[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.060281] audit: type=1800 audit(1552558287.101:25): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.079545] audit: type=1800 audit(1552558287.111:26): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.099005] audit: type=1800 audit(1552558287.131:27): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2019/03/14 10:11:40 fuzzer started 2019/03/14 10:11:46 dialing manager at 10.128.0.26:45521 2019/03/14 10:11:46 syscalls: 1 2019/03/14 10:11:46 code coverage: enabled 2019/03/14 10:11:46 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/14 10:11:46 extra coverage: extra coverage is not supported by the kernel 2019/03/14 10:11:46 setuid sandbox: enabled 2019/03/14 10:11:46 namespace sandbox: enabled 2019/03/14 10:11:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/14 10:11:46 fault injection: enabled 2019/03/14 10:11:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/14 10:11:46 net packet injection: enabled 2019/03/14 10:11:46 net device setup: enabled 10:14:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) syzkaller login: [ 293.441991] IPVS: ftp: loaded support on port[0] = 21 [ 293.613631] chnl_net:caif_netlink_parms(): no params data found [ 293.690433] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.697279] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.706010] device bridge_slave_0 entered promiscuous mode [ 293.716461] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.723163] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.731737] device bridge_slave_1 entered promiscuous mode [ 293.770481] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 293.783344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.819359] team0: Port device team_slave_0 added [ 293.828772] team0: Port device team_slave_1 added [ 294.007514] device hsr_slave_0 entered promiscuous mode [ 294.163320] device hsr_slave_1 entered promiscuous mode [ 294.445176] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.451876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.459112] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.465837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.549672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.571429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.583799] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.595292] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.607729] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 294.628217] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.645855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.655316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.663661] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.670206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.725151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.735280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.748809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.757878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.766344] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.772965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.780841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.790290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.799694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.808789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.817662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.826743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.835677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.844246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.853154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.861699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.877270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.885677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.928836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.120473] binder: 10966:10968 transaction failed 29189/-22, size 0-0 line 2896 [ 295.130916] binder_alloc: binder_alloc_mmap_handler: 10966 20ff9000-20ffd000 already mapped failed -16 [ 295.143811] binder: 10966:10968 transaction failed 29189/-22, size 0-0 line 2896 [ 295.152820] binder: undelivered TRANSACTION_ERROR: 29189 [ 295.164058] binder: undelivered TRANSACTION_ERROR: 29189 10:14:45 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90}, 0x90) 10:14:45 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 10:14:45 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000001c0)) 10:14:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab62, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.623532] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 295.685761] *** Guest State *** [ 295.689230] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 295.699011] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 295.708161] CR3 = 0x0000000000000000 [ 295.712023] RSP = 0x0000000000000f80 RIP = 0x0000000000000011 [ 295.718159] RFLAGS=0x00000246 DR7 = 0x0000000000000400 [ 295.724303] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 295.731050] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 295.739220] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 295.747397] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 295.755573] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 295.763734] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 295.771869] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 295.779903] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 295.788065] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 295.796211] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 295.804340] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 295.812437] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 295.818892] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 295.826491] Interruptibility = 00000001 ActivityState = 00000000 [ 295.832984] *** Host State *** [ 295.836227] RIP = 0xffffffff812ff9c0 RSP = 0xffff88805c46f340 [ 295.842395] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 295.848863] FSBase=00007fe29aa4a700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 295.856873] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 295.862889] CR0=0000000080050033 CR3=000000005cd96000 CR4=00000000001426f0 [ 295.869964] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 295.876831] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 295.883016] *** Control State *** [ 295.886529] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 295.893399] EntryControls=0000d1ff ExitControls=002fefff [ 295.898915] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 295.906079] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 295.912890] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 295.919535] reason=80000021 qualification=0000000000000003 [ 295.926068] IDTVectoring: info=00000000 errcode=00000000 [ 295.931657] TSC Offset = 0xffffff5d1a220b51 [ 295.936039] EPT pointer = 0x000000005c53601e 10:14:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="2feb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab62, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:46 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x665b0e02d25a7e22, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, 0x0) 10:14:46 executing program 0: ioprio_set$pid(0x2, 0x0, 0x7c37) clone(0x10900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 10:14:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'selfsystem'}, {0x20, '#'}, {0x20, 'eth1'}, {0x20, 'vboxnet0}{7#'}, {}, {0x20, 'mime_type\"'}, {0x20, 'em0+vboxnet1},ppp1user'}, {}, {0x20, '{,wlan1-lovboxnet0eth0:vmnet1+{//,Strustedcpuset-'}, {0x20, ',&'}], 0xa, "378b5fd6b416fc2726259de9914e2d37f12c2f14bb60d023ce83102cfe3844f5c042945022b112fbcf2d687858120c5acfaaa1f1c3b6be3a66f9e0692f7c86013b1db0e14f535000de77599bdacdc72207a5086234cce47821a72e894b531abfc265edf5e8adccc538eb3925f598d645507a56b6f55f6d17a4db7eb0e60d3dac5ce0a60514a74f727d897dbe6101de956b3886b0a1fc1dac3920085b3a2a53974d9c5c643bbec040"}, 0x12b) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xfa, 0xffffffffffffff01, 0x5, 0x8001}, {0x4, 0x3ff, 0x8000, 0x2fa68000000}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x14, &(0x7f00000000c0), 0x26f) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x1ff, 0x4000) 10:14:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x408001) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000100)=""/93) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x1}, {0x6}]}, 0x10) 10:14:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x20}, 0x8) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000100)=0x5, 0x4) 10:14:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x400000) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x19, &(0x7f0000000140)='-vmnet0\']cpuset+keyring+\x00', 0xffffffffffffffff}, 0x30) waitid(0x1, r2, &(0x7f00000001c0), 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r3 = shmget(0x3, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)={0x0, 0x0, 0x2}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0)) timerfd_settime(r1, 0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x4a, "65bd138ffff3af1e7c667dc7e0ff618c3cd91a5dd4a63eae15de1c2b4fac18fb8173283bb485ab0554c42b96c4cb8f5f7dda885a53bacb78166e43f8bbc6cf88663b99651a7d06d5af82"}, &(0x7f0000000400)=0x52) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={r4, 0x7}, &(0x7f0000000480)=0x8) r5 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x6, 0x8c00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x28, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={r6, 0x6, 0x8}, 0xc) recvmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/57, 0x39}, {&(0x7f0000000600)=""/75, 0x4b}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/115, 0x73}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/17, 0x11}], 0x9, &(0x7f0000000b40)=""/99, 0x63}, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000c00)) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000c40)=""/83) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000cc0)=0x1) clone(0x80000000, &(0x7f0000000d00)="d1f79b45b766379bc26891565e03a5915bffbcda729aa5447454cf47cb9c6a92349d9b5b37c517d7dfd4a237f7c119eb500ff08a77a45e05db54f2cb7e367abdc68a96d59210511b68d5a77e43e519b32be5d5a24d0c925858b408528832c54959790448060927", &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="e006d2faeeddbe136b8e00ecae256edd5c9561fab07e81509546f9a33b4a109bbceccc3afd788ef38579a22cee52a8eb1f3ad9d19b01e5baf0609e7bed08c15b0e68643a5b513f7713bc22681cb0fa2965c90f578594270dd73bdb201829fbb63326360066a3f1ed15de176ea8aaf328df7f535cf6d995d39563c6e8c7884fc8667997ff5e126e62f44c14229da4018a23ff167d61a72d82264faeec7575f1c67f34919d31e27e7f3cdc09a2e0847da1c62ebf53737eb3fafe805740") r7 = syz_open_dev$admmidi(&(0x7f0000000ec0)='/dev/admmidi#\x00', 0x3, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001000)={0x1, 0x0, 0xf0, &(0x7f0000000f00)="7cc2b0777b96a26e12b4334a6319e9f864a240bbb0d4bf31d032879451863394621dad47d584d422cd0c8c1fce7c6105fac8f13a0640725005a12825c1778a07dca44f1172baaa8e095783bb54a13912f30d037f77db70711052c74b07eb1883905b305fb51a2363a3bbb33a284ec68934049727cf768a311b993f75b1d07b6c22fef5185c5463608d887301311b5f4299aa51504d43afdad17c754e380278a06bf2d359258c84446b279f17b74bdcaddef73c9dd1096f34d5fe49dacd487b008752377984d8d931895ee66596828ab0f69f8674f6206e35515e2fca2b04a4cd9cae09cdb44e3a28961f7c0338009c41"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001080)={&(0x7f0000001040)='./file0\x00', r5}, 0x10) getsockname$packet(r7, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001100)=0x14) setsockopt$inet_dccp_buf(r0, 0x21, 0xce, &(0x7f0000001140)="27aa260b1a8e257870de6cec7d9e26f6155b333dcf3b1be6ec4b0e609aecf56b79476128d2ef7036e73a76db5f009f5bd82ce4c2fa421710a581f061899982a055bbbce044aa8eae28060dd9f5c20583d5f4e5678db0fb39263051cb0168f79854a765ff1c7a55aefeaaa952c8124d7e3e9feb9bfa0b5646ea3ae73390cc914f472d4edf", 0x84) r8 = add_key$user(&(0x7f0000001200)='user\x00', &(0x7f0000001240)={'syz', 0x0}, &(0x7f0000001280)="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", 0x1000, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) 10:14:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x20}, 0x8) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000100)=0x5, 0x4) 10:14:47 executing program 0: syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5407210f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r0}, 0x48) [ 297.661010] IPVS: ftp: loaded support on port[0] = 21 10:14:47 executing program 0: syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5407210f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r0}, 0x48) [ 297.854585] chnl_net:caif_netlink_parms(): no params data found [ 297.963818] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.970409] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.978994] device bridge_slave_0 entered promiscuous mode [ 298.003528] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.014308] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.025683] device bridge_slave_1 entered promiscuous mode [ 298.072033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.090366] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:14:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x202880) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x670ec55c, 0x7, 0x800, 0x400}}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0xfffffffffffffffe, 0x0, 0x3012, 0x0, 0x0, 0x6}}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7, 0x4}) [ 298.124793] team0: Port device team_slave_0 added [ 298.137883] team0: Port device team_slave_1 added 10:14:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000081fc, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) [ 298.227330] device hsr_slave_0 entered promiscuous mode [ 298.282689] device hsr_slave_1 entered promiscuous mode [ 298.333168] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.340879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.348279] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.354951] bridge0: port 1(bridge_slave_0) entered forwarding state 10:14:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)={r5, 0xca, "c603c70bf102f6b5c80544c54a69b4ad4b926c5cb5e1268e428b37e12980078b986503640cd2dedb1d5f287cc5ea55a8375354d83d92264261418641fe7aacac3eb7aa12af9a1b8361a29ca16278f613e71ddcdce9c88794b29f61c58b562d888b3ae51865ef18575dd8d6767b1e923ea60e64b7eb6b1b9f8ca09af6b1bea21a136495f072643adc1b32a8ae2c32ab04baf18bbfdc47c5c94a913d75648f66d0ced45474a4fb10a2299cc0a7e5023e41eb01877b89350033a918a409bb73b5ab48e2e7d49fab39b2fe6c"}, &(0x7f0000000140)=0xd2) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$P9_RREMOVE(r2, &(0x7f0000001a40)={0x7}, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000010005, 0x0) [ 298.444338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.484791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.503551] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.514771] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.527336] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 298.549594] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.571054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.580421] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.587065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.605869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.614331] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.620858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.676810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.686322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.695214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.703595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.716009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.749232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.760011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.875265] ================================================================== [ 298.882805] BUG: KMSAN: uninit-value in __se_sys_waitid+0x32c/0xb30 [ 298.889279] CPU: 0 PID: 11040 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 298.896222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.905774] Call Trace: [ 298.908484] dump_stack+0x173/0x1d0 [ 298.912161] kmsan_report+0x12e/0x2a0 [ 298.916008] kmsan_internal_check_memory+0xa62/0xb80 [ 298.921193] kmsan_check_memory+0xd/0x10 [ 298.925286] __se_sys_waitid+0x32c/0xb30 [ 298.929499] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 298.934984] ? prepare_exit_to_usermode+0x114/0x420 [ 298.940027] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 298.945289] ? syscall_return_slowpath+0xb2/0x650 [ 298.950213] __x64_sys_waitid+0x62/0x80 [ 298.954264] do_syscall_64+0xbc/0xf0 [ 298.958073] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.963398] RIP: 0033:0x458079 [ 298.966625] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.985556] RSP: 002b:00007f775ac1fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 298.993317] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 299.000611] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 299.007899] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.015187] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f775ac206d4 [ 299.022498] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 299.029811] [ 299.031443] Local variable description: ----__pu_val120.i@__se_sys_waitid [ 299.038369] Variable was created at: [ 299.042104] __se_sys_waitid+0x18c/0xb30 [ 299.046194] __x64_sys_waitid+0x62/0x80 [ 299.050187] [ 299.051823] Bytes 0-3 of 4 are uninitialized [ 299.056236] Memory access of size 4 starts at ffff8880545efe78 [ 299.062211] ================================================================== [ 299.069602] Disabling lock debugging due to kernel taint [ 299.075067] Kernel panic - not syncing: panic_on_warn set ... [ 299.080971] CPU: 0 PID: 11040 Comm: syz-executor.1 Tainted: G B 5.0.0+ #12 [ 299.089293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.098657] Call Trace: [ 299.101295] dump_stack+0x173/0x1d0 [ 299.104957] panic+0x3d1/0xb01 [ 299.108237] kmsan_report+0x293/0x2a0 [ 299.112092] kmsan_internal_check_memory+0xa62/0xb80 [ 299.117256] kmsan_check_memory+0xd/0x10 [ 299.121346] __se_sys_waitid+0x32c/0xb30 [ 299.125475] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 299.130954] ? prepare_exit_to_usermode+0x114/0x420 [ 299.135990] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 299.141208] ? syscall_return_slowpath+0xb2/0x650 [ 299.146088] __x64_sys_waitid+0x62/0x80 [ 299.150089] do_syscall_64+0xbc/0xf0 [ 299.153841] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.159043] RIP: 0033:0x458079 [ 299.162255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.181195] RSP: 002b:00007f775ac1fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 299.188939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 299.196221] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 299.203537] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.211223] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f775ac206d4 [ 299.218532] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 299.226706] Kernel Offset: disabled [ 299.230342] Rebooting in 86400 seconds..