can't lookup blockdev [ 162.760665][T18633] tmpfs: Bad value for 'mpol' [ 162.877226][T18660] bridge_slave_1: left allmulticast mode [ 162.879054][T18660] bridge_slave_1: left promiscuous mode [ 162.891936][T18660] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.901905][T18660] bridge_slave_0: left allmulticast mode [ 162.904879][T18660] bridge_slave_0: left promiscuous mode [ 162.906829][T18660] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.933278][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6099'. [ 163.038585][T18686] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.041060][T18686] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 163.044169][T18686] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.048527][T18686] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 163.297145][T18733] veth1_macvtap: entered promiscuous mode [ 163.301844][T18733] macsec0: entered promiscuous mode [ 163.304404][T18733] macsec0: entered allmulticast mode [ 163.306789][T18733] veth1_macvtap: entered allmulticast mode [ 163.342570][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 163.342582][ T40] audit: type=1400 audit(163.264:30501): avc: denied { create } for pid=18739 comm="syz.3.6135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.352927][T18744] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 163.357734][ T40] audit: type=1400 audit(163.274:30502): avc: denied { bind } for pid=18739 comm="syz.3.6135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.404255][ T40] audit: type=1400 audit(163.324:30503): avc: denied { create } for pid=18752 comm="syz.1.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.415564][ T40] audit: type=1400 audit(163.334:30504): avc: denied { getopt } for pid=18752 comm="syz.1.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.458563][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6145'. [ 163.464958][ T40] audit: type=1400 audit(163.384:30505): avc: denied { read write } for pid=18763 comm="syz.3.6146" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.466977][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6148'. [ 163.475385][ T40] audit: type=1400 audit(163.384:30506): avc: denied { open } for pid=18763 comm="syz.3.6146" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.486071][ T40] audit: type=1400 audit(163.394:30507): avc: denied { ioctl } for pid=18763 comm="syz.3.6146" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.499368][T18769] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 163.502331][T18769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.506329][T18769] vhci_hcd vhci_hcd.0: Device attached [ 163.516239][ T40] audit: type=1400 audit(163.434:30508): avc: denied { module_request } for pid=18774 comm="syz.1.6151" kmod="crypto-echainiv(authenc(hmac(sha256),cbc(des)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.530748][ T40] audit: type=1400 audit(163.444:30509): avc: denied { read write } for pid=7711 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.539247][T18769] vhci_hcd vhci_hcd.0: port 0 already used [ 163.542317][T18770] vhci_hcd: connection closed [ 163.543400][ T40] audit: type=1400 audit(163.444:30510): avc: denied { open } for pid=7711 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.545356][ T1266] vhci_hcd vhci_hcd.2: stop threads [ 163.555383][ T1266] vhci_hcd vhci_hcd.2: release socket [ 163.557492][ T1266] vhci_hcd vhci_hcd.2: disconnect device [ 163.605453][T18793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6156'. [ 163.695318][T18809] netlink: 'syz.3.6165': attribute type 1 has an invalid length. [ 163.724350][T18817] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.861400][T18842] pim6reg: entered allmulticast mode [ 163.912160][T18853] netlink: 'syz.3.6185': attribute type 5 has an invalid length. [ 164.005681][T18866] 9pnet: Found fid 0 not clunked [ 164.081224][T18881] xt_NFQUEUE: number of total queues is 0 [ 164.182361][T18898] autofs4:pid:18898:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 164.215601][T18907] cgroup: No subsys list or none specified [ 164.374419][T18937] usb usb8: usbfs: process 18937 (syz.2.6227) did not claim interface 0 before use [ 164.399862][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6228'. [ 164.400137][T18940] netlink: 'syz.3.6229': attribute type 1 has an invalid length. [ 164.406744][T18940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6229'. [ 164.442190][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.443107][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6232'. [ 164.564256][T18958] lo speed is unknown, defaulting to 1000 [ 164.572733][T18958] lo speed is unknown, defaulting to 1000 [ 164.574982][T18958] lo speed is unknown, defaulting to 1000 [ 164.615551][T18976] netlink: 868 bytes leftover after parsing attributes in process `syz.1.6246'. [ 164.616132][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.622333][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.625758][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.630738][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.635108][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.641121][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.647613][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.650995][ T9] usb 5-1: Product: syz [ 164.652612][ T9] usb 5-1: Manufacturer: syz [ 164.670448][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 164.673045][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 164.686434][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 164.688410][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 164.742301][T18990] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 164.796850][T18999] xt_hashlimit: max too large, truncated to 1048576 [ 164.803799][T18999] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.811506][T18958] infiniband sz1: set active [ 164.813235][T18958] infiniband sz1: added lo [ 164.814764][ T9] lo speed is unknown, defaulting to 1000 [ 164.834055][T18958] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 164.838725][T18958] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 164.844353][T18958] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 164.863548][T18958] RDS/IB: sz1: added [ 164.864915][T18958] smc: adding ib device sz1 with port count 1 [ 164.874037][T18958] smc: ib device sz1 port 1 has no pnetid [ 164.876070][ T50] lo speed is unknown, defaulting to 1000 [ 164.879437][T18899] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 164.882615][T18958] lo speed is unknown, defaulting to 1000 [ 164.886960][ T1351] usb 5-1: USB disconnect, device number 6 [ 165.041611][T18958] lo speed is unknown, defaulting to 1000 [ 165.149104][T19029] binder: BC_ACQUIRE_RESULT not supported [ 165.151214][T19029] binder: 19028:19029 ioctl c0306201 200000000840 returned -22 [ 165.157547][T18958] lo speed is unknown, defaulting to 1000 [ 165.253020][T18958] lo speed is unknown, defaulting to 1000 [ 165.266274][T19039] mmap: syz.2.6276 (19039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.307511][T19041] dlm: no locking on control device [ 165.573791][T19070] lo: entered promiscuous mode [ 165.578347][ T50] lo speed is unknown, defaulting to 1000 [ 165.582102][ T50] sz1: Port: 1 Link DOWN [ 165.587360][ T50] lo speed is unknown, defaulting to 1000 [ 165.620151][T19075] openvswitch: netlink: IP tunnel dst address not specified [ 165.770269][T19102] netlink: 'syz.0.6306': attribute type 32 has an invalid length. [ 165.789483][T19102] bond5: Setting coupled_control to off (0) [ 165.791708][T19102] bond5: entered promiscuous mode [ 165.920171][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6317'. [ 165.930048][T19126] openvswitch: netlink: IP tunnel dst address not specified [ 166.033728][T19143] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 166.062867][T19151] /dev/sg0: Can't lookup blockdev [ 166.143225][T19163] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 166.354597][T19198] tmpfs: Bad value for 'mpol' [ 166.434835][T19207] random: crng reseeded on system resumption [ 166.480896][T19211] ALSA: mixer_oss: invalid OSS volume ';' [ 166.643780][T19248] NILFS (nbd3): device size too small [ 166.801218][T19279] Device name not specified. [ 166.801218][T19279] [ 166.880119][T19281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.915418][T19281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.940815][T19281] bond0 (unregistering): Released all slaves [ 167.183565][T19328] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.186177][T19328] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 167.189002][T19328] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.191490][T19328] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 167.240644][T19339] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.267898][T19342] netlink: 'syz.0.6424': attribute type 1 has an invalid length. [ 167.272827][T19342] netlink: 'syz.0.6424': attribute type 1 has an invalid length. [ 167.668247][T19414] bond6: entered promiscuous mode [ 167.693761][T19427] xt_hl: Unknown Hop Limit match mode: 206 [ 167.750397][T19440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.857084][T19460] nbd: couldn't find a device at index -2146435068 [ 167.874296][T19465] openvswitch: netlink: IP tunnel dst address not specified [ 167.905228][T19471] __nla_validate_parse: 6 callbacks suppressed [ 167.905241][T19471] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6486'. [ 167.997315][T19491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6496'. [ 168.270061][T19547] ieee802154 phy1 wpan1: encryption failed: -22 [ 168.334624][T19557] binder: BC_ATTEMPT_ACQUIRE not supported [ 168.337031][T19557] binder: 19556:19557 ioctl c0306201 200000000100 returned -22 [ 168.378542][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 168.378554][ T40] audit: type=1400 audit(168.294:30722): avc: denied { getopt } for pid=19565 comm="syz.2.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.395212][ T40] audit: type=1400 audit(168.314:30723): avc: denied { read } for pid=19569 comm="syz.1.6536" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.404307][ T40] audit: type=1400 audit(168.314:30724): avc: denied { open } for pid=19569 comm="syz.1.6536" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.487112][T19587] SELinux: truncated policydb string identifier [ 168.487116][ T40] audit: type=1400 audit(168.404:30725): avc: denied { load_policy } for pid=19586 comm="syz.3.6544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 168.489312][T19587] SELinux: failed to load policy [ 168.514094][T19593] netlink: 'syz.1.6546': attribute type 2 has an invalid length. [ 168.518788][T19593] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6546'. [ 168.560124][T19601] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6551'. [ 168.567773][T19601] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 168.620139][ T40] audit: type=1400 audit(168.534:30726): avc: denied { open } for pid=19614 comm="syz.3.6558" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.640228][ T40] audit: type=1400 audit(168.544:30727): avc: denied { ioctl } for pid=19614 comm="syz.3.6558" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.675821][T19625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6562'. [ 168.699997][ T40] audit: type=1400 audit(168.614:30728): avc: denied { ioctl } for pid=19629 comm="syz.1.6564" path="mnt:[4026532867]" dev="nsfs" ino=4026532867 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.709312][ T40] audit: type=1400 audit(168.624:30729): avc: denied { read write } for pid=19631 comm="syz.3.6567" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.716454][ T40] audit: type=1400 audit(168.624:30730): avc: denied { open } for pid=19631 comm="syz.3.6567" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.724170][ T40] audit: type=1400 audit(168.624:30731): avc: denied { ioctl } for pid=19631 comm="syz.3.6567" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.747702][T19638] bond0: (slave sit0): refused to change device type [ 168.918350][T19671] program syz.0.6585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.075925][T19699] netlink: 'syz.3.6599': attribute type 4 has an invalid length. [ 169.093666][T19702] Invalid source name [ 169.095172][T19702] UBIFS error (pid: 19702): cannot open "./file0", error -22 [ 169.180261][T19722] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 169.353658][T19759] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 169.480788][T19784] netlink: 'syz.1.6641': attribute type 3 has an invalid length. [ 169.485819][T19784] netlink: 'syz.1.6641': attribute type 1 has an invalid length. [ 169.492117][T19784] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6641'. [ 169.637257][T19809] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 169.693605][T19823] netlink: 'syz.1.6660': attribute type 10 has an invalid length. [ 169.700190][T19825] openvswitch: netlink: Flow key attr not present in new flow. [ 169.738120][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6663'. [ 169.895513][T19866] program syz.1.6681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.076953][T19909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.159171][T19927] xt_hashlimit: invalid interval [ 170.191231][T19935] netlink: 'syz.2.6716': attribute type 15 has an invalid length. [ 170.295368][T19955] tmpfs: User quota block hardlimit too large. [ 170.338143][T19965] program syz.0.6731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.375496][T19971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.388250][T19973] overlayfs: conflicting options: nfs_export=on,index=off [ 170.416029][T19977] openvswitch: netlink: Unknown key attributes 2 [ 170.513502][T19989] nvme_fabrics: missing parameter 'transport=%s' [ 170.516572][T19989] nvme_fabrics: missing parameter 'nqn=%s' [ 170.556508][T20004] syz.0.6750 (20004): /proc/20003/oom_adj is deprecated, please use /proc/20003/oom_score_adj instead. [ 170.684745][T20032] trusted_key: encrypted_key: master key parameter '' is invalid [ 170.747290][T20046] netlink: 'syz.2.6772': attribute type 2 has an invalid length. [ 170.846508][T20066] misc userio: Invalid payload size [ 170.908819][T20076] kAFS: unable to lookup cell 'syz0' [ 171.122948][T20119] program syz.2.6807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.166690][T20127] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 171.241710][T20143] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 171.246240][T20143] netlink: 'syz.2.6819': attribute type 2 has an invalid length. [ 171.266622][T20147] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 171.270053][T20150] random: crng reseeded on system resumption [ 171.345923][T20170] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6830'. [ 171.510883][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6845'. [ 171.693786][T20239] ip6t_srh: unknown srh match flags 4015 [ 171.728324][T20249] netlink: 'syz.1.6870': attribute type 32 has an invalid length. [ 171.811465][T20261] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6876'. [ 171.942105][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.968564][T20293] EXT4-fs (nbd1): unable to read superblock [ 171.986053][T20296] IPv6: Can't replace route, no match found [ 172.096088][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 172.099446][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.107337][T20317] dlm: no locking on control device [ 172.107928][ T50] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 172.112971][ T50] usb 5-1: config 0 has no interface number 0 [ 172.117390][ T50] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 172.124016][ T50] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 172.132217][ T50] usb 5-1: config 0 interface 88 has no altsetting 0 [ 172.139013][ T50] usb 5-1: string descriptor 0 read error: -22 [ 172.141063][ T50] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 172.146055][ T50] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 172.153878][ T50] usb 5-1: config 0 descriptor?? [ 172.164248][ T50] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.88/input/input30 [ 172.297526][T20340] futex_wake_op: syz.1.6910 tries to shift op by -1; fix this program [ 172.381377][T20348] ceph: No source [ 172.394450][ T5731] udevd[5731]: Error opening device "/dev/input/event4": Input/output error [ 172.403165][ T5731] udevd[5731]: Unable to EVIOCGABS device "/dev/input/event4" [ 172.407773][ T5731] udevd[5731]: Unable to EVIOCGABS device "/dev/input/event4" [ 172.553607][ T1351] usb 5-1: USB disconnect, device number 7 [ 172.784254][T20411] Bluetooth: MGMT ver 1.23 [ 172.840129][T20419] xt_hashlimit: size too large, truncated to 1048576 [ 172.847920][T20421] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.919277][T20429] __nla_validate_parse: 4 callbacks suppressed [ 172.919289][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6955'. [ 172.932187][T20429] team0: Device macvlan2 is already an upper device of the team interface [ 173.000951][T20439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6960'. [ 173.038613][T20443] netlink: 504 bytes leftover after parsing attributes in process `syz.1.6962'. [ 173.071036][T20447] blktrace: Concurrent blktraces are not allowed on sg0 [ 173.188875][T20469] random: crng reseeded on system resumption [ 173.213337][T20472] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 173.240168][ T39] kernel write not supported for file /audio1 (pid: 39 comm: kworker/3:1) [ 173.406289][ T40] kauditd_printk_skb: 267 callbacks suppressed [ 173.406301][ T40] audit: type=1400 audit(173.324:30999): avc: denied { create } for pid=20498 comm="syz.3.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.414895][ T40] audit: type=1400 audit(173.324:31000): avc: denied { write } for pid=20498 comm="syz.3.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.463001][T20501] tmpfs: Bad value for 'mpol' [ 173.467634][ T40] audit: type=1400 audit(173.384:31001): avc: denied { ioctl } for pid=20502 comm="syz.3.6991" path="socket:[60618]" dev="sockfs" ino=60618 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.486806][ T40] audit: type=1400 audit(173.404:31002): avc: denied { append } for pid=20504 comm="syz.0.6992" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.495013][ T40] audit: type=1400 audit(173.414:31003): avc: denied { map } for pid=20504 comm="syz.0.6992" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.522085][ T40] audit: type=1400 audit(173.434:31004): avc: denied { create } for pid=20506 comm="syz.3.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.527166][T20507] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 173.529978][ T40] audit: type=1400 audit(173.444:31005): avc: denied { bind } for pid=20506 comm="syz.3.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.539500][ T40] audit: type=1400 audit(173.444:31006): avc: denied { read } for pid=20506 comm="syz.3.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.597010][ T40] audit: type=1400 audit(173.514:31007): avc: denied { create } for pid=20519 comm="syz.1.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.604109][ T40] audit: type=1400 audit(173.514:31008): avc: denied { ioctl } for pid=20519 comm="syz.1.6999" path="socket:[57110]" dev="sockfs" ino=57110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.745737][T20541] validate_nla: 1 callbacks suppressed [ 173.745749][T20541] netlink: 'syz.3.7009': attribute type 1 has an invalid length. [ 173.830929][T20549] xt_hashlimit: size too large, truncated to 1048576 [ 174.016697][T20569] 9pnet_fd: p9_fd_create_unix (20569): problem connecting socket: ./file0: -111 [ 174.069921][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'. [ 174.092478][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 174.095648][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 174.107605][T20579] Zero length message leads to an empty skb [ 174.114058][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'. [ 174.116953][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7029'. [ 174.122283][T20583] netlink: 'syz.1.7029': attribute type 11 has an invalid length. [ 174.125297][T20583] netlink: 'syz.1.7029': attribute type 7 has an invalid length. [ 174.193719][T20593] SELinux: syz.2.7035 (20593) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 174.247752][T20597] netlink: 'syz.3.7037': attribute type 11 has an invalid length. [ 174.398119][T20620] binder: 20618:20620 ioctl 4018620d 0 returned -22 [ 174.400619][T20620] binder: 20618:20620 ioctl c0306201 200000000240 returned -11 [ 174.886350][T20660] comedi comedi3: dt2817: I/O base address or length out of range [ 175.596647][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'. [ 175.599235][T20716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7095'. [ 175.632246][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.636386][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.639328][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.641760][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.645505][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.648374][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.650772][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.655570][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.661393][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.663909][ T29] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 175.673057][ T29] hid-generic 0000:0000:0004.0002: hidraw1: HID v0.03 Device [syz1] on syz0 [ 175.710527][T20727] vlan2: entered allmulticast mode [ 175.712365][T20727] bond0: entered allmulticast mode [ 175.714214][T20727] bond_slave_0: entered allmulticast mode [ 175.716261][T20727] bond_slave_1: entered allmulticast mode [ 175.718092][T20727] ip6erspan0: entered allmulticast mode [ 175.726549][T20723] fido_id[20723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.857224][T20739] [U] V3Fپ"S/4:XTZWTLW= [ 175.859890][T20738] [U] J"E:" [ 176.179865][T20782] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.236725][T20795] sg_read: process 3829 (syz.3.7127) changed security contexts after opening file descriptor, this is not allowed. [ 176.297335][T20805] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 176.300385][T20805] SELinux: failed to load policy [ 176.576287][T20835] tipc: Failed to obtain node identity [ 176.580598][T20835] tipc: Enabling of bearer rejected, failed to enable media [ 177.734110][ T1042] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.882246][ T1042] usb 5-1: Using ep0 maxpacket: 8 [ 177.886035][ T1042] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 177.888714][ T1042] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 177.891434][ T1042] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 177.895146][ T1042] usb 5-1: config 250 has no interface number 0 [ 177.897356][ T1042] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 177.901126][ T1042] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 177.904688][ T1042] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.908060][ T1042] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.911331][ T1042] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 177.915892][ T1042] usb 5-1: config 250 interface 228 has no altsetting 0 [ 177.919344][ T1042] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 177.919359][ T1042] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 177.919369][ T1042] usb 5-1: Product: syz [ 177.919377][ T1042] usb 5-1: SerialNumber: syz [ 177.922784][ T1042] hub 5-1:250.228: bad descriptor, ignoring hub [ 177.922805][ T1042] hub 5-1:250.228: probe with driver hub failed with error -5 [ 178.126033][ T1042] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 178.425853][ T39] usb 5-1: USB disconnect, device number 8 [ 178.434605][ T39] usblp0: removed [ 178.439029][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 178.439040][ T40] audit: type=1400 audit(178.354:31258): avc: denied { create } for pid=20979 comm="syz.1.7216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.448482][ T40] audit: type=1400 audit(178.354:31259): avc: denied { bind } for pid=20979 comm="syz.1.7216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.454605][ T40] audit: type=1400 audit(178.354:31260): avc: denied { write } for pid=20979 comm="syz.1.7216" path="socket:[61680]" dev="sockfs" ino=61680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.493216][ T40] audit: type=1400 audit(178.414:31261): avc: denied { read write } for pid=20984 comm="syz.3.7218" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.500397][ T40] audit: type=1400 audit(178.414:31262): avc: denied { open } for pid=20984 comm="syz.3.7218" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.507731][ T40] audit: type=1400 audit(178.414:31263): avc: denied { ioctl } for pid=20984 comm="syz.3.7218" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.518146][ T40] audit: type=1400 audit(178.434:31264): avc: denied { read } for pid=20986 comm="syz.3.7219" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.525565][ T40] audit: type=1400 audit(178.434:31265): avc: denied { open } for pid=20986 comm="syz.3.7219" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.532788][ T40] audit: type=1400 audit(178.434:31266): avc: denied { ioctl } for pid=20986 comm="syz.3.7219" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.541321][ T40] audit: type=1400 audit(178.434:31267): avc: denied { read write } for pid=5735 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.610301][T20997] pim6reg99999999: entered allmulticast mode [ 178.728669][T21009] program syz.3.7229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.794352][T21017] Bluetooth: MGMT ver 1.23 [ 178.858331][T21026] team0: Cannot enslave team device to itself [ 179.081069][T21054] netlink: 'syz.3.7252': attribute type 12 has an invalid length. [ 179.330631][T21093] UHID_CREATE from different security context by process 3620 (syz.1.7269), this is not allowed. [ 179.340072][T21087] IPVS: Scheduler module ip_vs_sip not found [ 179.433363][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7277'. [ 179.491483][T21122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.616324][T21141] atomic_op ffff888026a58998 conn xmit_atomic 0000000000000000 [ 179.685663][T21149] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.863430][T21183] netlink: 'syz.2.7312': attribute type 10 has an invalid length. [ 179.868236][T21183] netlink: 'syz.2.7312': attribute type 10 has an invalid length. [ 180.264424][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7327'. [ 180.368602][T21222] netlink: 'syz.2.7330': attribute type 178 has an invalid length. [ 180.403636][T21224] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7331'. [ 180.431777][T21226] devtmpfs: Cannot change global quota limit on remount [ 180.866958][T21265] max out of range [ 181.233603][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7368'. [ 181.236537][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7368'. [ 181.292631][T21313] random: crng reseeded on system resumption [ 181.298420][T21313] Restarting kernel threads ... [ 181.300597][T21313] Done restarting kernel threads. [ 181.537204][T21341] tipc: Invalid UDP bearer configuration [ 181.537230][T21341] tipc: Enabling of bearer rejected, failed to enable media [ 182.158312][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'. [ 182.167330][T21423] ipip0: entered promiscuous mode [ 182.169193][T21423] ipip0: entered allmulticast mode [ 182.689602][T21464] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7444'. [ 182.832228][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 182.881068][T21484] SELinux: failed to load policy [ 182.992158][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 182.995750][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 182.999074][ T29] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 183.001748][ T29] usb 8-1: config 8 has no interface number 0 [ 183.003862][ T29] usb 8-1: config 8 interface 188 has no altsetting 0 [ 183.008248][ T29] usb 8-1: string descriptor 0 read error: -22 [ 183.010471][ T29] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 183.016099][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.031518][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 183.034308][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 183.037745][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 183.043795][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.047374][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 183.051592][ T29] usb 8-1: media controller created [ 183.054747][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.058162][ T29] dw2102: i2c transfer failed. [ 183.060507][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.064902][ T29] dw2102: i2c transfer failed. [ 183.066483][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.068667][ T29] dw2102: i2c transfer failed. [ 183.070246][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.072096][ T29] dw2102: i2c transfer failed. [ 183.074614][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.076463][ T29] dw2102: i2c transfer failed. [ 183.078047][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 183.079865][ T29] dw2102: i2c transfer failed. [ 183.081361][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 183.090348][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.106649][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 183.109026][ T29] dw2102: command 0x0e transfer failed. [ 183.111965][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 183.115474][ T29] dw2102: command 0x0e transfer failed. [ 183.425667][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 183.427634][ T29] dw2102: command 0x0e transfer failed. [ 183.429508][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 183.431347][ T29] dw2102: command 0x0e transfer failed. [ 183.437747][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 183.439757][ T29] dw2102: command 0x51 transfer failed. [ 183.445626][T21452] dvb-usb: bulk message failed: -22 (20/0) [ 183.453939][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 183.453950][ T40] audit: type=1400 audit(183.374:31516): avc: denied { create } for pid=21511 comm="syz.1.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.455647][T21452] dw2102: i2c transfer failed. [ 183.456012][ T40] audit: type=1400 audit(183.374:31517): avc: denied { setopt } for pid=21511 comm="syz.1.7466" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.456992][T21512] xt_hashlimit: size too large, truncated to 1048576 [ 183.479557][ T40] audit: type=1400 audit(183.384:31518): avc: denied { module_request } for pid=21511 comm="syz.1.7466" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.479599][ T29] DVB: Unable to find symbol ds3000_attach() [ 183.491108][ T40] audit: type=1400 audit(183.404:31519): avc: denied { setopt } for pid=21514 comm="syz.0.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.498889][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 183.507832][ T40] audit: type=1400 audit(183.424:31520): avc: denied { read write } for pid=7711 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.515992][ T40] audit: type=1400 audit(183.424:31521): avc: denied { open } for pid=7711 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.524384][ T40] audit: type=1400 audit(183.424:31522): avc: denied { ioctl } for pid=7711 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3008 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.542128][ T29] rc_core: IR keymap rc-su3000 not found [ 183.543973][ T29] Registered IR keymap rc-empty [ 183.546987][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 183.551388][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input31 [ 183.556209][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 183.558731][ T40] audit: type=1400 audit(183.474:31523): avc: denied { map_create } for pid=21520 comm="syz.0.7470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.560410][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 183.566394][ T40] audit: type=1400 audit(183.474:31524): avc: denied { read } for pid=5123 comm="acpid" name="event4" dev="devtmpfs" ino=3087 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.569023][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 183.574754][ T40] audit: type=1400 audit(183.474:31525): avc: denied { open } for pid=5123 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3087 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.583725][ T29] usb 8-1: USB disconnect, device number 3 [ 183.672302][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 183.711606][T21528] syz.1.7472 (21528) used greatest stack depth: 18984 bytes left [ 184.149138][T21576] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 184.162327][T21576] CUSE: unknown device info "&b%ZW)3\my " [ 184.164685][T21576] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 184.168883][T21576] CUSE: DEVNAME unspecified [ 184.306574][T21600] support for the xor transformation has been removed. [ 184.333404][T21605] program syz.3.7510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.336392][T21605] ata1.00: invalid service action 29 [ 184.471913][T21628] vlan0: entered promiscuous mode [ 184.473740][T21628] bridge0: entered promiscuous mode [ 184.526034][T21633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7522'. [ 184.751867][T21658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.755793][T21658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.759460][T21658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.762274][T21658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.765318][T21658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.768086][T21658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.771019][T21658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.773902][T21658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.783213][T21658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.785405][T21658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.852344][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.002291][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 185.005140][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 185.007893][ T29] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 185.011218][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.015312][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.018347][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.028008][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.032133][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.044561][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 185.132917][T21679] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.198484][T21684] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7546'. [ 185.248380][ T29] usb 5-1: USB disconnect, device number 9 [ 185.288598][T21688] usb usb8: usbfs: process 21688 (syz.2.7548) did not claim interface 0 before use [ 185.981942][T21735] nbd: must specify a size in bytes for the device [ 186.041383][T21745] program syz.0.7575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.062838][T21749] netlink: 'syz.3.7577': attribute type 13 has an invalid length. [ 186.078541][T21751] tipc: Started in network mode [ 186.080347][T21751] tipc: Node identity ac14140f, cluster identity 4711 [ 186.083777][T21751] tipc: Enabled bearer , priority 10 [ 186.639776][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7611'. [ 186.682970][T21824] : entered promiscuous mode [ 186.690068][T21826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7614'. [ 187.109538][T21882] dummy0: entered allmulticast mode [ 187.113793][T21881] dummy0: left allmulticast mode [ 187.220126][ T1042] tipc: Node number set to 2886997007 [ 187.249030][T21900] macsec1: entered promiscuous mode [ 187.514026][T21950] tmpfs: Bad value for 'mpol' [ 187.623650][T21964] bridge0: port 1(syz_tun) entered blocking state [ 187.626606][T21964] bridge0: port 1(syz_tun) entered disabled state [ 187.630076][T21964] syz_tun: entered allmulticast mode [ 187.634272][T21964] syz_tun: entered promiscuous mode [ 187.641456][T21964] bridge0: port 1(syz_tun) entered blocking state [ 187.644358][T21964] bridge0: port 1(syz_tun) entered listening state [ 188.007033][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7703'. [ 188.061365][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7707'. [ 188.234437][T22047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7720'. [ 188.337502][T22062] netlink: 'syz.2.7727': attribute type 2 has an invalid length. [ 188.340205][T22062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7727'. [ 188.450850][T22081] can0: slcan on ttynull. [ 188.477159][ T40] kauditd_printk_skb: 228 callbacks suppressed [ 188.477171][ T40] audit: type=1400 audit(188.394:31754): avc: denied { read append } for pid=22084 comm="syz.2.7738" name="comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.479184][T22085] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 188.479317][ T40] audit: type=1400 audit(188.394:31755): avc: denied { open } for pid=22084 comm="syz.2.7738" path="/dev/comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.498647][ T40] audit: type=1400 audit(188.394:31756): avc: denied { ioctl } for pid=22084 comm="syz.2.7738" path="/dev/comedi3" dev="devtmpfs" ino=1304 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.508730][ T40] audit: type=1400 audit(188.404:31757): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=33522 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 188.522870][T22080] can0 (unregistered): slcan off ttynull. [ 188.550342][ T40] audit: type=1400 audit(188.464:31758): avc: denied { create } for pid=22090 comm="syz.1.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.557327][ T40] audit: type=1400 audit(188.464:31759): avc: denied { write } for pid=22090 comm="syz.1.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.563953][ T40] audit: type=1400 audit(188.464:31760): avc: denied { read } for pid=22090 comm="syz.1.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.577309][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7742'. [ 188.582101][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7742'. [ 188.624636][ T40] audit: type=1400 audit(188.544:31761): avc: denied { read } for pid=22099 comm="syz.0.7745" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.633930][ T40] audit: type=1400 audit(188.544:31762): avc: denied { open } for pid=22099 comm="syz.0.7745" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.652089][ T40] audit: type=1400 audit(188.544:31763): avc: denied { ioctl } for pid=22099 comm="syz.0.7745" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.657433][T22104] macsec1: entered promiscuous mode [ 188.676097][T22106] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 189.579535][T22235] __nla_validate_parse: 4 callbacks suppressed [ 189.579546][T22235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7811'. [ 189.594366][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7813'. [ 189.619070][T22242] tmpfs: Cannot change global quota limit on remount [ 189.880561][T22281] comedi comedi2: rti800: I/O base address or length out of range [ 189.984554][T22294] tipc: Started in network mode [ 189.986136][T22294] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 189.988850][T22294] tipc: Enabling of bearer rejected, failed to enable media [ 190.034632][T22299] xt_hashlimit: size too large, truncated to 1048576 [ 190.142158][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.235580][T22316] SELinux: failed to load policy [ 190.295734][ T50] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 190.299978][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.305713][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.308840][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.311633][ T50] usb 6-1: Product: syz [ 190.313378][ T50] usb 6-1: Manufacturer: syz [ 190.314921][ T50] usb 6-1: SerialNumber: syz [ 190.319748][ T50] usb 6-1: config 0 descriptor?? [ 190.323157][T22283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.329942][ T50] usb 6-1: selecting invalid altsetting 0 [ 190.537077][ T844] usb 6-1: USB disconnect, device number 6 [ 191.075837][T22331] IPVS: Error connecting to the multicast addr [ 191.112443][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7856'. [ 191.115243][T22334] netem: unknown loss type 13 [ 191.118643][T22334] netem: change failed [ 191.207806][T22350] QAT: failed to copy from user cfg_data. [ 191.263042][T22364] netlink: 'syz.2.7870': attribute type 1 has an invalid length. [ 191.266128][T22364] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7870'. [ 191.283363][T22366] program syz.1.7871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.294464][T22370] netlink: 'syz.0.7872': attribute type 11 has an invalid length. [ 191.297133][T22370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7872'. [ 191.323730][T22374] program syz.1.7875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.379351][T22384] comedi comedi3: mpc624: I/O base address or length out of range [ 191.408312][T22389] can0: slcan on ttyS3. [ 191.494269][T22389] can0 (unregistered): slcan off ttyS3. [ 191.726231][T22443] tmpfs: Group quota block hardlimit too large. [ 191.794398][T22452] xt_HMARK: spi-set and port-set can't be combined [ 192.820039][T22489] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7923'. [ 192.860941][ T844] hid_parser_main: 91 callbacks suppressed [ 192.860967][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.873050][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.878089][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.881488][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.885456][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.888985][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.894268][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.897645][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.900238][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.904134][ T844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.919084][ T844] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [sy] on syz0 [ 192.972739][T22504] fido_id[22504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.993387][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7934'. [ 193.041317][T22516] xt_hashlimit: size too large, truncated to 1048576 [ 193.197098][T22539] net_ratelimit: 1993 callbacks suppressed [ 193.197111][T22539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.308602][T22561] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 193.461882][T22588] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 193.506998][ T40] kauditd_printk_skb: 285 callbacks suppressed [ 193.507010][ T40] audit: type=1400 audit(2000000001.939:32049): avc: denied { read } for pid=22595 comm="syz.1.7968" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.527068][ T40] audit: type=1400 audit(2000000001.939:32050): avc: denied { open } for pid=22595 comm="syz.1.7968" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.534992][ T40] audit: type=1400 audit(2000000001.939:32051): avc: denied { ioctl } for pid=22595 comm="syz.1.7968" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.544005][ T40] audit: type=1400 audit(2000000001.969:32052): avc: denied { mounton } for pid=22597 comm="syz.0.7970" path="/1645/file0" dev="tmpfs" ino=8289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 193.551725][ T40] audit: type=1400 audit(2000000001.969:32053): avc: denied { mount } for pid=22597 comm="syz.0.7970" name="/" dev="configfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.563064][ T40] audit: type=1400 audit(2000000001.979:32054): avc: denied { unmount } for pid=7711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.571686][ T40] audit: type=1400 audit(2000000001.989:32055): avc: denied { read } for pid=22601 comm="syz.3.7972" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.581280][ T40] audit: type=1400 audit(2000000001.989:32056): avc: denied { open } for pid=22601 comm="syz.3.7972" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.591020][ T40] audit: type=1400 audit(2000000001.989:32057): avc: denied { ioctl } for pid=22601 comm="syz.3.7972" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.603130][ T40] audit: type=1400 audit(2000000002.019:32058): avc: denied { write } for pid=22603 comm="syz.0.7973" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.703630][T22623] ------------[ cut here ]------------ [ 193.706778][T22623] 1 [ 193.706786][T22623] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#0: syz.1.7982/22623 [ 193.710807][T22623] Modules linked in: [ 193.713142][T22623] CPU: 0 UID: 0 PID: 22623 Comm: syz.1.7982 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.716593][T22623] Tainted: [L]=SOFTLOCKUP [ 193.718039][T22623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.721459][T22623] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 193.723181][T22623] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ec 68 1a f8 66 90 e8 e5 68 1a f8 ba 02 00 00 00 48 89 de 31 ff e8 66 6d 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 c3 b4 9e 01 e8 be 68 1a [ 193.729441][T22623] RSP: 0018:ffffc900034bf380 EFLAGS: 00010287 [ 193.731428][T22623] RAX: 0000000000000fe7 RBX: ffff88803e619040 RCX: ffffc9000c402000 [ 193.734079][T22623] RDX: 0000000000080000 RSI: ffffffff895a94c4 RDI: ffffffff8c1c3200 [ 193.736653][T22623] RBP: ffff88803e619040 R08: 0000000000000001 R09: 0000000000000000 [ 193.739212][T22623] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888038b9cd80 [ 193.741822][T22623] R13: ffff888023508f00 R14: 0000000000000000 R15: ffff88803e619098 [ 193.744541][T22623] FS: 00007f5789cae6c0(0000) GS:ffff8880d6379000(0000) knlGS:0000000000000000 [ 193.747412][T22623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.749549][T22623] CR2: 0000001b3301bff8 CR3: 000000005fd6d000 CR4: 0000000000352ef0 [ 193.752171][T22623] Call Trace: [ 193.753260][T22623] [ 193.754239][T22623] ? __pfx_ip_rt_bug+0x10/0x10 [ 193.755816][T22623] ip_push_pending_frames+0x29e/0x300 [ 193.757571][T22623] icmp_push_reply+0x30e/0x450 [ 193.759160][T22623] __icmp_send+0x11b4/0x2c70 [ 193.760737][T22623] ? __pfx___icmp_send+0x10/0x10 [ 193.762452][T22623] ? __pfx_ip_route_input_slow+0x10/0x10 [ 193.764369][T22623] ? __lock_acquire+0x4a5/0x2630 [ 193.766019][T22623] ? __ip_options_compile+0x604/0x16a0 [ 193.767860][T22623] ? ip_route_input_noref+0x15f/0x2e0 [ 193.769608][T22623] ip_options_compile+0xb6/0x100 [ 193.771309][T22623] ? __pfx_ip_options_compile+0x10/0x10 [ 193.773196][T22623] ? __pfx_ip_rcv_finish+0x10/0x10 [ 193.774953][T22623] ip_rcv_finish_core+0x693/0x2c30 [ 193.776632][T22623] ip_rcv+0x1c0/0x3c0 [ 193.777996][T22623] ? __pfx_ip_rcv+0x10/0x10 [ 193.779556][T22623] __netif_receive_skb_one_core+0x197/0x1e0 [ 193.781491][T22623] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 193.783717][T22623] ? lock_acquire+0x1b1/0x370 [ 193.785313][T22623] __netif_receive_skb+0x1f/0x120 [ 193.786987][T22623] netif_receive_skb+0x13b/0x7f0 [ 193.788657][T22623] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 193.790631][T22623] ? __pfx_netif_receive_skb+0x10/0x10 [ 193.792556][T22623] tun_rx_batched.isra.0+0x3f6/0x750 [ 193.794319][T22623] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 193.796295][T22623] ? rcu_is_watching+0x12/0xc0 [ 193.797855][T22623] ? tun_get_user+0x1cc8/0x3c20 [ 193.799478][T22623] tun_get_user+0x1e31/0x3c20 [ 193.801099][T22623] ? __pfx_tun_get_user+0x10/0x10 [ 193.802877][T22623] ? __file_has_perm+0x336/0x460 [ 193.804578][T22623] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.806384][T22623] ? find_held_lock+0x2b/0x80 [ 193.808008][T22623] ? tun_get+0x191/0x370 [ 193.809405][T22623] ? tun_get+0x191/0x370 [ 193.810822][T22623] tun_chr_write_iter+0xdc/0x200 [ 193.812605][T22623] vfs_write+0x6ac/0x1070 [ 193.814048][T22623] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 193.815860][T22623] ? __pfx_vfs_write+0x10/0x10 [ 193.817492][T22623] ? find_held_lock+0x2b/0x80 [ 193.819000][T22623] ksys_write+0x12a/0x250 [ 193.820382][T22623] ? __pfx_ksys_write+0x10/0x10 [ 193.821957][T22623] ? rcu_is_watching+0x12/0xc0 [ 193.823603][T22623] do_syscall_64+0x10b/0xf80 [ 193.825170][T22623] ? clear_bhb_loop+0x40/0x90 [ 193.826768][T22623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.828694][T22623] RIP: 0033:0x7f5788d5d60e [ 193.830144][T22623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.836193][T22623] RSP: 002b:00007f5789cadfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.838950][T22623] RAX: ffffffffffffffda RBX: 00007f5789cae6c0 RCX: 00007f5788d5d60e [ 193.841312][T22623] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 193.843854][T22623] RBP: 00007f5788e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 193.846364][T22623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.848962][T22623] R13: 00007f5789016038 R14: 00007f5789015fa0 R15: 00007ffda347e348 [ 193.851461][T22623] [ 193.852596][T22623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.854949][T22623] CPU: 0 UID: 0 PID: 22623 Comm: syz.1.7982 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.858495][T22623] Tainted: [L]=SOFTLOCKUP [ 193.859943][T22623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.863059][T22623] Call Trace: [ 193.864107][T22623] [ 193.865029][T22623] dump_stack_lvl+0x100/0x190 [ 193.866524][T22623] vpanic+0x552/0x970 [ 193.867849][T22623] ? __pfx_vpanic+0x10/0x10 [ 193.869332][T22623] panic+0xd1/0xe0 [ 193.870586][T22623] ? __pfx_panic+0x10/0x10 [ 193.872033][T22623] check_panic_on_warn.cold+0x19/0x34 [ 193.873770][T22623] ? ip_rt_bug+0x2b/0x150 [ 193.875715][T22623] __warn.cold+0x191/0x328 [ 193.877635][T22623] __report_bug+0x296/0x3d0 [ 193.879579][T22623] ? ip_rt_bug+0x2b/0x150 [ 193.881183][T22623] ? __pfx___report_bug+0x10/0x10 [ 193.882902][T22623] ? ip_rt_bug+0x2b/0x150 [ 193.884709][T22623] report_bug+0xb2/0x220 [ 193.886518][T22623] ? ip_rt_bug+0x2b/0x150 [ 193.888373][T22623] handle_bug+0x16a/0x2a0 [ 193.890181][T22623] exc_invalid_op+0x17/0x50 [ 193.892153][T22623] asm_exc_invalid_op+0x1a/0x20 [ 193.894239][T22623] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 193.896311][T22623] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ec 68 1a f8 66 90 e8 e5 68 1a f8 ba 02 00 00 00 48 89 de 31 ff e8 66 6d 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 c3 b4 9e 01 e8 be 68 1a [ 193.904263][T22623] RSP: 0018:ffffc900034bf380 EFLAGS: 00010287 [ 193.906741][T22623] RAX: 0000000000000fe7 RBX: ffff88803e619040 RCX: ffffc9000c402000 [ 193.909597][T22623] RDX: 0000000000080000 RSI: ffffffff895a94c4 RDI: ffffffff8c1c3200 [ 193.912157][T22623] RBP: ffff88803e619040 R08: 0000000000000001 R09: 0000000000000000 [ 193.914799][T22623] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888038b9cd80 [ 193.917344][T22623] R13: ffff888023508f00 R14: 0000000000000000 R15: ffff88803e619098 [ 193.919722][T22623] ? sk_skb_reason_drop+0x114/0x1b0 [ 193.921343][T22623] ? __pfx_ip_rt_bug+0x10/0x10 [ 193.922860][T22623] ip_push_pending_frames+0x29e/0x300 [ 193.924583][T22623] icmp_push_reply+0x30e/0x450 [ 193.926071][T22623] __icmp_send+0x11b4/0x2c70 [ 193.927589][T22623] ? __pfx___icmp_send+0x10/0x10 [ 193.929207][T22623] ? __pfx_ip_route_input_slow+0x10/0x10 [ 193.931058][T22623] ? __lock_acquire+0x4a5/0x2630 [ 193.932727][T22623] ? __ip_options_compile+0x604/0x16a0 [ 193.934480][T22623] ? ip_route_input_noref+0x15f/0x2e0 [ 193.936224][T22623] ip_options_compile+0xb6/0x100 [ 193.937823][T22623] ? __pfx_ip_options_compile+0x10/0x10 [ 193.939604][T22623] ? __pfx_ip_rcv_finish+0x10/0x10 [ 193.941261][T22623] ip_rcv_finish_core+0x693/0x2c30 [ 193.942944][T22623] ip_rcv+0x1c0/0x3c0 [ 193.944284][T22623] ? __pfx_ip_rcv+0x10/0x10 [ 193.945758][T22623] __netif_receive_skb_one_core+0x197/0x1e0 [ 193.947598][T22623] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 193.949573][T22623] ? lock_acquire+0x1b1/0x370 [ 193.951042][T22623] __netif_receive_skb+0x1f/0x120 [ 193.952697][T22623] netif_receive_skb+0x13b/0x7f0 [ 193.954306][T22623] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 193.956207][T22623] ? __pfx_netif_receive_skb+0x10/0x10 [ 193.957948][T22623] tun_rx_batched.isra.0+0x3f6/0x750 [ 193.959663][T22623] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 193.961537][T22623] ? rcu_is_watching+0x12/0xc0 [ 193.963071][T22623] ? tun_get_user+0x1cc8/0x3c20 [ 193.964687][T22623] tun_get_user+0x1e31/0x3c20 [ 193.966166][T22623] ? __pfx_tun_get_user+0x10/0x10 [ 193.967792][T22623] ? __file_has_perm+0x336/0x460 [ 193.969402][T22623] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.971164][T22623] ? find_held_lock+0x2b/0x80 [ 193.972723][T22623] ? tun_get+0x191/0x370 [ 193.974095][T22623] ? tun_get+0x191/0x370 [ 193.975479][T22623] tun_chr_write_iter+0xdc/0x200 [ 193.977043][T22623] vfs_write+0x6ac/0x1070 [ 193.978397][T22623] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 193.980113][T22623] ? __pfx_vfs_write+0x10/0x10 [ 193.981664][T22623] ? find_held_lock+0x2b/0x80 [ 193.983208][T22623] ksys_write+0x12a/0x250 [ 193.984656][T22623] ? __pfx_ksys_write+0x10/0x10 [ 193.986219][T22623] ? rcu_is_watching+0x12/0xc0 [ 193.987786][T22623] do_syscall_64+0x10b/0xf80 [ 193.989273][T22623] ? clear_bhb_loop+0x40/0x90 [ 193.990793][T22623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.992753][T22623] RIP: 0033:0x7f5788d5d60e [ 193.994209][T22623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.000313][T22623] RSP: 002b:00007f5789cadfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.002974][T22623] RAX: ffffffffffffffda RBX: 00007f5789cae6c0 RCX: 00007f5788d5d60e [ 194.005575][T22623] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 194.008099][T22623] RBP: 00007f5788e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.010614][T22623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.013107][T22623] R13: 00007f5789016038 R14: 00007f5789015fa0 R15: 00007ffda347e348 [ 194.015667][T22623] [ 194.017484][T22623] Kernel Offset: disabled [ 194.018888][T22623] Rebooting in 86400 seconds..