[ 70.632635][ T30] audit: type=1800 audit(1564819529.685:25): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.655479][ T30] audit: type=1800 audit(1564819529.705:26): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.692498][ T30] audit: type=1800 audit(1564819529.725:27): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 71.704661][T11057] sshd (11057) used greatest stack depth: 54368 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. 2019/08/03 08:05:43 fuzzer started syzkaller login: [ 88.054794][T11145] cc1 (11145) used greatest stack depth: 54352 bytes left 2019/08/03 08:05:48 dialing manager at 10.128.0.26:35097 2019/08/03 08:05:49 syscalls: 2367 2019/08/03 08:05:49 code coverage: enabled 2019/08/03 08:05:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/03 08:05:49 extra coverage: enabled 2019/08/03 08:05:49 setuid sandbox: enabled 2019/08/03 08:05:49 namespace sandbox: enabled 2019/08/03 08:05:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/03 08:05:49 fault injection: enabled 2019/08/03 08:05:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/03 08:05:49 net packet injection: enabled 2019/08/03 08:05:49 net device setup: enabled 08:08:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) [ 226.047279][T11154] IPVS: ftp: loaded support on port[0] = 21 [ 226.180214][T11154] chnl_net:caif_netlink_parms(): no params data found [ 226.232210][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.239398][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.247998][T11154] device bridge_slave_0 entered promiscuous mode [ 226.257250][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.264489][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.273113][T11154] device bridge_slave_1 entered promiscuous mode [ 226.303914][T11154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.315498][T11154] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.346122][T11154] team0: Port device team_slave_0 added [ 226.355316][T11154] team0: Port device team_slave_1 added [ 226.646302][T11154] device hsr_slave_0 entered promiscuous mode [ 226.812844][T11154] device hsr_slave_1 entered promiscuous mode [ 227.011123][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.018379][T11154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.026158][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.033359][T11154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.108241][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.127894][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.142723][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.153709][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.166954][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 227.190163][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.206876][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.216480][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.225424][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.232648][T11156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.274008][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.283658][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.292582][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.299727][T11156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.308106][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.317933][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.327748][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.337416][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.346861][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.356499][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.365893][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.374944][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.387043][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.396537][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.405594][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.418266][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.453181][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 08:08:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 08:08:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 08:08:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 08:08:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 08:08:08 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0xa0, 0xed, 0x8, 0x424, 0x7500, 0x8212, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x2, 0xf2, 0x23, 0x6b, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000021c0)={0xcc, &(0x7f0000000400)={0x0, 0x0, 0x1, "a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000f00)={0xcc, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:08:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 229.573414][T11184] IPVS: ftp: loaded support on port[0] = 21 08:08:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 229.759222][T11184] chnl_net:caif_netlink_parms(): no params data found [ 229.835745][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.843070][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.851562][T11184] device bridge_slave_0 entered promiscuous mode [ 229.863621][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.870804][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.879565][T11184] device bridge_slave_1 entered promiscuous mode [ 229.912229][T11184] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.924452][T11184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.958709][T11184] team0: Port device team_slave_0 added [ 229.968207][T11184] team0: Port device team_slave_1 added 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 230.056048][T11184] device hsr_slave_0 entered promiscuous mode [ 230.102372][T11184] device hsr_slave_1 entered promiscuous mode [ 230.160109][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.167387][T11184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.175148][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.182469][T11184] bridge0: port 1(bridge_slave_0) entered forwarding state 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 230.298871][T11184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.350810][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.360484][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.382941][T11156] bridge0: port 2(bridge_slave_1) entered disabled state 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 230.399023][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.448824][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.482881][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.491849][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.499047][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 230.555752][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.565058][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.572300][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.582502][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.592657][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.602059][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.610753][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.632128][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 230.670797][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.695911][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0 08:08:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 08:08:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 08:08:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 231.142966][ T3088] usb 2-1: new high-speed USB device number 2 using dummy_hcd 08:08:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 231.382372][ T3088] usb 2-1: Using ep0 maxpacket: 8 [ 231.502754][ T3088] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 231.511058][ T3088] usb 2-1: config 0 has no interface number 0 [ 231.517359][ T3088] usb 2-1: config 0 interface 186 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 231.527344][ T3088] usb 2-1: config 0 interface 186 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 231.537422][ T3088] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=82.12 [ 231.546581][ T3088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.558884][ T3088] usb 2-1: config 0 descriptor?? [ 231.603783][ T3088] smsc75xx v1.0.0 [ 232.262197][ T3088] ================================================================== [ 232.270310][ T3088] BUG: KMSAN: uninit-value in smsc75xx_read_eeprom+0x203/0x920 [ 232.277867][ T3088] CPU: 0 PID: 3088 Comm: kworker/0:2 Not tainted 5.2.0+ #15 [ 232.285144][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.295213][ T3088] Workqueue: usb_hub_wq hub_event [ 232.300231][ T3088] Call Trace: [ 232.303607][ T3088] dump_stack+0x191/0x1f0 [ 232.307950][ T3088] kmsan_report+0x162/0x2d0 [ 232.312459][ T3088] __msan_warning+0x75/0xe0 [ 232.316971][ T3088] smsc75xx_read_eeprom+0x203/0x920 [ 232.322181][ T3088] smsc75xx_bind+0x675/0x12d0 [ 232.326871][ T3088] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 232.332154][ T3088] usbnet_probe+0x10d3/0x3950 [ 232.336836][ T3088] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 232.342926][ T3088] ? usbnet_disconnect+0x660/0x660 [ 232.348039][ T3088] usb_probe_interface+0xd19/0x1310 [ 232.353256][ T3088] ? usb_register_driver+0x7d0/0x7d0 [ 232.358543][ T3088] really_probe+0x1344/0x1d90 [ 232.363240][ T3088] driver_probe_device+0x1ba/0x510 [ 232.368361][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.374265][ T3088] __device_attach_driver+0x5b8/0x790 [ 232.379656][ T3088] bus_for_each_drv+0x28e/0x3b0 [ 232.384505][ T3088] ? deferred_probe_work_func+0x400/0x400 [ 232.390231][ T3088] __device_attach+0x489/0x750 [ 232.395008][ T3088] device_initial_probe+0x4a/0x60 [ 232.400038][ T3088] bus_probe_device+0x131/0x390 [ 232.404901][ T3088] device_add+0x25b5/0x2df0 [ 232.409431][ T3088] usb_set_configuration+0x309f/0x3710 [ 232.414937][ T3088] generic_probe+0xe7/0x280 [ 232.419451][ T3088] ? usb_choose_configuration+0xae0/0xae0 [ 232.425172][ T3088] usb_probe_device+0x146/0x200 [ 232.430027][ T3088] ? usb_register_device_driver+0x470/0x470 [ 232.435919][ T3088] really_probe+0x1344/0x1d90 [ 232.440610][ T3088] driver_probe_device+0x1ba/0x510 [ 232.445733][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.451633][ T3088] __device_attach_driver+0x5b8/0x790 [ 232.457017][ T3088] bus_for_each_drv+0x28e/0x3b0 [ 232.461869][ T3088] ? deferred_probe_work_func+0x400/0x400 [ 232.467595][ T3088] __device_attach+0x489/0x750 [ 232.472374][ T3088] device_initial_probe+0x4a/0x60 [ 232.477403][ T3088] bus_probe_device+0x131/0x390 [ 232.482262][ T3088] device_add+0x25b5/0x2df0 [ 232.486791][ T3088] usb_new_device+0x23e5/0x2fb0 [ 232.491669][ T3088] hub_event+0x5853/0x7320 [ 232.496143][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.502039][ T3088] ? led_work+0x720/0x720 [ 232.506366][ T3088] ? led_work+0x720/0x720 [ 232.510701][ T3088] process_one_work+0x1572/0x1f00 [ 232.515751][ T3088] worker_thread+0x111b/0x2460 [ 232.520557][ T3088] kthread+0x4b5/0x4f0 [ 232.524623][ T3088] ? process_one_work+0x1f00/0x1f00 [ 232.529831][ T3088] ? kthread_blkcg+0xf0/0xf0 [ 232.534481][ T3088] ret_from_fork+0x35/0x40 [ 232.538900][ T3088] [ 232.541226][ T3088] Local variable description: ----buf.i.i86@smsc75xx_read_eeprom [ 232.548931][ T3088] Variable was created at: [ 232.553348][ T3088] smsc75xx_read_eeprom+0x109/0x920 [ 232.558546][ T3088] smsc75xx_bind+0x675/0x12d0 [ 232.563208][ T3088] ================================================================== [ 232.571260][ T3088] Disabling lock debugging due to kernel taint [ 232.577408][ T3088] Kernel panic - not syncing: panic_on_warn set ... [ 232.584093][ T3088] CPU: 0 PID: 3088 Comm: kworker/0:2 Tainted: G B 5.2.0+ #15 [ 232.592753][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.602814][ T3088] Workqueue: usb_hub_wq hub_event [ 232.607833][ T3088] Call Trace: [ 232.611136][ T3088] dump_stack+0x191/0x1f0 [ 232.615479][ T3088] panic+0x3c9/0xc1e [ 232.619405][ T3088] kmsan_report+0x2ca/0x2d0 [ 232.623915][ T3088] __msan_warning+0x75/0xe0 [ 232.628423][ T3088] smsc75xx_read_eeprom+0x203/0x920 [ 232.633634][ T3088] smsc75xx_bind+0x675/0x12d0 [ 232.638321][ T3088] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 232.643606][ T3088] usbnet_probe+0x10d3/0x3950 [ 232.648289][ T3088] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 232.654770][ T3088] ? usbnet_disconnect+0x660/0x660 [ 232.659890][ T3088] usb_probe_interface+0xd19/0x1310 [ 232.665101][ T3088] ? usb_register_driver+0x7d0/0x7d0 [ 232.670391][ T3088] really_probe+0x1344/0x1d90 [ 232.675088][ T3088] driver_probe_device+0x1ba/0x510 [ 232.680206][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.686104][ T3088] __device_attach_driver+0x5b8/0x790 [ 232.691492][ T3088] bus_for_each_drv+0x28e/0x3b0 [ 232.696345][ T3088] ? deferred_probe_work_func+0x400/0x400 [ 232.702074][ T3088] __device_attach+0x489/0x750 [ 232.706853][ T3088] device_initial_probe+0x4a/0x60 [ 232.711882][ T3088] bus_probe_device+0x131/0x390 [ 232.716917][ T3088] device_add+0x25b5/0x2df0 [ 232.721444][ T3088] usb_set_configuration+0x309f/0x3710 [ 232.726945][ T3088] generic_probe+0xe7/0x280 [ 232.731449][ T3088] ? usb_choose_configuration+0xae0/0xae0 [ 232.737174][ T3088] usb_probe_device+0x146/0x200 [ 232.742028][ T3088] ? usb_register_device_driver+0x470/0x470 [ 232.747921][ T3088] really_probe+0x1344/0x1d90 [ 232.752617][ T3088] driver_probe_device+0x1ba/0x510 [ 232.757732][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.763636][ T3088] __device_attach_driver+0x5b8/0x790 [ 232.769022][ T3088] bus_for_each_drv+0x28e/0x3b0 [ 232.773877][ T3088] ? deferred_probe_work_func+0x400/0x400 [ 232.779601][ T3088] __device_attach+0x489/0x750 [ 232.784378][ T3088] device_initial_probe+0x4a/0x60 [ 232.789417][ T3088] bus_probe_device+0x131/0x390 [ 232.794278][ T3088] device_add+0x25b5/0x2df0 [ 232.798808][ T3088] usb_new_device+0x23e5/0x2fb0 [ 232.803682][ T3088] hub_event+0x5853/0x7320 [ 232.808158][ T3088] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 232.814046][ T3088] ? led_work+0x720/0x720 [ 232.818372][ T3088] ? led_work+0x720/0x720 [ 232.823232][ T3088] process_one_work+0x1572/0x1f00 [ 232.828283][ T3088] worker_thread+0x111b/0x2460 [ 232.833074][ T3088] kthread+0x4b5/0x4f0 [ 232.837139][ T3088] ? process_one_work+0x1f00/0x1f00 [ 232.842348][ T3088] ? kthread_blkcg+0xf0/0xf0 [ 232.846941][ T3088] ret_from_fork+0x35/0x40 [ 232.852505][ T3088] Kernel Offset: disabled [ 232.856823][ T3088] Rebooting in 86400 seconds..