last executing test programs: 7.140290796s ago: executing program 4 (id=10035): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0xfd, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.285883101s ago: executing program 4 (id=10039): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000b40)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x4000, 0x0, 0x1}) 1.920359723s ago: executing program 0 (id=10108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x50, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9d, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x268}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x3, 0x3c9e, 0xc654}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a3100000000"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 1.808976442s ago: executing program 0 (id=10110): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x0, @void}, "5f3bc99e3a"}}}}}}}, 0x0) 1.747113928s ago: executing program 2 (id=10111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) write(r0, &(0x7f0000000180)='0fc', 0x3) 1.656443975s ago: executing program 0 (id=10112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4002}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 1.617571418s ago: executing program 2 (id=10113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="02") 1.510315066s ago: executing program 2 (id=10115): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) 1.392035328s ago: executing program 2 (id=10117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5bb65d3f2511", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @remote}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f919e2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 1.157298416s ago: executing program 1 (id=10119): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x2c, 0x6, 0xff, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x2, 0x0, 0x4000, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@mp_fclose={0x1e, 0xc, 0x9, 0x0, 0x5}]}}}}}}}}, 0x0) 992.28219ms ago: executing program 1 (id=10120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0xa) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="040000000000000000000000440100003801") 913.280723ms ago: executing program 1 (id=10122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="ee7b", 0x2, 0x4091, 0x0, 0x0) 760.454849ms ago: executing program 1 (id=10124): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 759.754672ms ago: executing program 0 (id=10125): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x208, 0x0, 0xfeffffff, 0x208, 0x208, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@loopback, @private=0xa010102, 0xff000000, 0xff000000, 'netpci0\x00', 'team_slave_0\x00', {}, {}, 0x33, 0x0, 0x22}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0xff000000, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 654.85317ms ago: executing program 3 (id=10127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) write(r0, &(0x7f0000000d00)="9959", 0x2) 606.253071ms ago: executing program 3 (id=10128): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 563.619031ms ago: executing program 0 (id=10129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 527.717489ms ago: executing program 3 (id=10130): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 456.301149ms ago: executing program 0 (id=10131): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) 393.615461ms ago: executing program 3 (id=10132): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17}) 318.374966ms ago: executing program 4 (id=10133): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 212.221256ms ago: executing program 4 (id=10134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 211.955628ms ago: executing program 3 (id=10135): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ptrace(0x11, r1) 199.79603ms ago: executing program 4 (id=10136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) syz_emit_ethernet(0xfeb6, &(0x7f0000000100)=ANY=[], 0x0) 148.096051ms ago: executing program 1 (id=10137): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 101.704062ms ago: executing program 2 (id=10138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b0c000000341cade180f862532c", @ANYRES32=r0, @ANYBLOB="0000000000620000280012800b00010065727370616e000018000280040012000500160005"], 0x48}}, 0x40080c0) 86.00184ms ago: executing program 4 (id=10139): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x1000a, 0x0) 31.988749ms ago: executing program 3 (id=10140): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) pread64(r1, &(0x7f0000000680)=""/45, 0x2d, 0x9) 31.322704ms ago: executing program 1 (id=10141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0x10001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 2 (id=10151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100, @val=0x11040000}}}}}}}}, 0x36) kernel console output (not intermixed with test programs): orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1629.667022][T28753] fuse: fd is not a fuse device [ 1631.126219][T28771] netlink: 'syz.2.7276': attribute type 1 has an invalid length. [ 1631.138236][T28773] netlink: 'syz.4.7277': attribute type 4 has an invalid length. [ 1631.177169][T28771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1631.192711][T28779] netlink: 'syz.4.7277': attribute type 4 has an invalid length. [ 1631.192848][T28777] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1631.285896][T28778] No source specified [ 1631.307137][ T31] audit: type=1400 audit(1790198319.430:2170): avc: denied { create } for pid=28780 comm="syz.0.7280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1631.308283][ T31] audit: type=1400 audit(1790198319.430:2171): avc: denied { write } for pid=28780 comm="syz.0.7280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1631.310515][T28781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7280'. [ 1631.437519][T28781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1631.441377][T28781] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1633.237105][T28823] jffs2: notice: (28823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1633.712571][T28829] veth0: entered promiscuous mode [ 1634.319391][T28824] veth0: left promiscuous mode [ 1636.348679][T28847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.644497][T28869] overlayfs: failed to clone upperpath [ 1637.666051][T28869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7311'. [ 1638.749706][T28886] jffs2: notice: (28886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1638.862172][T28891] No source specified [ 1638.956812][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1640.736393][T28916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7327'. [ 1641.429376][ T31] audit: type=1400 audit(1790198329.550:2172): avc: denied { create } for pid=28921 comm="syz.3.7331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1641.482471][T28928] netlink: zone id is out of range [ 1641.482481][T28928] netlink: zone id is out of range [ 1641.482486][T28928] netlink: zone id is out of range [ 1641.482490][T28928] netlink: zone id is out of range [ 1641.482494][T28928] netlink: zone id is out of range [ 1641.482498][T28928] netlink: zone id is out of range [ 1641.482691][T28928] netlink: zone id is out of range [ 1641.482697][T28928] netlink: zone id is out of range [ 1641.482701][T28928] netlink: zone id is out of range [ 1641.482705][T28928] netlink: zone id is out of range [ 1642.356139][T28939] jffs2: notice: (28939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1642.439766][T28941] No source specified [ 1642.537507][T28944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1642.547255][T28946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.565630][T28944] kvm: pic: single mode not supported [ 1642.566024][T28944] kvm: pic: non byte read [ 1642.566373][T28944] kvm: pic: level sensitive irq not supported [ 1642.566464][T28944] kvm: pic: non byte read [ 1642.566706][T28944] kvm: pic: level sensitive irq not supported [ 1642.566851][T28944] kvm: pic: non byte read [ 1642.567090][T28944] kvm: pic: level sensitive irq not supported [ 1642.567142][T28944] kvm: pic: non byte read [ 1642.604971][T28946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.657462][T28946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.712559][T28950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.992484][ T31] audit: type=1400 audit(1790198331.120:2173): avc: denied { wake_alarm } for pid=28960 comm="syz.4.7345" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1643.824088][T28986] fuse: fd is not a fuse device [ 1645.213866][T29007] Failed to initialize the IGMP autojoin socket (err -2) [ 1646.549086][ T31] audit: type=1400 audit(1790198334.670:2174): avc: denied { map } for pid=29030 comm="syz.1.7368" path="socket:[81393]" dev="sockfs" ino=81393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1646.549434][ T31] audit: type=1400 audit(1790198334.670:2175): avc: denied { read } for pid=29030 comm="syz.1.7368" path="socket:[81393]" dev="sockfs" ino=81393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1650.450204][ T31] audit: type=1400 audit(1790198338.570:2176): avc: denied { map } for pid=29094 comm="syz.3.7377" path="socket:[81468]" dev="sockfs" ino=81468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1651.478025][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7391'. [ 1652.660619][T29134] Failed to initialize the IGMP autojoin socket (err -2) [ 1652.716714][ T31] audit: type=1400 audit(1790198340.840:2177): avc: denied { read } for pid=29133 comm="syz.4.7402" path="socket:[81520]" dev="sockfs" ino=81520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1653.103051][T29145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1653.179954][T29145] bond4: entered promiscuous mode [ 1653.180021][T29145] bond4: entered allmulticast mode [ 1653.180342][T29145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1653.258858][T29149] erspan1: entered allmulticast mode [ 1653.288451][T29149] erspan1: entered promiscuous mode [ 1653.288993][T29149] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 1654.079224][T29181] No source specified [ 1655.348428][T29208] syzkaller0: entered promiscuous mode [ 1655.348449][T29208] syzkaller0: entered allmulticast mode [ 1655.437500][T29212] No source specified [ 1655.813658][T29223] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1657.065129][T29246] No source specified [ 1657.549365][T29276] netlink: 'syz.0.7450': attribute type 62 has an invalid length. [ 1657.549390][T29276] netlink: 'syz.0.7450': attribute type 3 has an invalid length. [ 1658.094939][T29295] jffs2: notice: (29295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1659.023047][T20727] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1659.044698][T29329] jffs2: notice: (29329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1659.172976][T20727] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1659.173997][T20727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1659.174021][T20727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1659.174044][T20727] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1659.176932][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1659.176957][T20727] usb 5-1: Product: syz [ 1659.176971][T20727] usb 5-1: Manufacturer: syz [ 1659.176985][T20727] usb 5-1: SerialNumber: syz [ 1659.462459][T20727] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1659.495452][T29352] jffs2: notice: (29352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1659.675024][T18994] usb 5-1: USB disconnect, device number 92 [ 1659.678392][T18994] usblp0: removed [ 1659.759859][T29361] No source specified [ 1663.213588][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.213641][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.380623][T29395] No source specified [ 1663.407475][T29397] jffs2: notice: (29397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1663.627164][T29411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.414977][T29429] jffs2: notice: (29429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1666.207868][T29457] fuse: fd is not a fuse device [ 1666.989162][T29480] No source specified [ 1668.674442][T29501] No source specified [ 1670.187000][T29515] netlink: 'syz.1.7519': attribute type 1 has an invalid length. [ 1672.488478][T29540] tipc: Enabled bearer , priority 0 [ 1676.648754][T29605] jffs2: notice: (29605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1676.905692][ T31] audit: type=1400 audit(1790198365.000:2178): avc: denied { write } for pid=29607 comm="syz.3.7550" path="socket:[83184]" dev="sockfs" ino=83184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1678.542282][T29621] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1680.106440][T29632] syz.4.7560 (29632): drop_caches: 2 [ 1680.439813][ T31] audit: type=1400 audit(1790198368.560:2179): avc: denied { bind } for pid=29627 comm="syz.3.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.444247][ T31] audit: type=1400 audit(1790198368.570:2180): avc: denied { setopt } for pid=29627 comm="syz.3.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.625462][T29645] jffs2: notice: (29645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1686.190493][T29695] jffs2: notice: (29695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1689.491111][T22243] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1693.269033][T29779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.956704][T29808] jffs2: notice: (29808) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1696.595762][T29824] tipc: Enabling of bearer rejected, already enabled [ 1696.919938][T29828] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5606] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[29828] [ 1697.485167][T29832] syzkaller0: entered promiscuous mode [ 1697.485182][T29832] syzkaller0: entered allmulticast mode [ 1697.524256][T29832] tipc: Enabled bearer , priority 0 [ 1697.543338][T29830] tipc: Resetting bearer [ 1697.666383][T29830] tipc: Disabling bearer [ 1698.518960][T29857] jffs2: notice: (29857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1698.795513][ T31] audit: type=1400 audit(1790198386.920:2181): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1705.263561][T29918] jffs2: notice: (29918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1705.673672][T29933] jffs2: notice: (29933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1706.724118][T29915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.727860][T29915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.759824][T29915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.853088][T29915] wireguard: wg0: Could not create IPv4 socket [ 1706.853103][T29915] net_ratelimit: 282 callbacks suppressed [ 1706.853110][T29915] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1708.689596][T29970] No source specified [ 1714.988807][ T31] audit: type=1400 audit(1790198403.110:2182): avc: denied { map } for pid=30049 comm="syz.4.7676" path="/dev/media3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1718.330177][T30078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7683'. [ 1718.662103][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 1719.671134][ T31] audit: type=1400 audit(1790198407.790:2183): avc: denied { create } for pid=30092 comm="syz.2.7686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1720.879379][T22243] Bluetooth: hci5: command 0x1003 tx timeout [ 1720.911568][ T9555] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1721.245135][ T31] audit: type=1400 audit(1790198409.370:2184): avc: denied { map } for pid=30105 comm="syz.0.7688" path="socket:[83911]" dev="sockfs" ino=83911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1722.391685][T30122] tipc: Enabling of bearer rejected, already enabled [ 1723.048335][T30129] tipc: Enabling of bearer rejected, failed to enable media [ 1723.311572][ T31] audit: type=1400 audit(1790198411.320:2185): avc: denied { listen } for pid=30125 comm="syz.1.7696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1725.131374][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1725.131481][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1725.912511][T30156] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1729.917594][T30175] No source specified [ 1731.045780][ T31] audit: type=1400 audit(1790198419.170:2186): avc: denied { execute } for pid=30196 comm="syz.4.7719" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=85110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1731.154977][T30201] netlink: 'syz.3.7721': attribute type 1 has an invalid length. [ 1731.207372][T30201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1731.246432][T30201] macvlan2: entered promiscuous mode [ 1731.246447][T30201] macvlan2: entered allmulticast mode [ 1731.249840][T30201] bond3: entered allmulticast mode [ 1731.249883][T30201] bond3: entered promiscuous mode [ 1731.250257][T30201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1731.265393][T30201] team0: Port device macvlan2 added [ 1731.395728][T30201] bond3: (slave ip6gretap2): making interface the new active one [ 1731.395760][T30201] ip6gretap2: entered promiscuous mode [ 1731.395845][T30201] ip6gretap2: entered allmulticast mode [ 1731.396532][T30201] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1733.762526][T30241] No source specified [ 1733.812011][T28977] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1733.977262][T28977] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1733.978191][T28977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.978230][T28977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.981046][T28977] usb 5-1: config 0 descriptor?? [ 1734.029161][T28977] pwc: Askey VC010 type 2 USB webcam detected. [ 1734.909461][T28977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1735.321751][T28977] pwc: recv_control_msg error -32 req 02 val 2700 [ 1735.327897][T28977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1735.328487][T28977] pwc: recv_control_msg error -32 req 04 val 1000 [ 1735.329058][T28977] pwc: recv_control_msg error -32 req 04 val 1300 [ 1735.329697][T28977] pwc: recv_control_msg error -32 req 04 val 1400 [ 1735.330208][T28977] pwc: recv_control_msg error -32 req 02 val 2000 [ 1735.330762][T28977] pwc: recv_control_msg error -32 req 02 val 2100 [ 1735.331313][T28977] pwc: recv_control_msg error -32 req 04 val 1500 [ 1735.334619][T28977] pwc: recv_control_msg error -32 req 02 val 2500 [ 1735.335162][T28977] pwc: recv_control_msg error -32 req 02 val 2400 [ 1735.335756][T28977] pwc: recv_control_msg error -32 req 02 val 2600 [ 1735.604181][T28977] pwc: recv_control_msg error -71 req 02 val 2800 [ 1735.604655][T28977] pwc: recv_control_msg error -71 req 04 val 1100 [ 1735.604978][T28977] pwc: recv_control_msg error -71 req 04 val 1200 [ 1735.659148][T28977] pwc: Registered as video103. [ 1735.664580][T28977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 1736.093054][T28977] usb 5-1: USB disconnect, device number 93 [ 1736.095026][ T31] audit: type=1400 audit(1790198424.220:2187): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1736.150691][ T31] audit: type=1400 audit(1790198424.270:2188): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1736.206520][ T31] audit: type=1400 audit(1790198424.330:2189): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1738.423354][T30295] MTRR 1 not used [ 1738.425391][ T31] audit: type=1400 audit(1790198426.540:2190): avc: denied { read write } for pid=30290 comm="syz.4.7746" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1738.425460][ T31] audit: type=1400 audit(1790198426.540:2191): avc: denied { open } for pid=30290 comm="syz.4.7746" path="/1144/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1738.425540][ T31] audit: type=1400 audit(1790198426.550:2192): avc: denied { ioctl } for pid=30290 comm="syz.4.7746" path="/1144/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1740.062072][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7753'. [ 1740.189633][ T31] audit: type=1400 audit(1790198428.310:2193): avc: denied { write } for pid=30316 comm="syz.4.7755" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1740.334298][ T31] audit: type=1400 audit(1790198428.460:2194): avc: denied { add_name } for pid=30316 comm="syz.4.7755" name="(" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1740.339378][ T31] audit: type=1400 audit(1790198428.460:2195): avc: denied { create } for pid=30316 comm="syz.4.7755" name="(" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1740.339976][ T31] audit: type=1400 audit(1790198428.460:2196): avc: denied { read write open } for pid=30316 comm="syz.4.7755" path="/1147/mnt/(" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1740.946993][T30328] Need at least one configuration in g1. [ 1740.963920][T30328] udc dummy_udc.0: failed to start g1: -22 [ 1740.963939][T30328] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1741.178594][T30328] UDC core: g1: couldn't find an available UDC or it's busy [ 1747.147971][T30416] tipc: Enabling of bearer rejected, failed to enable media [ 1747.364066][T30422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1750.571712][T18994] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1750.721637][T18994] usb 5-1: Using ep0 maxpacket: 32 [ 1750.723775][T18994] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1750.727478][T18994] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1750.727532][T18994] usb 5-1: config 0 has no interface number 0 [ 1750.727746][T18994] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1750.798887][T18994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.798905][T18994] usb 5-1: Product: syz [ 1750.798913][T18994] usb 5-1: Manufacturer: syz [ 1750.798921][T18994] usb 5-1: SerialNumber: syz [ 1750.800293][T18994] usb 5-1: config 0 descriptor?? [ 1750.800856][T30462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1750.990371][T30478] syz_tun: left promiscuous mode [ 1751.018202][T30478] macvlan2: left promiscuous mode [ 1751.018274][T30478] bond3: left promiscuous mode [ 1751.462018][T30462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1751.529466][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1751.529486][ T31] audit: type=1400 audit(1790198439.630:2202): avc: denied { mount } for pid=30479 comm="syz.1.7793" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1751.698297][T30490] fuse: fd is not a fuse device [ 1752.434331][ T31] audit: type=1400 audit(1790198440.550:2203): avc: denied { write } for pid=30511 comm="syz.0.7803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1755.244223][T18994] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1755.244254][T18994] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1755.244414][T18994] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1755.261581][T18994] usb 5-1: USB disconnect, device number 94 [ 1755.446140][T30539] syzkaller0: entered promiscuous mode [ 1755.446161][T30539] syzkaller0: entered allmulticast mode [ 1755.469219][T30539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.472393][T30539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.620820][T30542] geneve2: left promiscuous mode [ 1757.805015][T30548] kvm [30543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffff00000000 [ 1757.834968][T30548] kvm [30543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1757.875622][T30548] kvm [30543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff00000000 [ 1760.268900][T30591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1760.342129][T30586] : entered promiscuous mode [ 1760.440027][T30592] vlan2: entered allmulticast mode [ 1760.440050][T30592] bridge3: entered allmulticast mode [ 1760.440603][T30593] bridge3: port 1(erspan0) entered blocking state [ 1760.440686][T30593] bridge3: port 1(erspan0) entered disabled state [ 1760.440854][T30593] erspan0: entered allmulticast mode [ 1760.483646][T30593] erspan0: entered promiscuous mode [ 1760.486496][T30593] bridge3: port 1(erspan0) entered blocking state [ 1760.486731][T30593] bridge3: port 1(erspan0) entered forwarding state [ 1760.634400][T30588] openvswitch: : Dropping previously announced user features [ 1760.640472][T30591] erspan0: left allmulticast mode [ 1760.640498][T30591] erspan0: left promiscuous mode [ 1760.640697][T30591] bridge3: port 1(erspan0) entered disabled state [ 1760.969161][T30591] team0: Port device team_slave_0 removed [ 1761.000444][T30591] team0: Port device team_slave_1 removed [ 1761.010278][T30591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1761.262804][T30601] fuse: fd is not a fuse device [ 1761.457503][T30610] team0: Device macvlan2 failed to change mtu [ 1763.774332][T22243] Bluetooth: hci5: command 0x1003 tx timeout [ 1763.775277][ T9555] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1772.568551][T30732] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1773.512547][T20727] libceph: mon0 (1)[c::]:6789 connect error [ 1773.597723][T30737] ceph: No mds server is up or the cluster is laggy [ 1774.575096][T30750] 9p: Bad value for 'rfdno' [ 1775.421787][T20727] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1775.612657][T20727] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1775.613541][T20727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1775.613566][T20727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1775.613586][T20727] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.615398][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1775.615421][T20727] usb 5-1: Product: syz [ 1775.615436][T20727] usb 5-1: Manufacturer: syz [ 1775.615450][T20727] usb 5-1: SerialNumber: syz [ 1778.434396][T20727] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1778.449171][T20727] usb 5-1: USB disconnect, device number 95 [ 1778.459625][T20727] usblp0: removed [ 1782.110253][T30815] atomic_op ffff88807798b9e0 conn xmit_atomic 0000000000000000 [ 1782.939420][ T31] audit: type=1400 audit(1790198471.050:2204): avc: denied { write } for pid=30823 comm="syz.4.7880" name="functions" dev="configfs" ino=7107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1782.961558][ T31] audit: type=1400 audit(1790198471.070:2205): avc: denied { write } for pid=30823 comm="syz.4.7880" name="configs" dev="configfs" ino=7108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1782.961611][ T31] audit: type=1400 audit(1790198471.070:2206): avc: denied { write } for pid=30823 comm="syz.4.7880" name="c.1" dev="configfs" ino=85851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1782.961644][ T31] audit: type=1400 audit(1790198471.080:2207): avc: denied { create } for pid=30823 comm="syz.4.7880" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1782.961675][ T31] audit: type=1400 audit(1790198471.080:2208): avc: denied { write } for pid=30823 comm="syz.4.7880" name="c.1" dev="configfs" ino=85851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1786.345664][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.345719][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.524291][T30933] CIFS: Attempting to mount //127.0.0.1/share [ 1793.526570][T30933] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 1793.526738][T30933] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 1793.526746][T30933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1793.526765][T30933] CIFS: VFS: cifs_mount failed w/return code = -2 [ 1794.749352][ T7379] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.dis! [ 1794.749484][T30934] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.dis" [ 1799.643533][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 1799.672144][T30995] ceph: No mds server is up or the cluster is laggy [ 1800.421782][T31010] tipc: Enabling of bearer rejected, failed to enable media [ 1800.639470][T31026] netlink: 'syz.3.7939': attribute type 1 has an invalid length. [ 1801.200024][T31032] overlayfs: failed to clone upperpath [ 1801.231223][T31026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1801.267644][T31030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1801.270149][T31030] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 1801.270689][T31030] bond4: (slave gre3): Error -95 calling set_mac_address [ 1802.206191][T31033] gretap1: entered promiscuous mode [ 1802.226104][T31033] bond4: (slave gretap1): making interface the new active one [ 1802.226604][T31033] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1802.240176][T31026] macvlan3: entered promiscuous mode [ 1802.240194][T31026] macvlan3: entered allmulticast mode [ 1802.240606][T31026] bond4: entered promiscuous mode [ 1802.252937][T31026] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1802.265482][T31026] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1802.291191][T31026] bond4: left promiscuous mode [ 1804.996180][T31079] fuse: fd is not a fuse device [ 1808.251632][T31138] netlink: 'syz.1.7970': attribute type 1 has an invalid length. [ 1808.355989][T31138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1808.483743][T31140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1808.483904][T31140] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 1808.484190][T31140] bond2: (slave gre2): Error -95 calling set_mac_address [ 1810.692875][T31138] gretap1: entered promiscuous mode [ 1810.696594][T31138] bond2: (slave gretap1): making interface the new active one [ 1810.696968][T31138] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1810.703342][T31141] macvlan2: entered promiscuous mode [ 1810.704845][T31141] macvlan2: entered allmulticast mode [ 1810.705289][T31141] bond2: entered promiscuous mode [ 1810.706764][T31141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1810.847809][T31141] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1810.887352][T31141] bond2: left promiscuous mode [ 1811.514632][ T31] audit: type=1326 audit(1790198499.640:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31155 comm="syz.2.7973" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51db9e159 code=0x0 [ 1811.629126][T31161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7974'. [ 1813.938934][T23012] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1813.941254][T31184] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7982'. [ 1814.111923][T23012] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1814.188146][T23012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1814.188168][T23012] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1814.188182][T23012] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.234532][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1814.234552][T23012] usb 5-1: Product: syz [ 1814.234561][T23012] usb 5-1: Manufacturer: syz [ 1814.234569][T23012] usb 5-1: SerialNumber: syz [ 1815.111750][T23012] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1816.616466][T31204] trusted_key: encrypted_key: insufficient parameters specified [ 1816.994080][T31208] tipc: Enabling of bearer rejected, already enabled [ 1817.732737][ T31] audit: type=1400 audit(1790198505.530:2210): avc: denied { kexec_image_load } for pid=31210 comm="syz.0.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1818.620156][ T5712] usb 5-1: USB disconnect, device number 96 [ 1818.643993][ T5712] usblp0: removed [ 1820.657212][T31244] overlayfs: missing 'lowerdir' [ 1821.248947][T31249] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1821.248974][T31249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1821.251190][T31249] vhci_hcd vhci_hcd.0: Device attached [ 1821.406478][T31251] vhci_hcd: connection closed [ 1821.513954][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 1821.541026][ T1142] vhci_hcd vhci_hcd.4: release socket [ 1821.541076][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 1822.442042][T31268] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1822.774396][T31272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1826.036360][T22243] Bluetooth: hci5: command 0x1003 tx timeout [ 1826.072001][ T9555] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1830.214715][ T31] audit: type=1400 audit(1790198518.340:2211): avc: denied { ioctl } for pid=31373 comm="syz.1.8035" path="socket:[86965]" dev="sockfs" ino=86965 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1836.057806][T31430] overlayfs: failed to resolve './file0': -2 [ 1847.533010][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.533041][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.980203][T31593] ip6erspan0: entered allmulticast mode [ 1848.995109][T31593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1848.997892][T31593] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1849.095915][T31600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8093'. [ 1849.161183][T31603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31603 comm=syz.1.8094 [ 1849.224215][T31605] overlayfs: failed to clone upperpath [ 1858.901067][T31699] geneve3: entered promiscuous mode [ 1861.606334][T31729] fuse: fd is not a fuse device [ 1862.341926][T31736] bond0: entered promiscuous mode [ 1862.341992][T31736] bond_slave_0: entered promiscuous mode [ 1862.345408][T31736] bond_slave_1: entered promiscuous mode [ 1862.363675][T31736] batadv0: entered promiscuous mode [ 1862.955471][T31741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8137'. [ 1866.468730][T31773] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1870.939375][T31829] overlayfs: failed to clone upperpath [ 1870.978459][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 1871.009348][T31829] ceph: No mds server is up or the cluster is laggy [ 1871.584600][T20727] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1871.634079][T31843] netlink: 'syz.0.8164': attribute type 2 has an invalid length. [ 1871.634096][T31843] netlink: 'syz.0.8164': attribute type 1 has an invalid length. [ 1871.634103][T31843] netlink: 'syz.0.8164': attribute type 2 has an invalid length. [ 1871.669540][T31843] netlink: 'syz.0.8164': attribute type 1 has an invalid length. [ 1871.669553][T31843] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 1871.672639][T31843] netlink: 'syz.0.8164': attribute type 2 has an invalid length. [ 1871.761466][T20727] usb 5-1: Using ep0 maxpacket: 16 [ 1871.761986][T20727] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1871.762854][T20727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.762875][T20727] usb 5-1: config 0 has no interfaces? [ 1871.762899][T20727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.765632][T20727] usb 5-1: config 0 descriptor?? [ 1872.137174][T28977] usb 5-1: USB disconnect, device number 97 [ 1872.282566][T31864] kAFS: No cell specified [ 1872.302156][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1872.302179][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1873.660370][T31883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1873.670592][T31883] bridge2: port 1(erspan0) entered blocking state [ 1873.670715][T31883] bridge2: port 1(erspan0) entered disabled state [ 1873.670820][T31883] erspan0: entered allmulticast mode [ 1873.672650][T31883] erspan0: entered promiscuous mode [ 1876.539739][T31927] kvm [31926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xc702 [ 1876.603704][T31927] kvm [31926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xef10 [ 1876.609543][T31927] kvm [31926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x8510 [ 1876.620261][T31927] kvm_intel: kvm [31926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0xcf01 [ 1876.637322][T31927] kvm [31926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x9b01 [ 1877.269031][ T31] audit: type=1400 audit(1790198565.390:2212): avc: denied { connect } for pid=31962 comm="syz.3.8197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1877.628245][ T31] audit: type=1400 audit(1790198565.750:2213): avc: denied { getopt } for pid=31972 comm="syz.0.8201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1877.637260][T31973] Failed to initialize the IGMP autojoin socket (err -2) [ 1884.392446][T32048] jffs2: notice: (32048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1884.613131][ T31] audit: type=1326 audit(1790198572.740:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32054 comm="syz.3.8224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe94e99e159 code=0x7dff0000 [ 1890.644488][T22243] Bluetooth: hci5: command 0x1003 tx timeout [ 1890.644756][ T9555] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1894.380963][T32163] No source specified [ 1894.418197][T32170] fuse: fd is not a fuse device [ 1894.554018][T32180] ffs_data_put(): freeing [ 1894.716684][ T31] audit: type=1400 audit(1790198582.680:2215): avc: denied { mount } for pid=32179 comm="syz.1.8257" name="/" dev="functionfs" ino=88840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1894.741701][ T5712] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1895.294524][ T5712] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1895.296308][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.296340][ T5712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1895.299582][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.299607][ T5712] usb 5-1: Product: syz [ 1895.299620][ T5712] usb 5-1: Manufacturer: syz [ 1895.299635][ T5712] usb 5-1: SerialNumber: syz [ 1895.357454][ T5712] usb 5-1: config 0 descriptor?? [ 1895.360169][ T5712] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1895.424024][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1895.424646][ T5712] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1895.424688][ T5712] usb 5-1: media controller created [ 1895.467229][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1895.789034][ T5712] DVB: Unable to find symbol tda10046_attach() [ 1895.789049][ T5712] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1895.789061][ T5712] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1896.208908][T32207] jffs2: notice: (32207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1897.588145][ T5712] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1897.607233][ T5712] usb 5-1: USB disconnect, device number 98 [ 1898.673868][T28977] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1898.897130][T28977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1899.385257][T28977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1899.385278][T28977] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1899.385292][T28977] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1899.434359][T28977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1899.434387][T28977] usb 5-1: Product: syz [ 1899.434401][T28977] usb 5-1: Manufacturer: syz [ 1899.434415][T28977] usb 5-1: SerialNumber: syz [ 1899.660776][T28977] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1900.687116][ T5712] usb 5-1: USB disconnect, device number 99 [ 1900.709011][ T5712] usblp0: removed [ 1903.897214][T32301] overlayfs: failed to clone upperpath [ 1905.053999][T32321] tmpfs: Unknown parameter 'grpquota_block_har' [ 1905.227444][T32325] tipc: Started in network mode [ 1905.227461][T32325] tipc: Node identity 7f000001, cluster identity 4711 [ 1905.227485][T32325] tipc: Enabling of bearer rejected, failed to enable media [ 1905.230426][T32325] Invalid source name [ 1905.230437][T32325] UBIFS error (pid: 32325): cannot open "./file0", error -22 [ 1906.722255][T32340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32340 comm=syz.0.8302 [ 1906.723234][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8302'. [ 1908.191708][T32358] No source specified [ 1908.983600][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1908.983632][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.351595][T28977] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1909.503278][T28977] usb 5-1: Using ep0 maxpacket: 32 [ 1909.505490][T28977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1909.505529][T28977] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=db.72 [ 1909.509848][T28977] usb 5-1: config 4 has an invalid interface number: 25 but max is 0 [ 1909.509873][T28977] usb 5-1: config 4 has no interface number 0 [ 1909.509898][T28977] usb 5-1: config 4 interface 25 has no altsetting 0 [ 1909.561198][T28977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.561224][T28977] usb 5-1: Product: syz [ 1909.561238][T28977] usb 5-1: Manufacturer: syz [ 1909.561253][T28977] usb 5-1: SerialNumber: syz [ 1909.630063][T32372] debugfs: 'netdev:syzkaller0' already exists in 'phy12' [ 1909.855700][T32366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.856125][T32366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.948903][T28977] usb 5-1: USB disconnect, device number 100 [ 1911.843500][T32398] No source specified [ 1912.740301][T32411] No source specified [ 1915.759241][T32113] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1915.817971][T32473] No source specified [ 1923.417284][ T31] audit: type=1400 audit(1790198611.540:2216): avc: denied { execmod } for pid=32567 comm="syz.2.8359" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=91043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1927.046633][T32617] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8375'. [ 1927.215232][T32633] syzkaller0: entered promiscuous mode [ 1927.215253][T32633] syzkaller0: entered allmulticast mode [ 1931.296074][T32113] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1933.041421][T23012] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1933.306705][T23012] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1933.307687][T23012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1933.307710][T23012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1933.309348][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.309367][T23012] usb 5-1: Product: syz [ 1933.309380][T23012] usb 5-1: Manufacturer: syz [ 1933.309394][T23012] usb 5-1: SerialNumber: syz [ 1933.363708][T23012] usb 5-1: config 0 descriptor?? [ 1933.369295][T32667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1933.369391][T32667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1933.740989][T32667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1933.741089][T32667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1934.516488][T23012] Error reading MAC address [ 1936.126236][T28977] usb 5-1: USB disconnect, device number 101 [ 1936.181446][ T31] audit: type=1400 audit(1790198623.300:2217): avc: denied { read } for pid=32716 comm="syz.4.8402" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1936.181495][ T31] audit: type=1400 audit(1790198623.300:2218): avc: denied { open } for pid=32716 comm="syz.4.8402" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1936.261149][ T31] audit: type=1400 audit(1790198623.380:2219): avc: denied { write } for pid=32716 comm="syz.4.8402" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1936.262207][T32718] 9p: Bad value for 'rfdno' [ 1940.750631][T32767] kAFS: unable to lookup cell '.' [ 1940.785900][T32767] ipvlan3: entered allmulticast mode [ 1940.785929][T32767] virt_wifi0: entered allmulticast mode [ 1940.807736][T32767] batman_adv: batadv0: Adding interface: ipvlan3 [ 1940.807748][T32767] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.807766][T32767] batman_adv: batadv0: Interface activated: ipvlan3 [ 1942.173954][ T322] netlink: 'syz.3.8423': attribute type 3 has an invalid length. [ 1942.173970][ T322] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1943.552087][ T333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8414'. [ 1946.883416][ T358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8435'. [ 1947.597730][ T371] No source specified [ 1948.414218][ T378] jffs2: notice: (378) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1948.430411][ T382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8440'. [ 1948.660101][ T396] tipc: Enabling of bearer rejected, already enabled [ 1953.910381][ T422] tipc: Enabling of bearer rejected, failed to enable media [ 1954.400901][ T428] syz.0.8451 (428) used greatest stack depth: 18848 bytes left [ 1961.055120][ T31] audit: type=1400 audit(1790198648.180:2220): avc: denied { unmount } for pid=506 comm="syz.1.8475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1961.169238][ T513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8476'. [ 1961.212143][ T31] audit: type=1400 audit(1790198648.340:2221): avc: denied { setopt } for pid=510 comm="syz.2.8476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1961.751985][ T31] audit: type=1400 audit(1790198648.870:2222): avc: denied { connect } for pid=518 comm="syz.1.8479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1962.845711][ T547] fuse: fd is not a fuse device [ 1964.385348][T23012] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1964.503184][ T572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8490'. [ 1965.442431][T23012] usb 5-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 1965.448100][T23012] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1965.448117][T23012] usb 5-1: config 4 has no interface number 0 [ 1965.462388][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.462410][T23012] usb 5-1: Product: syz [ 1965.462418][T23012] usb 5-1: Manufacturer: syz [ 1965.462426][T23012] usb 5-1: SerialNumber: syz [ 1966.235318][ T31] audit: type=1400 audit(1790198653.360:2223): avc: denied { getopt } for pid=553 comm="syz.4.8489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1966.236224][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1966.245695][ T583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=583 comm=syz.2.8494 [ 1966.328640][T23012] ax88179_178a 5-1:4.147: probe with driver ax88179_178a failed with error -22 [ 1966.348619][T23012] usb 5-1: USB disconnect, device number 102 [ 1966.604186][ T583] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8494'. [ 1967.817207][ T622] tipc: Enabling of bearer rejected, failed to enable media [ 1968.887207][ T31] audit: type=1400 audit(1790198656.010:2224): avc: denied { read } for pid=626 comm="syz.2.8504" path="socket:[93007]" dev="sockfs" ino=93007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1970.437626][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.437676][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1974.877826][ T31] audit: type=1400 audit(1790198662.000:2225): avc: denied { connect } for pid=683 comm="syz.2.8517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1975.719690][ T694] bridge0: port 1(wlan1) entered blocking state [ 1975.720545][ T694] bridge0: port 1(wlan1) entered disabled state [ 1975.720637][ T694] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1975.756889][ T694] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1977.358825][ T714] trusted_key: encrypted_key: master key parameter 'defau*r5sted:syz' is invalid [ 1977.933263][ T722] lo: entered promiscuous mode [ 1977.933416][ T722] tunl0: entered promiscuous mode [ 1977.933542][ T722] gre0: entered promiscuous mode [ 1977.933640][ T722] gretap0: entered promiscuous mode [ 1977.933829][ T722] ip_vti0: entered promiscuous mode [ 1977.936067][ T722] ip6_vti0: entered promiscuous mode [ 1977.936181][ T722] sit0: entered promiscuous mode [ 1977.936274][ T722] ip6tnl0: entered promiscuous mode [ 1977.936368][ T722] ip6gre0: entered promiscuous mode [ 1977.936463][ T722] ip6gretap0: entered promiscuous mode [ 1977.936555][ T722] vcan0: entered promiscuous mode [ 1977.936667][ T722] bond0: entered promiscuous mode [ 1977.939292][ T722] team0: entered promiscuous mode [ 1977.939415][ T722] dummy0: entered promiscuous mode [ 1977.939535][ T722] nlmon0: entered promiscuous mode [ 1977.939652][ T722] veth0: entered promiscuous mode [ 1977.939773][ T722] veth1: entered promiscuous mode [ 1977.939894][ T722] wg0: entered promiscuous mode [ 1977.940007][ T722] wg1: entered promiscuous mode [ 1977.940121][ T722] wg2: entered promiscuous mode [ 1978.025262][ T722] veth0_to_bridge: entered promiscuous mode [ 1978.025408][ T722] bridge_slave_0: entered promiscuous mode [ 1978.025520][ T722] veth1_to_bridge: entered promiscuous mode [ 1978.118866][ T722] bridge_slave_1: entered promiscuous mode [ 1978.591208][ T722] veth0_to_bond: entered promiscuous mode [ 1978.598022][ T722] bond_slave_0: entered promiscuous mode [ 1978.598192][ T722] veth1_to_bond: entered promiscuous mode [ 1978.598307][ T722] bond_slave_1: entered promiscuous mode [ 1978.598416][ T722] veth0_to_team: entered promiscuous mode [ 1978.598531][ T722] team_slave_0: entered promiscuous mode [ 1978.598647][ T722] veth1_to_team: entered promiscuous mode [ 1978.598761][ T722] team_slave_1: entered promiscuous mode [ 1978.598875][ T722] veth1_to_batadv: entered promiscuous mode [ 1978.660121][ T722] batadv_slave_1: entered promiscuous mode [ 1978.660286][ T722] xfrm0: entered promiscuous mode [ 1978.660407][ T722] veth0_to_hsr: entered promiscuous mode [ 1978.660616][ T722] veth1_to_hsr: entered promiscuous mode [ 1978.660834][ T722] hsr0: entered promiscuous mode [ 1978.660946][ T722] veth1_virt_wifi: entered promiscuous mode [ 1978.661115][ T722] veth0_virt_wifi: entered promiscuous mode [ 1978.661235][ T722] virt_wifi0: entered promiscuous mode [ 1978.668245][ T722] : entered promiscuous mode [ 1978.668484][ T722] vlan1: entered promiscuous mode [ 1978.668717][ T722] macvlan0: entered promiscuous mode [ 1978.668834][ T722] macvlan1: entered promiscuous mode [ 1978.997565][ T722] ipvlan0: entered promiscuous mode [ 1978.997758][ T722] ipvlan1: entered promiscuous mode [ 1978.997935][ T722] macvtap0: entered promiscuous mode [ 1978.998002][ T722] macsec0: entered promiscuous mode [ 1978.998057][ T722] geneve0: entered promiscuous mode [ 1978.998131][ T722] geneve1: entered promiscuous mode [ 1978.998202][ T722] mac80211_hwsim hwsim4 : entered promiscuous mode [ 1978.998312][ T722] ipvlan2: entered promiscuous mode [ 1978.998380][ T722] bond1: entered promiscuous mode [ 1978.998435][ T722] syztnl1: entered promiscuous mode [ 1978.998485][ T722] macsec1: entered promiscuous mode [ 1978.998535][ T722] erspan0.1: entered promiscuous mode [ 1978.998656][ T722] vxlan0: entered promiscuous mode [ 1978.998753][ T722] bridge0: entered promiscuous mode [ 1978.999323][ T722] gre1: entered promiscuous mode [ 1978.999418][ T722] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 1978.999525][ T722] veth2: entered promiscuous mode [ 1978.999631][ T722] veth3: entered promiscuous mode [ 1978.999770][ T722] bridge1: entered promiscuous mode [ 1978.999873][ T722] ip6erspan0: entered promiscuous mode [ 1978.999968][ T722] veth4: entered promiscuous mode [ 1979.000081][ T722] veth5: entered promiscuous mode [ 1979.000195][ T722] gtp0: entered promiscuous mode [ 1979.000312][ T722] batadv0: entered promiscuous mode [ 1979.000427][ T722] bond2: entered promiscuous mode [ 1979.003869][ T722] bridge2: entered promiscuous mode [ 1979.005425][ T722] macvtap1: entered promiscuous mode [ 1980.846899][ T31] audit: type=1400 audit(1790198667.950:2226): avc: denied { rename } for pid=754 comm="syz.3.8535" name="file0" dev="tmpfs" ino=10692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1983.745935][ T814] No source specified [ 1987.441862][ T852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1991.743733][ T889] fuse: fd is not a fuse device [ 1991.748827][ T889] overlayfs: missing 'lowerdir' [ 1998.258646][ T965] 9p: Bad value for 'rfdno' [ 1999.035406][ T972] overlayfs: failed to clone upperpath [ 1999.081870][ T31] audit: type=1400 audit(1790198686.160:2227): avc: denied { bind } for pid=971 comm="syz.0.8577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2000.804180][ T986] can0: slcan on ttyS3. [ 2001.289904][ T31] audit: type=1400 audit(1790198688.410:2228): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.290312][ T31] audit: type=1400 audit(1790198688.410:2229): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.321743][ T31] audit: type=1400 audit(1790198688.450:2230): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.354479][ T31] audit: type=1400 audit(1790198688.470:2231): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.371623][ T31] audit: type=1400 audit(1790198688.480:2232): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.371674][ T31] audit: type=1400 audit(1790198688.480:2233): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.371714][ T31] audit: type=1400 audit(1790198688.480:2234): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.371753][ T31] audit: type=1400 audit(1790198688.480:2235): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2001.371791][ T31] audit: type=1400 audit(1790198688.490:2236): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2002.057107][ T983] can0 (unregistered): slcan off ttyS3. [ 2008.697804][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 2008.697825][ T31] audit: type=1400 audit(1790198695.190:2258): avc: denied { write } for pid=1046 comm="syz.2.8603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2009.581666][ T1065] bond4: option all_slaves_active: invalid value (177) [ 2009.590902][ T1065] bond4 (unregistering): Released all slaves [ 2011.900282][ T1093] tipc: Enabling of bearer rejected, already enabled [ 2013.745215][ T1117] netlink: 'syz.4.8610': attribute type 2 has an invalid length. [ 2013.745231][ T1117] netlink: 'syz.4.8610': attribute type 1 has an invalid length. [ 2013.745237][ T1117] netlink: 'syz.4.8610': attribute type 2 has an invalid length. [ 2013.745244][ T1117] netlink: 'syz.4.8610': attribute type 1 has an invalid length. [ 2013.745250][ T1117] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 2013.793079][ T1117] netlink: 'syz.4.8610': attribute type 2 has an invalid length. [ 2014.927744][ T1133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8622'. [ 2016.891610][ T1146] ubi0: attaching mtd0 [ 2016.893059][ T1146] ubi0: scanning is finished [ 2016.893084][ T1146] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 2018.436397][ T1146] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 2020.333040][ T1167] overlayfs: failed to clone upperpath [ 2024.608347][ T1196] syzkaller0: entered promiscuous mode [ 2024.608362][ T1196] syzkaller0: entered allmulticast mode [ 2030.026193][ T1236] No source specified [ 2030.364488][ T1206] : renamed from bond_slave_0 [ 2030.388602][ T1219] veth0_macvtap: left promiscuous mode [ 2030.388683][ T1219] macvtap0: entered allmulticast mode [ 2030.550200][ T1248] netlink: 'syz.2.8651': attribute type 1 has an invalid length. [ 2031.853052][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.853119][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2033.265124][ T1268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.375931][T28977] libceph: mon0 (1)0.0.0.0:6789 connect error [ 2034.225443][T20727] libceph: mon0 (1)0.0.0.0:6789 connect error [ 2034.326164][ T1276] ceph: No mds server is up or the cluster is laggy [ 2036.641998][ T1310] fuse: fd is not a fuse device [ 2036.999959][T13559] kworker/0:0 (13559) used greatest stack depth: 17816 bytes left [ 2038.969682][ T1331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2041.416844][ T1371] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2041.909192][ T1373] o2cb: This node has not been configured. [ 2041.909202][ T1373] o2cb: Cluster check failed. Fix errors before retrying. [ 2041.909213][ T1373] (syz.0.8685,1373,1):user_dlm_register:674 ERROR: status = -22 [ 2041.909227][ T1373] (syz.0.8685,1373,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2041.909311][ T31] audit: type=1400 audit(1790198729.030:2259): avc: denied { write } for pid=1372 comm="syz.0.8685" name="/" dev="ocfs2_dlmfs" ino=95061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2041.909353][ T31] audit: type=1400 audit(1790198729.030:2260): avc: denied { add_name } for pid=1372 comm="syz.0.8685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2041.909374][ T31] audit: type=1400 audit(1790198729.030:2261): avc: denied { create } for pid=1372 comm="syz.0.8685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2041.909393][ T31] audit: type=1400 audit(1790198729.030:2262): avc: denied { associate } for pid=1372 comm="syz.0.8685" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2042.389190][ T31] audit: type=1400 audit(1790198729.510:2263): avc: denied { setopt } for pid=1377 comm="syz.2.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2043.210426][ T1388] C: renamed from veth1_to_team [ 2043.225608][ T1388] netlink: 'syz.1.8688': attribute type 3 has an invalid length. [ 2043.225629][ T1388] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8688'. [ 2043.225643][ T1388] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2044.526203][ T1398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2044.640817][ T1408] atomic_op ffff88802c6829e0 conn xmit_atomic 0000000000000000 [ 2046.789574][ T1412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8695'. [ 2046.896707][ T1424] tc_dump_action: action bad kind [ 2047.666444][ T31] audit: type=1400 audit(1790198734.790:2264): avc: denied { write } for pid=1430 comm="syz.4.8702" name="subsystems" dev="configfs" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2047.699787][ T31] audit: type=1400 audit(1790198734.790:2265): avc: denied { write } for pid=1430 comm="syz.4.8702" name="ports" dev="configfs" ino=3527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2047.741155][ T31] audit: type=1400 audit(1790198734.860:2266): avc: denied { write } for pid=1430 comm="syz.4.8702" name="subsystems" dev="configfs" ino=95128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2047.774839][ T31] audit: type=1400 audit(1790198734.890:2267): avc: denied { write } for pid=1430 comm="syz.4.8702" name="subsystems" dev="configfs" ino=95128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2047.812227][ T1434] nvmet_rdma: malformed ip/port passed: :4420 [ 2048.026189][ T1432] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2048.026241][ T1432] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2048.026274][ T1432] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2048.876856][ T1432] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2048.891126][ T1432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 2050.194347][ T1462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8700'. [ 2051.595306][ T1475] gadgetfs: bound to dummy_udc driver [ 2051.928140][ T1425] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 2051.928670][ C0] gadgetfs: connected [ 2051.932141][ T1425] gadgetfs: disconnected [ 2052.095407][ C0] gadgetfs: connected [ 2052.189199][ T1473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2052.198861][ T1425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 2052.199621][ T1425] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2052.199715][ T1425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.301905][ C0] gadgetfs: configuration #1 [ 2052.466997][ T1471] gadgetfs: suspended from state 3 [ 2052.469238][ T1471] gadgetfs: disconnected [ 2052.559641][ T1425] usb 1-1: USB disconnect, device number 2 [ 2053.081855][T20727] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2053.232277][T20727] usb 5-1: Using ep0 maxpacket: 16 [ 2053.236159][T20727] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 2053.237791][T20727] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2053.237826][T20727] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2053.259639][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.259693][T20727] usb 5-1: Product: syz [ 2053.259741][T20727] usb 5-1: Manufacturer: 㩷봃刂ᔔ傇픃⢲疑ꉤ徛ᘉ묋鏿ꁒЄΙ뼌肨檄蠂᫒骨증 [ 2053.259782][T20727] usb 5-1: SerialNumber: syz [ 2055.533691][ T1497] Failed to initialize the IGMP autojoin socket (err -2) [ 2056.297066][T20727] usbhid 5-1:1.0: can't add hid device: -71 [ 2056.297146][T20727] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2056.331725][T20727] usb 5-1: USB disconnect, device number 103 [ 2056.392131][ T31] audit: type=1400 audit(1790198743.520:2268): avc: denied { write } for pid=1504 comm="syz.4.8724" name="functions" dev="configfs" ino=7107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.459942][ T31] audit: type=1400 audit(1790198743.580:2269): avc: denied { write } for pid=1504 comm="syz.4.8724" name="c.1" dev="configfs" ino=85851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.472306][ T1506] udc dummy_udc.0: failed to start g1: -19 [ 2056.522004][ T1506] UDC core: g1: couldn't find an available UDC or it's busy [ 2056.577914][ T1509] Failed to initialize the IGMP autojoin socket (err -2) [ 2058.744742][ T1549] 9p: Bad value for 'rfdno' [ 2059.046469][ T1557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8734'. [ 2061.648897][ T1575] syzkaller0: entered promiscuous mode [ 2061.648921][ T1575] syzkaller0: entered allmulticast mode [ 2065.364101][ T1612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8747'. [ 2066.280229][ T1619] fuse: fd is not a fuse device [ 2072.250284][ T1639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2072.316412][ T31] audit: type=1400 audit(1790198759.440:2270): avc: denied { append } for pid=1658 comm="syz.4.8762" name="sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2072.320280][ T31] audit: type=1400 audit(1790198759.440:2271): avc: denied { read } for pid=1658 comm="syz.4.8762" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2072.320468][ T31] audit: type=1400 audit(1790198759.440:2272): avc: denied { open } for pid=1658 comm="syz.4.8762" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2072.705146][ T1665] No source specified [ 2073.875216][ T1693] syz.0.8769(1693): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2073.988222][ T1693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8769'. [ 2074.230939][ T1695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8771'. [ 2076.630380][ T1707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.380794][T20727] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 2078.882035][T20727] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2078.907868][T20727] usb 5-1: config 0 has no interfaces? [ 2078.910972][T20727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.318580][T20727] usb 5-1: config 0 descriptor?? [ 2079.557176][ T5712] usb 5-1: USB disconnect, device number 104 [ 2081.240596][ T1755] No source specified [ 2082.910516][ T1771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2087.187176][ T1811] Set syz1 is full, maxelem 2076 reached [ 2087.553167][ T1817] comedi comedi0: bad chanlist[0]=0x00000000 chan=0 range length=4 [ 2087.681740][ T1820] overlayfs: failed to clone lowerpath [ 2087.712225][ T1820] overlayfs: failed to clone lowerpath [ 2087.919513][ T1822] MTD: Couldn't look up './dev/mtdblock0': -2 [ 2089.227725][ T1823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2093.387492][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2093.387562][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2096.758164][ T31] audit: type=1400 audit(1790198783.880:2273): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2096.758344][ T31] audit: type=1400 audit(1790198783.880:2274): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2096.758525][ T31] audit: type=1400 audit(1790198783.880:2275): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2096.822282][ T31] audit: type=1400 audit(1790198783.890:2276): avc: denied { checkpoint_restore } for pid=1890 comm="syz.4.8818" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2097.098162][ T1909] o2cb: This node has not been configured. [ 2097.098177][ T1909] o2cb: Cluster check failed. Fix errors before retrying. [ 2097.098197][ T1909] (syz.2.8828,1909,0):user_dlm_register:674 ERROR: status = -22 [ 2097.098220][ T1909] (syz.2.8828,1909,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2097.111587][ T1903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.111928][ T31] audit: type=1400 audit(1790198784.220:2277): avc: denied { write } for pid=1907 comm="syz.2.8828" name="/" dev="ocfs2_dlmfs" ino=95679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2097.305942][ T1912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8830'. [ 2100.064423][ T1947] No source specified [ 2101.568651][ T31] audit: type=1400 audit(1790198788.690:2278): avc: denied { create } for pid=1964 comm="syz.1.8844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2101.646940][ T1968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8845'. [ 2103.210412][ T1983] fuse: fd is not a fuse device [ 2107.501495][ T2032] fuse: fd is not a fuse device [ 2108.825412][ T2041] netlink: 'syz.2.8865': attribute type 3 has an invalid length. [ 2108.825481][ T2041] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8865'. [ 2112.114970][ T2076] syz_tun: entered promiscuous mode [ 2112.150113][ T2076] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2115.961525][ T2109] overlayfs: failed to resolve './file2': -2 [ 2117.509927][ T2117] Failed to initialize the IGMP autojoin socket (err -2) [ 2120.189286][ T2129] Failed to initialize the IGMP autojoin socket (err -2) [ 2122.331605][ T31] audit: type=1400 audit(1790198809.430:2279): avc: denied { read } for pid=2146 comm="syz.4.8896" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2122.331810][ T31] audit: type=1400 audit(1790198809.430:2280): avc: denied { open } for pid=2146 comm="syz.4.8896" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2122.331902][ T31] audit: type=1400 audit(1790198809.430:2281): avc: denied { ioctl } for pid=2146 comm="syz.4.8896" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2124.427079][ T2165] No source specified [ 2125.333588][ T2189] trusted_key: encrypted_key: master key parameter 'defau*r5sted:syz' is invalid [ 2127.322148][ T2202] vlan3: entered promiscuous mode [ 2127.322270][ T2202] bridge0: entered promiscuous mode [ 2130.896275][ T31] audit: type=1400 audit(1790198818.020:2282): avc: denied { open } for pid=2240 comm="syz.4.8920" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2130.898394][ T31] audit: type=1400 audit(1790198818.020:2283): avc: denied { ioctl } for pid=2240 comm="syz.4.8920" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2133.434392][ T2256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8922'. [ 2133.794525][ T2264] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2133.794561][ T2264] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2133.794581][ T2264] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2134.140973][ T2262] No source specified [ 2134.296253][ T2269] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2135.686595][ T2284] netlink: 'syz.3.8930': attribute type 39 has an invalid length. [ 2136.159729][ T2292] Failed to initialize the IGMP autojoin socket (err -2) [ 2136.208558][ T2293] Failed to initialize the IGMP autojoin socket (err -2) [ 2138.119228][ T31] audit: type=1400 audit(1790198824.920:2284): avc: denied { write } for pid=2299 comm="syz.4.8932" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2138.285651][ T31] audit: type=1800 audit(1790198824.920:2285): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8932" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 2138.773715][ T5712] Process accounting resumed [ 2138.860900][ T2328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8936'. [ 2142.519896][ T2360] fuse: fd is not a fuse device [ 2143.268209][ T2370] No source specified [ 2144.393615][ T31] audit: type=1326 audit(1790198831.520:2286): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2377 comm="syz.4.8942" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x0 [ 2145.547388][ T2386] No source specified [ 2145.654871][ T2395] jffs2: notice: (2395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2145.761945][ T1425] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2147.173390][ T1425] usb 5-1: Using ep0 maxpacket: 8 [ 2147.175656][ T1425] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2147.175695][ T1425] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 2147.176786][ T1425] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.176806][ T1425] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2147.178451][ T1425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.178471][ T1425] usb 5-1: Product: syz [ 2147.178485][ T1425] usb 5-1: Manufacturer: syz [ 2147.178498][ T1425] usb 5-1: SerialNumber: syz [ 2147.445373][ T2428] vlan2: entered promiscuous mode [ 2147.445388][ T2428] bridge0: entered promiscuous mode [ 2147.665549][ T1425] usb 5-1: 0:1 : does not exist [ 2147.669817][ T1425] usb 5-1: unit 5 not found! [ 2147.669834][ T1425] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2147.669867][ T1425] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2147.796112][ T1425] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2147.805057][ T1425] usb 5-1: USB disconnect, device number 105 [ 2147.835349][ T2442] udevd[2442]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2149.264822][ T2461] tipc: Enabling of bearer rejected, failed to enable media [ 2150.322573][ T31] audit: type=1326 audit(1790198836.900:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.4.8971" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53f6f9e159 code=0x0 [ 2152.892581][ T2492] No source specified [ 2153.141943][T20727] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2153.291798][T20727] usb 5-1: Using ep0 maxpacket: 16 [ 2153.293043][T20727] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2153.294884][T20727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.295003][T20727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.295029][T20727] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2153.295120][T20727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.389758][T20727] usb 5-1: config 0 descriptor?? [ 2154.347969][ T31] audit: type=1400 audit(1790198841.460:2288): avc: denied { ioctl } for pid=2500 comm="syz.3.8979" path="socket:[97922]" dev="sockfs" ino=97922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2154.732808][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2154.732858][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2154.984580][ T2504] vlan0: entered promiscuous mode [ 2155.008496][T20727] usbhid 5-1:0.0: can't add hid device: -71 [ 2155.008584][T20727] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2155.036736][T20727] usb 5-1: USB disconnect, device number 106 [ 2157.028110][ T31] audit: type=1400 audit(1790198844.150:2289): avc: denied { bind } for pid=2531 comm="syz.0.8986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2163.345906][ T2609] 9p: Could not find request transport: fd0x0000000000000007 [ 2164.062992][ T31] audit: type=1400 audit(1790198851.190:2290): avc: denied { create } for pid=2622 comm="syz.3.9005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2164.097321][ T31] audit: type=1400 audit(1790198851.220:2291): avc: denied { ioctl } for pid=2622 comm="syz.3.9005" path="socket:[98136]" dev="sockfs" ino=98136 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2167.322114][ T2661] No source specified [ 2168.355720][ T2640] wireguard: wireguard0: Could not create IPv4 socket [ 2169.203552][ T2679] jffs2: notice: (2679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2170.088596][ T2695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9017'. [ 2170.088622][ T2695] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9017'. [ 2170.088637][ T2695] netlink: 'syz.1.9017': attribute type 5 has an invalid length. [ 2170.088649][ T2695] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9017'. [ 2170.221572][ T31] audit: type=1400 audit(1790198856.860:2292): avc: denied { getopt } for pid=2686 comm="syz.3.9018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2171.594769][ T2708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9022'. [ 2173.853354][ T2740] binder: 2735:2740 ioctl 4018620d 0 returned -22 [ 2174.434838][ T2737] Process accounting resumed [ 2175.743111][ T2761] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9033'. [ 2175.743135][ T2761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9033'. [ 2176.316028][ T2776] binfmt_misc: register: failed to install interpreter ./file2 [ 2178.624930][ T2798] No source specified [ 2180.010450][ T2795] No source specified [ 2183.567084][ T2830] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2183.567140][ T2830] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2183.567196][ T2830] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2183.589529][ T2830] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 2184.238491][T29448] smbdirect: ib_dev[syz2] removed [ 2188.229969][ T31] audit: type=1400 audit(1790198875.350:2293): avc: denied { setattr } for pid=2883 comm="syz.4.9052" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2189.365884][ T2897] No source specified [ 2189.546924][ T2902] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2192.261673][ T2925] No source specified [ 2194.249146][ T2941] overlayfs: failed to clone upperpath [ 2196.719909][ T2957] Process accounting resumed [ 2199.304190][ T2976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9081'. [ 2199.978147][ T2981] jffs2: notice: (2981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2203.336144][ T31] audit: type=1400 audit(1790198890.460:2294): avc: denied { getopt } for pid=3014 comm="syz.1.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2203.537264][ T31] audit: type=1400 audit(1790198890.660:2295): avc: denied { getopt } for pid=3019 comm="syz.1.9093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2204.513356][ T3027] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2204.649873][ T3033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9096'. [ 2204.649979][ T3033] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2205.859897][T23012] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2205.988000][T20727] libceph: mon0 (1)[c::]:6789 connect error [ 2206.016448][ T3057] ceph: No mds server is up or the cluster is laggy [ 2206.044761][T23012] usb 5-1: Using ep0 maxpacket: 32 [ 2206.059251][T23012] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2206.059291][T23012] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2206.061112][T23012] usb 5-1: config 14 has an invalid interface number: 228 but max is 0 [ 2206.061135][T23012] usb 5-1: config 14 has no interface number 0 [ 2206.061168][T23012] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 2206.061192][T23012] usb 5-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2206.061215][T23012] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2206.137176][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.137201][T23012] usb 5-1: Product: syz [ 2206.137214][T23012] usb 5-1: Manufacturer: syz [ 2206.137227][T23012] usb 5-1: SerialNumber: syz [ 2206.594936][T23012] legousbtower 5-1:14.228: interrupt endpoints not found [ 2208.616973][ T3094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9115'. [ 2208.642002][ T3089] CIFS: Attempting to mount //127.0.0.1/share [ 2208.642246][ T3089] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 2208.642393][ T3089] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 2208.642401][ T3089] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2208.642418][ T3089] CIFS: VFS: cifs_mount failed w/return code = -2 [ 2208.706985][ T3092] Process accounting resumed [ 2208.755242][ T3101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9116'. [ 2208.755625][ T3101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9116'. [ 2208.756741][ T31] audit: type=1400 audit(1790198895.880:2296): avc: denied { map } for pid=3099 comm="syz.1.9116" path="/2018" dev="tmpfs" ino=10984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2208.758315][ T3100] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 2208.758329][ T3100] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2208.758884][ T3100] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2208.758900][ T3100] batman_adv: batadv0: Removing interface: ipvlan2 [ 2208.860906][T23012] usb 5-1: USB disconnect, device number 107 [ 2210.745584][ T3114] serio: Serial port ttyS3 [ 2210.892396][ T3121] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5606] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[3121] [ 2211.989581][ T31] audit: type=1326 audit(1790198899.110:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3129 comm="syz.2.9129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51db9e159 code=0x7ffc0000 [ 2211.989819][ T31] audit: type=1326 audit(1790198899.110:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3129 comm="syz.2.9129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51db9e159 code=0x7ffc0000 [ 2211.990836][ T31] audit: type=1326 audit(1790198899.110:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3129 comm="syz.2.9129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc51db9e159 code=0x7ffc0000 [ 2212.397790][ T3144] UDC core: g1: couldn't find an available UDC or it's busy [ 2212.747924][ T31] audit: type=1400 audit(1790198899.500:2300): avc: denied { write } for pid=3141 comm="syz.4.9132" name="functions" dev="configfs" ino=7107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2212.747971][ T31] audit: type=1400 audit(1790198899.500:2301): avc: denied { write } for pid=3141 comm="syz.4.9132" name="c.1" dev="configfs" ino=85851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2212.747991][ T31] audit: type=1400 audit(1790198899.510:2302): avc: denied { write } for pid=3141 comm="syz.4.9132" name="c.1" dev="configfs" ino=85851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2212.952579][ T3146] No source specified [ 2213.962061][ T1425] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2214.112445][ T1425] usb 5-1: Using ep0 maxpacket: 32 [ 2214.113005][ T1425] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2214.113804][ T1425] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2214.113819][ T1425] usb 5-1: config 0 has no interface number 0 [ 2214.113839][ T1425] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2214.115429][ T1425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.115442][ T1425] usb 5-1: Product: syz [ 2214.115451][ T1425] usb 5-1: Manufacturer: syz [ 2214.115459][ T1425] usb 5-1: SerialNumber: syz [ 2214.116919][ T1425] usb 5-1: config 0 descriptor?? [ 2214.734142][ T1425] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2214.734240][ T1425] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2214.975497][ T1425] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 2214.975525][ T1425] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 2214.975543][ T1425] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2214.975721][ T1425] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 2215.025404][ T1425] usb 5-1: USB disconnect, device number 108 [ 2215.712992][ T31] audit: type=1400 audit(1790198902.830:2303): avc: denied { accept } for pid=3172 comm="syz.0.9140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2215.873146][ T3175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9140'. [ 2216.992582][ T3186] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2217.046559][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2217.046608][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2217.091984][ T3183] overlayfs: failed to resolve './bus': -2 [ 2217.139329][ T3177] syz.4.9141 (3177): drop_caches: 2 [ 2218.436243][ T3202] No source specified [ 2218.529964][ T3217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9150'. [ 2218.546643][ T3217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9150'. [ 2218.620008][ T3225] tipc: Enabling of bearer rejected, failed to enable media [ 2218.633844][ T3225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3225 comm=syz.0.9150 [ 2221.179099][ T3237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9153'. [ 2221.199468][ T31] audit: type=1400 audit(1790198908.320:2304): avc: denied { getopt } for pid=3236 comm="syz.4.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2221.199683][ T3237] team0: No ports can be present during mode change [ 2221.200265][ T3237] netlink: 'syz.4.9153': attribute type 10 has an invalid length. [ 2221.252168][ T3241] netlink: 'syz.4.9153': attribute type 10 has an invalid length. [ 2221.258624][ T3237] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2221.268354][ T3237] vlan0: entered promiscuous mode [ 2221.273371][ T3237] tipc: Enabled bearer , priority 0 [ 2221.274156][ T3240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9154'. [ 2221.290095][ T3240] ipvlan0: entered promiscuous mode [ 2221.312188][ T3240] ipvlan0: left promiscuous mode [ 2221.484192][ T3250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9156'. [ 2221.493902][ T3250] binder: 3248:3250 ioctl c00c620f 200000000240 returned -22 [ 2221.785378][T20727] libceph: mon0 (1)[c::]:6789 connect error [ 2221.790058][ T3259] ceph: No mds server is up or the cluster is laggy [ 2222.558307][ T3268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2223.428873][ T3282] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2223.429674][ T3282] bond5 (unregistering): Released all slaves [ 2223.883636][ T3288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9162'. [ 2224.658758][ T3296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2224.766118][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9167'. [ 2224.766197][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9167'. [ 2225.316745][ T3304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9166'. [ 2225.372633][ T3296] netlink: 'syz.0.9167': attribute type 5 has an invalid length. [ 2225.416122][ T3296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9167'. [ 2225.735289][ T3312] netlink: 'syz.0.9169': attribute type 2 has an invalid length. [ 2225.735309][ T3312] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9169'. [ 2225.735323][ T3312] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2226.745274][ T3328] Failed to initialize the IGMP autojoin socket (err -2) [ 2226.752431][ T1425] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2226.839305][ T3333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9177'. [ 2226.839327][ T3333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9177'. [ 2226.839348][ T3333] netlink: 'syz.1.9177': attribute type 13 has an invalid length. [ 2226.912346][ T1425] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 2226.913126][ T1425] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2226.913150][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.202815][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.203034][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.275003][ T3341] fuse: Bad value for 'fd' [ 2228.276479][ T3338] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 2228.276521][ T3338] SELinux: failed to load policy [ 2228.389155][ T1425] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -71 [ 2228.425887][ T1425] usb 5-1: USB disconnect, device number 109 [ 2228.655666][ T3347] Failed to initialize the IGMP autojoin socket (err -2) [ 2228.709630][ T3348] Failed to initialize the IGMP autojoin socket (err -2) [ 2229.465762][ T3357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9172'. [ 2229.466721][ T3357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9172'. [ 2230.903941][ T3372] netlink: 'syz.1.9185': attribute type 32 has an invalid length. [ 2232.145627][ T3384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9188'. [ 2232.709675][ T3390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9190'. [ 2232.709949][ T3390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9190'. [ 2232.848051][ T3394] /dev/nullb0: Can't lookup blockdev [ 2236.265082][ T3418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9189'. [ 2236.430161][ T31] audit: type=1400 audit(1790198923.550:2305): avc: denied { create } for pid=3421 comm="syz.3.9195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2236.532020][T23012] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2236.545811][ T3422] overlayfs: failed to clone upperpath [ 2236.558292][ T3422] overlayfs: failed to clone upperpath [ 2236.648453][ T3426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2236.702416][T23012] usb 5-1: Using ep0 maxpacket: 8 [ 2236.708551][T23012] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2236.708590][T23012] usb 5-1: New USB device found, idVendor=045e, idProduct=0404, bcdDevice=5d.44 [ 2236.740261][T23012] usb 5-1: config 1 has an invalid interface number: 24 but max is 0 [ 2236.740278][T23012] usb 5-1: config 1 has no interface number 0 [ 2236.740299][T23012] usb 5-1: config 1 interface 24 altsetting 5 endpoint 0xC has an invalid bInterval 64, changing to 10 [ 2236.740314][T23012] usb 5-1: config 1 interface 24 has no altsetting 0 [ 2236.785708][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.785735][T23012] usb 5-1: Product: syz [ 2236.785749][T23012] usb 5-1: Manufacturer: syz [ 2236.785764][T23012] usb 5-1: SerialNumber: syz [ 2238.289290][T23012] usb 5-1: unknown interface protocol 0xf2, assuming v1 [ 2238.289306][T23012] usb 5-1: 24:1 : does not exist [ 2238.289315][T23012] usb 5-1: 24:2 : does not exist [ 2238.368352][T23012] usb 5-1: USB disconnect, device number 110 [ 2238.479531][ T3447] udevd[3447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.24/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2238.739600][ T3457] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2238.739625][ T3457] batman_adv: batadv0: Removing interface: ipvlan2 [ 2239.838006][ T3461] ima: policy update failed [ 2239.838418][ T31] audit: type=1802 audit(1790198926.960:2306): pid=3461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.9208" res=0 errno=0 [ 2239.839833][ T31] audit: type=1400 audit(1790198926.960:2307): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2240.361062][T23012] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2240.532074][ T3478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9212'. [ 2240.942365][T23012] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2240.944600][T23012] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2240.944622][T23012] usb 5-1: Product: syz [ 2240.944637][T23012] usb 5-1: SerialNumber: syz [ 2240.981839][T23012] usb 5-1: config 0 descriptor?? [ 2240.984681][T23012] hso 5-1:0.0: Not our interface [ 2241.413017][T23012] usb 5-1: USB disconnect, device number 111 [ 2241.434807][ T3488] CIFS: Attempting to mount //127.0.0.1/share [ 2241.435033][ T3488] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 2241.435180][ T3488] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 2241.435188][ T3488] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2241.435205][ T3488] CIFS: VFS: cifs_mount failed w/return code = -2 [ 2241.437666][ T3488] netlink: 'syz.0.9215': attribute type 2 has an invalid length. [ 2241.627009][ T3491] /dev/nullb0: Can't lookup blockdev [ 2241.717991][ T1425] libceph: mon0 (1)[c::]:6789 connect error [ 2241.757656][ T3496] ceph: No mds server is up or the cluster is laggy [ 2241.876445][ T3501] No source specified [ 2243.106909][ T31] audit: type=1400 audit(1790198930.231:2308): avc: denied { bind } for pid=3521 comm="syz.0.9225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2243.181817][ T3526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9227'. [ 2243.188124][ T3048] libceph: mon0 (1)[c::]:6789 connect error [ 2243.238177][ T3526] ceph: No mds server is up or the cluster is laggy [ 2244.116097][ T3539] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2245.102697][ T3545] No source specified [ 2245.116199][ T3547] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 2250.144920][ T5613] Bluetooth: hci5: sending frame failed (-49) [ 2250.149552][T32113] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2250.444318][ T3591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9236'. [ 2250.746304][ T3591] team0: Port device team_slave_0 removed [ 2252.767163][ T3598] overlayfs: missing 'lowerdir' [ 2254.002102][ T3606] Failed to initialize the IGMP autojoin socket (err -2) [ 2254.039427][ T3608] input: syz0 as /devices/virtual/input/input48 [ 2254.060910][ T31] audit: type=1400 audit(1790198941.191:2309): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.108719][ T31] audit: type=1400 audit(1790198941.231:2310): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.143574][ T31] audit: type=1400 audit(1790198941.271:2311): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.143775][ T31] audit: type=1400 audit(1790198941.271:2312): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.180709][ T3608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2254.229119][ T31] audit: type=1400 audit(1790198941.351:2313): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.281063][ T31] audit: type=1400 audit(1790198941.411:2314): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2254.396290][ T31] audit: type=1800 audit(1790198941.521:2315): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.9254" name="nullb0" dev="tmpfs" ino=10101 res=0 errno=0 [ 2255.486244][ T3629] netlink: 'syz.2.9251': attribute type 2 has an invalid length. [ 2255.918772][ T3645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=3645 comm=syz.2.9257 [ 2255.938719][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9257'. [ 2255.938818][ T3645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9257'. [ 2256.218888][ T3653] No source specified [ 2260.037491][ T3695] No source specified [ 2260.121392][ T3697] bridge0: port 3(netdevsim0) entered blocking state [ 2260.121479][ T3697] bridge0: port 3(netdevsim0) entered disabled state [ 2260.121569][ T3697] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2260.122614][ T3697] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2260.225218][ T3708] syzkaller0: entered promiscuous mode [ 2260.225232][ T3708] syzkaller0: entered allmulticast mode [ 2262.187187][ T3758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2262.228319][ T3758] bond3 (unregistering): Released all slaves [ 2262.289637][ T3765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3587 sclass=netlink_route_socket pid=3765 comm=syz.1.9292 [ 2262.459788][T20727] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 2262.612133][T20727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2262.614571][T20727] usb 5-1: not running at top speed; connect to a high speed hub [ 2262.614590][T20727] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2262.616764][T20727] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 2262.616787][T20727] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.616804][T20727] usb 5-1: config 4 has no interface number 0 [ 2262.618468][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.618482][T20727] usb 5-1: Product: syz [ 2262.618490][T20727] usb 5-1: Manufacturer: syz [ 2262.618499][T20727] usb 5-1: SerialNumber: syz [ 2263.117277][ T31] audit: type=1326 audit(1790198950.232:2316): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.3.9303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe94e99e159 code=0x0 [ 2263.501366][T20727] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 2263.501462][T20727] uvcvideo 5-1:4.147: No valid video chain found. [ 2263.533162][T20727] usb 5-1: USB disconnect, device number 112 [ 2266.595044][ T31] audit: type=1326 audit(1790198953.712:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3858 comm="syz.2.9331" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc51db9e159 code=0x0 [ 2266.704662][ T31] audit: type=1326 audit(1790198953.822:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.704787][ T31] audit: type=1326 audit(1790198953.822:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.706789][ T31] audit: type=1326 audit(1790198953.822:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.706985][ T31] audit: type=1326 audit(1790198953.822:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.707169][ T31] audit: type=1326 audit(1790198953.822:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.707338][ T31] audit: type=1326 audit(1790198953.822:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.707813][ T31] audit: type=1326 audit(1790198953.822:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2266.708183][ T31] audit: type=1326 audit(1790198953.822:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.9333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53f6f9e159 code=0x7ffc0000 [ 2267.823154][ T3902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9346'. [ 2267.823223][ T3902] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9346'. [ 2267.823267][ T3902] netlink: 'syz.0.9346': attribute type 5 has an invalid length. [ 2267.823298][ T3902] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9346'. [ 2269.239243][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9363'. [ 2270.458758][ T3965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9372'. [ 2271.141609][ T3980] overlayfs: failed to clone upperpath [ 2272.001668][ T3987] netlink: Failed to add helper -22 [ 2272.001696][ T3987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2273.171262][ T4029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2275.595825][ T4046] 9p: Could not find request transport: fd0x0000000000000008 [ 2276.008092][ T4060] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[4060] [ 2276.820318][ T3048] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 2277.012963][ T3048] usb 5-1: not running at top speed; connect to a high speed hub [ 2277.013249][ T3048] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2277.062421][ T3048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.062553][ T3048] usb 5-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 2277.062678][ T3048] usb 5-1: Manufacturer: ࡡ [ 2277.062813][ T3048] usb 5-1: SerialNumber: 䕳 [ 2277.609657][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2277.609707][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2277.687576][ T3048] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 2277.773940][ T3048] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2277.794399][ T3048] usb 5-1: USB disconnect, device number 113 [ 2277.872920][ T4065] udevd[4065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2278.216451][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9423'. [ 2278.216764][ T4098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9423'. [ 2278.307372][ T4102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9407'. [ 2279.705575][ T4140] jffs2: notice: (4140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2279.955254][ T4146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9444'. [ 2279.977365][ T4146] ipvlan0: entered promiscuous mode [ 2279.981633][ T4146] ipvlan0: left promiscuous mode [ 2281.010096][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 2281.010113][ T31] audit: type=1400 audit(1790198968.133:2327): avc: denied { write } for pid=4180 comm="syz.4.9459" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2283.283907][ T4235] netlink: 59 bytes leftover after parsing attributes in process `syz.1.9485'. [ 2285.357780][ T4276] Failed to initialize the IGMP autojoin socket (err -2) [ 2286.496707][ T4319] netlink: 'syz.2.9523': attribute type 10 has an invalid length. [ 2287.011139][ T4357] netlink: 'syz.3.9543': attribute type 32 has an invalid length. [ 2288.195890][ T31] audit: type=1400 audit(1790198975.313:2328): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2288.451880][ T31] audit: type=1400 audit(1790198975.573:2329): avc: denied { getopt } for pid=4396 comm="syz.0.9566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2288.505686][ T4399] erspan0: left allmulticast mode [ 2288.505900][ T4399] bridge2: port 1(erspan0) entered disabled state [ 2288.533642][ T4399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2288.577591][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9557'. [ 2288.589192][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9557'. [ 2288.636711][ T4399] netlink: 'syz.1.9557': attribute type 5 has an invalid length. [ 2288.795782][ T4399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9557'. [ 2289.535093][T20727] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2289.680093][T20727] usb 5-1: Using ep0 maxpacket: 32 [ 2289.680744][T20727] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2289.681611][T20727] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2289.681643][T20727] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2289.681674][T20727] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2289.681698][T20727] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2289.681718][T20727] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2289.681741][T20727] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2289.685109][T20727] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2289.685131][T20727] usb 5-1: Product: syz [ 2289.685145][T20727] usb 5-1: Manufacturer: syz [ 2289.685158][T20727] usb 5-1: SerialNumber: syz [ 2289.793364][T20727] usb 5-1: config 0 descriptor?? [ 2289.815325][T20727] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2289.816586][T20727] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2290.049899][ T4420] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 2290.050800][ T3048] usb 5-1: USB disconnect, device number 114 [ 2290.052616][ T3048] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2290.675464][ T31] audit: type=1326 audit(1790198977.793:2330): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.1.9582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ad719e159 code=0x0 [ 2290.946235][ T4482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9586'. [ 2291.710339][ T3048] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2292.241611][ T3048] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 2292.243180][ T3048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2292.243217][ T3048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.371172][ T4537] netlink: 'syz.3.9608': attribute type 2 has an invalid length. [ 2292.723136][ T3048] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 2292.768233][ T3048] usb 5-1: USB disconnect, device number 115 [ 2293.852297][ T4609] jffs2: notice: (4609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2294.377252][ T4650] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2294.523317][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9660'. [ 2294.530652][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9662'. [ 2296.583322][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9668'. [ 2296.583347][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9668'. [ 2296.716169][ T4695] jffs2: notice: (4695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2296.868113][ T31] audit: type=1400 audit(1790198983.984:2331): avc: denied { write } for pid=4694 comm="syz.4.9672" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2296.874103][ T31] audit: type=1400 audit(1790198983.994:2332): avc: denied { add_name } for pid=4694 comm="syz.4.9672" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2296.928316][ T31] audit: type=1400 audit(1790198984.034:2333): avc: denied { bind } for pid=4706 comm="syz.0.9677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2299.186063][ T4754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9695'. [ 2299.679904][ T3048] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2299.917817][ T3048] usb 5-1: Using ep0 maxpacket: 8 [ 2299.918952][ T3048] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2299.980253][ T3048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.980380][ T3048] usb 5-1: Product: syz [ 2299.980482][ T3048] usb 5-1: Manufacturer: syz [ 2299.980652][ T3048] usb 5-1: SerialNumber: syz [ 2300.097890][ T3048] usb 5-1: config 0 descriptor?? [ 2300.200349][ T3048] gspca_main: se401-2.14.0 probing 047d:5003 [ 2300.321965][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9701'. [ 2301.086099][ T3048] gspca_se401: ExtraFeatures: 255 [ 2301.320246][ T3048] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 2301.363880][ T31] audit: type=1400 audit(1790198988.484:2334): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2301.363931][ T31] audit: type=1400 audit(1790198988.484:2335): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2301.435267][ T3048] usb 5-1: USB disconnect, device number 116 [ 2301.446697][ T31] audit: type=1400 audit(1790198988.564:2336): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2301.500589][ T31] audit: type=1400 audit(1790198988.624:2337): avc: denied { search } for pid=4954 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2303.560899][ T4831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9727'. [ 2303.560913][ T4831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9727'. [ 2303.560921][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9727'. [ 2305.024323][ T4894] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2306.280350][ T4974] Bluetooth: MGMT ver 1.23 [ 2306.689027][ T3048] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2306.848070][ T3048] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2306.848961][ T3048] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 2306.848987][ T3048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 2306.849022][ T3048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.854165][ T3048] usb 5-1: config 0 descriptor?? [ 2307.174314][ T3048] ath6kl: Failed to submit usb control message: -71 [ 2307.174358][ T3048] ath6kl: unable to send the bmi data to the device: -71 [ 2307.174373][ T3048] ath6kl: Unable to send get target info: -71 [ 2307.261302][ T3048] ath6kl: Failed to init ath6kl core: -71 [ 2307.262251][ T3048] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2307.293664][ T3048] usb 5-1: USB disconnect, device number 117 [ 2307.812997][ T5027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2307.813028][ T5027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2307.869814][ T5027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2307.869846][ T5027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2308.880853][ T5049] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5049] [ 2310.775222][ T31] audit: type=1800 audit(1790198997.894:2338): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.9838" name="nullb0" dev="tmpfs" ino=7165 res=0 errno=0 [ 2310.955832][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9845'. [ 2314.147097][ T3048] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2314.310620][ T3048] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2314.311378][ T3048] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.311396][ T3048] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2314.311410][ T3048] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2314.311427][ T3048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.312714][ T3048] usb 5-1: config 0 descriptor?? [ 2315.133050][ T3048] sony 0003:054C:0268.0027: can't set operational mode: step 1 [ 2315.133078][ T3048] sony 0003:054C:0268.0027: Failed to set controller into operational mode [ 2315.148816][ T3048] sony 0003:054C:0268.0027: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 2315.148847][ T3048] sony 0003:054C:0268.0027: failed to claim input [ 2315.178126][ T3048] usb 5-1: USB disconnect, device number 118 [ 2315.361630][ T5279] fido_id[5279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2317.256782][ T3048] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2317.407277][ T3048] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2317.408158][ T3048] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.408196][ T3048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2317.408213][ T3048] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2317.408225][ T3048] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2317.408244][ T3048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.821424][ T3048] gud 5-1:1.0: probe with driver gud failed with error -121 [ 2318.204666][ T1425] usb 5-1: USB disconnect, device number 119 [ 2320.679927][ T5411] Failed to initialize the IGMP autojoin socket (err -2) [ 2320.869705][ T5423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9960'. [ 2320.912426][ T1425] libceph: mon0 (1)[c::]:6789 connect error [ 2320.960244][ T5423] ceph: No mds server is up or the cluster is laggy [ 2321.417130][ T1425] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2321.569147][ T1425] usb 5-1: Using ep0 maxpacket: 32 [ 2321.569879][ T1425] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2321.572294][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.572320][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2321.572353][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.575219][ T1425] usb 5-1: config 0 descriptor?? [ 2322.040697][ T1425] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 2322.289560][ T3048] usb 5-1: USB disconnect, device number 120 [ 2322.420957][ T5468] overlayfs: failed to clone upperpath [ 2322.578052][ T5475] process '/newroot/1726/file0' started with executable stack [ 2325.979205][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10010'. [ 2328.496407][ T1425] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2328.647014][ T1425] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2328.647863][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.651288][ T1425] usb 5-1: config 0 descriptor?? [ 2328.859864][ T1425] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2329.073774][ T1425] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 2329.073804][ T1425] [drm] Initialized udl on minor 1 [ 2329.710166][ T5736] 9p: Bad value for 'rfdno' [ 2331.019148][ T5806] bridge0: port 1(netdevsim0) entered blocking state [ 2331.019265][ T5806] bridge0: port 1(netdevsim0) entered disabled state [ 2331.019404][ T5806] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2331.028131][ T5806] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2331.032783][ T5806] bridge0: port 1(netdevsim0) entered blocking state [ 2331.032859][ T5806] bridge0: port 1(netdevsim0) entered forwarding state [ 2333.049033][ T5872] jffs2: notice: (5872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 2333.131066][ T5879] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.10116'. [ 2334.086671][ T1425] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 2334.087001][ T1425] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2334.131624][ T1425] usb 5-1: USB disconnect, device number 121 [ 2334.147601][T20727] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2334.149356][T20727] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2334.478464][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10138'. [ 2334.514334][ T5930] [ 2334.516925][ T5930] ====================================================== [ 2334.524636][ T5930] WARNING: possible circular locking dependency detected [ 2334.532357][ T5930] syzkaller #0 Tainted: G L [ 2334.538929][ T5930] ------------------------------------------------------ [ 2334.546639][ T5930] syz.4.10139/5930 is trying to acquire lock: [ 2334.553296][ T5930] ffff88807a0b1c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 2334.563498][ T5930] [ 2334.563498][ T5930] but task is already holding lock: [ 2334.571567][ T5930] ffff88807d25d460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 2334.580643][ T5930] [ 2334.580643][ T5930] which lock already depends on the new lock. [ 2334.580643][ T5930] [ 2334.592067][ T5930] [ 2334.592067][ T5930] the existing dependency chain (in reverse order) is: [ 2334.601954][ T5930] [ 2334.601954][ T5930] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 2334.610046][ T5930] lock_acquire+0x1d1/0x380 [ 2334.615554][ T5930] __mutex_lock+0x1a4/0x1bd0 [ 2334.621170][ T5930] anon_pipe_prefill_and_lock+0x16c/0x580 [ 2334.628014][ T5930] anon_pipe_write+0x164/0x1b50 [ 2334.633899][ T5930] __kernel_write_iter+0x6bb/0x930 [ 2334.640078][ T5930] __kernel_write+0xf6/0x140 [ 2334.645676][ T5930] autofs_notify_daemon+0x50d/0xd90 [ 2334.651949][ T5930] autofs_wait+0x10fd/0x1b50 [ 2334.657555][ T5930] autofs_mount_wait+0x132/0x3b0 [ 2334.663559][ T5930] autofs_d_automount+0x490/0x950 [ 2334.669659][ T5930] __traverse_mounts+0x1b9/0x8a0 [ 2334.675651][ T5930] step_into_slowpath+0xb7e/0xf90 [ 2334.681723][ T5930] path_lookupat+0x58b/0xc40 [ 2334.687323][ T5930] filename_lookup+0x202/0x590 [ 2334.693108][ T5930] vfs_statx+0xff/0x3f0 [ 2334.698228][ T5930] __do_sys_newlstat+0xaa/0x130 [ 2334.704114][ T5930] do_syscall_64+0x123/0x790 [ 2334.709730][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.716760][ T5930] [ 2334.716760][ T5930] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2334.725235][ T5930] lock_acquire+0x1d1/0x380 [ 2334.730739][ T5930] __mutex_lock+0x1a4/0x1bd0 [ 2334.736338][ T5930] autofs_notify_daemon+0x4f8/0xd90 [ 2334.742607][ T5930] autofs_wait+0x10fd/0x1b50 [ 2334.748206][ T5930] autofs_mount_wait+0x132/0x3b0 [ 2334.754188][ T5930] autofs_d_automount+0x490/0x950 [ 2334.760275][ T5930] __traverse_mounts+0x1b9/0x8a0 [ 2334.766256][ T5930] step_into_slowpath+0xb7e/0xf90 [ 2334.772331][ T5930] path_lookupat+0x58b/0xc40 [ 2334.777923][ T5930] filename_lookup+0x202/0x590 [ 2334.783710][ T5930] kern_path+0x37/0x50 [ 2334.788736][ T5930] lookup_bdev+0xd8/0x2a0 [ 2334.794040][ T5930] resume_store+0x1d6/0x460 [ 2334.799560][ T5930] kobj_attr_store+0x58/0x80 [ 2334.805155][ T5930] sysfs_kf_write+0xf2/0x150 [ 2334.810751][ T5930] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2334.817121][ T5930] vfs_write+0x6af/0x1050 [ 2334.822446][ T5930] ksys_write+0x12a/0x250 [ 2334.827752][ T5930] do_syscall_64+0x123/0x790 [ 2334.833353][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.840379][ T5930] [ 2334.840379][ T5930] -> #0 (&of->mutex){+.+.}-{4:4}: [ 2334.848280][ T5930] check_prev_add+0xeb/0xe60 [ 2334.853874][ T5930] __lock_acquire+0x1528/0x1f40 [ 2334.859754][ T5930] lock_acquire+0x1d1/0x380 [ 2334.865253][ T5930] __mutex_lock+0x1a4/0x1bd0 [ 2334.870877][ T5930] kernfs_fop_write_iter+0x2c2/0x5f0 [ 2334.877237][ T5930] iter_file_splice_write+0x830/0x10b0 [ 2334.883790][ T5930] do_splice+0x109c/0x1fa0 [ 2334.889196][ T5930] __do_splice+0x33b/0x370 [ 2334.894602][ T5930] __x64_sys_splice+0x187/0x250 [ 2334.900486][ T5930] do_syscall_64+0x123/0x790 [ 2334.906085][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.913113][ T5930] [ 2334.913113][ T5930] other info that might help us debug this: [ 2334.913113][ T5930] [ 2334.924334][ T5930] Chain exists of: [ 2334.924334][ T5930] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 2334.924334][ T5930] [ 2334.937970][ T5930] Possible unsafe locking scenario: [ 2334.937970][ T5930] [ 2334.946133][ T5930] CPU0 CPU1 [ 2334.952004][ T5930] ---- ---- [ 2334.957875][ T5930] lock(&pipe->mutex); [ 2334.962419][ T5930] lock(&sbi->pipe_mutex); [ 2334.970112][ T5930] lock(&pipe->mutex); [ 2334.977427][ T5930] lock(&of->mutex); [ 2334.981778][ T5930] [ 2334.981778][ T5930] *** DEADLOCK *** [ 2334.981778][ T5930] [ 2334.990703][ T5930] locks held by syz.4.10139/5930: 2, last CPU#0: [ 2334.997632][ T5930] #0: ffff88802d944460 (sb_writers#11){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 2335.007655][ T5930] #1: ffff88807d25d460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 2335.017201][ T5930] [ 2335.017201][ T5930] stack backtrace: [ 2335.023652][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.4.10139 Tainted: G L syzkaller #0 PREEMPT(full) [ 2335.035651][ T5930] Tainted: [L]=SOFTLOCKUP [ 2335.040377][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2335.051409][ T5930] Call Trace: [ 2335.054989][ T5930] [ 2335.058191][ T5930] dump_stack_lvl+0x100/0x190 [ 2335.063316][ T5930] print_circular_bug.cold+0x178/0x1be [ 2335.069300][ T5930] check_noncircular+0x146/0x160 [ 2335.074708][ T5930] ? find_held_lock+0x2b/0x80 [ 2335.079837][ T5930] check_prev_add+0xeb/0xe60 [ 2335.084857][ T5930] ? stack_depot_save_flags+0x49a/0x9f0 [ 2335.090934][ T5930] __lock_acquire+0x1528/0x1f40 [ 2335.096254][ T5930] ? __x64_sys_splice+0x187/0x250 [ 2335.101758][ T5930] ? do_syscall_64+0x123/0x790 [ 2335.106979][ T5930] lock_acquire+0x1d1/0x380 [ 2335.111905][ T5930] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 2335.117882][ T5930] ? __pfx___might_resched+0x10/0x10 [ 2335.123672][ T5930] __mutex_lock+0x1a4/0x1bd0 [ 2335.128700][ T5930] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 2335.134682][ T5930] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 2335.140660][ T5930] ? __asan_memcpy+0x3c/0x60 [ 2335.145682][ T5930] ? __pfx___mutex_lock+0x10/0x10 [ 2335.151193][ T5930] ? __pfx__copy_from_iter+0x10/0x10 [ 2335.156981][ T5930] ? __kmalloc_noprof+0x350/0x840 [ 2335.162480][ T5930] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 2335.168459][ T5930] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 2335.174436][ T5930] kernfs_fop_write_iter+0x2c2/0x5f0 [ 2335.180223][ T5930] iter_file_splice_write+0x830/0x10b0 [ 2335.186211][ T5930] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2335.192677][ T5930] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2335.199138][ T5930] do_splice+0x109c/0x1fa0 [ 2335.203972][ T5930] ? __lock_acquire+0x5c0/0x1f40 [ 2335.209381][ T5930] ? __pfx_do_splice+0x10/0x10 [ 2335.214610][ T5930] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 2335.220592][ T5930] ? __fget_files+0x34/0x3d0 [ 2335.225629][ T5930] ? find_held_lock+0x2b/0x80 [ 2335.230759][ T5930] __do_splice+0x33b/0x370 [ 2335.235595][ T5930] ? __pfx___do_splice+0x10/0x10 [ 2335.241005][ T5930] __x64_sys_splice+0x187/0x250 [ 2335.246320][ T5930] do_syscall_64+0x123/0x790 [ 2335.251349][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.257803][ T5930] RIP: 0033:0x7f53f6f9e159 [ 2335.262633][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2335.284187][ T5930] RSP: 002b:00007f53f7dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 2335.293414][ T5930] RAX: ffffffffffffffda RBX: 00007f53f7225fa0 RCX: 00007f53f6f9e159 [ 2335.302160][ T5930] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 2335.310898][ T5930] RBP: 00007f53f703506b R08: 000000000001000a R09: 0000000000000000 [ 2335.319641][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2335.328382][ T5930] R13: 00007f53f7226038 R14: 00007f53f7225fa0 R15: 00007ffe47d8f3b8 [ 2335.337131][ T5930] [ 2335.361620][ T31] audit: type=1400 audit(1790199022.476:2339): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[4495]" dev="pipefs" ino=4495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2335.464046][ T31] audit: type=1400 audit(1790199022.576:2340): avc: denied { search } for pid=5585 comm="sshd-session" name="/" dev="sda1" ino=2 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2335.464088][ T31] audit: type=1400 audit(1790199022.586:2341): avc: denied { search } for pid=5585 comm="sshd-session" name="/" dev="sda1" ino=2 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2336.262493][T30397] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 2336.262625][T30397] bridge0: port 1(wlan1) entered disabled state [ 2336.531666][T30397] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2336.550555][T30397] bond0 (unregistering): Released all slaves [ 2336.551881][T30397] bond1 (unregistering): Released all slaves [ 2336.554326][T30397] bond2 (unregistering): Released all slaves [ 2336.659093][T30397] rxrpc: Leaked peer 112 {1} [0000:0000:0000:0000:0000:0000:0000:0000]:7003 [ 2337.080236][T30397] IPVS: stop unused estimator thread 0... [ 2337.160015][T30397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.199589][T30397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.238099][T30397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.277697][T30397] bridge0: port 1(netdevsim0) entered disabled state [ 2337.296037][T30397] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 2337.296057][T30397] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 2337.296089][T30397] bridge0: port 1(netdevsim0) entered disabled state [ 2337.296960][T30397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.366613][ T31] audit: type=1400 audit(1790199024.496:2342): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.366762][ T31] audit: type=1400 audit(1790199024.496:2343): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.366917][ T31] audit: type=1400 audit(1790199024.496:2344): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.367372][ T31] audit: type=1400 audit(1790199024.496:2345): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.367703][ T31] audit: type=1400 audit(1790199024.496:2346): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.368358][ T31] audit: type=1400 audit(1790199024.496:2347): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.368549][ T31] audit: type=1400 audit(1790199024.496:2348): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2337.657355][T30397] bridge0: port 1(netdevsim0) entered disabled state [ 2337.676518][T30397] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 2337.676535][T30397] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 2337.676570][T30397] bridge0: port 1(netdevsim0) entered disabled state [ 2337.742888][T30397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.791301][T30397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.828630][T30397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.868861][T30397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.067390][T30397] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 2338.067409][T30397] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 2338.067439][T30397] bridge0: port 3(netdevsim0) entered disabled state [ 2338.171027][T30397] bridge_slave_1: left allmulticast mode [ 2338.171049][T30397] bridge_slave_1: left promiscuous mode [ 2338.171121][T30397] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.171669][T30397] bridge_slave_0: left allmulticast mode [ 2338.171679][T30397] bridge_slave_0: left promiscuous mode [ 2338.171732][T30397] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.302310][T30397] bond2 (unregistering): (slave geneve4): Releasing active interface [ 2338.303606][T30397] bond1 (unregistering): (slave geneve3): Releasing active interface [ 2338.330077][T30397] bond0 (unregistering): Released all slaves [ 2338.331156][T30397] bond1 (unregistering): Released all slaves [ 2338.332953][T30397] bond2 (unregistering): Released all slaves [ 2338.348654][T30397] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 2338.365944][T30397] bond3 (unregistering): Released all slaves [ 2338.402185][T30397] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2338.403312][T30397] batman_adv: batadv0: Removing interface: ipvlan2 [ 2338.420286][T30397] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 2338.421801][T30397] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 2338.421819][T30397] ip6gretap2 (unregistering): left allmulticast mode [ 2338.481558][T30397] bond4 (unregistering): (slave gretap1): Releasing active interface [ 2338.529323][T30397] bond0 (unregistering): Released all slaves [ 2338.530367][T30397] bond1 (unregistering): Released all slaves [ 2338.532157][T30397] bond2 (unregistering): Released all slaves [ 2338.533883][T30397] bond3 (unregistering): left allmulticast mode [ 2338.551715][T30397] team0: Port device macvlan2 removed [ 2338.562316][T30397] bond3 (unregistering): Released all slaves [ 2338.567827][T30397] bond4 (unregistering): Released all slaves [ 2338.620823][T30397] bond4 (unregistering): (slave erspan1): Releasing backup interface [ 2338.621046][T30397] erspan1 (unregistering): left promiscuous mode [ 2338.650307][T30397] bond0 (unregistering): (slave gre1): Releasing backup interface [ 2338.650323][T30397] gre1 (unregistering): left promiscuous mode [ 2338.670292][T30397] tipc: Disabling bearer [ 2338.682431][T30397] bond1 (unregistering): Released all slaves [ 2338.684743][T30397] bond0 (unregistering): Released all slaves [ 2338.698346][T30397] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2338.698633][T30397] bond2 (unregistering): Released all slaves [ 2338.700513][T30397] bond3 (unregistering): Released all slaves [ 2338.702317][T30397] bond4 (unregistering): Released all slaves [ 2338.757803][T30397] batman_adv: batadv0: Removing interface: ipvlan2 [ 2338.763356][T30397] tipc: Disabling bearer [ 2338.810904][T30397] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2338.834458][T30388] smbdirect: ib_dev[syz1] removed [ 2338.842688][T30397] bond0 (unregistering): left promiscuous mode [ 2338.842701][T30397] bond_slave_0: left promiscuous mode [ 2338.842764][T30397] bond_slave_1: left promiscuous mode [ 2338.843334][T30397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2338.843908][T30397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2338.844180][T30397] bond0 (unregistering): Released all slaves [ 2338.849402][T30397] bond1 (unregistering): Released all slaves [ 2338.855404][T30397] bond2 (unregistering): Released all slaves [ 2338.980720][T30397] : left promiscuous mode [ 2339.022918][T30397] : left promiscuous mode [ 2339.046547][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.046586][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2339.047867][T30397] tipc: Left network mode [ 2339.062021][T30397] tipc: Disabling bearer [ 2339.081380][T30397] tipc: Left network mode [ 2339.081757][T30397] tipc: Left network mode [ 2339.099357][T30397] tipc: Disabling bearer [ 2339.099450][T30397] tipc: Left network mode [ 2339.680047][T30397] hsr_slave_0: left promiscuous mode [ 2339.680274][T30397] hsr_slave_1: left promiscuous mode [ 2339.681741][T30397] hsr_slave_0: left promiscuous mode [ 2339.681941][T30397] hsr_slave_1: left promiscuous mode [ 2339.683380][T30397] hsr_slave_0: left promiscuous mode [ 2339.683594][T30397] hsr_slave_1: left promiscuous mode [ 2339.684263][T30397] batadv0: left promiscuous mode [ 2339.727827][T30397] hsr_slave_0: left promiscuous mode [ 2339.728043][T30397] hsr_slave_1: left promiscuous mode [ 2339.728275][T30397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2339.728524][T30397] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 2339.728536][T30397] batman_adv: batadv0: Removing interface: ipvlan3 [ 2339.731170][T30397] veth1_macvtap: left promiscuous mode [ 2339.731198][T30397] veth1_vlan: left promiscuous mode [ 2339.731220][T30397] veth0_vlan: left promiscuous mode [ 2339.731682][T30397] veth0_macvtap: left promiscuous mode [ 2339.731722][T30397] veth1_vlan: left promiscuous mode [ 2339.731743][T30397] veth0_vlan: left promiscuous mode [ 2340.147233][T30397] team0 (unregistering): Port device team_slave_1 removed [ 2340.931738][T30397] IPVS: stop unused estimator thread 0... [ 2340.931945][T30397] IPVS: stop unused estimator thread 0... [ 2340.932123][T30397] IPVS: stop unused estimator thread 0...