[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.257992][ T30] audit: type=1800 audit(1569720420.305:25): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 73.281071][ T30] audit: type=1800 audit(1569720420.335:26): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 73.322735][ T30] audit: type=1800 audit(1569720420.355:27): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. 2019/09/29 01:27:38 parsed 1 programs 2019/09/29 01:27:56 executed programs: 0 syzkaller login: [ 129.621056][T11051] IPVS: ftp: loaded support on port[0] = 21 [ 129.640466][T11050] IPVS: ftp: loaded support on port[0] = 21 [ 129.655888][T11055] IPVS: ftp: loaded support on port[0] = 21 [ 129.663433][T11053] IPVS: ftp: loaded support on port[0] = 21 [ 129.675520][T11056] IPVS: ftp: loaded support on port[0] = 21 [ 129.684116][T11057] IPVS: ftp: loaded support on port[0] = 21 [ 130.004438][T11057] chnl_net:caif_netlink_parms(): no params data found [ 130.022621][T11055] chnl_net:caif_netlink_parms(): no params data found [ 130.131862][T11050] chnl_net:caif_netlink_parms(): no params data found [ 130.173635][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.180836][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.189755][T11055] device bridge_slave_0 entered promiscuous mode [ 130.202650][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.209819][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.218625][T11055] device bridge_slave_1 entered promiscuous mode [ 130.392254][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.424516][T11053] chnl_net:caif_netlink_parms(): no params data found [ 130.435579][T11050] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.442878][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.451417][T11050] device bridge_slave_0 entered promiscuous mode [ 130.459946][T11057] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.467585][T11057] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.476059][T11057] device bridge_slave_0 entered promiscuous mode [ 130.499556][T11057] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.506910][T11057] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.516472][T11057] device bridge_slave_1 entered promiscuous mode [ 130.524429][T11051] chnl_net:caif_netlink_parms(): no params data found [ 130.558959][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.568636][T11050] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.575890][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.583980][T11050] device bridge_slave_1 entered promiscuous mode [ 130.619696][T11057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.631654][T11050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.661453][T11057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.677134][T11050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.686494][T11056] chnl_net:caif_netlink_parms(): no params data found [ 130.715711][T11055] team0: Port device team_slave_0 added [ 130.758593][T11055] team0: Port device team_slave_1 added [ 130.766831][T11050] team0: Port device team_slave_0 added [ 130.797666][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.804949][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.813679][T11053] device bridge_slave_0 entered promiscuous mode [ 130.830201][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.837446][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.846051][T11053] device bridge_slave_1 entered promiscuous mode [ 130.855972][T11050] team0: Port device team_slave_1 added [ 130.871323][T11057] team0: Port device team_slave_0 added [ 130.906373][T11053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.917800][T11057] team0: Port device team_slave_1 added [ 130.934749][T11053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.976333][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.983589][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.992065][T11051] device bridge_slave_0 entered promiscuous mode [ 131.023054][T11053] team0: Port device team_slave_0 added [ 131.039155][T11053] team0: Port device team_slave_1 added [ 131.124858][T11055] device hsr_slave_0 entered promiscuous mode [ 131.163123][T11055] device hsr_slave_1 entered promiscuous mode [ 131.223297][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.230470][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.238840][T11056] device bridge_slave_0 entered promiscuous mode [ 131.247210][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.254580][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.263155][T11051] device bridge_slave_1 entered promiscuous mode [ 131.270552][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.277761][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.286357][T11056] device bridge_slave_1 entered promiscuous mode [ 131.355028][T11050] device hsr_slave_0 entered promiscuous mode [ 131.392939][T11050] device hsr_slave_1 entered promiscuous mode [ 131.432400][T11050] debugfs: Directory 'hsr0' with parent '/' already present! [ 131.471558][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.525179][T11057] device hsr_slave_0 entered promiscuous mode [ 131.563063][T11057] device hsr_slave_1 entered promiscuous mode [ 131.612438][T11057] debugfs: Directory 'hsr0' with parent '/' already present! [ 131.646091][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.715997][T11053] device hsr_slave_0 entered promiscuous mode [ 131.763168][T11053] device hsr_slave_1 entered promiscuous mode [ 131.802419][T11053] debugfs: Directory 'hsr0' with parent '/' already present! [ 131.814451][T11051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.827035][T11051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.867576][T11051] team0: Port device team_slave_0 added [ 131.877157][T11051] team0: Port device team_slave_1 added [ 131.911741][T11056] team0: Port device team_slave_0 added [ 131.924356][T11056] team0: Port device team_slave_1 added [ 131.995772][T11051] device hsr_slave_0 entered promiscuous mode [ 132.033122][T11051] device hsr_slave_1 entered promiscuous mode [ 132.082418][T11051] debugfs: Directory 'hsr0' with parent '/' already present! [ 132.145396][T11056] device hsr_slave_0 entered promiscuous mode [ 132.182969][T11056] device hsr_slave_1 entered promiscuous mode [ 132.222422][T11056] debugfs: Directory 'hsr0' with parent '/' already present! [ 132.520925][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.544881][T11057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.563909][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.583610][T11051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.604130][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.617729][T11053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.644263][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.653167][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.661491][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.669958][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.691561][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.701836][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.717722][T11057] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.725539][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.734267][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.754536][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.763154][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.771553][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.781823][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.794546][T11050] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.804283][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.826604][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.841775][T11055] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.858800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.868265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.878365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.885606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.894059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.903365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.912365][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.919553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.927774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.936940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.946032][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.954685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.961767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.971877][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.980513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.991799][T11051] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.006400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.015888][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.024765][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.031904][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.040162][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.049425][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.058351][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.065589][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.110330][T11057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.121152][T11057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.153772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.162456][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.171014][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.180672][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.189669][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.196862][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.205261][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.214602][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.223593][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.230734][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.239013][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.248682][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.258284][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.267565][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.277238][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.286538][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.295560][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.304915][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.314360][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.323315][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.331496][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.339978][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.349169][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.358208][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.367487][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.376439][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.383685][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.391878][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.401214][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.410149][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.417396][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.425662][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.435353][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.444557][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.453550][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.460703][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.469039][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.498556][T11057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.520021][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.529046][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.538133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.547755][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.557278][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.566878][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.576290][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.586126][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.595715][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.604519][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.611599][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.632729][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.727772][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.738004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.747698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.757546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.767063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.777012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.786183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.795323][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.804630][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.814349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.823580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.833002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.841859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.851185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.860084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.869398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.878326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.887718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.898938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.907760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.916303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.925066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.933973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.950046][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.960500][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.991225][T11053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.001987][T11053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.002600][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.035363][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.044432][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.056723][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.065797][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.075109][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.084348][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.093309][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.102065][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.110991][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.120146][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.134998][T11067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.153071][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.162230][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.171171][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.180352][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.196030][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.205192][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.229606][T11055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.240872][T11050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.253934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.263949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.273971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.283162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.299841][T11056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.330861][T11051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.341407][T11051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.376756][T11055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.383024][ T32] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 134.388001][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.391792][ T32] usb 1-1: config 0 has no interface number 0 [ 134.399665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.404796][ T32] usb 1-1: config 0 interface 105 has no altsetting 0 [ 134.414110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.419420][ T32] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 134.428886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.436257][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.445251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.481939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.485897][ T32] usb 1-1: config 0 descriptor?? [ 134.534350][T11050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.557074][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.738876][T11051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.753008][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.884000][ T2924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.103162][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.103349][T11070] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.142419][T11064] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.226534][T11067] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.282532][ T2924] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 135.291146][ T2924] usb 4-1: config 0 has no interface number 0 [ 135.297966][ T2924] usb 4-1: config 0 interface 105 has no altsetting 0 [ 135.304919][ T2924] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 135.314094][ T2924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.325754][ T2924] usb 4-1: config 0 descriptor?? [ 135.472688][T11070] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 135.481108][T11070] usb 3-1: config 0 has no interface number 0 [ 135.487600][T11070] usb 3-1: config 0 interface 105 has no altsetting 0 [ 135.494529][T11070] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 135.502435][ T12] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 135.503943][T11070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.512041][ T12] usb 5-1: config 0 has no interface number 0 [ 135.520951][T11064] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 135.526739][ T12] usb 5-1: config 0 interface 105 has no altsetting 0 [ 135.526828][ T12] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 135.535081][T11064] usb 6-1: config 0 has no interface number 0 [ 135.541792][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.550876][T11064] usb 6-1: config 0 interface 105 has no altsetting 0 [ 135.550969][T11064] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 135.551026][T11064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.570797][T11064] usb 6-1: config 0 descriptor?? [ 135.596611][T11070] usb 3-1: config 0 descriptor?? [ 135.602053][ T12] usb 5-1: config 0 descriptor?? [ 135.608754][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 135.668750][T11067] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 135.677149][T11067] usb 2-1: config 0 has no interface number 0 [ 135.683473][T11067] usb 2-1: config 0 interface 105 has no altsetting 0 [ 135.690372][T11067] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 135.700487][T11067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.726472][T11067] usb 2-1: config 0 descriptor?? [ 135.842566][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 135.854532][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 135.873163][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 135.982633][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random 2019/09/29 01:28:03 executed programs: 6 [ 136.713942][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 136.749681][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 136.760304][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 136.792662][ T32] asix: probe of 1-1:0.105 failed with error -71 [ 136.808717][ T32] usb 1-1: USB disconnect, device number 2 [ 137.162562][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.522689][ T32] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.531103][ T32] usb 1-1: config 0 has no interface number 0 [ 137.537495][ T32] usb 1-1: config 0 interface 105 has no altsetting 0 [ 137.544478][ T32] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 137.553701][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.563561][ T32] usb 1-1: config 0 descriptor?? [ 137.582778][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.623946][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.634864][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 137.672706][ T2924] asix: probe of 4-1:0.105 failed with error -71 [ 137.688735][ T2924] usb 4-1: USB disconnect, device number 2 [ 137.722824][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.753129][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.763638][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 137.811150][ T12] asix: probe of 5-1:0.105 failed with error -71 [ 137.823046][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 137.833357][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.854798][ T12] usb 5-1: USB disconnect, device number 2 [ 137.861495][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 137.872278][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 137.889689][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.914408][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.925175][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 137.949057][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.956523][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.969924][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 137.990333][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 138.000863][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 138.006555][T11070] asix: probe of 3-1:0.105 failed with error -71 [ 138.038674][T11064] asix: probe of 6-1:0.105 failed with error -71 [ 138.050640][T11067] asix: probe of 2-1:0.105 failed with error -71 [ 138.062597][ T2924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.080247][T11067] usb 2-1: USB disconnect, device number 2 [ 138.087868][T11064] usb 6-1: USB disconnect, device number 2 [ 138.097140][T11070] usb 3-1: USB disconnect, device number 2 [ 138.232353][ T12] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.452494][T11064] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.460383][T11070] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.472463][ T2924] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.480959][ T2924] usb 4-1: config 0 has no interface number 0 [ 138.487426][ T2924] usb 4-1: config 0 interface 105 has no altsetting 0 [ 138.494937][ T2924] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 138.504076][ T2924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.513673][T11067] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.524223][ T2924] usb 4-1: config 0 descriptor?? [ 138.642740][ T12] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.651053][ T12] usb 5-1: config 0 has no interface number 0 [ 138.658102][ T12] usb 5-1: config 0 interface 105 has no altsetting 0 [ 138.665058][ T12] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 138.674410][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.686296][ T12] usb 5-1: config 0 descriptor?? [ 138.792946][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 138.822518][T11070] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.830954][T11070] usb 3-1: config 0 has no interface number 0 [ 138.837398][T11070] usb 3-1: config 0 interface 105 has no altsetting 0 [ 138.844393][T11070] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 138.853692][T11070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.863968][T11064] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.872326][T11064] usb 6-1: config 0 has no interface number 0 [ 138.878495][T11064] usb 6-1: config 0 interface 105 has no altsetting 0 [ 138.885665][T11064] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 138.896484][T11064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.908391][T11070] usb 3-1: config 0 descriptor?? [ 138.914616][T11064] usb 6-1: config 0 descriptor?? [ 138.926066][T11067] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.934447][T11067] usb 2-1: config 0 has no interface number 0 [ 138.940743][T11067] usb 2-1: config 0 interface 105 has no altsetting 0 [ 138.947926][T11067] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 138.957170][T11067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.966311][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.006586][T11067] usb 2-1: config 0 descriptor?? [ 139.172566][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.183037][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.282622][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.862641][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 139.873064][ T32] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 139.884586][ T32] asix: probe of 1-1:0.105 failed with error -71 [ 139.900532][ T32] usb 1-1: USB disconnect, device number 3 [ 140.622993][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.642503][T11065] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.664549][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.675023][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 140.712491][ T2924] asix: probe of 4-1:0.105 failed with error -71 [ 140.723367][ T2924] usb 4-1: USB disconnect, device number 3 [ 140.762582][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.802652][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.814059][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 140.853685][ T12] asix: probe of 5-1:0.105 failed with error -71 [ 140.869319][ T12] usb 5-1: USB disconnect, device number 3 [ 140.932737][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.965110][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.976721][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 141.012620][T11070] asix: probe of 3-1:0.105 failed with error -71 [ 141.031029][T11070] usb 3-1: USB disconnect, device number 3 [ 141.042841][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 141.054441][T11065] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.062775][T11065] usb 1-1: config 0 has no interface number 0 [ 141.068977][T11065] usb 1-1: config 0 interface 105 has no altsetting 0 [ 141.075998][T11065] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 141.085409][T11065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.095192][ T2924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.111968][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 141.122961][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 141.134235][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 141.158423][T11065] usb 1-1: config 0 descriptor?? [ 141.167040][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 141.170662][T11067] asix: probe of 2-1:0.105 failed with error -71 [ 141.177488][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 141.200957][T11067] usb 2-1: USB disconnect, device number 3 [ 141.206727][T11064] asix: probe of 6-1:0.105 failed with error -71 [ 141.248299][T11064] usb 6-1: USB disconnect, device number 3 [ 141.302355][ T12] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.442451][T11070] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.442519][T11065] asix 1-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 141.532514][ T2924] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.541036][ T2924] usb 4-1: config 0 has no interface number 0 [ 141.547358][ T2924] usb 4-1: config 0 interface 105 has no altsetting 0 [ 141.554346][ T2924] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 141.563579][ T2924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.572288][T11067] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.581095][ T2924] usb 4-1: config 0 descriptor?? [ 141.643588][T11064] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.692930][ T12] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.701283][ T12] usb 5-1: config 0 has no interface number 0 [ 141.707687][ T12] usb 5-1: config 0 interface 105 has no altsetting 0 [ 141.714661][ T12] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 141.723999][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.734900][ T12] usb 5-1: config 0 descriptor?? [ 141.842593][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 141.842769][T11070] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.860717][T11070] usb 3-1: config 0 has no interface number 0 [ 141.867029][T11070] usb 3-1: config 0 interface 105 has no altsetting 0 [ 141.873999][T11070] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 141.883110][T11070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.894143][T11070] usb 3-1: config 0 descriptor?? [ 142.002735][ T12] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 142.012922][T11067] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 142.021131][T11067] usb 2-1: config 0 has no interface number 0 [ 142.027412][T11067] usb 2-1: config 0 interface 105 has no altsetting 0 [ 142.034402][T11067] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 142.043604][T11067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.055263][T11067] usb 2-1: config 0 descriptor?? [ 142.062383][T11064] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 142.070825][T11064] usb 6-1: config 0 has no interface number 0 [ 142.077123][T11064] usb 6-1: config 0 interface 105 has no altsetting 0 [ 142.084241][T11064] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 142.093934][ T2924] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 142.094066][T11064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.119353][T11064] usb 6-1: config 0 descriptor?? [ 142.152597][T11070] asix 3-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 142.312585][T11067] asix 2-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 142.382680][T11064] asix 6-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 142.543257][T11162] ===================================================== [ 142.550311][T11162] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 142.557697][T11162] CPU: 0 PID: 11162 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 142.565773][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.575846][T11162] Call Trace: [ 142.579147][T11162] dump_stack+0x191/0x1f0 [ 142.583497][T11162] kmsan_report+0x13a/0x2b0 [ 142.588007][T11162] kmsan_internal_check_memory+0x187/0x4c0 [ 142.593809][T11162] kmsan_copy_to_user+0xa9/0xb0 [ 142.598663][T11162] _copy_to_user+0x16b/0x1f0 [ 142.603287][T11162] fuzzer_ioctl+0x25a9/0x5860 [ 142.607983][T11162] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 142.614065][T11162] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 142.620050][T11162] ? next_event+0x6a0/0x6a0 [ 142.624556][T11162] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 142.630197][T11162] ? full_proxy_poll+0x320/0x320 [ 142.635150][T11162] do_vfs_ioctl+0xea8/0x2c50 [ 142.639775][T11162] ? security_file_ioctl+0x1bd/0x200 [ 142.645072][T11162] __se_sys_ioctl+0x1da/0x270 [ 142.649758][T11162] __x64_sys_ioctl+0x4a/0x70 [ 142.654353][T11162] do_syscall_64+0xbc/0xf0 [ 142.658776][T11162] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 142.664669][T11162] RIP: 0033:0x459897 [ 142.668552][T11162] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 142.688169][T11162] RSP: 002b:00007f19f50853e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.696589][T11162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459897 [ 142.704573][T11162] RDX: 00007f19f5085830 RSI: 0000000080085502 RDI: 0000000000000003 [ 142.712549][T11162] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 142.720514][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19f50866d4 [ 142.728522][T11162] R13: 00000000004bf0c6 R14: 00000000004e0320 R15: 00000000ffffffff [ 142.736525][T11162] [ 142.738855][T11162] Uninit was stored to memory at: [ 142.743895][T11162] kmsan_internal_chain_origin+0xd2/0x170 [ 142.749613][T11162] kmsan_memcpy_memmove_metadata+0x25b/0x2d0 [ 142.755579][T11162] kmsan_memcpy_metadata+0xb/0x10 [ 142.760690][T11162] __msan_memcpy+0x56/0x70 [ 142.765116][T11162] gadget_setup+0x498/0xb60 [ 142.769609][T11162] dummy_timer+0x1fba/0x6770 [ 142.774185][T11162] call_timer_fn+0x232/0x530 [ 142.778755][T11162] __run_timers+0xcdc/0x11a0 [ 142.783356][T11162] run_timer_softirq+0x2d/0x50 [ 142.788129][T11162] __do_softirq+0x4a1/0x83a [ 142.792667][T11162] irq_exit+0x230/0x280 [ 142.796823][T11162] exiting_irq+0xe/0x10 [ 142.800976][T11162] smp_apic_timer_interrupt+0x48/0x70 [ 142.806886][T11162] apic_timer_interrupt+0x2e/0x40 [ 142.811910][T11162] finish_lock_switch+0x2b/0x40 [ 142.816751][T11162] finish_task_switch+0xfa/0x2d0 [ 142.821675][T11162] __schedule+0x646/0x780 [ 142.826036][T11162] schedule_idle+0x4b/0xa0 [ 142.830443][T11162] do_idle+0x75a/0x790 [ 142.834505][T11162] cpu_startup_entry+0x45/0x50 [ 142.839265][T11162] rest_init+0x1be/0x1f0 [ 142.843521][T11162] arch_call_rest_init+0x13/0x15 [ 142.848479][T11162] start_kernel+0x991/0xb61 [ 142.853005][T11162] x86_64_start_reservations+0x18/0x2e [ 142.858464][T11162] x86_64_start_kernel+0x81/0x84 [ 142.863504][T11162] secondary_startup_64+0xa4/0xb0 [ 142.868524][T11162] [ 142.870848][T11162] Uninit was stored to memory at: [ 142.875869][T11162] kmsan_internal_chain_origin+0xd2/0x170 [ 142.881726][T11162] __msan_chain_origin+0x6b/0xe0 [ 142.886683][T11162] dummy_timer+0x2d76/0x6770 [ 142.891418][T11162] call_timer_fn+0x232/0x530 [ 142.896021][T11162] __run_timers+0xcdc/0x11a0 [ 142.900635][T11162] run_timer_softirq+0x2d/0x50 [ 142.905401][T11162] __do_softirq+0x4a1/0x83a [ 142.909913][T11162] irq_exit+0x230/0x280 [ 142.914237][T11162] exiting_irq+0xe/0x10 [ 142.918392][T11162] smp_apic_timer_interrupt+0x48/0x70 [ 142.923784][T11162] apic_timer_interrupt+0x2e/0x40 [ 142.928809][T11162] finish_lock_switch+0x2b/0x40 [ 142.933667][T11162] finish_task_switch+0xfa/0x2d0 [ 142.938590][T11162] __schedule+0x646/0x780 [ 142.942916][T11162] schedule_idle+0x4b/0xa0 [ 142.947352][T11162] do_idle+0x75a/0x790 [ 142.951403][T11162] cpu_startup_entry+0x45/0x50 [ 142.956153][T11162] rest_init+0x1be/0x1f0 [ 142.960384][T11162] arch_call_rest_init+0x13/0x15 [ 142.965335][T11162] start_kernel+0x991/0xb61 [ 142.969875][T11162] x86_64_start_reservations+0x18/0x2e [ 142.975343][T11162] x86_64_start_kernel+0x81/0x84 [ 142.980270][T11162] secondary_startup_64+0xa4/0xb0 [ 142.985278][T11162] [ 142.987597][T11162] Uninit was stored to memory at: [ 142.992625][T11162] kmsan_internal_chain_origin+0xd2/0x170 [ 142.998332][T11162] __msan_chain_origin+0x6b/0xe0 [ 143.003273][T11162] usb_control_msg+0x61b/0x7f0 [ 143.008036][T11162] usbnet_write_cmd+0x386/0x430 [ 143.012877][T11162] asix_write_cmd+0x155/0x270 [ 143.017552][T11162] ax88772_hw_reset+0x191/0xb40 [ 143.022685][T11162] ax88772_bind+0x6ad/0x11f0 [ 143.027281][T11162] usbnet_probe+0x10ae/0x3960 [ 143.031969][T11162] usb_probe_interface+0xd19/0x1310 [ 143.037176][T11162] really_probe+0x1373/0x1dc0 [ 143.042022][T11162] driver_probe_device+0x1ba/0x510 [ 143.047287][T11162] __device_attach_driver+0x5b8/0x790 [ 143.052663][T11162] bus_for_each_drv+0x28e/0x3b0 [ 143.057601][T11162] __device_attach+0x489/0x750 [ 143.062371][T11162] device_initial_probe+0x4a/0x60 [ 143.067414][T11162] bus_probe_device+0x131/0x390 [ 143.072261][T11162] device_add+0x25b5/0x2df0 [ 143.078001][T11162] usb_set_configuration+0x309f/0x3710 [ 143.083467][T11162] generic_probe+0xe7/0x280 [ 143.087992][T11162] usb_probe_device+0x146/0x200 [ 143.092847][T11162] really_probe+0x1373/0x1dc0 [ 143.097525][T11162] driver_probe_device+0x1ba/0x510 [ 143.102743][T11162] __device_attach_driver+0x5b8/0x790 [ 143.108116][T11162] bus_for_each_drv+0x28e/0x3b0 [ 143.112970][T11162] __device_attach+0x489/0x750 [ 143.117719][T11162] device_initial_probe+0x4a/0x60 [ 143.122740][T11162] bus_probe_device+0x131/0x390 [ 143.127597][T11162] device_add+0x25b5/0x2df0 [ 143.132089][T11162] usb_new_device+0x23e5/0x2fb0 [ 143.136934][T11162] hub_event+0x581d/0x72f0 [ 143.141346][T11162] process_one_work+0x1572/0x1ef0 [ 143.146365][T11162] worker_thread+0x189c/0x2460 [ 143.151118][T11162] kthread+0x4b5/0x4f0 [ 143.155172][T11162] ret_from_fork+0x35/0x40 [ 143.159565][T11162] [ 143.161874][T11162] Uninit was stored to memory at: [ 143.166905][T11162] kmsan_internal_chain_origin+0xd2/0x170 [ 143.172622][T11162] __msan_chain_origin+0x6b/0xe0 [ 143.177560][T11162] ax88772_bind+0xa12/0x11f0 [ 143.182148][T11162] usbnet_probe+0x10ae/0x3960 [ 143.186940][T11162] usb_probe_interface+0xd19/0x1310 [ 143.192148][T11162] really_probe+0x1373/0x1dc0 [ 143.196824][T11162] driver_probe_device+0x1ba/0x510 [ 143.201934][T11162] __device_attach_driver+0x5b8/0x790 [ 143.207431][T11162] bus_for_each_drv+0x28e/0x3b0 [ 143.212291][T11162] __device_attach+0x489/0x750 [ 143.217060][T11162] device_initial_probe+0x4a/0x60 [ 143.225781][T11162] bus_probe_device+0x131/0x390 [ 143.230806][T11162] device_add+0x25b5/0x2df0 [ 143.235307][T11162] usb_set_configuration+0x309f/0x3710 [ 143.240766][T11162] generic_probe+0xe7/0x280 [ 143.245263][T11162] usb_probe_device+0x146/0x200 [ 143.250241][T11162] really_probe+0x1373/0x1dc0 [ 143.254918][T11162] driver_probe_device+0x1ba/0x510 [ 143.260037][T11162] __device_attach_driver+0x5b8/0x790 [ 143.265415][T11162] bus_for_each_drv+0x28e/0x3b0 [ 143.270274][T11162] __device_attach+0x489/0x750 [ 143.275056][T11162] device_initial_probe+0x4a/0x60 [ 143.280077][T11162] bus_probe_device+0x131/0x390 [ 143.284927][T11162] device_add+0x25b5/0x2df0 [ 143.289436][T11162] usb_new_device+0x23e5/0x2fb0 [ 143.294292][T11162] hub_event+0x581d/0x72f0 [ 143.298717][T11162] process_one_work+0x1572/0x1ef0 [ 143.303762][T11162] worker_thread+0x189c/0x2460 [ 143.308535][T11162] kthread+0x4b5/0x4f0 [ 143.312634][T11162] ret_from_fork+0x35/0x40 [ 143.317142][T11162] [ 143.319462][T11162] Local variable description: ----buf.i@asix_get_phy_addr [ 143.326572][T11162] Variable was created at: [ 143.330985][T11162] asix_get_phy_addr+0x4d/0x280 [ 143.335829][T11162] ax88772_bind+0x472/0x11f0 [ 143.340412][T11162] [ 143.342744][T11162] Byte 10 of 16 is uninitialized [ 143.347676][T11162] Memory access of size 16 starts at ffff88809f8c1ab0 [ 143.354434][T11162] Data copied to user address 00007f19f5085830 [ 143.360578][T11162] ===================================================== [ 143.367497][T11162] Disabling lock debugging due to kernel taint [ 143.373640][T11162] Kernel panic - not syncing: panic_on_warn set ... [ 143.380250][T11162] CPU: 0 PID: 11162 Comm: syz-executor.3 Tainted: G B 5.3.0-rc7+ #0 [ 143.389527][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.399579][T11162] Call Trace: [ 143.402893][T11162] dump_stack+0x191/0x1f0 [ 143.407251][T11162] panic+0x3c9/0xc1e [ 143.411170][T11162] kmsan_report+0x2a2/0x2b0 [ 143.415685][T11162] kmsan_internal_check_memory+0x187/0x4c0 [ 143.421583][T11162] kmsan_copy_to_user+0xa9/0xb0 [ 143.426431][T11162] _copy_to_user+0x16b/0x1f0 [ 143.431049][T11162] fuzzer_ioctl+0x25a9/0x5860 [ 143.435845][T11162] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 143.442291][T11162] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 143.448211][T11162] ? next_event+0x6a0/0x6a0 [ 143.452807][T11162] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 143.458469][T11162] ? full_proxy_poll+0x320/0x320 [ 143.463436][T11162] do_vfs_ioctl+0xea8/0x2c50 [ 143.468081][T11162] ? security_file_ioctl+0x1bd/0x200 [ 143.473401][T11162] __se_sys_ioctl+0x1da/0x270 [ 143.478142][T11162] __x64_sys_ioctl+0x4a/0x70 [ 143.482750][T11162] do_syscall_64+0xbc/0xf0 [ 143.487322][T11162] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 143.493381][T11162] RIP: 0033:0x459897 [ 143.497277][T11162] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 143.516990][T11162] RSP: 002b:00007f19f50853e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.525397][T11162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459897 [ 143.533371][T11162] RDX: 00007f19f5085830 RSI: 0000000080085502 RDI: 0000000000000003 [ 143.541456][T11162] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 143.549523][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19f50866d4 [ 143.557500][T11162] R13: 00000000004bf0c6 R14: 00000000004e0320 R15: 00000000ffffffff [ 143.567344][T11162] Kernel Offset: disabled [ 143.571685][T11162] Rebooting in 86400 seconds..