syzkaller login: [ 124.676892][ T40] audit: type=1400 audit(1592556718.329:41): avc: denied { map } for pid=9201 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:30629' (ECDSA) to the list of known hosts. [ 131.068693][ T40] audit: type=1400 audit(1592556724.709:42): avc: denied { map } for pid=9213 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16524 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/06/19 08:52:04 fuzzer started 2020/06/19 08:52:07 dialing manager at 10.0.2.10:33751 [ 135.131638][ T40] audit: type=1400 audit(1592556728.769:43): avc: denied { integrity } for pid=9230 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 2020/06/19 08:52:09 syscalls: 3093 2020/06/19 08:52:09 code coverage: enabled 2020/06/19 08:52:09 comparison tracing: enabled 2020/06/19 08:52:09 extra coverage: enabled 2020/06/19 08:52:09 setuid sandbox: enabled 2020/06/19 08:52:09 namespace sandbox: enabled 2020/06/19 08:52:09 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/19 08:52:09 fault injection: enabled 2020/06/19 08:52:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/19 08:52:09 net packet injection: enabled 2020/06/19 08:52:09 net device setup: enabled 2020/06/19 08:52:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/19 08:52:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/19 08:52:09 USB emulation: enabled [ 143.165168][ C0] hrtimer: interrupt took 52955495 ns 08:52:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x5c, '.'}, 0x5c}], [], 0x2}) [ 160.217310][ T40] audit: type=1400 audit(1592556753.859:44): avc: denied { map } for pid=9232 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23074 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 161.691902][ T9233] IPVS: ftp: loaded support on port[0] = 21 [ 162.260538][ T9233] chnl_net:caif_netlink_parms(): no params data found 08:52:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fchown(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000) [ 162.400616][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.427649][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.461124][ T9233] device bridge_slave_0 entered promiscuous mode [ 162.520991][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.552016][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.584176][ T9233] device bridge_slave_1 entered promiscuous mode [ 162.654338][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.660277][ T9239] IPVS: ftp: loaded support on port[0] = 21 [ 162.685040][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.757832][ T9233] team0: Port device team_slave_0 added [ 162.780935][ T9233] team0: Port device team_slave_1 added 08:52:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) sendmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000000)=@file={0x0, '.\x00'}, 0x6e, 0x0}, 0x0) [ 162.828924][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.848808][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.947350][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.003149][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.028998][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 08:52:36 executing program 3: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) [ 163.187024][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.501039][ T9233] device hsr_slave_0 entered promiscuous mode [ 163.607364][ T9233] device hsr_slave_1 entered promiscuous mode [ 163.779526][ T9243] IPVS: ftp: loaded support on port[0] = 21 [ 163.832614][ T9239] chnl_net:caif_netlink_parms(): no params data found [ 163.891979][ T9244] IPVS: ftp: loaded support on port[0] = 21 [ 164.160288][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.361295][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.537941][ T9239] device bridge_slave_0 entered promiscuous mode [ 164.727266][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.771894][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.805467][ T9239] device bridge_slave_1 entered promiscuous mode [ 164.940078][ T9239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.997139][ T40] audit: type=1400 audit(1592556758.639:45): avc: denied { create } for pid=9233 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 165.068196][ T9239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.102805][ T40] audit: type=1400 audit(1592556758.649:46): avc: denied { write } for pid=9233 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 165.137020][ T9239] team0: Port device team_slave_0 added [ 165.161265][ T40] audit: type=1400 audit(1592556758.659:47): avc: denied { read } for pid=9233 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 165.217833][ T9233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.311037][ T9239] team0: Port device team_slave_1 added [ 165.337233][ T9233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.472037][ T9239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.501109][ T9239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.606611][ T9239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.648481][ T9233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.763046][ T9233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.896071][ T9239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.919974][ T9239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.050597][ T9239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.117181][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 166.399285][ T9239] device hsr_slave_0 entered promiscuous mode [ 166.476189][ T9239] device hsr_slave_1 entered promiscuous mode [ 166.556153][ T9239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.614957][ T9239] Cannot create hsr debugfs directory [ 166.671672][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 166.867949][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.886824][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.911914][ T9244] device bridge_slave_0 entered promiscuous mode [ 166.956018][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.982469][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.036840][ T9244] device bridge_slave_1 entered promiscuous mode [ 167.107468][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.146771][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.343574][ T9243] device bridge_slave_0 entered promiscuous mode [ 167.411772][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.434718][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.469034][ T9243] device bridge_slave_1 entered promiscuous mode [ 167.572738][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.622905][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.682309][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.722820][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.814820][ T9243] team0: Port device team_slave_0 added [ 167.839343][ T9244] team0: Port device team_slave_0 added [ 167.868576][ T9244] team0: Port device team_slave_1 added [ 167.903279][ T9243] team0: Port device team_slave_1 added [ 167.975538][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.002271][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.050419][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.071914][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.084831][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.132250][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.153325][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.168162][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.220473][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.251069][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.268021][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.324752][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.467316][ T9244] device hsr_slave_0 entered promiscuous mode [ 168.544302][ T9244] device hsr_slave_1 entered promiscuous mode [ 168.603839][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.619824][ T9244] Cannot create hsr debugfs directory [ 168.787005][ T9243] device hsr_slave_0 entered promiscuous mode [ 168.885940][ T9243] device hsr_slave_1 entered promiscuous mode [ 168.944314][ T9243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.957552][ T9243] Cannot create hsr debugfs directory [ 168.971098][ T9239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.067604][ T9239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.161184][ T9239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.231561][ T9239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.458767][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.575742][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.639075][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.690386][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.729680][ T9244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.827070][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.843457][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.858431][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.886428][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.943897][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.963822][ T9244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.027122][ T9244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.134362][ T9244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.239923][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.259398][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.279373][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.297867][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.315562][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.362825][ T9243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.430481][ T9243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.520525][ T9243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.631677][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.649271][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.663077][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.678009][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.699451][ T9243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.777292][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.791073][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.819395][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.830346][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.849593][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.860622][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.880298][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.908990][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.952409][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.992177][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.017674][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.080556][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.098397][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.118638][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.157886][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.183345][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.204401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.230566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.284793][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.309447][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.337045][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.365278][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.383145][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.411362][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.439337][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.456983][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.475393][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.490510][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.516268][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.540591][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.594282][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.611465][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.628841][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.651761][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.670857][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.682861][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.747074][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.774462][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.813085][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.830235][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.854510][ T9233] device veth0_vlan entered promiscuous mode [ 171.870470][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.888654][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.918161][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.949530][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.967089][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.988033][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.019762][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.035605][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.053096][ T9233] device veth1_vlan entered promiscuous mode [ 172.072031][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.121138][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.140027][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.154903][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.172130][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.191551][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.204712][ T9261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.217483][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.233387][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.250828][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.267615][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.291630][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.309286][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.330915][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.359039][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.387125][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.404339][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.426251][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.442401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.463428][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.483340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.514384][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.544350][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.567456][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.585788][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.607314][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.628895][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.665624][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.686428][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.713101][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.780492][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.799044][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.816503][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.844344][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.856967][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.872582][ T9233] device veth0_macvtap entered promiscuous mode [ 172.905743][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.922394][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.937324][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.955414][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.970455][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.984074][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.997202][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.020498][ T9233] device veth1_macvtap entered promiscuous mode [ 173.040402][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.068922][ T9239] device veth0_vlan entered promiscuous mode [ 173.089455][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.106219][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.126741][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.155776][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.185729][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.215170][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.237855][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.316680][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.338869][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.368448][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.400295][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.424791][ T9239] device veth1_vlan entered promiscuous mode [ 173.448374][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.469120][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.486442][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.512466][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.536802][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.558318][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.591314][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.617870][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.642495][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.690635][ T9243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.742133][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.771345][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.795541][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.822220][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.855393][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.206373][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.239342][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.397928][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.417572][ T40] audit: type=1400 audit(1592556768.059:48): avc: denied { associate } for pid=9233 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 174.893277][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.282659][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.520694][ T9233] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 175.635327][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.699544][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.747138][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.788923][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.821164][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.874690][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.963835][ T9239] device veth0_macvtap entered promiscuous mode [ 176.189947][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.238839][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.278605][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.360343][ T9269] overlayfs: unrecognized mount option "lowerdir\.\" or missing value [ 176.373562][ T9243] device veth0_vlan entered promiscuous mode [ 176.430456][ T9272] overlayfs: unrecognized mount option "lowerdir\.\" or missing value [ 176.431654][ T9239] device veth1_macvtap entered promiscuous mode [ 176.572175][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.622763][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.672971][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.718039][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.767562][ T9243] device veth1_vlan entered promiscuous mode [ 176.810348][ T9244] device veth0_vlan entered promiscuous mode 08:52:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x5c, '.'}, 0x5c}], [], 0x2}) [ 176.859501][ T9239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:52:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x5c, '.'}, 0x5c}], [], 0x2}) [ 176.939943][ T9239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.034396][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.045144][ T9279] overlayfs: unrecognized mount option "lowerdir\.\" or missing value 08:52:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x5c, '.'}, 0x5c}], [], 0x2}) [ 177.170655][ T9266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.241906][ T9266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.275628][ T9283] overlayfs: unrecognized mount option "lowerdir\.\" or missing value [ 177.335104][ T9244] device veth1_vlan entered promiscuous mode 08:52:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 177.697889][ T9239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.782369][ T9239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.876588][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_1 08:52:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 177.975822][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.016379][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.108265][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.131638][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.154204][ T9243] device veth0_macvtap entered promiscuous mode [ 178.250277][ T9243] device veth1_macvtap entered promiscuous mode [ 178.331217][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.355083][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.372937][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.389940][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.480964][ T9244] device veth0_macvtap entered promiscuous mode [ 178.522544][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.561588][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.590676][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.624925][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.646383][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.672173][ T9244] device veth1_macvtap entered promiscuous mode [ 178.696017][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.719465][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.743408][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.770718][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.798446][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.836541][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.875731][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.903298][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.941812][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.972421][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.004378][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.381487][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.390016][ T40] audit: type=1804 audit(1592556773.029:49): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir868429218/syzkaller.WSFxLm/0/cgroup.controllers" dev="sda1" ino=16559 res=1 [ 179.425934][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.550819][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.586308][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.626745][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.666817][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.689460][ T40] audit: type=1804 audit(1592556773.339:50): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir868429218/syzkaller.WSFxLm/0/cgroup.controllers" dev="sda1" ino=16559 res=1 [ 179.708776][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 08:52:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 179.803090][ T40] audit: type=1800 audit(1592556773.359:51): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16559 res=0 [ 179.847522][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.924541][ T40] audit: type=1800 audit(1592556773.369:52): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16559 res=0 [ 180.029287][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.117934][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.153041][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.180731][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.208827][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.240609][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.265672][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.288739][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.310870][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.342487][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:52:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x4, 0x0, &(0x7f0000000240)="932d62d4"}) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40106308}, @acquire={0x40406301}], 0x1000000, 0x73b000, 0x0}) [ 180.524855][ T40] audit: type=1400 audit(1592556774.179:53): avc: denied { set_context_mgr } for pid=9309 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 180.651573][ T40] audit: type=1400 audit(1592556774.179:54): avc: denied { map } for pid=9309 comm="syz-executor.1" path="/dev/binder1" dev="devtmpfs" ino=1830 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 180.712177][ T40] audit: type=1400 audit(1592556774.259:55): avc: denied { call } for pid=9309 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 180.954460][ T9315] IPVS: ftp: loaded support on port[0] = 21 [ 181.235109][ T9265] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 181.665484][ T9265] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.691705][ T9265] usb 8-1: config 0 has no interfaces? [ 181.704014][ T9265] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 181.725891][ T9265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.763551][ T9265] usb 8-1: config 0 descriptor?? [ 182.023945][ T9315] udc-core: couldn't find an available UDC or it's busy [ 182.043949][ T9315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.074311][ T3830] usb 8-1: USB disconnect, device number 2 [ 182.601742][ T9315] IPVS: ftp: loaded support on port[0] = 21 [ 182.895349][ T9265] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 182.984750][ T9315] udc-core: couldn't find an available UDC or it's busy [ 183.012617][ T9315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 183.274042][ T9265] usb 8-1: device descriptor read/all, error -61 08:52:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xd0) 08:52:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) 08:52:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x4, 0x0, &(0x7f0000000240)="932d62d4"}) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40106308}, @acquire={0x40406301}], 0x1000000, 0x73b000, 0x0}) [ 183.376443][ T40] audit: type=1400 audit(1592556777.029:56): avc: denied { open } for pid=9320 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 08:52:57 executing program 3: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) 08:52:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 183.525579][ T9330] IPVS: ftp: loaded support on port[0] = 21 08:52:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xd0) 08:52:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) 08:52:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x4, 0x0, &(0x7f0000000240)="932d62d4"}) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40106308}, @acquire={0x40406301}], 0x1000000, 0x73b000, 0x0}) [ 183.668618][ T9260] tipc: TX() has been purged, node left! 08:52:57 executing program 2: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) 08:52:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 183.785666][ T9346] IPVS: ftp: loaded support on port[0] = 21 [ 183.799083][ T9352] binder: BINDER_SET_CONTEXT_MGR already set [ 183.815396][ T9352] binder: 9343:9352 ioctl 40046207 0 returned -16 08:52:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 183.974321][ T9265] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 184.073946][ T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.354630][ T9265] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.376470][ T9265] usb 8-1: config 0 has no interfaces? [ 184.389038][ T9265] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 184.412114][ T9265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.435970][ T9265] usb 8-1: config 0 descriptor?? [ 184.514715][ T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.531532][ T28] usb 7-1: config 0 has no interfaces? [ 184.540964][ T28] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 184.559107][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.576917][ T28] usb 7-1: config 0 descriptor?? [ 184.713405][ T9330] udc-core: couldn't find an available UDC or it's busy [ 184.729163][ T9330] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 184.747872][ T49] usb 8-1: USB disconnect, device number 4 [ 184.852569][ T9346] udc-core: couldn't find an available UDC or it's busy [ 184.869473][ T9346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 184.888023][ T3245] usb 7-1: USB disconnect, device number 2 08:52:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) 08:52:58 executing program 1: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) 08:52:58 executing program 3: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) 08:52:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 185.370352][ T9362] IPVS: ftp: loaded support on port[0] = 21 [ 185.375032][ T9364] IPVS: ftp: loaded support on port[0] = 21 08:52:59 executing program 2: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000407d1e383140000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6c, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x8, 0x40, "51f5", 'Y'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x0, 0x5, 0x8, "e244", "f22418"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, "c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x3f, 0x40, 0x3, {0x7, 0x25, 0x1, 0x82, 0xfa, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x5, {0x5, 0x31, "ae7262"}}, &(0x7f0000000080)={0x0, 0x3, 0x73, @string={0x73, 0x3, "acdab0dce8240ee52ac36f654ab815890838d9406a9489c974e079e2a153bc266d835d47d8ab9329d33b5907cd1413a5bcadd8b4e20568dab8bb50c3ab8dc42f6e56939373189cd06b62e501a793dca14d9e55626533345ddce384a6f7fcf3d38a894a670380638191339caace7ceba964"}}, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global, @global=@item_012={0x1, 0x1, 0xb, "f7"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x499}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xb0, "5a7cabf7a5ef83c9802093ae12c0dc487f5573331e934fa82a2835b9c451a4f9f3484804e0899fba664a6821844a928073ff5ba220d34c8bd51df8ed97c1384c0ebdf0f90dc331a21e11fc0762fc69eec4bc49d7823af5ac8dc0cf90c76da27153adecd96aa9eecf2d9a90e2d2b7974d53e1aad61ce19b66d9ac5303d48061d09029e185e8cfe6badf1d68f09789b89b855dfbeb8476407dd4de70a85d4c049ec6ea3e5d46e68071454bca80aef4b66f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xaf, "027a7ff901242c24b1f6d99bb4dc7555a463df97ad16e9142c26dde43fd931af9546bb2a9163ebb66c093d54233fb298ce7b24da0bca87634d1fb7ab21fa842076acc4d9d5cbfaff7a0fbc35b191518e9f72ef6302d3dd548f2fc81b19399a52e28ee1fde618c0b16b948774c4912887fe7faad0306d13c6b46229cc9420360d52ca5ab46af02be9482d05b7bf4caabd2ebbaa56959c8d36976dfb25de101a08b917c6789e4e405df3b0fc516c5c54"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) 08:52:59 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 185.460563][ T9372] IPVS: ftp: loaded support on port[0] = 21 08:52:59 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) 08:52:59 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x4}]}}}}}}}}, 0x0) [ 185.663957][ T9265] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.695048][ T9366] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 185.705591][ T9366] #PF: supervisor read access in kernel mode [ 185.722392][ T9366] #PF: error_code(0x0000) - not-present page [ 185.734260][ T9366] PGD 62012067 P4D 62012067 PUD 62013067 PMD 0 [ 185.747130][ T9366] Oops: 0000 [#1] PREEMPT SMP KASAN [ 185.753930][ T9366] CPU: 2 PID: 9366 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 185.784019][ T9366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 185.803958][ T9366] RIP: 0010:__sanitizer_cov_trace_pc+0x43/0x60 [ 185.813964][ T9366] Code: 24 74 0f 80 e6 01 74 35 8b 90 04 14 00 00 85 d2 74 2b 8b 90 e0 13 00 00 83 fa 02 75 20 48 8b 88 e8 13 00 00 8b 80 e4 13 00 00 <48> 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 66 0f [ 185.846452][ T9366] RSP: 0018:ffffc90004a47a08 EFLAGS: 00010246 [ 185.854709][ T9366] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 185.863780][ T9366] RDX: 0000000000000002 RSI: ffffffff83639e9b RDI: 0000000000000005 [ 185.874758][ T9366] RBP: ffff88801bddd800 R08: ffff88805fa9c440 R09: fffffbfff190e62d [ 185.883794][ T9366] R10: ffffffff8c873167 R11: fffffbfff190e62c R12: 0000000000000010 [ 185.894887][ T9366] R13: 00000000000000e1 R14: dffffc0000000000 R15: 0000000000000000 [ 185.903790][ T9366] FS: 00007f9ae5df1700(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 185.914739][ T9366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.933809][ T9366] CR2: 0000000000000000 CR3: 0000000062505000 CR4: 0000000000340ee0 [ 185.938678][ T9366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.957479][ T9366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.969244][ T9366] Call Trace: [ 185.973911][ T9366] tomoyo_domain_quota_is_ok+0x31b/0x500 [ 185.984029][ T9366] tomoyo_supervisor+0x2d5/0xf00 [ 185.984029][ T9366] ? tomoyo_profile+0x50/0x50 [ 185.984029][ T9366] ? pointer+0x7c0/0x7c0 [ 186.003697][ T9366] ? trace_hardirqs_off+0x50/0x220 [ 186.003697][ T9366] tomoyo_path_number_perm+0x3e9/0x4d0 [ 186.003697][ T9366] ? tomoyo_execute_permission+0x470/0x470 [ 186.003697][ T9366] ? selinux_file_mprotect+0x610/0x610 [ 186.033719][ T9366] ? __fget_files+0x32f/0x500 [ 186.043789][ T9366] ? ksys_dup3+0x3c0/0x3c0 [ 186.043789][ T9366] security_file_ioctl+0x6c/0xb0 [ 186.043789][ T9366] ksys_ioctl+0x50/0x180 [ 186.063729][ T9366] __x64_sys_ioctl+0x6f/0xb0 [ 186.063729][ T9366] do_syscall_64+0xf6/0x7d0 [ 186.073731][ T9366] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 186.083842][ T9366] RIP: 0033:0x45c727 [ 186.094386][ T9366] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 186.123726][ T9366] RSP: 002b:00007f9ae5deeaa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.133739][ T9366] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 000000000045c727 [ 186.151142][ T9366] RDX: 00007f9ae5deec30 RSI: 0000000040085503 RDI: 0000000000000003 [ 186.153743][ T9366] RBP: 0000000000000080 R08: 0000000000000100 R09: 0000000000000000 [ 186.173780][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.173780][ T9366] R13: 0000000000000c52 R14: 00000000006ecc80 R15: 00000000004b57db [ 186.193777][ T9366] Modules linked in: [ 186.207570][ T9366] CR2: 0000000000000000 [ 186.214124][ T9366] ---[ end trace 1473e55d438c2e5c ]--- [ 186.234176][ T9366] RIP: 0010:__sanitizer_cov_trace_pc+0x43/0x60 [ 186.234176][ T9366] Code: 24 74 0f 80 e6 01 74 35 8b 90 04 14 00 00 85 d2 74 2b 8b 90 e0 13 00 00 83 fa 02 75 20 48 8b 88 e8 13 00 00 8b 80 e4 13 00 00 <48> 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 66 0f [ 186.283270][ T9366] RSP: 0018:ffffc90004a47a08 EFLAGS: 00010246 [ 186.296920][ T9366] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 186.327898][ T9366] RDX: 0000000000000002 RSI: ffffffff83639e9b RDI: 0000000000000005 [ 186.351387][ T9366] RBP: ffff88801bddd800 R08: ffff88805fa9c440 R09: fffffbfff190e62d [ 186.363843][ T9366] R10: ffffffff8c873167 R11: fffffbfff190e62c R12: 0000000000000010 [ 186.383770][ T9366] R13: 00000000000000e1 R14: dffffc0000000000 R15: 0000000000000000 [ 186.418872][ T9366] FS: 00007f9ae5df1700(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 186.439935][ T9366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.443919][ T9366] CR2: 0000000000000000 CR3: 0000000062505000 CR4: 0000000000340ee0 [ 186.473861][ T9366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.484029][ T9366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.503804][ T9366] Kernel panic - not syncing: Fatal exception [ 186.523835][ T9366] Kernel Offset: disabled [ 186.523835][ T9366] Rebooting in 86400 seconds..