[ 24.023057][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.034548][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 31.713695][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 31.713711][ T27] audit: type=1400 audit(1648747940.112:73): avc: denied { transition } for pid=3381 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.742819][ T27] audit: type=1400 audit(1648747940.112:74): avc: denied { write } for pid=3381 comm="sh" path="pipe:[27363]" dev="pipefs" ino=27363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.97' (ECDSA) to the list of known hosts. [ 39.376555][ T27] audit: type=1400 audit(1648747947.772:75): avc: denied { execmem } for pid=3587 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.402564][ T27] audit: type=1400 audit(1648747947.772:76): avc: denied { mounton } for pid=3587 comm="syz-executor375" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.430450][ T27] audit: type=1400 audit(1648747947.772:77): avc: denied { mount } for pid=3587 comm="syz-executor375" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.459734][ T3588] chnl_net:caif_netlink_parms(): no params data found [ 39.467308][ T27] audit: type=1400 audit(1648747947.772:78): avc: denied { mounton } for pid=3588 comm="syz-executor375" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 39.491435][ T27] audit: type=1400 audit(1648747947.772:79): avc: denied { mount } for pid=3588 comm="syz-executor375" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.514181][ T27] audit: type=1400 audit(1648747947.772:80): avc: denied { mounton } for pid=3588 comm="syz-executor375" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 39.541390][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.548615][ T3588] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.556413][ T3588] device bridge_slave_0 entered promiscuous mode [ 39.564283][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.571782][ T3588] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.579353][ T3588] device bridge_slave_1 entered promiscuous mode [ 39.596005][ T3588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.606745][ T3588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.625387][ T3588] team0: Port device team_slave_0 added [ 39.633504][ T3588] team0: Port device team_slave_1 added [ 39.648034][ T3588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.655017][ T3588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.680957][ T3588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.692866][ T3588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.699813][ T3588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.725782][ T3588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.747977][ T3588] device hsr_slave_0 entered promiscuous mode [ 39.755992][ T3588] device hsr_slave_1 entered promiscuous mode [ 39.817897][ T27] audit: type=1400 audit(1648747948.212:81): avc: denied { create } for pid=3588 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.818862][ T3588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.839163][ T27] audit: type=1400 audit(1648747948.212:82): avc: denied { write } for pid=3588 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.866436][ T27] audit: type=1400 audit(1648747948.212:83): avc: denied { read } for pid=3588 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.868558][ T3588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.895638][ T3588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.904126][ T3588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.919123][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.926318][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.933689][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.940782][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.973808][ T3588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.984902][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.993619][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.001637][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.009246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.020797][ T3588] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.033824][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.042432][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.049485][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.057197][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.066076][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.073198][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.087681][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.096427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.111119][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.119464][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.127935][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.137627][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.151889][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.159281][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.169715][ T3588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.180157][ T27] audit: type=1400 audit(1648747948.572:84): avc: denied { module_request } for pid=3588 comm="syz-executor375" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.245539][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.262093][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.270455][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.278238][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.287113][ T3588] device veth0_vlan entered promiscuous mode [ 40.296319][ T3588] device veth1_vlan entered promiscuous mode [ 40.311771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.319729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.327997][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.338498][ T3588] device veth0_macvtap entered promiscuous mode [ 40.347218][ T3588] device veth1_macvtap entered promiscuous mode [ 40.359721][ T3588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.367841][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.376741][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.387426][ T3588] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program [ 40.394967][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.405241][ T3588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.414517][ T3588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.423591][ T3588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.432524][ T3588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.720526][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.960453][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 41.080607][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.090384][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 41.100104][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.110196][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 41.120159][ T6] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 41.129536][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.171293][ T6] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 41.381457][ T6] scsi host1: usb-storage 1-1:1.0 [ 42.461423][ T11] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 42.478236][ T11] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 42.712547][ T3596] usb 1-1: USB disconnect, device number 2 [ 42.730404][ T3608] sddr09: could not read card info [ 42.735658][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 42.743716][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 42.749663][ T8] sd 1:0:0:0: [sdb] Write Protect is off [ 42.755902][ T8] sd 1:0:0:0: [sdb] Mode Sense: 00 00 00 00 [ 42.762938][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 42.769323][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 42.779683][ T1237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.792337][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 42.814541][ T3607] udevd[3607]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 42.845188][ T3609] udevd[3609]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 42.910479][ C1] BUG: sleeping function called from invalid context at block/blk-sysfs.c:766 [ 42.919427][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 42.928152][ C1] preempt_count: 101, expected: 0 [ 42.933184][ C1] RCU nest depth: 0, expected: 0 [ 42.938102][ C1] INFO: lockdep is turned off. [ 42.942849][ C1] Preemption disabled at: [ 42.942855][ C1] [<0000000000000000>] 0x0 [ 42.951562][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.17.0-syzkaller-13430-g787af64d05cd #0 [ 42.962299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.972338][ C1] Call Trace: [ 42.975614][ C1] [ 42.978631][ C1] dump_stack_lvl+0xcd/0x134 [ 42.983210][ C1] __might_resched.cold+0x222/0x26b [ 42.988419][ C1] blk_release_queue+0x1f/0x320 [ 42.993258][ C1] kobject_put+0x1c8/0x540 [ 42.997663][ C1] blkg_free.part.0+0x112/0x1f0 [ 43.002524][ C1] __blkg_release+0x105/0x160 [ 43.007207][ C1] rcu_core+0x7b1/0x1880 [ 43.011439][ C1] ? call_rcu+0x790/0x790 [ 43.015759][ C1] __do_softirq+0x29b/0x9c2 [ 43.020246][ C1] __irq_exit_rcu+0x123/0x180 [ 43.024914][ C1] irq_exit_rcu+0x5/0x20 [ 43.029161][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 43.034798][ C1] [ 43.037722][ C1] [ 43.040645][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 43.046635][ C1] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 43.052444][ C1] Code: 89 de e8 0d 65 17 f8 84 db 75 ac e8 24 61 17 f8 e8 af a8 1d f8 eb 0c e8 18 61 17 f8 0f 00 2d 81 29 d1 00 e8 0c 61 17 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 87 63 17 f8 48 85 db [ 43.072135][ C1] RSP: 0018:ffffc9000038fd18 EFLAGS: 00000293 [ 43.078270][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.086231][ C1] RDX: ffff888011532180 RSI: ffffffff89606be4 RDI: ffffffff89606bd1 [ 43.094196][ C1] RBP: ffff888016b58064 R08: 0000000000000000 R09: 0000000000000000 [ 43.102158][ C1] R10: ffffffff817e14b8 R11: 0000000000000000 R12: 0000000000000001 [ 43.110555][ C1] R13: ffff888016b58000 R14: ffff888016b58064 R15: ffff88814826f004 [ 43.118524][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 43.123555][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 43.128752][ C1] ? acpi_idle_do_entry+0x1b1/0x250 [ 43.134047][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 43.139245][ C1] acpi_idle_enter+0x361/0x500 [ 43.144011][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 43.149127][ C1] cpuidle_enter+0x4a/0xa0 [ 43.153544][ C1] do_idle+0x3e8/0x590 [ 43.157618][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 43.162644][ C1] ? _raw_spin_unlock+0x40/0x40 [ 43.167515][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 43.172713][ C1] cpu_startup_entry+0x14/0x20 [ 43.177476][ C1] start_secondary+0x265/0x340 [ 43.182271][ C1] ? set_cpu_sibling_map+0x1ef0/0x1ef0 [ 43.187731][ C1] secondary_startup_64_no_verify+0xc3/0xcb [ 43.193636][ C1]