[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.427203][ T30] audit: type=1800 audit(1565031739.473:25): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.449992][ T30] audit: type=1800 audit(1565031739.503:26): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.503436][ T30] audit: type=1800 audit(1565031739.523:27): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. 2019/08/05 19:02:32 fuzzer started 2019/08/05 19:02:38 dialing manager at 10.128.0.26:46627 2019/08/05 19:02:38 syscalls: 2367 2019/08/05 19:02:38 code coverage: enabled 2019/08/05 19:02:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/05 19:02:38 extra coverage: enabled 2019/08/05 19:02:38 setuid sandbox: enabled 2019/08/05 19:02:38 namespace sandbox: enabled 2019/08/05 19:02:38 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/05 19:02:38 fault injection: enabled 2019/08/05 19:02:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/05 19:02:38 net packet injection: enabled 2019/08/05 19:02:38 net device setup: enabled 19:04:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfffffffffffff001) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={0x0, 0x0}}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x1c9c380}, {0x0, 0x7}}, 0x0) syzkaller login: [ 230.125645][T11538] IPVS: ftp: loaded support on port[0] = 21 [ 230.263990][T11538] chnl_net:caif_netlink_parms(): no params data found [ 230.317498][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.324796][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.333474][T11538] device bridge_slave_0 entered promiscuous mode [ 230.342912][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.350081][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.358825][T11538] device bridge_slave_1 entered promiscuous mode [ 230.392806][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.405285][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.437245][T11538] team0: Port device team_slave_0 added [ 230.446474][T11538] team0: Port device team_slave_1 added [ 230.746454][T11538] device hsr_slave_0 entered promiscuous mode [ 231.002485][T11538] device hsr_slave_1 entered promiscuous mode [ 231.182163][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.189373][T11538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.197139][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.204469][T11538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.282944][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.303632][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.315579][ T3367] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.325213][ T3367] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.340910][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 231.361555][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.375998][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.385682][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.394634][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.401840][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.448856][T11538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.459832][T11538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.475026][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.484717][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.493820][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.500973][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.510194][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.520090][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.529924][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.539675][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.549039][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.558827][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.568143][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.577174][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.586652][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.595723][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.610372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.619092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.650338][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 19:04:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfffffffffffff001) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={0x0, 0x0}}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x1c9c380}, {0x0, 0x7}}, 0x0) 19:04:55 executing program 1: userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00\xd9\\\xd1(\x8cZ\x84\x93\xda\x8c\xd7y?\x84\xf5D{\x8e\xba\a2\xf0\xcb&\x00\xdal\xda\x000\xffd\x961\x01Yc=s%`\\\x06w\x95\xa6}\xb4\xe6\xc3\x18\xd2\xef\x1fN\x01\a\xeb\xfa\xb7\xd6Bt\x7f(\xaa\xd5\x90\xf6\xe0>\x98*e\xaa\x92\xa7\xddk\x93\'\\R\x91\x1d\xb5h\xed\xc5Y?\x13\xc2r\xb8Z\x1d:\'l\xae\x87\xf8\xcdK^<\xc4VhR\x03dz[\xcd\xff\bM\xf9y\x8d\x89w\x85Z:\xd5\x11\xb2\x9e\xd04\x9c.!\xf1\xde\x91\xa2\xaagwZ\xc8\x06QG4\xaf\x9e\xd7}\x1d\xb7\xb2\n\x8eep,;\x05\xae\xeb\x86\xc2\xfe\xba\xea\xd0J\xe0~Yh\x1f\xd5\xed\xe6\xdf\rk\x81\x0f\xbf\xf1\xbdd\xc3\x87\x7f\xf2\xda\'s\xb1\xd1\x8e\xf4\xbaMFB\xe3yu\xfb\x871\x1c\a\xaa\xbc\x12\a\xef\xf5\xf2\xba\xa0\x02\xe1\xe3\x85\x1f\az\xcaE\xca\xe9)\xf8\xea\x95\x04\xe1\xf8D\r\x9aJ\xb9\x87\x8d\t\x93\xcf\xe7\xaf\xc2\x9e\x00\x00y\xb7\xcf\x90-\x10\ft\x80a\xfa\xb8:\xcf\x11\x1d\xcfS\xeeQ\x94\xc1\xef\x04\xd5\t\x1es\xc7\xee\x10c\xe0\xb3\xd1\"\xbc\x91\xe5v\xcf\xf4\x8d\xb9\xb1\xc5\xc5\xdf\xc4 \xf7\xb3(W\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r0, 0x0, 0x83) [ 233.383530][T11556] IPVS: ftp: loaded support on port[0] = 21 19:04:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x800c4151, 0x0) 19:04:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0xc0684113, 0x0) [ 233.561843][T11556] chnl_net:caif_netlink_parms(): no params data found 19:04:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x8012, r1, 0x0) mmap(&(0x7f0000d56000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) [ 233.662509][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.669703][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.678379][T11556] device bridge_slave_0 entered promiscuous mode [ 233.689323][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.696580][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.705949][T11556] device bridge_slave_1 entered promiscuous mode [ 233.742126][T11556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.755940][T11556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.796267][T11556] team0: Port device team_slave_0 added [ 233.815627][T11556] team0: Port device team_slave_1 added 19:04:55 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 233.896599][T11556] device hsr_slave_0 entered promiscuous mode [ 233.932405][T11556] device hsr_slave_1 entered promiscuous mode [ 233.951834][T11556] debugfs: Directory 'hsr0' with parent '/' already present! [ 233.989270][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.996540][T11556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.004322][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.011552][T11556] bridge0: port 1(bridge_slave_0) entered forwarding state 19:04:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x8fb, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) [ 234.138659][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.170250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.200112][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.232129][ T17] bridge0: port 2(bridge_slave_1) entered disabled state 19:04:56 executing program 0: r0 = socket$inet(0x2, 0x5, 0x101) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x713e81f3fa69f681, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="53000000c659caa18ab6d7acb924a4b693b92085807737f4ffffff1f000000000000400000000000200000010400000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63", 0x58}], 0x1) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2714, @hyper}, 0x10) [ 234.259657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.284839][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.315768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.325244][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.332544][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.395774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.404906][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.412144][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.422631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 19:04:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x84000, 0x0) setns(r3, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 234.452112][T11556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.462634][T11556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.508382][T11584] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 234.535720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.545120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.555454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.564916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.583628][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 19:04:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffce) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010a9bfb1a4db6a4e7695f3d0188"], 0x1}}, 0x0) [ 234.632571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:04:56 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x34, 0x101) ioctl$int_out(r0, 0x20000000c0385720, &(0x7f0000000000)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x8000}}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x2, 0xd7, 0x4, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x8001, 0x5, 0x0, 'queue0\x00', 0x2}) 19:04:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000000c0)={0x800000000, {0x77359400}, 0x3, 0x3}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) 19:04:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip\xc3\xccV\xc9\xb5hf\xe2\x00', 0x102}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x101) 19:04:57 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local}, 0xc) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local, @remote}, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x40000000024, &(0x7f00000000c0)={@remote, @initdev, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x1d}, @loopback, r2}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:04:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000001080)=""/246) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x20000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x101) 19:04:57 executing program 0: r0 = epoll_create1(0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x200, 0x24f5, 0x0, 0x1, 0xb, 0xffffffff, 0x60a580000000000, 0x2, 0x80000001, 0x8, 0x7, 0x1}) r2 = epoll_create1(0x0) close(r0) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x2000000c}) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x4, 0x200000) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x0) 19:04:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0662bc45ff810500000000000058000b480400945f64009400050028925ae9ffffffffffffff8000f0fffeffe809000000fff5dd000000100001000b0810004149014001040400", 0x58}], 0xffffffffffffde6) 19:04:57 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x84080) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) [ 235.371169][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 235.371209][ T30] audit: type=1326 audit(1565031897.413:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 235.400063][ T30] audit: type=1326 audit(1565031897.413:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 [ 235.422681][ T30] audit: type=1326 audit(1565031897.413:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 235.445689][ T30] audit: type=1326 audit(1565031897.413:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x459829 code=0x7ffc0000 [ 235.468544][ T30] audit: type=1326 audit(1565031897.423:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 235.491075][ T30] audit: type=1326 audit(1565031897.423:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 19:04:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = geteuid() fchown(r0, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x800, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000140)=""/140) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e23, @broadcast}}) ioctl(r0, 0x7fff, &(0x7f0000000000)="4c71da3fcddd4762d56836839cae2cb5e234e1") [ 235.513615][ T30] audit: type=1326 audit(1565031897.423:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 235.536169][ T30] audit: type=1326 audit(1565031897.423:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x459829 code=0x7ffc0000 19:04:57 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x40, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 235.558923][ T30] audit: type=1326 audit(1565031897.423:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 235.581404][ T30] audit: type=1326 audit(1565031897.423:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11622 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 19:04:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x80000000, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000180)={@remote, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:04:57 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x4c, &(0x7f0000000080)=""/76}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x206, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000040) 19:04:57 executing program 1: wait4(0x0, 0x0, 0x4, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:fuse_device_t:s0\x00', 0x23) 19:04:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500004600"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000020010000000000000000000000bce9eb33347f1898"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ef79c3267209ce3f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x7fff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "4163b0d97b3e543d"}}, 0x48}}, 0x0) 19:04:58 executing program 1: r0 = gettid() r1 = msgget(0x1, 0x4) msgrcv(r1, &(0x7f0000000000)={0x0, ""/4096}, 0x1008, 0x2, 0x3000) exit(0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) 19:04:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x42) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0xfffffe, 0x0, 0x0, 0x0, 0x8150000, 0x7ff0bdbe}) write$eventfd(r0, &(0x7f0000000040)=0x29fd, 0x8) 19:04:58 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$smack_current(r0, &(0x7f0000000040)='group_id', 0x8) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 19:04:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x402000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000300)={0x9e0000, 0x1, 0x10001, [], &(0x7f00000002c0)={0x990a79, 0x0, [], @string=&(0x7f0000000280)}}) fsetxattr(r0, &(0x7f0000000340)=@random={'osx.', '{}\x00'}, &(0x7f0000000140)='wlan0,\x00', 0x7, 0x1) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xe, 0x0, "17606e0f2b5c2be2db5a0f9cc0fbda7643ed12de15d50361bbc3331fa077e485"}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x3, 0x1, 0x1, 0x3, 0x7, 0x0, 0xffffffff80000000, 0x6, 0x101, 0x7, 0x8000, 0xffff, 0x7, 0x4, 0x2, 0x11}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x6, @rand_addr="6a163c9ddeec3371f0a716be824e78d0", 0x32fb}, {0xa, 0x4e21, 0x2b9652f3, @ipv4={[], [], @remote}, 0x9}, 0x5, [0x6, 0x400, 0x24f, 0x4, 0x1, 0x3b1, 0xfffffffffffffe01]}, 0x5c) close(r0) 19:04:58 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x108) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 19:04:58 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$kcm(0x10, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x0, 0xfa, 0x3}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x1ff}}, 0xffffffff, 0x200, 0xfffffffffffffff8, 0x7, 0x1bbd2a030ad8104a}, 0x98) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e00000010008108040f80ecdb4cb9c00a480e1810000000e8bd6efb120009000e002100400000ff050005bf0086", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') [ 236.553523][T11672] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 236.569976][T11673] netlink: 'syz-executor.0': attribute type 33 has an invalid length. 19:04:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0xffffc00000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000004}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4200, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000100)=""/230) 19:04:58 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@mcast2, 0x0}, &(0x7f0000000640)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@newtfilter={0x10c, 0x2c, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, r1, {0x5, 0xf}, {0xffff, 0x2}, {0xffff, 0x6}}, [@TCA_RATE={0x8, 0x5, {0x1b, 0x7}}, @TCA_RATE={0x8, 0x5, {0x4, 0x1000}}, @TCA_RATE={0x8, 0x5, {0x4, 0xfff}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xb4, 0x2, [@TCA_CGROUP_EMATCHES={0xb0, 0x3, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, @TCF_EM_META={0x5c, 0x401, {0x5, 0x4, 0x5, 0x0, [@TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="602fca3ae3", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="dbe19e899790ed", @TCF_META_TYPE_VAR="8b5df262ff915f23e86b"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="298693b2da350e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x8, 0x1}, {0x3ff, 0x8, 0x1}}}]}}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, @TCF_EM_META={0x40, 0xfffffffffffffbff, {0xffff, 0x4, 0x7, 0x0, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8000000000, 0x3}, {0x800, 0xff}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffffffffffffffd, 0x401, 0x2}, {0x7fb, 0xd7fe947}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a86b6fa44606c11c94", @TCF_META_TYPE_INT=0x4]}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x42e2d858}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x3c97800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r2, &(0x7f0000000040)=@random={'user.', ')\x00'}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) move_pages(r3, 0x2000000000000229, &(0x7f0000000340)=[&(0x7f0000002000/0x6000)=nil], &(0x7f0000000300), &(0x7f0000000100), 0x4) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000380)=""/119) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x4, 0x4473, 0xffffffffffffffb8, 0x5}]}, 0x10) 19:04:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x80000000, 0x0, 0x0) 19:04:59 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500005c0000000000019078ac2314bbac1414110b029078000000004b00000000000000002f0000ac2314aaac14140008e120df3f00000000000000e000000200000000e0000001a0008000000000007f0000010000000000000000"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/61, 0x3d) accept$inet6(r0, 0x0, &(0x7f0000000040)) 19:04:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "8f2cb530c4c5131d", "3a6bc8cbf5f0c26e95c106070f435ee6", "aeb368b2", "73d2aaccb759e14d"}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="3c8d0d550d7bb1", 0x7}], 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x87, @remote, 0x4e21, 0x4, 'sh\x00', 0x10, 0x3, 0x64}, 0x2c) 19:04:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20000000000001, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002e0000833cd9b6801000000095000000005c0000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x10000000000001, 0x26e, &(0x7f0000000580)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 237.115477][T11693] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 237.129722][T11694] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 19:04:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20000000000001, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002e0000833cd9b6801000000095000000005c0000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x10000000000001, 0x26e, &(0x7f0000000580)=""/195, 0x0, 0x0, [0x42]}, 0x48) 19:04:59 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200100, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x4, 0x8}]}}}]}, 0x3c}}, 0x0) [ 237.369548][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.405756][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:04:59 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f00000000c0)=0x200006d26, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 19:04:59 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400100, 0x5) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000100)=0xb0) 19:04:59 executing program 0: r0 = msgget$private(0x0, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000400)=""/113) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3ff, 0x8000) setsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f00000001c0)="a76ab2081be8262b2c4112fbe747f18b6af8dabb4d608cf7c01972b5217bf7adbb594c3d8416a4a470e67404b51da0e10969aed9be765a76e6b4099dddbe7e6dc3007972a3ad79a815b5622badee04cfb89bd6aff112c17976ab8ceb3d61b75d54cc3b444cc2f27641ea81261c815f4d40303606dc3b60fc7246ca", 0x7b) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000800000000000000621b4169a411ec76579775c83df9258b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c2c550599ed681a684a33bb87370c026eb411b914f236e6cadf55f44417bbec70935aa5509e91175f9269a12c3a12beb6da02deb88a6f068715517881caa83c4e9f089d5cd244df385c1b045f2e0db9f517765705ea28c71d9806445ef97cb4e78ae9fa248fe722039323af5e56bbf722bb281d5bcca6663a5f304374ce9a749f410b91690153729cc24fb3ed91702b312a5757bc3a7f34569acbb1334773f678f40bd0fcdc9c79a1da8782e206a62b1d752450ec812fc4974cc4cd5127fef3bec6c95ef7fb82730b94d822c2f6bf7937c8eb802236b4a78afea4cf3cbcf6c03ab1e3228adab817f3b9af205779018b5a97b4a54425c6c71a2553b19fdc0f0576a9f85e24d46e928ee8f0f8a7dc36ebbcf321b23618b763c"], 0xb8}}, 0x0) 19:04:59 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400100, 0x5) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000100)=0xb0) 19:04:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='hsr0\x00', 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='!eyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) 19:04:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800190d00000000000000000200000000000007000000000800150106000000080016000400040023f3715b16464d169b1e49393f0813801a91e08f3f9710a5d15f99adf0169cd5c5003ae457c587"], 0x1}}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x9) readahead(r0, 0x7fffffff, 0x0) [ 237.922983][T11732] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 237.931148][T11732] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 237.953394][T11735] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 237.961979][T11735] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 19:05:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x32, 0xf, 0x3) getsockopt$sock_buf(r1, 0x1, 0x3c, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 19:05:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='T', 0x1}], 0x1, 0x2) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x7f, 0x4) 19:05:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000600)=""/186, 0xba}], 0x6, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000500)={0x200000000000009c, &(0x7f0000000200)=[{0x35, 0x0, 0xffffffffffffffff}]}) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000001c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000240)="37c85dc94c6dcc37e1a9f4d5b9fce026660060793203ca9aa1ae5b8ee1428966f62e3cbe8c5c105fd260d1ae2f2a3111c9db36be693197244edf90cc3dba9253a67695c59eee6497e09d01390cb0164825d011747735721c", 0x58) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 19:05:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x30, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0xa8) 19:05:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$notify(r0, 0x402, 0x8000000a) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000713000105000000000000000000000000e0a22499dac3bd7e2c25f38b48291ee4ba395abd54e33e707c131898ca461dc3177e27bf942624bbe7729e5988f1ed4d1de4681baf78d2ddda9073bb9de4306084c16adee89d16c0131832b7e711cd8dc062", @ANYRES32=0x0, @ANYBLOB="000000000000000008001600040001001400030076657468315f746f5f626f6e64000000"], 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:05:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x9, 0x84) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x4000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'ipddp0\x00', 0x3}, 0x18) r2 = getpgid(0xffffffffffffffff) ptrace$peek(0x2, r2, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x14, &(0x7f00000000c0)={0x1}, 0x8) 19:05:00 executing program 2: lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0xd, "8b8dc2"}, 0x5, 0x3) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = eventfd2(0x6, 0x80000) r4 = getpid() r5 = gettid() setpgid(r4, r5) socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0xff, @local, 0x4e22, 0x1, 'sh\x00', 0x10, 0x2, 0x15}, 0x2c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400402, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1ff, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={r7, 0x54, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x5, @local, 0x6}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x70d1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r7, 0xfff}, &(0x7f0000000480)=0xc) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f00000004c0)) sched_setscheduler(r4, 0x6, &(0x7f0000000500)=0x4) getsockname$packet(r6, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001ac0)={'team0\x00', r8}) unlink(&(0x7f0000001b00)='./file0\x00') lstat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r9, 0x9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mkdirat(r6, &(0x7f0000001c00)='./file0\x00', 0x11) gettid() r10 = syz_usb_connect(0x0, 0x367, &(0x7f0000001c40)={{0x12, 0x1, 0x201, 0xa6, 0xeb, 0x17, 0x8, 0x7a6, 0x986, 0x4d0d, 0x7, 0x1, 0x51, 0x1, [{{0x9, 0x2, 0x355, 0x1, 0x200, 0x100, 0x40, 0xbd, [{{0x9, 0x4, 0xfd, 0x380000000000, 0xe, 0x7e, 0x94, 0xf6, 0x4, [], [{{0x9, 0x5, 0x6, 0x0, 0x18, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0xf, 0x13, 0x8, 0x7, 0x400, 0x4}}, {{0x9, 0x5, 0xa, 0x1, 0x18, 0x1, 0x6, 0x3, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0xe, 0x8, 0x18, 0x4, 0x6, 0xbc}}, {{0x9, 0x5, 0xc, 0x3, 0x68, 0x16a000000, 0x8001, 0xfffffffffffff438}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x4, 0x3, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x81, 0x800, 0x7, [@generic={0xbc, 0xb, "7c1c88af0da66b8d71ca063036f223ec3c86d6dcd1632a40ce9db294cb1684ddf59f1bed326df0d6fb99f64e6c7bf27649d26a24164e26fa9fc8fc52b7e944197393909c6915393833c99d33feee55902c08175cf83f600ae70fa99e2282ede4469257abcb50bf3c6cdb926ade3cc1d67fa754586738730f1591e14032fb8cad691661ed3cc5b30df22a1325d9e8171824ce484e74cc5c43bd39aa25413355b8c59bb83362936152ee7a0f3e973f620bf50617751a39554ff7c4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0x3, 0x10000, [@generic={0x75, 0x8, "984ee60b4601284c0ee0cccc226b3382004d9a063e37e314131220a799d9fb0be20c0be6778fb45b3a52d2f1a8b3288b782a84e0cd300ff8521bded6592831aa3ecf5bd080adc1a72188cebed9cee5e17bc87103300120deca4acf8e21ce04115da91bbb41afcbf85851d3d0d89ec766a3c754"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x78, 0x0, 0x1eb0, 0xffffffffffffff80}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x81, 0x10000, [@generic={0x44, 0x2f, "c27297cb4c76fcb6614c9c55588d5c54d527c214993fc07db57bf86c4f6cd83385c2192685826e008069d9d067cbdad6fe5b584198b8fd8ee4c4360c19f798858d4f"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x4e44315f, 0x2, 0x2, [@generic={0x96, 0x3f, "ee0c6e9e492184746d78467e4a243a586c3ea431b9aa4c983a193d1ba8728fc55b686ec19d4e68cf07d238bad09b7fc2936c40fc99869c836452cd5551dea0c92327c8879ac8d6adf6c6f813f5cd82d1536faaa935187f4bf1b7ee6b4a47176f9f99c2e66241f16ba04defaaebfeca4341d6f49932b3b05cbc3ddf5f53d4733ad74e8ea53ccc775ab1d05586c9086430a5ab2ef4"}, @generic={0x2, 0x33}]}}, {{0x9, 0x5, 0x8, 0x3, 0x60, 0x401, 0x6, 0x2}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0xfffffffffffffffd, 0x7e, 0xde, [@generic={0xb6, 0xd, "bdad4e243dc6e0d4011bf663a5e0f209aa959c91a101ad018bff9a50b841bf834cb842f2f86a6283da7edb67fa8c33d25628f5cb954c9af3f8b25d979ff0ac7149a31538e47129711c392defbf24c78dd66a8e7dd5c684b47ca16a1a8b3b3a5438076ba2bef97781530fba2e365c5f5db0615dc51758d78203d96dba7f601e52703e7aad4f016267fdc413eed87423612c3aa518981d6141e36f3100ca3a862e6a735c02fa4461b5bee40141d22ac14f3d086e8f"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x8, 0x7, 0x33}}]}}]}}]}}, &(0x7f0000003540)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x351, 0x2383, 0x7fffffff, 0x1f, 0x30, 0xff}, 0x55, &(0x7f0000002000)={0x5, 0xf, 0x55, 0x2, [@generic={0x40, 0x10, 0x3, "b3464a36823b6717bbe58088536bcd676d605c413ea500ee2aedf5d6d4c4a098da1136f73a7cb807afca2bf0259d01035dd5fa0d9cac268fc1a66b4af5"}, @generic={0x10, 0x10, 0x7, "d069ff780b3c22d436a38e2ad4"}]}, 0x9, [{0xf4, &(0x7f0000002080)={0xf4, 0x3, 0x2401, "ee7a6b31cad0efb2351f0bcfedccb9bb076a1282f58d3779de32bbf1b323c776cb245ee127f7a69d9d9578d21a8da59320a710ac29f1b13f0a9eca6a73008b22df32d800079d7241fe05f31f9667855e4e458185a624f816a11ba838b2dcb229e1b0cdbd9317f18c2cc6d0f091bad6e96ff366be75cdfb12355f96039597407039f75cb99cbd7e0f66ce3b606ccc9b21aa762b3462d6766c7e9d05e39575c84857fee11127dbf268fa0d62511c4392615642ce8d24da3e8ae318a1af30bd1f430463a49bf306b1c50d2f398d4aa0f6774c47f09ff5641e8af236fcd6c3f6b7dd202b379e71263cc00112a461a3e22f85"}}, {0xa9, &(0x7f0000002180)={0xa9, 0x3, 0x0, "e1921ef67afad3b13e019302a0c8b429ac39c07140e6f520a67bef89ca247289543b6b7811033a4f509339e2d10c0f295f8ea1d3fe503d4e17c02929bbfdd1d469f040b2cd5c4443ffc2cd4e96cfd1f17f87a9981ca031f8b508c3494d633b42f1aa496aa8b1180de9d86d0973b7e10582a878fee1c0918a5eb5034e6a4c1eb26962caa77320f1f421d3ae83e23e32982f274ddb772e21f6d924df6af727f322ece883c3d0"}}, {0x9, &(0x7f0000002240)={0x9, 0x3, 0x0, "acb8fd5f24"}}, {0xbe, &(0x7f0000002280)={0xbe, 0x3, 0x2009, "cd37bdb03f689c310aa012ebb6184cad7d5d7e6e48c8c5e49acbc65508770e9f2cba94d5af535e142a588280362a5a2e34d119b9f125ed89360290e71c9cf4240f6711e947d7a2423c535741bd22893dc510a115ee540bcf202e281cf936b15f7a5b04aacffb6f0024f667523aae9b2ddcccf56b1c8863db5b69c3d0f47227db2e2b74ee953d3fa7071cc60bb43194a4bb874363fa743f4f2aa6451146fdbf9ec643bb0affef22cd73601b5336ee8d8f4421e8a3832f7b17332b"}}, {0x99, &(0x7f0000002340)={0x99, 0x3, 0x407, "7ed1c9f0437f8b6945197e60da33ef94e458012ad961309244c54f06f8427a8eae9787427bbf2f0b30e3d739c51745eb2fad18b856b76affc46664eaee76e2679d2a2dcf9f86325e22573ac7cf1d26df977f619e600c252f48fc2c3fb28708de675346ed61ae863bb195ddfcb59f7ba3376c2acdcc0c0dfad2a868e84e718ac7fad0f2c4301c59505fac6e0f852180899ad8af69e7"}}, {0x53, &(0x7f0000002400)={0x53, 0x3, 0x43f, "2074a6815772f758bce130aa5eb90b359be5e11d9a9f090d73976207d6bc7581733ce5ced24341b20d27594079f4b607f049ebd1e6089519ccdbb0ce43dcc71d59923887ea0d5abb834a36f50c3964"}}, {0x1004, &(0x7f0000002480)={0x1004, 0x3, 0x2c13, "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"}}, {0x16, &(0x7f00000034c0)={0x16, 0x3, 0x300a, "df8a7a421e10360a006ed4a3d458f9ad71b6"}}, {0x33, &(0x7f0000003500)={0x33, 0x3, 0x40c, "79ddb2c3bd0a2f8e1582320b17025485da3e73e9a234694d0f95779309fe667befcaed38e7ddb4153dab163d74edaf"}}]}) syz_usb_ep_read(r10, 0x1e, 0xdb, &(0x7f0000003600)=""/219) mknod$loop(&(0x7f0000003700)='./file0/file0\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000003740)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003780)=0x24) 19:05:01 executing program 0: utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2, 0xfffffffffffffffa}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="05815640f1aeec0600fee1ffffff8a7f0000000000000095"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 19:05:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pause() ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0xfffffffffffffffd, 0x10000}) 19:05:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x400, 0x280, 0x0, 0x0, 0xd59f80}}) 19:05:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000002880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210100dad3ab350000000f0000001c0007000c00040000000000000000000c0003000000000000000000"], 0x30}}, 0x0) [ 239.390006][T11780] Started in network mode [ 239.394553][T11780] Own node identity , cluster identity 4711 [ 239.414118][T11782] Started in network mode [ 239.418563][T11782] Own node identity , cluster identity 4711 19:05:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100000c1004111, &(0x7f0000000080)="db5d1b0257b6faa1c3467d746518942f4fbce8d650bce8d636") ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) [ 239.443390][T11781] IPVS: ftp: loaded support on port[0] = 21 19:05:01 executing program 1: eventfd2(0x8001, 0x80000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000012fee)='/.ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 239.613816][T11781] chnl_net:caif_netlink_parms(): no params data found [ 239.689511][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.696788][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.706001][T11781] device bridge_slave_0 entered promiscuous mode [ 239.717863][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.725505][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.734217][T11781] device bridge_slave_1 entered promiscuous mode [ 239.769704][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.783420][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 19:05:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0xa, 0x80000024) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000001280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='team_slave_0\x00', 0x5, 0xdba, 0x7fffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe34, 0x4) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffffffffffcdb) [ 239.819278][T11781] team0: Port device team_slave_0 added [ 239.829989][T11781] team0: Port device team_slave_1 added [ 239.908116][T11781] device hsr_slave_0 entered promiscuous mode [ 239.942613][T11781] device hsr_slave_1 entered promiscuous mode [ 239.989536][T11797] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 239.998503][T11781] debugfs: Directory 'hsr0' with parent '/' already present! 19:05:02 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x2000011, 0x2013, r0, 0x0) ioctl$void(r0, 0x0) fadvise64(r0, 0x0, 0x10802, 0x4) [ 240.035497][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.042747][T11781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.050469][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.057728][T11781] bridge0: port 1(bridge_slave_0) entered forwarding state 19:05:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x448991ad, 0x8, 0x6, 0x5f01, 0xfe, 0x3, 0x3e, 0x10000, 0x1d4, 0x38, 0x181, 0x0, 0x4c, 0x20, 0x2, 0xb, 0x20, 0x8}, [{0x7, 0xffffffffffffff9d, 0x2, 0x1, 0x8, 0x2, 0x8000, 0x7}], "2c454e324a843e70bbe43f2c917b04c30cacb27b231e70b6a1d1b2e317c0f960065e6e6fbad78af86db9002c4c03303bd2cca9578e0ca9a7e0f12661522e89150a6fc457e6d763045509812291cf5fde18d02aa473188be6d90d62266faf834601ced01438fbdf68757cf8486f9aa80ef57c795556e0f5b2a3ea44201f1021a1899e456f21bbebaec8b5607ff7ddc9fbc98a056ef59d4917ee14114b5d518c6e377ce64b95284d8b", [[], [], [], [], [], [], [], [], []]}, 0xa00) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 19:05:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10f}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0xff, 0x7, 0x1, 'queue1\x00', 0xff}) splice(r1, &(0x7f0000000280), r0, &(0x7f00000002c0), 0x9016, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100021000000000000000000000000800130004000300fb0000000000000006000000000000000000800000000000e000000100000000000004000000000000000000000000000000001f0000178003000600000000000200000490cf7ced000000000000000003000500000000000200423b1d632b010020000200000000"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) [ 240.301362][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 19:05:02 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x200006011, r0, 0x0) [ 240.356237][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.375291][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.397540][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.456328][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.476365][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.486566][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.495548][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.502754][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.531598][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.541206][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.552562][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.559724][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.617714][T11781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.628585][T11781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.666935][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.677034][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.686951][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.696700][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.706124][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.715790][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.725267][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.734279][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.743654][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.752659][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.790544][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.806202][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.815271][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.222941][ T50] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 241.461895][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 241.662043][ T50] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 241.670405][ T50] usb 3-1: config 0 has no interface number 0 [ 241.676728][ T50] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 241.687862][ T50] usb 3-1: config 0 interface 253 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 241.698680][ T50] usb 3-1: config 0 interface 253 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 241.710114][ T50] usb 3-1: config 0 interface 253 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 241.720976][ T50] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x1 has an invalid bInterval 95, changing to 7 [ 241.732209][ T50] usb 3-1: config 0 interface 253 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 242.112161][ T50] usb 3-1: New USB device found, idVendor=07a6, idProduct=0986, bcdDevice=4d.0d [ 242.121380][ T50] usb 3-1: New USB device strings: Mfr=7, Product=1, SerialNumber=81 [ 242.129633][ T50] usb 3-1: Manufacturer: 《諟䉺သਸ਼渀ꏔ壔극뙱 [ 242.140351][ T50] usb 3-1: config 0 descriptor?? [ 242.502459][ T50] ================================================================== [ 242.510568][ T50] BUG: KMSAN: uninit-value in read_eprom_word+0x947/0xdd0 [ 242.517768][ T50] CPU: 1 PID: 50 Comm: kworker/1:2 Not tainted 5.3.0-rc3+ #16 [ 242.525213][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.535273][ T50] Workqueue: usb_hub_wq hub_event [ 242.540288][ T50] Call Trace: [ 242.543660][ T50] dump_stack+0x191/0x1f0 [ 242.548000][ T50] kmsan_report+0x162/0x2d0 [ 242.552507][ T50] __msan_warning+0x75/0xe0 [ 242.557014][ T50] read_eprom_word+0x947/0xdd0 [ 242.561791][ T50] pegasus_probe+0xf2b/0x4be0 [ 242.566507][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.572486][ T50] ? usb_probe_interface+0xb69/0x1310 [ 242.577939][ T50] ? kaweth_get_link+0x70/0x70 [ 242.582702][ T50] ? kaweth_get_link+0x70/0x70 [ 242.587468][ T50] usb_probe_interface+0xd19/0x1310 [ 242.592682][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.598664][ T50] ? usb_register_driver+0x7d0/0x7d0 [ 242.603949][ T50] really_probe+0x1373/0x1dc0 [ 242.608639][ T50] driver_probe_device+0x1ba/0x510 [ 242.613760][ T50] __device_attach_driver+0x5b8/0x790 [ 242.619139][ T50] ? bus_for_each_drv+0x1d5/0x3b0 [ 242.624172][ T50] bus_for_each_drv+0x28e/0x3b0 [ 242.629019][ T50] ? deferred_probe_work_func+0x400/0x400 [ 242.634743][ T50] __device_attach+0x489/0x750 [ 242.639522][ T50] device_initial_probe+0x4a/0x60 [ 242.644549][ T50] bus_probe_device+0x131/0x390 [ 242.649407][ T50] device_add+0x25b5/0x2df0 [ 242.653928][ T50] ? usb_set_configuration+0x3036/0x3710 [ 242.659569][ T50] usb_set_configuration+0x309f/0x3710 [ 242.665073][ T50] generic_probe+0xe7/0x280 [ 242.669573][ T50] ? usb_probe_device+0x104/0x200 [ 242.674599][ T50] ? usb_choose_configuration+0xae0/0xae0 [ 242.680318][ T50] usb_probe_device+0x146/0x200 [ 242.685171][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.691150][ T50] ? usb_register_device_driver+0x470/0x470 [ 242.697049][ T50] really_probe+0x1373/0x1dc0 [ 242.701736][ T50] driver_probe_device+0x1ba/0x510 [ 242.706867][ T50] __device_attach_driver+0x5b8/0x790 [ 242.712248][ T50] ? bus_for_each_drv+0x1d5/0x3b0 [ 242.717272][ T50] bus_for_each_drv+0x28e/0x3b0 [ 242.722119][ T50] ? deferred_probe_work_func+0x400/0x400 [ 242.727849][ T50] __device_attach+0x489/0x750 [ 242.732624][ T50] device_initial_probe+0x4a/0x60 [ 242.737655][ T50] bus_probe_device+0x131/0x390 [ 242.742512][ T50] device_add+0x25b5/0x2df0 [ 242.747038][ T50] usb_new_device+0x23e5/0x2fb0 [ 242.751911][ T50] hub_event+0x581d/0x72f0 [ 242.756382][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.762363][ T50] ? led_work+0x720/0x720 [ 242.766686][ T50] ? led_work+0x720/0x720 [ 242.771025][ T50] process_one_work+0x1572/0x1ef0 [ 242.776074][ T50] worker_thread+0x111b/0x2460 [ 242.780864][ T50] kthread+0x4b5/0x4f0 [ 242.784930][ T50] ? process_one_work+0x1ef0/0x1ef0 [ 242.790130][ T50] ? kthread_blkcg+0xf0/0xf0 [ 242.794782][ T50] ret_from_fork+0x35/0x40 [ 242.799201][ T50] [ 242.801523][ T50] Local variable description: ----data.addr.i13@read_eprom_word [ 242.809141][ T50] Variable was created at: [ 242.813556][ T50] read_eprom_word+0x498/0xdd0 [ 242.818312][ T50] pegasus_probe+0xf2b/0x4be0 [ 242.822979][ T50] ================================================================== [ 242.831031][ T50] Disabling lock debugging due to kernel taint [ 242.837177][ T50] Kernel panic - not syncing: panic_on_warn set ... [ 242.843762][ T50] CPU: 1 PID: 50 Comm: kworker/1:2 Tainted: G B 5.3.0-rc3+ #16 [ 242.852595][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.862652][ T50] Workqueue: usb_hub_wq hub_event [ 242.867662][ T50] Call Trace: [ 242.871039][ T50] dump_stack+0x191/0x1f0 [ 242.875374][ T50] panic+0x3c9/0xc1e [ 242.879304][ T50] kmsan_report+0x2ca/0x2d0 [ 242.883811][ T50] __msan_warning+0x75/0xe0 [ 242.888312][ T50] read_eprom_word+0x947/0xdd0 [ 242.893082][ T50] pegasus_probe+0xf2b/0x4be0 [ 242.897777][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.903757][ T50] ? usb_probe_interface+0xb69/0x1310 [ 242.909128][ T50] ? kaweth_get_link+0x70/0x70 [ 242.913889][ T50] ? kaweth_get_link+0x70/0x70 [ 242.918654][ T50] usb_probe_interface+0xd19/0x1310 [ 242.923860][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.929841][ T50] ? usb_register_driver+0x7d0/0x7d0 [ 242.935125][ T50] really_probe+0x1373/0x1dc0 [ 242.939817][ T50] driver_probe_device+0x1ba/0x510 [ 242.945148][ T50] __device_attach_driver+0x5b8/0x790 [ 242.950532][ T50] ? bus_for_each_drv+0x1d5/0x3b0 [ 242.955560][ T50] bus_for_each_drv+0x28e/0x3b0 [ 242.960415][ T50] ? deferred_probe_work_func+0x400/0x400 [ 242.966145][ T50] __device_attach+0x489/0x750 [ 242.970925][ T50] device_initial_probe+0x4a/0x60 [ 242.975957][ T50] bus_probe_device+0x131/0x390 [ 242.980812][ T50] device_add+0x25b5/0x2df0 [ 242.985339][ T50] ? usb_set_configuration+0x3036/0x3710 [ 242.990975][ T50] usb_set_configuration+0x309f/0x3710 [ 242.996483][ T50] generic_probe+0xe7/0x280 [ 243.000985][ T50] ? usb_probe_device+0x104/0x200 [ 243.006092][ T50] ? usb_choose_configuration+0xae0/0xae0 [ 243.011823][ T50] usb_probe_device+0x146/0x200 [ 243.016674][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 243.022654][ T50] ? usb_register_device_driver+0x470/0x470 [ 243.028550][ T50] really_probe+0x1373/0x1dc0 [ 243.033238][ T50] driver_probe_device+0x1ba/0x510 [ 243.038358][ T50] __device_attach_driver+0x5b8/0x790 [ 243.043737][ T50] ? bus_for_each_drv+0x1d5/0x3b0 [ 243.048763][ T50] bus_for_each_drv+0x28e/0x3b0 [ 243.053612][ T50] ? deferred_probe_work_func+0x400/0x400 [ 243.059335][ T50] __device_attach+0x489/0x750 [ 243.064110][ T50] device_initial_probe+0x4a/0x60 [ 243.069138][ T50] bus_probe_device+0x131/0x390 [ 243.073994][ T50] device_add+0x25b5/0x2df0 [ 243.078516][ T50] usb_new_device+0x23e5/0x2fb0 [ 243.083394][ T50] hub_event+0x581d/0x72f0 [ 243.087860][ T50] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 243.093833][ T50] ? led_work+0x720/0x720 [ 243.098163][ T50] ? led_work+0x720/0x720 [ 243.102499][ T50] process_one_work+0x1572/0x1ef0 [ 243.107545][ T50] worker_thread+0x111b/0x2460 [ 243.112330][ T50] kthread+0x4b5/0x4f0 [ 243.116394][ T50] ? process_one_work+0x1ef0/0x1ef0 [ 243.121592][ T50] ? kthread_blkcg+0xf0/0xf0 [ 243.126183][ T50] ret_from_fork+0x35/0x40 [ 243.131891][ T50] Kernel Offset: disabled [ 243.136212][ T50] Rebooting in 86400 seconds..