[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 87.107172][ T32] audit: type=1800 audit(1571410441.165:25): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 87.130480][ T32] audit: type=1800 audit(1571410441.185:26): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 87.175843][ T32] audit: type=1800 audit(1571410441.215:27): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2019/10/18 14:54:16 fuzzer started 2019/10/18 14:54:21 dialing manager at 10.128.0.26:46011 2019/10/18 14:54:21 syscalls: 2415 2019/10/18 14:54:21 code coverage: enabled 2019/10/18 14:54:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/18 14:54:21 extra coverage: enabled 2019/10/18 14:54:21 setuid sandbox: enabled 2019/10/18 14:54:21 namespace sandbox: enabled 2019/10/18 14:54:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/18 14:54:21 fault injection: enabled 2019/10/18 14:54:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/18 14:54:21 net packet injection: enabled 2019/10/18 14:54:21 net device setup: enabled 2019/10/18 14:54:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 14:58:25 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x554f, 0x40843) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/50}) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64\x00', &(0x7f0000000180)='/dev/audio#\x00', 0xc, 0x1) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x40080) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, [0x3ff, 0x72, 0x9983, 0x9]}) r2 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x80000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000380)={{0x2, 0x0, @reserved="f13d139e5c5f524392f29888a07d95ff2a499a70abd264fe2c4de1d9b8a1ad35"}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x0, &(0x7f00000003c0)=0x9) setrlimit(0x6, &(0x7f0000000400)={0xffffffff}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000440)) syz_emit_ethernet(0x26, &(0x7f0000000480)={@empty, @local, [{[{0x9100, 0x4, 0x1, 0x4}], {0x8100, 0x1, 0x0, 0x2}}], {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "360b5f330c82f1c4"}}}}, &(0x7f00000004c0)={0x1, 0x2, [0xe4f, 0x691, 0x2ca, 0x91e]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000540)=""/234) lsetxattr$trusted_overlay_opaque(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='trusted.overlay.opaque\x00', &(0x7f00000006c0)='y\x00', 0x2, 0x2) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x0, @local}, &(0x7f0000000740)=0x1c, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000780)={0xc2, {{0xa, 0x4e21, 0x4, @mcast1, 0x8}}}, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000840)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000880)=0x20) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000900)=0x4, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/autofs\x00', 0x800000, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000980)=0x5) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$CAPI_GET_FLAGS(r8, 0x80044323, &(0x7f00000009c0)) syz_usb_connect$cdc_ncm(0x7, 0x75, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x6, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x7f, {{0x8, 0x24, 0x6, 0x0, 0x1, 'UEl'}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x800, 0x6, 0x40}, {0x6, 0x24, 0x1a, 0xe, 0x1}, [@acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x4c, 0xb3, 0x3, 0x20}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x4}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0xd5, "", {{{0x9, 0x5, 0x82, 0x2, 0x2bd, 0x81, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x2e9, 0x9, 0x86, 0x40}}}}}}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0x6, 0x81, 0xb7, 0xff, 0xfe}, 0x1055, &(0x7f0000000ac0)={0x5, 0xf, 0x1055, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0xf000, 0x4, [0xc0c0, 0x3f17, 0xff0000, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x35, 0xff, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5416eaed8c6dc3259be007d1f13a32ab"}, @generic={0x1003, 0x10, 0x3, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x6, 0xf00, 0xffff, [0x1e]}]}, 0x3, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x41d}}]}) r9 = socket$kcm(0x29, 0x2, 0x0) pread64(r9, &(0x7f0000001c40)=""/234, 0xea, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/dsp\x00', 0xa400, 0x0) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000001d80)={0x0, "488bc8435638a3882c6d276d39c2b7c7a06aabd3f9d5da8744f5aaf2456d6ad0", 0x1, 0x1}) syzkaller login: [ 351.604826][T12385] IPVS: ftp: loaded support on port[0] = 21 [ 351.756730][T12385] chnl_net:caif_netlink_parms(): no params data found [ 351.815298][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.822616][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.831370][T12385] device bridge_slave_0 entered promiscuous mode [ 351.841865][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.849087][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.858756][T12385] device bridge_slave_1 entered promiscuous mode [ 351.893643][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.906643][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.940828][T12385] team0: Port device team_slave_0 added [ 351.950365][T12385] team0: Port device team_slave_1 added [ 352.036854][T12385] device hsr_slave_0 entered promiscuous mode [ 352.222932][T12385] device hsr_slave_1 entered promiscuous mode [ 352.493857][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.501091][T12385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.508909][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.516179][T12385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.598393][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.620159][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.634848][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.645197][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.657781][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.677692][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.696299][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.705810][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.713098][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.766565][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.776088][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.783362][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.793837][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.804349][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.813979][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.827212][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.840967][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.850298][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.864044][T12385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.901193][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.353438][T12388] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 353.592290][T12388] usb 1-1: Using ep0 maxpacket: 16 [ 353.712881][T12388] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 353.725272][T12388] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 701 [ 353.735420][T12388] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 745 [ 353.922047][T12388] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.931295][T12388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.939538][T12388] usb 1-1: Product: Н [ 353.943897][T12388] usb 1-1: Manufacturer: Ѕ [ 353.948456][T12388] usb 1-1: SerialNumber: syz [ 354.322596][T12388] cdc_ncm 1-1:1.0: bind() failure [ 354.374537][T12388] cdc_ncm 1-1:1.1: bind() failure [ 354.416791][T12388] usb 1-1: USB disconnect, device number 2 14:58:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) r2 = dup3(r0, r1, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x10, 0x6) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101040, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x12100, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video1\x00', 0x2, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video2\x00', 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)="8f097397a3a559bf732ea61d99a8dcd123", 0x11}, {&(0x7f00000001c0)="9553c3eb499969cf6ec65db572bdebfd3c7fb8172d8aa1acd1415e5422590855dd32161bdcc41309dea0ba2d32bd0672e023ab74a5672694c1b36416ad37dc3501d0d3ed4f7938fd173598182726152ad5cb9d5fe4a8fb93b02fdb4a14d7de5da00772643d523844915c", 0x6a}, {&(0x7f0000000240)="dd122ecbe81f47b37fc396b13fd2bb1c56d4d5733f2d51d878d2d2a1c4e26f8e1ed325fc82faa0dfd5a16b73f4369f43f0127364f897e27f55d3cd134927c4e3c920ae13129afb7b52d87fc6272e7e687e61f8f949eafd7439d8f9277b309f29666e83e3f551a523a9d651c57b35f0c61cebcbf75b75f84472865089859131f265a5f4ab05551dbc0ca4bc27fa961919b6e0516b348dc82d3c647ebb5ca1dcc18785fe9a86e942085797bf806e2825c7790806ee72a0df07f6cc76ce1a514a6373200d45ab44658373c3a25a0f983ea1d7491f4dd3c9a69be53d", 0xda}, {&(0x7f0000000340)="bb52d3012bb0764ed61cfe152ffa59f74f3abda6c310336db7cc21d64ececf262a3c02b59830ac03ebe7a5b08d624881d174d33e6029946f0c26c679fbc27eb50a9b4b982e0b89bab6ab67c31b5d4fd73fd4092a91690221c4d6586ae819621b48f876e9789359c8b1d72900d81e037d1ccecb24dbe02b7ab0e003878eca343266d87bf8b0831ab6affdc2b7d5fc26c56836e0ca20afc08da14548d9e580", 0x9e}], 0x4, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [r1, r2, r4, r2, r1, r5, r6, r7, r8]}}], 0x38, 0x20000010}, 0x8000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video0\x00', 0x2, 0x0) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self\x00', 0x8a00, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0xb, 0x5, 0x40, 0xffffff6e, 0x262, 0xffffffffffffffff, 0x8, [], 0x0, r2, 0x2}, 0x3c) ppoll(&(0x7f0000000700)=[{r10, 0x800}, {r2, 0x2000}, {0xffffffffffffffff, 0x1}, {r11, 0x200}, {r12, 0x110c}], 0x5, &(0x7f0000000740)={0x77359400}, &(0x7f0000000780)={0x4}, 0x8) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vcs\x00', 0x2000, 0x0) write$binfmt_aout(r13, &(0x7f0000000800)={{0x108, 0x1f, 0x8, 0x11, 0x75, 0x10000, 0x346, 0x4}, "9757561c302236261bc8cd4f568807dbd27e41f2bf12cedafea4e50b1a461c062fa8e3504ddbde1fc17d986b81ad8a0745d89a3ade2866da20526fc07939c0be337759316601130747ec7d43774d28650ce9dd733c00b0917230cb8cdb2339513a6177ddc1b6195021a727a23a6e5c137a9b414fdb7afafe1416e57f97cb1aaf5a30359fb9ffd8457eb279a61b549a1a2ae222ad0cbd2f88d4eb6ca37fcd22cdbe737969126986f31b85b3d19fb7c48deb4c631d340c08e616d67189de5a899cf514a3391b", [[], [], [], [], [], [], [], [], [], []]}, 0xae5) r14 = syz_open_dev$sndpcmc(&(0x7f0000001300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20100) ioctl$UI_DEV_CREATE(r14, 0x5501) r15 = syz_open_dev$vcsn(&(0x7f0000001340)='/dev/vcs#\x00', 0x5, 0x1000) dup3(r15, 0xffffffffffffffff, 0xc0000) ioctl$DRM_IOCTL_GEM_OPEN(r14, 0xc010640b, &(0x7f0000001380)={0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_GEM_FLINK(r15, 0xc008640a, &(0x7f00000013c0)={0x0, r16}) r17 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001400)='/dev/sequencer2\x00', 0x220401, 0x0) setsockopt$inet_MCAST_MSFILTER(r17, 0x0, 0x30, &(0x7f0000001440)={0x80, {{0x2, 0x4e20, @rand_addr=0x2}}, 0x1, 0x1, [{{0x2, 0x4e24, @rand_addr=0x4}}]}, 0x110) r18 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001580)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$EVIOCGMTSLOTS(r18, 0x8040450a, &(0x7f00000015c0)=""/162) set_thread_area(&(0x7f0000001680)={0x67, 0x1000, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) [ 354.992028][ T892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 355.085154][T12397] IPVS: ftp: loaded support on port[0] = 21 [ 355.232258][ T892] usb 1-1: Using ep0 maxpacket: 16 [ 355.235711][T12397] chnl_net:caif_netlink_parms(): no params data found [ 355.298367][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.305720][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.314535][T12397] device bridge_slave_0 entered promiscuous mode [ 355.324992][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.332247][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.341053][T12397] device bridge_slave_1 entered promiscuous mode [ 355.352246][ T892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 355.363649][ T892] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 701 [ 355.372796][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.373766][ T892] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 745 [ 355.387852][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.428514][T12397] team0: Port device team_slave_0 added [ 355.438553][T12397] team0: Port device team_slave_1 added [ 355.516688][T12397] device hsr_slave_0 entered promiscuous mode [ 355.562924][ T892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.563212][T12397] device hsr_slave_1 entered promiscuous mode [ 355.572169][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.586585][ T892] usb 1-1: Product: Н [ 355.590730][ T892] usb 1-1: Manufacturer: Ѕ [ 355.595568][ T892] usb 1-1: SerialNumber: syz [ 355.611802][T12397] debugfs: Directory 'hsr0' with parent '/' already present! [ 355.642105][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.649345][T12397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.657155][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.664445][T12397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.753005][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.774632][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.784955][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.795607][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.807391][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 355.829880][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.849478][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.859053][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.866308][T12388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.927700][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.937080][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.944374][T12388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.956020][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.966334][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.976039][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.996889][T12397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.009783][T12397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.045060][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.053903][ T892] cdc_ncm 1-1:1.0: bind() failure [ 356.066800][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.077456][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:58:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000019}, 0xc) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 356.106647][ T892] cdc_ncm 1-1:1.1: bind() failure [ 356.186757][ T892] usb 1-1: USB disconnect, device number 3 14:58:30 executing program 0: syz_usb_connect(0x0, 0x373, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) semctl$GETPID(0xffffffffffffffff, 0x4, 0xb, &(0x7f0000000180)=""/83) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 356.741952][ T892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 357.102297][ T892] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 357.110568][ T892] usb 1-1: config 0 has no interface number 0 [ 357.116985][ T892] usb 1-1: config 0 interface 96 has no altsetting 0 [ 357.123892][ T892] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=87.f5 [ 357.133402][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.146903][ T892] usb 1-1: config 0 descriptor?? [ 357.210806][ T892] as10x_usb: device has been detected [ 357.218616][ T892] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 357.314701][ T892] usb 1-1: DVB: registering adapter 0 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 357.360254][ T892] usb 1-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 357.369301][ T892] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 357.377653][ T892] Registered device Elgato EyeTV DTT Deluxe [ 357.409108][ T31] usb 1-1: USB disconnect, device number 4 [ 357.433658][ T31] Unregistered device Elgato EyeTV DTT Deluxe [ 357.443425][ T31] as10x_usb: device has been disconnected 14:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') syz_genetlink_get_family_id$tipc(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8f4d8bb57adbf460, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x94) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000230047faff9c4ce4db1a6df87bd863fd0f0001000000000400000204001000a015f8b0206ac3d78578105082f4fcc477cb57f5000731dfaf0400400000004b15a9fdd6c1610c621c85fe3e348527b00005b2b2b3c2ea9b6fab4c5c2578cee69e8c03129d19c8deb1d4b7503a71c6a93c266c052011735731b10b8b84c94a11e9e0ce437f42b002f1b5ad67da317c776ff741067915bca1fd57079bdcc0769186b5bc55f1d7fcbc079d2e0ae29c1170df8428b8bf750e61352e97f5a976adc1824bed68b9b1e70ee7004f29fa24a238913c169608a4992c5c3853b6bd7e8d3629276b44ec5a0000"], 0x18}}, 0x0) close(r0) 14:58:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000006000000001c0012000c00010062726964676500000c0002000800080081000000"], 0x3}}, 0x4040004) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @multicast2}, &(0x7f0000000080)=0xc) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) 14:58:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)='\'*nodevwlan1-)trusted{wlan1\x00', 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x3, &(0x7f0000000080)='ip6erspan0\x00'}) [ 358.192398][T12388] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 358.552531][T12388] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 358.560737][T12388] usb 1-1: config 0 has no interface number 0 [ 358.567138][T12388] usb 1-1: config 0 interface 96 has no altsetting 0 [ 358.574012][T12388] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=87.f5 [ 358.583319][T12388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.595719][T12388] usb 1-1: config 0 descriptor?? [ 358.643220][T12388] as10x_usb: device has been detected [ 358.650028][T12388] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) 14:58:32 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000400)="c771ea4ed6cd1b2dbc95b3c2d2b249a26d1a68505ce7d7e8ff8af9b1b0860e15b6af83ed4c325098bebf8a735ca21dd1c8f33bcf17ebf11b560d7e1de311ee6d455353bbad5a48671d42009b9eb0281bb9570a94465d675fbf276caa5290a19ed0f1615fbf9fb41380f6d9c58a520c8b8a0c49f2e9eb6540db3fda097f66929b896970017ecaf1aaac4c1e5e401621d20160bc13f33c884b691080ef9f79f001a5f4a292b8ce038437ea4790d9381c950af2837da3a3522a870cc0c9f65adee53502922075d7c8c52ac643f6a20ea6f41992ebcaaf1c6d9fb02e8afa04477a726e680f", 0xe3, 0x80, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @mcast2, 0x81}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) accept$alg(r2, 0x0, 0x0) bind(r3, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet_udp_int(r4, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) [ 358.817543][T12388] usb 1-1: DVB: registering adapter 0 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 358.842600][T12388] usb 1-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 358.851459][T12388] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 358.859938][T12388] Registered device Elgato EyeTV DTT Deluxe [ 358.875966][T12388] usb 1-1: USB disconnect, device number 5 [ 358.893334][T12388] Unregistered device Elgato EyeTV DTT Deluxe [ 358.897268][T12388] as10x_usb: device has been disconnected [ 358.911421][T12438] sctp: [Deprecated]: syz-executor.1 (pid 12438) Use of int in max_burst socket option deprecated. [ 358.911421][T12438] Use struct sctp_assoc_value instead [ 358.972791][T12437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:58:33 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200004, 0x0) bind$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, {0x40, 0x0, 0x2, 0xe4, 0x8, 0x7}, 0x6}, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r2, &(0x7f0000000200)=""/129) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x101000, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000300)={0x3, 0x1, 0x0, 0x401, 0x6, 0x1127443d}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x6, 0x5, 0xff, 0x101, 0x1ff, 0x8, 0x7, 0x5}, &(0x7f0000000380)={0x5, 0x8377, 0x9, 0x9, 0x4, 0x9, 0xfffffffffffffff7}, &(0x7f00000003c0)={0x777b, 0x2, 0x40, 0x4, 0xc1, 0x20, 0xfffffffffffff18e}, &(0x7f0000000440)={r4, r5+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={0x3}, 0x8}) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000500)={0x0, 0x7cc, 0x8000, 0x1, 0x0, 0x7, 0x80, 0x1, 0x3, 0x96}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x2, 0x8}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000600)={r8, 0x6}, 0x8) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x10000, 0x0) ioctl$TIOCSRS485(r9, 0x542f, &(0x7f0000000680)={0x4, 0x68, 0x9}) r10 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000700)) r11 = creat(&(0x7f0000000740)='./file0\x00', 0x205) mq_notify(r11, &(0x7f0000000980)={0x0, 0x5, 0x0, @thr={&(0x7f0000000780)="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", &(0x7f0000000880)="5bfbee003c8cdbffad6a3c51e2f7397cb7c9fbcaf526d28dbad45b2a399d858917a99a84f465bf6525e628da8631991f0095892b9e8d81b309865a948d09c8f382e03f8db1105708c35e0551e6cd05ef54ae4d896bff674225542a255192d8983c44bd49109ec4cedb5a3c466032d76fe37ec100f3b8ec0f1d8092794d633fc4df3945039c7422ad622c66b85fbddbb0f245dfebbc7c0d19360c40568668aa40d9ab5badd4629f6bf83290643d4e72af5e59928f1e758a5c17aafa8ac53201e814e0810c550d5149e4493cc6ae752c70ba77ab95ad98803cafdc2bf9f6448871348dc96bf193e517799b8bc8567538689efde1dd89c1d4"}}) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='trusted.overlay.redirect\x00', &(0x7f0000000a40)='./file0\x00', 0x8, 0x2) r12 = syz_open_dev$mouse(&(0x7f0000000a80)='/dev/input/mouse#\x00', 0x3, 0x20000) move_mount(r12, &(0x7f0000000ac0)='./file0\x00', r3, &(0x7f0000000b00)='./file0\x00', 0x41) r13 = socket$packet(0x11, 0x3, 0x300) accept$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c00)={'rose0\x00', r14}) 14:58:33 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) unlink(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fsopen(&(0x7f0000000200)='ext2\x00', 0x1) poll(&(0x7f0000000240), 0x0, 0x80000000) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000180)={0x6, 0x102, "1f73d5929aaa7a7f6160cffacd52dde1389d1463b54e40922e37344fa7d10548", 0xfff, 0x0, 0x101, 0x800, 0x200}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 359.648604][T12438] sctp: [Deprecated]: syz-executor.1 (pid 12438) Use of int in max_burst socket option deprecated. [ 359.648604][T12438] Use struct sctp_assoc_value instead [ 359.753837][T12451] IPVS: ftp: loaded support on port[0] = 21 14:58:33 executing program 1: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 14:58:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x2a, 0x0, &(0x7f0000000000)="00272c0c1c610fb97d89ddd3f97df064722da4b07e44c5e3ecb9d92b4cd1ae5cd2602c80bf4c76a032c3"}) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) recvfrom(r4, &(0x7f0000000240)=""/176, 0xff39, 0x20, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000e11ff0)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 359.930986][T12451] chnl_net:caif_netlink_parms(): no params data found [ 360.010592][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.018400][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.027314][T12451] device bridge_slave_0 entered promiscuous mode [ 360.037774][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.045152][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.054444][T12451] device bridge_slave_1 entered promiscuous mode [ 360.098306][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.111580][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.148045][T12451] team0: Port device team_slave_0 added [ 360.180421][T12451] team0: Port device team_slave_1 added [ 360.188232][ C0] hrtimer: interrupt took 44216 ns [ 360.289183][T12451] device hsr_slave_0 entered promiscuous mode [ 360.319670][T12459] ===================================================== [ 360.326663][T12459] BUG: KMSAN: use-after-free in kmem_cache_alloc_node+0x5d0/0xe70 [ 360.334750][T12459] CPU: 0 PID: 12459 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 360.342661][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.352729][T12459] Call Trace: [ 360.356039][T12459] dump_stack+0x191/0x1f0 [ 360.360382][T12459] kmsan_report+0x14a/0x2f0 [ 360.364901][T12459] __msan_warning+0x73/0xf0 [ 360.369414][T12459] kmem_cache_alloc_node+0x5d0/0xe70 [ 360.374796][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.380707][T12459] ? __alloc_skb+0x215/0xa10 [ 360.385346][T12459] __alloc_skb+0x215/0xa10 [ 360.389990][T12459] sctp_packet_transmit+0x417/0x42f0 [ 360.395568][T12459] ? sctp_packet_append_chunk+0xf3a/0x13e0 [ 360.401420][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.407341][T12459] sctp_outq_flush+0x1823/0x5d80 [ 360.412296][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.418212][T12459] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 360.424317][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.430272][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.436366][T12459] sctp_outq_uncork+0xd0/0xf0 [ 360.441055][T12459] sctp_do_sm+0x8fe1/0x9720 [ 360.445591][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.451502][T12459] ? apic_timer_interrupt+0xa/0x40 [ 360.456635][T12459] ? kmsan_get_metadata+0x39/0x350 [ 360.461764][T12459] ? kmsan_internal_set_origin+0x6a/0xb0 [ 360.467535][T12459] ? kmsan_get_metadata+0x39/0x350 [ 360.472658][T12459] ? kmsan_internal_set_origin+0x6a/0xb0 [ 360.478324][T12459] sctp_primitive_SEND+0x175/0x1a0 [ 360.483459][T12459] sctp_sendmsg_to_asoc+0x287f/0x2e90 [ 360.488841][T12459] ? apic_timer_interrupt+0xa/0x40 [ 360.493978][T12459] ? kmsan_get_metadata+0x39/0x350 [ 360.499133][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.505312][T12459] sctp_sendmsg+0x30d6/0x5010 [ 360.510062][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.516957][T12459] ? udp_cmsg_send+0x5d0/0x5d0 [ 360.521726][T12459] ? sctp_getsockopt+0x19da0/0x19da0 [ 360.527019][T12459] inet_sendmsg+0x2d8/0x2e0 [ 360.531540][T12459] ? inet_send_prepare+0x600/0x600 [ 360.536658][T12459] kernel_sendmsg+0x384/0x440 [ 360.541370][T12459] sock_no_sendpage+0x205/0x2b0 [ 360.546597][T12459] sock_sendpage+0x272/0x2e0 [ 360.551226][T12459] pipe_to_sendpage+0x342/0x470 [ 360.556087][T12459] ? sock_fasync+0x250/0x250 [ 360.560699][T12459] __splice_from_pipe+0x484/0xe80 [ 360.565734][T12459] ? generic_splice_sendpage+0x2d0/0x2d0 [ 360.571392][T12459] generic_splice_sendpage+0x1d5/0x2d0 [ 360.576963][T12459] ? iter_file_splice_write+0x17f0/0x17f0 [ 360.582692][T12459] direct_splice_actor+0x19e/0x200 [ 360.587831][T12459] splice_direct_to_actor+0x852/0x1130 [ 360.593422][T12459] ? do_splice_direct+0x580/0x580 [ 360.598480][T12459] do_splice_direct+0x342/0x580 [ 360.603364][T12459] do_sendfile+0x1010/0x1d20 [ 360.609129][T12459] __se_sys_sendfile64+0x2bb/0x360 [ 360.614258][T12459] ? syscall_return_slowpath+0x90/0x610 [ 360.619822][T12459] __x64_sys_sendfile64+0x56/0x70 [ 360.624855][T12459] do_syscall_64+0xb6/0x160 [ 360.629365][T12459] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 360.635285][T12459] RIP: 0033:0x459a59 [ 360.639185][T12459] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.658798][T12459] RSP: 002b:00007fe9c396dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.667391][T12459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59 [ 360.675550][T12459] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 360.683527][T12459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.691505][T12459] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fe9c396e6d4 [ 360.699500][T12459] R13: 00000000004c74af R14: 00000000004dd190 R15: 00000000ffffffff [ 360.707489][T12459] [ 360.709814][T12459] Uninit was stored to memory at: [ 360.714848][T12459] kmsan_internal_chain_origin+0xbd/0x170 [ 360.720569][T12459] __msan_chain_origin+0x6b/0xe0 [ 360.725520][T12459] ___slab_alloc+0x1dbc/0x1fb0 [ 360.730303][T12459] kmem_cache_alloc_node+0x769/0xe70 [ 360.735680][T12459] __alloc_skb+0x215/0xa10 [ 360.740101][T12459] _sctp_make_chunk+0xee/0x8c0 [ 360.744868][T12459] sctp_make_sack+0x310/0x17e0 [ 360.749634][T12459] sctp_packet_append_chunk+0xbb6/0x13e0 [ 360.755269][T12459] sctp_packet_transmit_chunk+0x9e/0x220 [ 360.760902][T12459] sctp_outq_flush+0x215a/0x5d80 [ 360.765838][T12459] sctp_outq_uncork+0xd0/0xf0 [ 360.770523][T12459] sctp_do_sm+0x8fe1/0x9720 [ 360.775120][T12459] sctp_primitive_SEND+0x175/0x1a0 [ 360.780232][T12459] sctp_sendmsg_to_asoc+0x287f/0x2e90 [ 360.785615][T12459] sctp_sendmsg+0x30d6/0x5010 [ 360.790292][T12459] inet_sendmsg+0x2d8/0x2e0 [ 360.794797][T12459] kernel_sendmsg+0x384/0x440 [ 360.799517][T12459] sock_no_sendpage+0x205/0x2b0 [ 360.804379][T12459] sock_sendpage+0x272/0x2e0 [ 360.808987][T12459] pipe_to_sendpage+0x342/0x470 [ 360.813849][T12459] __splice_from_pipe+0x484/0xe80 [ 360.818875][T12459] generic_splice_sendpage+0x1d5/0x2d0 [ 360.824336][T12459] direct_splice_actor+0x19e/0x200 [ 360.829627][T12459] splice_direct_to_actor+0x852/0x1130 [ 360.835092][T12459] do_splice_direct+0x342/0x580 [ 360.839956][T12459] do_sendfile+0x1010/0x1d20 [ 360.844549][T12459] __se_sys_sendfile64+0x2bb/0x360 [ 360.849670][T12459] __x64_sys_sendfile64+0x56/0x70 [ 360.854823][T12459] do_syscall_64+0xb6/0x160 [ 360.859338][T12459] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 360.865221][T12459] [ 360.867545][T12459] Uninit was created at: [ 360.871798][T12459] kmsan_internal_poison_shadow+0x60/0x110 [ 360.877782][T12459] kmsan_slab_free+0x8d/0x100 [ 360.882481][T12459] kmem_cache_free_bulk+0x3ad9/0x3f10 [ 360.887863][T12459] __kfree_skb_flush+0xb0/0x100 [ 360.892717][T12459] net_rx_action+0x1a5e/0x1aa0 [ 360.897481][T12459] __do_softirq+0x4a1/0x83a [ 360.901987][T12459] irq_exit+0x230/0x280 [ 360.906142][T12459] do_IRQ+0x123/0x360 [ 360.910121][T12459] ret_from_intr+0x0/0x33 [ 360.914446][T12459] ===================================================== [ 360.921394][T12459] Disabling lock debugging due to kernel taint [ 360.927551][T12459] Kernel panic - not syncing: panic_on_warn set ... [ 360.934146][T12459] CPU: 0 PID: 12459 Comm: syz-executor.1 Tainted: G B 5.4.0-rc3+ #0 [ 360.943417][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.953472][T12459] Call Trace: [ 360.956771][T12459] dump_stack+0x191/0x1f0 [ 360.961130][T12459] panic+0x3c9/0xc1e [ 360.965154][T12459] kmsan_report+0x2e8/0x2f0 [ 360.969672][T12459] __msan_warning+0x73/0xf0 [ 360.974182][T12459] kmem_cache_alloc_node+0x5d0/0xe70 [ 360.979497][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 360.985402][T12459] ? __alloc_skb+0x215/0xa10 [ 360.990109][T12459] __alloc_skb+0x215/0xa10 [ 360.994557][T12459] sctp_packet_transmit+0x417/0x42f0 [ 360.999889][T12459] ? sctp_packet_append_chunk+0xf3a/0x13e0 [ 361.005730][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.011733][T12459] sctp_outq_flush+0x1823/0x5d80 [ 361.016905][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.022816][T12459] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 361.028914][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.034841][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.040773][T12459] sctp_outq_uncork+0xd0/0xf0 [ 361.045472][T12459] sctp_do_sm+0x8fe1/0x9720 [ 361.050086][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.055992][T12459] ? apic_timer_interrupt+0xa/0x40 [ 361.061113][T12459] ? kmsan_get_metadata+0x39/0x350 [ 361.066238][T12459] ? kmsan_internal_set_origin+0x6a/0xb0 [ 361.071883][T12459] ? kmsan_get_metadata+0x39/0x350 [ 361.077008][T12459] ? kmsan_internal_set_origin+0x6a/0xb0 [ 361.082665][T12459] sctp_primitive_SEND+0x175/0x1a0 [ 361.087804][T12459] sctp_sendmsg_to_asoc+0x287f/0x2e90 [ 361.093188][T12459] ? apic_timer_interrupt+0xa/0x40 [ 361.098330][T12459] ? kmsan_get_metadata+0x39/0x350 [ 361.103483][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.109391][T12459] sctp_sendmsg+0x30d6/0x5010 [ 361.114210][T12459] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 361.120149][T12459] ? udp_cmsg_send+0x5d0/0x5d0 [ 361.124917][T12459] ? sctp_getsockopt+0x19da0/0x19da0 [ 361.130261][T12459] inet_sendmsg+0x2d8/0x2e0 [ 361.134777][T12459] ? inet_send_prepare+0x600/0x600 [ 361.139890][T12459] kernel_sendmsg+0x384/0x440 [ 361.144595][T12459] sock_no_sendpage+0x205/0x2b0 [ 361.149475][T12459] sock_sendpage+0x272/0x2e0 [ 361.154085][T12459] pipe_to_sendpage+0x342/0x470 [ 361.158937][T12459] ? sock_fasync+0x250/0x250 [ 361.163557][T12459] __splice_from_pipe+0x484/0xe80 [ 361.168591][T12459] ? generic_splice_sendpage+0x2d0/0x2d0 [ 361.174252][T12459] generic_splice_sendpage+0x1d5/0x2d0 [ 361.179727][T12459] ? iter_file_splice_write+0x17f0/0x17f0 [ 361.185456][T12459] direct_splice_actor+0x19e/0x200 [ 361.190846][T12459] splice_direct_to_actor+0x852/0x1130 [ 361.196310][T12459] ? do_splice_direct+0x580/0x580 [ 361.201369][T12459] do_splice_direct+0x342/0x580 [ 361.206346][T12459] do_sendfile+0x1010/0x1d20 [ 361.211235][T12459] __se_sys_sendfile64+0x2bb/0x360 [ 361.216353][T12459] ? syscall_return_slowpath+0x90/0x610 [ 361.222952][T12459] __x64_sys_sendfile64+0x56/0x70 [ 361.227977][T12459] do_syscall_64+0xb6/0x160 [ 361.232576][T12459] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 361.238470][T12459] RIP: 0033:0x459a59 [ 361.242368][T12459] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.261972][T12459] RSP: 002b:00007fe9c396dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 361.270398][T12459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59 [ 361.278378][T12459] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 361.286364][T12459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 361.294344][T12459] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fe9c396e6d4 [ 361.302325][T12459] R13: 00000000004c74af R14: 00000000004dd190 R15: 00000000ffffffff [ 361.311950][T12459] Kernel Offset: disabled [ 361.316281][T12459] Rebooting in 86400 seconds..